{"report_id":"fd6a3b58-3d90-4998-a194-bb7bf2d34f04","version":6,"status":"done","tags":[],"date":"2026-03-28T00:19:07Z","url":{"schema":"https","addr":"kadvun.icu/","fqdn":"kadvun.icu","domain":"kadvun.icu","tld":"icu"},"ip":{"addr":"172.67.166.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"title":"Kadvun - Worldwide Decentralized Marketplace","dom":{"size":177782,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9067)","md5":"99d7f5b9c68fafd106c0b8dab4972342","sha1":"5f1c37b428d95e9f1c7a20786ecfca73f019b8db","sha256":"3de42127a906437d392651616b66d72b0312bd7eb7327e172f4c644a013d11e9","sha512":"cff33b826aa3fdca96b5aad94c78ed78a66efcc7772d9c1c7a35319212e9166f9262556aaf4b818147bdc32eb81c8a8f26013c8db41579e0bf1977f71121f8d3","ssdeep":"3072:K451eChSJgy6X/ZvL2EMlAMlcMlPChBCVMl3MlUMlvMlgMlgMlYMlgMlgMlr0m+7:Kw1yEMlAMlcMlKEMl3MlUMlvMlgMlgMo","tlshash":"d604c632a859183b122716e4b075671eb2a7c317cb0789d8b3fcd3a89fc5de9592358c","dom_hash":"domhashf81bda0d7d30aa1a5ce7bb365e9934e1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"kadvun.icu/","fqdn":"kadvun.icu","domain":"kadvun.icu","tld":"icu"},"ip":{"addr":"172.67.166.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T00:19:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T00:18:44Z","timestamp":1774657124,"ip_dst":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36520,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-28T00:18:44.352219+0000\",\"flow_id\":2038230927296119,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":36520,\"dest_ip\":\"172.67.166.209\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"kadvun.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":912,\"bytes_toclient\":3498,\"start\":\"2026-03-28T00:18:44.345719+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"kadvun.icu","ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-03-27T21:48:37.179172Z","last_seen":"2026-03-27T21:48:37.179172Z","alert_count":0,"request_count":1,"received_data":839,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kadvun.live","ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T01:04:20.151083Z","last_seen":"2026-03-27T21:48:38.83246Z","alert_count":194,"request_count":97,"received_data":3892590,"sent_data":45197,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Slider Revolution:6.3.6","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]}]},{"fqdn":"kuadin.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-10","domain_rank":0,"first_seen":"2026-01-31T05:58:12.107566Z","last_seen":"2026-03-23T23:33:42.285152Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1377,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-03-27T20:46:48.047543Z","alert_count":0,"request_count":2,"received_data":2708,"sent_data":1016,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"32dff9de2a5a22fcbcb16662d7679cf9","sha1":"4287dbcd30f6484bf1de22f5cd17de3186180ba5","sha256":"6c1055481eae9b1a886efcb915d8b8570011794f704d9f70e4967c5bd2169365","sha512":"a13ec90e449a9832a7f3a528cd873bf274ed582aec7c511c61890ec75e81a78b5ad35cdfa7aed27fa0da06fe3b8f3cef8f1b22e87ce0c80c2cdb53d00b908688","ssdeep":"","tlshash":"7fe06863a64a3c9942c2c5e0a028665392cfd267c48fc877c9089c4c0daa4606720b1a","size":360,"data":"","first_seen":"2026-02-12T22:33:02.03085Z","last_seen":"2026-03-28T22:12:53.928284Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97187138ff46175b8f7eb3aa4ec21a32","sha1":"aea0daa5a937617b5c63ce8161ad6bddefd6536b","sha256":"a7ee43ad86f10251bcf11d1bc0a9e4a18f9c18875bd80f294fdbc40394cfc1dc","sha512":"a97d1f3bb6cf688856384742884a183a9e286c3548b01a099266f3d73fe48f23f145b9b85a15b8a9baaba8b2ef6dc61b97f09aae47a67e458fec5ad8e4bcffb5","ssdeep":"","tlshash":"63c02b5bc5c52fc716d00ce51130623322b65316c87c885859c9c4400d30c43d864252","size":138,"data":"","first_seen":"2026-02-12T22:33:02.03216Z","last_seen":"2026-03-28T22:12:53.931071Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/ct-menu-init-script-js-extra","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"84009053850046998ee2254ff3d886ad","sha1":"500aad61bf21ca0e211a22a358ca05e55b16be5b","sha256":"4350a95f5db91026abb2d5c8109182bff9054ebcbb01e9164758bee161cc0a7e","sha512":"85bb3206c5086852bec34c96b2c4e25c59c0678fc65d015a03ef5194bcc21764902fe5560e399e77db0243c637f7fc21c662ddf9e3359708ab4d74f37e71cabe","ssdeep":"","tlshash":"12418c88c9c9adf294b06eb09664c63342971690c43ac96c9fdc84881e309808e84959","size":2434,"data":"","first_seen":"2026-02-12T22:33:02.080887Z","last_seen":"2026-03-28T02:20:02.878335Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f740b956919fbaa673bb496be184ac1","sha1":"fa7d2aef8069f1be31c655fb889c897eae36757a","sha256":"c8d83f1bd6a850a6f197b9bcce38828132ad627358b9c2c78e7c4bef4d22c304","sha512":"e35920e657641e1a0fd7854febd24180da274bf4a9e243a3d3c356cb92281f7174c451d2bf89a98f618368cfecdc77fa11308eb8665b2719b4780390aa755364","ssdeep":"","tlshash":"93417b829b5c80fd88267269ad395315a67acc73130905b2be4d2c9dec54923c7cb9be","size":2326,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-24T02:00:57.053207Z","times_seen":12618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c76168362867e8297fd24900ee6b7ce7","sha1":"f435321ef0f9e13854612a65250dedada343ddcc","sha256":"a1879c98180fb1975fc80c8da16f7c024883b60aa21e58bd9761e20b540ee9e2","sha512":"ce4a596b0fb0ba3409b3205a44f9223ed7c4236231e4d5e42494a6b9f91c27714629d3174a783a68e5e318feb3d6e0f932cd5a5812cf57f0a89da289ae4bbbfc","ssdeep":"","tlshash":"1ec0926b60cda8990a9f7b32a076818f353595a03f8a280c542515d84bab8ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.03461Z","last_seen":"2026-03-28T22:12:53.933965Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/zilla-likes-js-extra","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"034fcc02ec288a53b5433cd074b3efa5","sha1":"a3ded817dcda054495a654a5405e336763ffe80b","sha256":"fcb3083eb91d3ea329bce2a57cb1c38f3166d5885b8b4f0b21bde030949474ac","sha512":"f17ccdb5d6aa19ac46b31f576af2f64f322a0107cee51ce4818143348432ae92a4d4529800a50a32963f141944a2b5cb4a2fbbf9839825057a948efaaca0084b","ssdeep":"","tlshash":"eae02b5bc5c52fc716d00cf51130623322f66316c87c985859cac4400d30c43d864352","size":344,"data":"","first_seen":"2026-02-12T22:33:02.072456Z","last_seen":"2026-03-28T22:12:53.93304Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","size":9087,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.688242Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/svg4everybody.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","size":1160,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-23T14:19:22.088644Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b87f794937c2ae5df31e5e511fe318e","sha1":"01a6d9cbe423a8d3bb2885ce81d72d287ca79e88","sha256":"545dba3956c64fe4c4d9180ce27a6bd1d99c590d2542c20458d75f9480f2d1f3","sha512":"5e20138e4664b884cbae8ffda7715c7a244b9fb5ed4273aea1580f30c44f0f75fb2872bd645086763eb2b51ed8bda8634cf5cf310479eefe5e6a161a6b5db8cc","ssdeep":"192:Kf9RlITvkEHsWRTRpHXHVrO9X/JXPr45VdLyB0I0cFz1OSmJ1nL4J+W5l9l3uX:Kf9LIlTRNXHVrO9vJXPr453LyB0YsSm1","tlshash":"43e195f32e2c2870daa3c06f38a918d44d3513d2e3601294faeedb2b34e574f561a755","size":7210,"data":"","first_seen":"2025-11-13T05:54:05.473487Z","last_seen":"2026-04-23T14:41:56.926401Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","size":860,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-24T02:48:41.537456Z","times_seen":490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e48f74ff2ec65ade3b0485ce35fdf51","sha1":"87041cd6aef74b8f0ab3d1ae2e03e2ca0db14cf0","sha256":"d5e2c551ce5c731d97827275aadc2c47329529d8a022739aaa306b8d7344f802","sha512":"3f8bd4bb1f29d83293ef4d18a5db6d7d2d85e3dd5604b9b14f1463ccb56698dcb420e1e79eaa4734e36b8cadf353f26c7bcd4ab272e59ce472d2ba8485a06d45","ssdeep":"384:+gpDy3SLtWmOeKQCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/EfaQzFHKZuxs25oohbZxG2C7H","tlshash":"af62fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","size":15556,"data":"","first_seen":"2025-07-04T07:44:29.938072Z","last_seen":"2026-04-19T19:53:53.663165Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","size":54800,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-23T14:19:22.105306Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","size":11969,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-23T14:19:22.104571Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-sticky.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","size":4075,"data":"","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-04-19T19:53:53.668155Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fc3b18c54b9030af3b1f75eb24df109","sha1":"0458e94d3d6b1b78ebbaebd1e40ece8263e5f3c8","sha256":"4fddf0d4e9eafc065fe0300c97c051d33404dcbaa70a6c6cf381fc3414508921","sha512":"e81d5666ae36fc2fbdd610b2900ba473639492179b66586bb099b04009f738cdfdd89b9ac5edae6d05f2e7e6d483a4ef5976464659d4a5da113ed745f99c659d","ssdeep":"","tlshash":"d2c09237b0dda8dc0e9b7b37e577428f723551a13f4f2808846454d897ab4b6042bf95","size":141,"data":"","first_seen":"2026-02-12T22:33:02.037658Z","last_seen":"2026-03-28T22:12:53.934867Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-24T03:19:30.865107Z","times_seen":685059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","size":10332,"data":"","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-04-24T03:13:36.011498Z","times_seen":12703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad876aacafbea1bc0b44279e0b4e25be","sha1":"fcc680d6cab3bb6c7811310669004eced66f9985","sha256":"027ad6f90f07fe485218887a482bf1a3a50c9ae25d5eb288016cf9427711226f","sha512":"a796daee00e98e59756beb0404ae7f9ca14972726c555645f3f0cb3262661256f7de2f9f6d6769677948d4d10df8efc60f8223490adaa4b9541ee0505fd290a8","ssdeep":"","tlshash":"71c0926b60cda89809ef7b73a27682cf313551a03f4b2808542515d84bab5ba402bfe4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.03889Z","last_seen":"2026-03-28T22:12:53.937447Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca451e423816af4aea44ef9965e405b4","sha1":"d5bf1b129873b75cf21c7a50145f4f9d3fafcd54","sha256":"fe3c46b02167e975a969579f6f74fcf8f9bef19e526d73c44a66485fe6dfe7f8","sha512":"53dd227134f58b2f1e1baa86b2c53e597bc4323a24e6e058a774bcf074bdc4e5c5524d60fbbb735486e8dde12bdde1cc59c5518a8d3e12373974a0bed05d37b9","ssdeep":"","tlshash":"1ec02233b0cc88cc0e8b3b32e232028f323002a03f0e280c883820c803ab0b2002bf80","size":141,"data":"","first_seen":"2026-02-12T22:33:02.042591Z","last_seen":"2026-03-28T22:12:53.938265Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","size":18496,"data":"","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-04-19T19:53:53.665109Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","size":1751,"data":"","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-04-19T19:53:53.757615Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c189b07b8cf5fbf9320d7a763c65ce5","sha1":"c6a3762d84befa33910ac5e1cf106b81e20d67d8","sha256":"c7b29a333c06c37c75566cafb3037dd25e9ddfa7c40fbea3c78af8e23659eec6","sha512":"a78ac56aca503d3d0b4ed4a1948edd430d1826b73c2b214d248bd783a1c04e78c60a7dcacf829eb3f3049054c5ab37f1d37b4b7076122acf9eff4014ebb2f13a","ssdeep":"96:si8ckS/qv0VFm/UjCbweCyiSeh7QHAWvoyeCwQOl425k5HSPRySKSLFxPQX:UCqcDaUjCbweCyiSeZQHzgJCw/X8HSvS","tlshash":"8e023ead96f62124b563b23d1befa24435329113180bed013d5ca3880fa15765fbafb8","size":8529,"data":"","first_seen":"2025-09-23T17:21:14.03334Z","last_seen":"2026-03-28T22:12:53.940634Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8e05f69ab7787d882a3379b6f3c381e","sha1":"42d4ba48f7c5f8755b753df6abd69c792c162017","sha256":"a5024c650af90792ce558469819a314ed26756021fb18ede088daeb2a9d34b75","sha512":"b2c4d37ae6e441c937e6d4eda2091a0a3fe6b7975715ccaf08897df06feab3c4a377c93d36e4629b822b157f770c0f98732e61c57db7b406f4063295c01572bc","ssdeep":"","tlshash":"c5c0926b608db898099f7b33a277818f313695a03f4a2908582515d84bab4ba042bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.047383Z","last_seen":"2026-03-28T22:12:53.941482Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ff7654e0ee36bec5a7cc6d155d06de8","sha1":"b9453f90a8d1be277c9e04015e6fc39d40110a85","sha256":"743addb91ada723e48819bd3ada98f1eec86c99ba587e63534012724cd95a73e","sha512":"ddcf1b2217759ae315c05997d803ef0ea8d8faef5f5cf5002c298d93c0bdcc41557757fafec0d193281eedbea6287e3674325f70352fc0836beabdb38941bd9c","ssdeep":"","tlshash":"97b09267649ea89509abbb32a076418fb03451a02f86280804a510d843ab8aa0027fa4","size":117,"data":"","first_seen":"2025-09-23T17:21:14.052131Z","last_seen":"2026-03-28T22:12:53.942328Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","size":27139,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-15T16:18:55.364541Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f59a1061fbcf41f5e85090ba2fa9a67c","sha1":"8116e9924e7156e7d5d9cf62af3bb75a999d38d2","sha256":"7196e7de0fcb90aa7dcd75f741e89a91f5f172dccef4e8acdf3dc95de355fb69","sha512":"bcbeef70b99310152ea76da61a1303cbfff76bd9b9f654f447a2a706e83e7a4f575a312a0f1963853bca33fe91f526262df6bf8c7ee81c6860a39e1f03a9f475","ssdeep":"","tlshash":"b0c0926b708da898099f7b32a276818f313661a03f4a2808542515d84bbb8ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.056726Z","last_seen":"2026-03-28T22:12:53.943067Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3231804e3d5ba9a5e75e2f3fcfc864a","sha1":"85ba8bf46f104424fde024c3c5976aeb17141f1b","sha256":"92827490d2a95989f1163e13a5de6867ba4ec33b6dd9449c4d36d692a7d7aa79","sha512":"1cd852cc929ced5ee822db4684604dab710d7d18e615217dbb6c15058ce0c19bd339a53bf021bfb62a9040f61413aa82e6cba97446b2669be42ae2e63bfac2c9","ssdeep":"384:HkQ/wP+gdvChAcc3Dv0vlxXDKW571+bC4c99pa+0SPV1upYwGjAvf27L:HkwNAcht571+uf4Vaj+2v","tlshash":"df92c89955422c62157a633edb2b92caf37500630206a115384dbed83fbca7453f6eee","size":20852,"data":"","first_seen":"2023-03-14T14:29:01Z","last_seen":"2026-03-28T22:12:53.860393Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c027b3130557bf0fd5f9a4e1c62ffb30","sha1":"0b14479bfa821ff397b2d81193c3bce537c270b6","sha256":"01101fecbb128dc360358c28e75e5ea478df4dbc54ca05b7cc08b740c2d2dd11","sha512":"48118d616880378f2ef5ec5ff34e738e0ea293bb10df1f398aaf7e97e87d69f94f02fe9fb1b0711e6ab4e2bdbf53073b9ed76883b16d40a90ea8f65ff6842443","ssdeep":"384:8aRZEdAYTvbA1yFIWkphtJCLuKda/4YZE+TYZ21lGgR1C9OkRa7Ph4IIRGy8iD++:8aRZEdpT8AFfkpPULtda/4YC+TYKGgRq","tlshash":"a7a23cba2950e2742af54aed44765062f360362d304ec4f0b24e8ebb147a69b91f7d3d","size":21879,"data":"","first_seen":"2025-09-11T14:53:19.592051Z","last_seen":"2026-04-23T22:53:22.549574Z","times_seen":1052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/ct-settings-init-js-extra","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e8637b2e6761e455238611c558d4e2f","sha1":"5aacf8b1a09aa029030dcf1e2baed0c782711d89","sha256":"feedaa2972c6f5aac4f467a7e8aec67912524b4c57dbda50373117f855583dab","sha512":"d2599889336c0481e2a9a3807ab7bed276fd57b0cbdbf50cfd79c3a1961825b48bfdad8b09114bec457209e2f2cc45bf8f4089eacbcce3c24510242d05be0415","ssdeep":"","tlshash":"e3f06863e64a3c9942c2c5f0a028665392cfd267c49fc877c9089c4c0daa460a720b1a","size":554,"data":"","first_seen":"2026-02-12T22:33:02.055556Z","last_seen":"2026-03-28T22:12:53.949887Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","size":2214,"data":"","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-04-19T19:53:53.714366Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.easing.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","size":4198,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-24T02:48:41.529737Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26c953aa3915f943e1d6b46422c57134","sha1":"4e5034a6912440f1ac947dad321ac1cbb5dfcace","sha256":"42482d38e1d73a9221793b4e757182a91e2fc76bc4d653175bf702b569e0a217","sha512":"965f070099ca919747a7c430714344baf399b04a15358998744277e4478225b0f3123c2b117c957eeac20c5838853bedb444275f57320c4c3c04aadb219e68b6","ssdeep":"","tlshash":"53c09227b0dd98dc0e9f7b36e676428f723651a03f4b2818847414d843ab5b6046ffd5","size":141,"data":"","first_seen":"2026-02-12T22:33:02.057957Z","last_seen":"2026-03-28T22:12:53.943767Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d83b73368e26d5a7848bde92c409ca7","sha1":"109ae6549c639a96000da5d149445c4cd0e52225","sha256":"27fd63c72b9ca9b1589d34f73a3b0b02d74f8633411be042b1bb3b0e90e8ebff","sha512":"6a1e56dd8aacde65e4abff70070316ca88781a0456da6906eeb41f11755c770143f09bab880642c9c6a8c4ee83686f201023466dde41655d3a8b32c1926074be","ssdeep":"","tlshash":"7bb0922760ce98940a9bbb32a47a418f303551a02f462808042410d84bab9aa402bf95","size":118,"data":"","first_seen":"2025-09-23T17:21:14.058241Z","last_seen":"2026-03-28T22:12:53.944532Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f63e2248d25d0feaa907a19c7a95d9ac","sha1":"7603afc0915ed4ccaa7da8757a22cdbcf2f181cb","sha256":"14fbf97838de472c1f1d544e7a1e5d7db0267777c9ff2cbf578026079ff1dad3","sha512":"71b1c9cea323ea311956d51eb4c073ee4564c5b1e97e453558a3caa251e24c3ef43dac4fb1519beeac4f7ec41be7d522c42f3babc7667d5aac55fc72ae3c2c0d","ssdeep":"","tlshash":"d1c09b6770dd54dc0d9b7736d576418f723551503f4a1408446414d443ab4b5042ff95","size":141,"data":"","first_seen":"2026-02-12T22:33:02.068656Z","last_seen":"2026-03-28T22:12:53.945265Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.transform.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","size":15261,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.671833Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","size":7834,"data":"","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-04-06T21:54:39.712472Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cffd0a1a3f066b4c698d79e5bd8fe124","sha1":"e042a9748e92e2f45e133b57ca2052ceb25ef98c","sha256":"e99d918c3c8ba1f2969ee1ddf46ef087a09e819c141cfb9aebcf29e82ee73fbb","sha512":"d3aacd9f216547f38f4cbe67ddfba2389a7526a04d7907b76b29cdaa48ed143c69fcec703e807ebfa115b566cfca33a2b89ebf76c4d5bfb9f30755219d85292f","ssdeep":"6144:IPI6TQxgMH4N7CXH2pD5p+v9NWF0QJpkXRdud/RDrnTKbl7wnoyJD6BWSIle:IHsH4N1gv9mJpkXRdud/RDrnTKbl7wnc","tlshash":"2f644be8e931787a04e742d7d05a440433b5e92da30785a2f2bbe1695c5c68d02ebffd","size":337085,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-04-23T17:31:04.694324Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1029d319913d70463bb3531e296e48ae","sha1":"defcfda809076ecef49bb77afcd58f5015d52694","sha256":"e4395b9733d0a0fc386a7aa0b95f27d4a91cf0b968f70246003d703c5f98901f","sha512":"c5378e794fe40d744567118090942b46d421856c47e9657047fcb00b90f1557c1d592603369d7fb82408c36c0d5f92dc16e2d7263d683f5fab4090857ed6990e","ssdeep":"","tlshash":"9cc092ab608da898099f7b32e276818f313651a03f4a2808a42515d84bab4ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.06993Z","last_seen":"2026-03-28T22:12:53.948423Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ed72935440ce32992acb954c8383f8e","sha1":"5fbdaa42ed18ed3860bc2f07b5f857a4fcf93d05","sha256":"59d558218b288b5c1ae7f59e6e1bade8843ee19705e5c2ff8df47b4f71fd0676","sha512":"f1a4e471b96c18a295ced2bf03650fb7885a9d22de9b352af7d7fd2bd7921e6fa865693f9049ba7bd0526a40d2389a9199c8ffa7773c50926da2d8daf3743b4a","ssdeep":"","tlshash":"92c09b67648d68940d9f7736927541cf313555903f4a1808542515d4476b475001bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.074273Z","last_seen":"2026-03-28T22:12:53.949162Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","size":6555,"data":"","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-04-23T23:23:11.68012Z","times_seen":4989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f757224c404662b0faa11be074ed2d","sha1":"560f528eb8ccb1d43129299c62068c7a3f14cfee","sha256":"93ff2de83282d394668f1880b654a22a6922cc1bb2cddd46d5701f5dd70e20a2","sha512":"f7dcf5812ef34abc2badbf691d7ca9b62f17a43953f4ceaa5336f27921a6a630f3ec2d1e849df69716fb616d8f89107984b7dc47e6278e80b783239199fdcb5e","ssdeep":"96:svcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SP:JN0LE0+1lfYsvSQ","tlshash":"02b18696e77638dbb2f900f2697a0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":5343,"data":"","first_seen":"2026-02-12T22:33:02.083158Z","last_seen":"2026-03-28T02:20:02.873785Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b7e4c930ba72c55740bffda68fbd543","sha1":"eca741cc1e45172f70e299615090767d24e66324","sha256":"7adce50b022897e795c9e39664e34be847c9188e4531eb6d965fcac5d7d423a0","sha512":"14506fc288dec5fa29ea17dd6af3783a02896ab5a49dccab84b1d4b3e6998582b7814fba42024b9b632fb1b28ee039a0251be4013aa30979fa2ee84a3d43e9a3","ssdeep":"","tlshash":"2fb09227b08d98a5099b7f33a076418f3035a6a02f862808042414d843ab8aa002bf94","size":121,"data":"","first_seen":"2025-09-23T17:21:14.07888Z","last_seen":"2026-03-28T22:12:53.950682Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fcec6a9f9392e995a88aaf6558caf37","sha1":"446a678bbaa09d1c534f57bf687f3d5ba8b2d74e","sha256":"518870c4e3a3bdb65e3dfa3d20876331434b362b9226e3d96f71aced580f67c4","sha512":"c76a3f0d514609aaba6d1326d246117b77e6ab4a143d29bebcd9f07df9c0227d245a30950e133df21aeb4dfb6fb113f88dcba0961aac686c74eadeaf3dc732de","ssdeep":"","tlshash":"9db09227608e98980aab7b32a076418f303a52a02f8a2808086911d843ab6a60067f94","size":119,"data":"","first_seen":"2025-09-23T17:21:14.080555Z","last_seen":"2026-03-28T22:12:53.951443Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/odometer.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","size":21077,"data":"","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-04-19T19:53:53.758092Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/functions.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f216166c4934e1b8bb88ef8fde29fe","sha1":"1d620f5b7d5cadfdcdf9e936f8e4dd0cfd1259bc","sha256":"ba8d4cc28ed1f2e9489d85f7516b41d107009f3dfd0d37d2ca89f1504b779bc0","sha512":"a687c5cb13b1b6c0e0bc95833d35957995d9801c855064c28985f0ec910d95791691bff97b54c3133fd4dfa9f81426c12be2c90b24b90bb952b0a873469057c3","ssdeep":"192:Hd/dawE67ve+QFLaZPGvfrBPxz2LGWDI2A8fzx3cM63K7Tf:F8uvjQFLHvfdZz2LGWDIofzzL","tlshash":"5a62a494fbacb46a54773039d83e51cd663e10728b424c37fcb9912c29c15aca37ae2d","size":15321,"data":"","first_seen":"2025-11-30T07:03:11.310513Z","last_seen":"2026-03-28T22:12:53.832519Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58ab67360d9298250b651560792daccd","sha1":"01092699d1ebce9da9ae06f7ccf8e957a797a492","sha256":"c77d5b329c21cd4aa9a182a8615a8d5c5c8e3d16ba261bebb84c589218f4a296","sha512":"f7d594934862bf553f32af166716cf8c6898c0c2783911611167b49cb9e62106315f96e538ef4af46cc0db6177408bfb57f6ed1baf85bfd6f4fa23a431a70c7e","ssdeep":"","tlshash":"d5b09227608d9894099b7b32a076418f313551a02f462808042850e843ab4b6002bf94","size":116,"data":"","first_seen":"2025-09-23T17:21:14.082651Z","last_seen":"2026-03-28T22:12:53.952143Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc962d39be85ef44b21982b97e7a64a0","sha1":"498ca29df0bce0700107917533136934ddff4258","sha256":"dc00316a4d0556b0452bd5d1e9f85214a95857434cb138cb3c7e11637daa6e8a","sha512":"d1df30f865702a0f4f3ef8b81050818eee217b102a518b0efe1213b3b5c8f30a804c9b4aae0afe92a4aeedfd158124c3cc99f334b54b55ba27dd64f4bd87e63d","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkdik8LM:inrIt8D+kgdnv8o","tlshash":"37a1671d357000ba557ba33ad57b458ffb7510271306c4a0b8ac9c992fb1da236e6fd8","size":4984,"data":"","first_seen":"2025-07-04T07:44:29.949614Z","last_seen":"2026-04-19T19:53:53.743824Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","size":5467,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-22T09:26:51.862836Z","times_seen":379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","size":1396,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-24T02:48:41.541118Z","times_seen":1538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","size":1886,"data":"","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-04-06T21:54:39.720572Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb681e1ebdef64adaae93497ed04bc26","sha1":"889fbb0402a4945d180dd0f61145ff4562cd2048","sha256":"e0e2c6a5140bc478008dbe83efd559f8886be82a4a5722382aa38b1e10f54f8a","sha512":"6e1530b457cea6e127b2140f265b749555dc32141e216527140b203fb0b868031411e15e14eaecd195c0c25dea305ea03e8947b65316bd67e340d446fc5a92c8","ssdeep":"","tlshash":"04c09b67609db595095f7732a079414f313551503f4d1808142519d84b674b6001bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.081914Z","last_seen":"2026-03-28T22:12:53.952839Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90de6d6de39f900f9656204722c5938c","sha1":"c4ebb4413fa97b0590b29f1ab8a861c6dd55228d","sha256":"fab0e29fc2752191d6e56e0ff5197fc47e4971b5d4df5616ddac8ea985e250dd","sha512":"cad24a9ac7b490721503539de167b7bb5d4fc35c6627501cc266782313bc3579c7ccb163c1dd521c1c77f5cf373cfea2036fae24ebe8020974492aeb4dd300ca","ssdeep":"","tlshash":"7bb09227608d989609ab7b36a076418f303851a02f4a2808042810d853ab4a6002bf94","size":115,"data":"","first_seen":"2025-09-23T17:21:14.091395Z","last_seen":"2026-03-28T22:12:53.953653Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","size":753,"data":"","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-04-23T22:04:01.833632Z","times_seen":2774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","size":927,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.751953Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-24T03:19:30.886052Z","times_seen":737679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5cd17674ab1e7e8f556707b9e894175","sha1":"c1b2a4a4f6fde101fc5bb4918c75fe8c2b163eb8","sha256":"a4aca4b3ad7c3976cfbd935294d071c1e276081e7a8ddeaf030ab5b5e280204d","sha512":"7da897d1b48763afd7e941c5a2ff10b58e0edbd511fcd2cc1ff9369fdd5ab03666ac3173f3973b4306c8c24c39c7e9acde15217fab961f122e091cfe9c59309d","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0KK:a66U+9UWRW7CK8s+muaydMr/IMlK","tlshash":"04c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","size":124185,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-04-23T17:31:04.679386Z","times_seen":1052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a009e0dc51af74717b96afea7b52e80","sha1":"d76874964c901fe58db1a5f3e5efbd77d6568436","sha256":"0920409bca4fe227a7d7b5331840c7286953163e35ffd98e986cda0fa34f54ae","sha512":"ac1302359811802afd24a63e5bf1cd6f2eeba829e469f1cde73f8983e1fea901b32ddc3f1b336299e1fda1fb88c9a8f089178c92c0292d2be2c82bc289fb07aa","ssdeep":"","tlshash":"5bc09b67608d6595095f77339475415f713551a03f491808142919d44767475041bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.088444Z","last_seen":"2026-03-28T22:12:53.954333Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","size":22639,"data":"","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-04-22T04:16:04.961145Z","times_seen":369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-header.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","size":20279,"data":"","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-04-06T21:54:39.698975Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f541ee111fa40f4b14c0771a1788bb4","sha1":"c784c652a746eb5d1d6632c70fb467975b3e1e76","sha256":"a50e409667edb79d5317913654b055de96d8d1a52852acb17344fe03cdbcbb0f","sha512":"90753ff447b7f59d98de1504684e7239edea38c7630245965cb29a1567c49513ae3fad2b25e83d315bf43f2d95ec46d9669efb53ca82e6a5d1fd9c0fef39390c","ssdeep":"","tlshash":"d0b09227a0cea8d4099b7b33a076418f303455a02f462808162410d843ab8a60037f98","size":116,"data":"","first_seen":"2025-09-23T17:21:14.099936Z","last_seen":"2026-03-28T22:12:53.955219Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c215afb4af3c167b759b28185895d4fc","sha1":"4ec0ab3911d01627e26e9348f8783af41dec4c6c","sha256":"a04ab77354a8ab2ba8ca1bb8337fdab6a58c9cb244cfffe3a9801ea2f3cd56d3","sha512":"0ae6678aa095c18da47e726344900fc4da6576b8ce2ed8647449dcc791c5c91435e7896e044fb262db3e60aac043006c1b5669830b9489340557119fa50a936b","ssdeep":"","tlshash":"a3c02b2370cc44cc0d4f3736d432018f313020a03f472808002404c403bb0b1002ffc4","size":141,"data":"","first_seen":"2026-02-12T22:33:02.095025Z","last_seen":"2026-03-28T22:12:53.958874Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bb7b821b587959d4c0cc406c49077ff","sha1":"2cb4827d5cd5a05729418b369019b9c1eb0798ed","sha256":"1f93a5f6091369b8b6cdb7be01a6c7044ec8c3af0eeac05a5f0dfb3aea2a3e31","sha512":"cb99f055a8fa7834d3f693bf5c06d7622c7d9340b0147d52d4ab12cd6e1a0d1ae0553f7584cc8f682318cfeff7c34f8273dc5027206add3c1ddf57cef110a5f6","ssdeep":"","tlshash":"68d0c74caa4f605915746a169f6f62c9246d80761c8114a63e455744352581ed25496c","size":215,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-24T03:36:57.065308Z","times_seen":12504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"9680d2753b15a87de5d3b7331dc0d4bb\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ks6a6vUHVbfOfPUniknvo7OQ8ospR2VkrqevT3fPbCNc8FhBlcV%2BwFfH5B%2BxpaSbAOcYPtp6PAPcApo8TdP66sm1e1iKTZ3nhJww0UaQ%2FuxFZMV3IQv4h%2B5aHeBhHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275973a94b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17314,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (472), with CRLF line terminators","md5":"3c29cf93c3bc245080754d39a6e4d2ac","sha1":"453708fc696137e21b16ec98238da0e7d6e8aa1e","sha256":"7bb5b8ee58a2d2cd085abbee00c98ab59d7d9f32109d1b3f38f5a993a2f20fce","sha512":"ff84608389a22504a8bbd9f89c1c8058a45b0b05c9179203ab5b7c8c1d5cd652457f02671d0b69c560294b5794bd31254a4ae297bc1109b5da0b2a6b91d3833b","ssdeep":"96:nIllHzGN4FBcRW2Xj1xFb9bkeqwZ/weBsidIWrbDZNzgikvnNLwesL2TnZNbMyQz:nIl1m4IRW2XLk5fiP0ENyNRgEGQgmW","tlshash":"5c720291335c2451839fb3a7463fbe8caa3cd0b9944b60bc7874e4946ad14291bd2efd","first_seen":"2025-09-23T17:21:13.936809Z","last_seen":"2026-04-19T19:53:53.672375Z","times_seen":159,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/css?family=Montserrat%3A500%2Cregular%2C300%2C700%2C200%7COpen+Sans%3A300%2C700\u0026subset=latin%2Clatin-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Cgreek%2Cgreek-ext\u0026ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /css?family=Montserrat%3A500%2Cregular%2C300%2C700%2C200%7COpen+Sans%3A300%2C700\u0026subset=latin%2Clatin-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Cgreek%2Cgreek-ext\u0026ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\ncontent-length: 1337\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a261d2ad87b35aa15cf76f8876d22285\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGjJZdCcbcJJbG%2BdACuv4B5Pt65cGBd9cWZLhhhEuIlQtQn%2BbYXcB3oua14gge%2FlZ7tcjgD6F%2B0iwp6Qg013YqQLzFFOvSig%2F3u9o%2FIaxfE0ExhkTbdpAEKHA6Mb7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e3275965a51b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"d2a67530d371b67731a651279001414a","sha1":"49cc9a0232e6d46376b6e8356654e95d770cb918","sha256":"5bba85f7dbb5e6820ce1a880862269b76ee093208a0fd29a943b26b00707631f","sha512":"1c4103541f3131f2362979ed50c22cc8b3239935d3bb06dd99bce487344706c82b2c327b2a48f524740673147c9495e219e32d1798ba8d6d62bfd9825e574314","ssdeep":"","tlshash":"a8210500200aa631e6101d5d33cf7f298d9e386621a6c06d6b754c38afe682a4362fbd","first_seen":"2026-02-12T22:33:01.960642Z","last_seen":"2026-03-28T22:12:53.918454Z","times_seen":129,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/custom.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/custom.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"022307951df197df4b2a9326aeed2e4a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CT9KecDeBMtSL%2FYLs%2FsdhIjn1HL2Yf1bxfTx%2B1jEZ%2BIoKP51daZjChok38aLndsCPy08dQlaNzp%2Fp8Ve6EZ%2FiLyfO530gccRIcyjG9glCkIcT6Vdcp7HvcrSGjq%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275966a53b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8115d79b41d838bded6d1a1126ed51e1","sha1":"ec06add4a5a3c847716a5e33c8529f9980361fd1","sha256":"57296865cacf7ed59a8a50c6b9580f3db6c6cf2e548b6765afb7bc7780176a01","sha512":"85c3ae3e42080450fdd6fb1248f71581d8ed7007f6a8375d59ceb889bc01d855d3ce40ab0cec5df9aa27cd0ebdc563b6bbb9ad53ecc47c00fb1fc8091a21b476","ssdeep":"1536:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvLuZNLCDVVx3AVaV5MGAXrWZfY72In9bgF:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvH","tlshash":"e293411b96152daa2e77532d998e7880ef127373c381d42bbaf1c2154f7884897b2f4d","first_seen":"2025-09-23T17:21:13.94536Z","last_seen":"2026-04-06T21:54:39.692326Z","times_seen":156,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"4520a6581629ccbcedea6b3af6cd7d4e\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMO96tfMo4igT7BMDcpKtCQC364KbnUwcENtYSdvzQcMDXUPt7YHVSrmA39HfX2JTi5c%2FtpFGfIittaaphQ2fThTDzcB9%2Fe1utJeQB%2BmKKtTgTEwLqPrNMg%2BFSJm1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275968a63b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":337085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64270)","md5":"cffd0a1a3f066b4c698d79e5bd8fe124","sha1":"e042a9748e92e2f45e133b57ca2052ceb25ef98c","sha256":"e99d918c3c8ba1f2969ee1ddf46ef087a09e819c141cfb9aebcf29e82ee73fbb","sha512":"d3aacd9f216547f38f4cbe67ddfba2389a7526a04d7907b76b29cdaa48ed143c69fcec703e807ebfa115b566cfca33a2b89ebf76c4d5bfb9f30755219d85292f","ssdeep":"6144:IPI6TQxgMH4N7CXH2pD5p+v9NWF0QJpkXRdud/RDrnTKbl7wnoyJD6BWSIle:IHsH4N1gv9mJpkXRdud/RDrnTKbl7wnc","tlshash":"2f644be8e931787a04e742d7d05a440433b5e92da30785a2f2bbe1695c5c68d02ebffd","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-04-23T17:31:04.694324Z","times_seen":530,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"e5c5908b43f078e0a79914d0713e0ed8\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJxQjPHLkaoOjGAt1FtJ%2F0HExaDKiSFSV03D2V7FC7jydSOJwtOhaRtUZvfbP%2B8bAhZ2A02ZO4acJQ%2Bqw5TmbfvT9tD6cdi%2BJm%2FTScuUq%2Fn40PIsoGJmit186nocMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275968a68b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51719)","md5":"8b6dae7f49f2b5fd72f43c405d4417b9","sha1":"a10ac4645869698687a5e08cd77e3d98232ca3d0","sha256":"1c3fbf3f4938451bc3b7781f832b7da84c23eec5b979ac7541ec754e67e3b6d2","sha512":"7a49d6ffcc94fbacdab8ac8da27cd5f211122974c49eb652172674bd27c625037869831a9639eddc7d5d65b9d5d81d3c00fb4948afe45b146b3cb5b7814818fb","ssdeep":"768:/kZlIbIM6YIMIgIzwO1CA5kiDb3CyQ5xrQe/0STbsysb:/kZiIzwO1CA5kiDb3CyQ5xrQe/0ST4","tlshash":"393305af4891229991664b62c3dc5e68872dc67714621cde33817c8b8f87f9f33da607","first_seen":"2023-04-05T06:02:17Z","last_seen":"2026-04-23T20:39:24.863685Z","times_seen":3436,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-countdown.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-countdown.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"d53b405d5a680247142f7da61cba9ed0\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7sJnkSTD%2FI%2BFR2wt7wVakLYw%2BtjSeTOJ6YRJmbZ8U1jOH%2F8Fyo9idAwf0nr%2FJzjgb6qCu4JLKpOE5agY7GfwuUDb9VZAZIhfIbGjWREIxh%2FcchkIox9tEoKpy7N4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275974a99b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10981,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b53c15456ae849b6978f22764cc8545f","sha1":"8d523359a44058d7b90a38e968d3f3f4a3329a09","sha256":"845d2e6d1b14e199b65a530a085ca25671f426adad4a058dc0f22e1f8a5ca008","sha512":"ca1dc4f6a074a6cfd70169764a0223850b7149e2103a226ab20a3e7ec8b36571d74bc6788333f52e0da7a3d4faffa324a851f005b0da26e90c7c3ad198ac7ff2","ssdeep":"192:5dmS0ZbhtuFmS0RTd2DITa1GAjuAloK1qld2lRBo38qlV7E/lYD9DDDHDS0x5dro:KFZbPuYFRTdZTaXif2c2D","tlshash":"2a328544cf7a13381ba3a25d13ce6a8cfaad6183d3094c95fcbc8d096f69c797118d98","first_seen":"2025-09-23T17:21:13.9739Z","last_seen":"2026-03-28T22:12:53.868308Z","times_seen":136,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"bca3fd8837b525c9fb1c2ea2bb2c0b56\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONgCvdFtN5s%2FcARmmvA38BPcD2kF48Ml5I01S89uHDWSidzxZ9nvHfeuJIj0ybaz%2FP73DnzEfPr2g0A8PIu6d%2FuL9946xY%2Bd7I4%2BfGYSzZv0LSEkjniYjsnzboScPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275975a9cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1886,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1667)","md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-04-06T21:54:39.720572Z","times_seen":157,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"600100670132086efbd5f75abf87477d\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0HP2KsYdpkcoUzn3dgEEdpwBIseAeamC2sxzg1DJBOVM97pOvvzpetlikR37tRCvJNy4l6DUZiYdAdUHebADoeCyXZ1B40GChrqiaIU8gcRAQRzFcG3V130NEq5Tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275976a9eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7834,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-04-06T21:54:39.712472Z","times_seen":158,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"7374dab1c11c8677e51608d2aa57adbf\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggVNsiRHa76Oc9yCd%2BJorxxHPg7oSDeyMxSiqiTbSRnCX4tzhrDdXbXEg04i1mTH7TGzR3%2BGoDZ0H4tl9zCZZAYkbWUSVjckBNEljo0R9v7g7gQQS1ugqRrwb61T5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275998ac0b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21879,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21879), with no line terminators","md5":"c027b3130557bf0fd5f9a4e1c62ffb30","sha1":"0b14479bfa821ff397b2d81193c3bce537c270b6","sha256":"01101fecbb128dc360358c28e75e5ea478df4dbc54ca05b7cc08b740c2d2dd11","sha512":"48118d616880378f2ef5ec5ff34e738e0ea293bb10df1f398aaf7e97e87d69f94f02fe9fb1b0711e6ab4e2bdbf53073b9ed76883b16d40a90ea8f65ff6842443","ssdeep":"384:8aRZEdAYTvbA1yFIWkphtJCLuKda/4YZE+TYZ21lGgR1C9OkRa7Ph4IIRGy8iD++:8aRZEdpT8AFfkpPULtda/4YC+TYKGgRq","tlshash":"a7a23cba2950e2742af54aed44765062f360362d304ec4f0b24e8ebb147a69b91f7d3d","first_seen":"2025-09-11T14:53:19.592051Z","last_seen":"2026-04-23T22:53:22.549574Z","times_seen":1052,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-new-css.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-new-css.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"29d06b32ebdf97dcf0c2992cada10cfa\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=je6WNQ8nFamvo7eLEshO5xnk06CGMl%2FJQbPYCBBa%2F%2FjqJnFoEClirNygr1fZTuTeoXJnALvwwPsNFLq64FfzevUT2MLSwPX7iWQaw8GGlIiyugb5mgVgApOLA555LQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275965a4fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69882,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"dadbc97d3c0617e2cbb8add82c0f680b","sha1":"baba0a88021211f22fcb1617d56383fba37d1964","sha256":"c316311eb254253a29c702891c6e1510b227e90e59352801d2bdf17c513098fb","sha512":"9ed1aa19bc8202aa50a782a2fec8abf104076b6768a3f56ce0691eb1041665efa3fd7cfd63c4fa1665bf45dbe055c2b66fee2fcbbbf5d79fb55555b0f9f47035","ssdeep":"192:4cc8lnMjYLbuPbo5YcNIiTgapyosoW7DiOCcOhpAr02Thh01bCOgbgdKzVAE7UHT:znf8dwT0C5zv82qGs2h1IeVc0y90N+k","tlshash":"b76335da4a42082e1237e52563dd1b71df576663df120124fa98a2328fbfd5d01abf8c","first_seen":"2025-09-23T17:21:13.93982Z","last_seen":"2026-04-06T21:54:39.669122Z","times_seen":161,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-perevazka-css.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-perevazka-css.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"ec7860662d37b29d4285f96bafddfe07\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cxbWasNAL2kb%2BukCq6AvsqfDzD8ThWHHKJyHebQkqyQ9jipFwx2UuyCHCpJ%2BZg1BAiMWBLsUH7gsEX8l4mPuBNNOOO96W8a33wVKN1Tu9JBi1wOm4HNlfloYkZyCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275965a50b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a436b5a41b6c43b4affd74e7c1432209","sha1":"663662ab1eb1479997f64dc16122bba828382f32","sha256":"4953ad5a8fbf630a59b8101b138c2dbc776832939fe6f19e46052d552bf22b01","sha512":"8c1b2868746b358d5cad28431c377aaeb2826c77813f5fdd064b22c61b2c0ee8eb55d6e42eae0d53c9c3551ae415091f9f69cf0392c70da6f2c73ead01d7760a","ssdeep":"","tlshash":"dd41b055a34a9f47273b5a3ca69c76104fab61d9ff830f2c7db4391210458ec233a9c9","first_seen":"2025-07-04T07:44:29.935695Z","last_seen":"2026-04-19T19:53:53.720051Z","times_seen":163,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-js_composer_columns.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-js_composer_columns.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"f726e317be328dde995ae0e093d320f7\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zY%2BQVBKutjKr3P0haEw25BICGdj2ybrPnCdVycqxQadHT%2FDYKmjakepL0cAOjAm%2BwDaueWSn9hTl1httnwKR6esOduCHBBvU0WAehFIDfcbcGaHZJLLx8hDExn%2BkAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a5eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7b32c62970e5d8ec29fad1f0975c6d08","sha1":"75a021d00881028899c4d7b25dfa9f77a24cfb78","sha256":"0f9062da8be55f5fbe3d94228a14b7609a0cec84b70facfbcb39ad08be670107","sha512":"736277a02f70dd1a276df0be5342838a8a4253cf028bfb5eb4ce2f38a94f83db19bb16d446faa054320d302c8518daf7a3a97eb8865a1f5ac2de5ad6bf1a44f8","ssdeep":"","tlshash":"72c012311e251835c0325056c1e11c446b025e0a52b3c887e401e857d8846795828654","first_seen":"2026-02-12T22:33:01.843865Z","last_seen":"2026-03-28T22:12:53.814002Z","times_seen":67,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"cd336c8cd5bf7f3f09e2db952b99e725\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bfr%2FDb2vE6AHcf1PYuTMKnMmsg5HJVTctOIm6CxcBbxFVl7yKvGpZ3jb%2BJPl4%2FBe87ZpslPmMyEwLD6eGXqC7JRzxYEiPuVuWSm35J82crRv%2FLETmv03FVjc7Kr8mA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a60b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4984,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"dc962d39be85ef44b21982b97e7a64a0","sha1":"498ca29df0bce0700107917533136934ddff4258","sha256":"dc00316a4d0556b0452bd5d1e9f85214a95857434cb138cb3c7e11637daa6e8a","sha512":"d1df30f865702a0f4f3ef8b81050818eee217b102a518b0efe1213b3b5c8f30a804c9b4aae0afe92a4aeedfd158124c3cc99f334b54b55ba27dd64f4bd87e63d","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkdik8LM:inrIt8D+kgdnv8o","tlshash":"37a1671d357000ba557ba33ad57b458ffb7510271306c4a0b8ac9c992fb1da236e6fd8","first_seen":"2025-07-04T07:44:29.949614Z","last_seen":"2026-04-19T19:53:53.743824Z","times_seen":146,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"321b68866ffdc200e3da26150bde9441\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgZ3yWhg3jExrtLlLx8vE41pSLk%2BLaX3CB9oh%2BdXSL5lX5gjzWpM2RGVntu4SOEH9aryTTFDf5LSHyRiG%2BXf0GeBqu79s6NHru07wFBA9xILZaCuFAT6exWeP5wJ2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a62b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-24T03:19:30.865107Z","times_seen":685059,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-header.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-header.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"52de50606a53c3a461fbdbcbeca5039a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7MNybE5OmQu0ptqy37tnqNaBqEuBMywCAM%2BcQUUdKYUu%2FMEm7HuuPNP8E%2FrqXT9icABCmrXrKwNqaQeWk83gDvr6cQd5pJTwUHZvMxXZjVwHp0r4SqWr8Yc%2BwEjDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ba7cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (393), with CRLF line terminators","md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-04-06T21:54:39.698975Z","times_seen":161,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/1-4.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/1-4.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 47841\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b4a68c70c432eb9c8dd9ce7a09c479fe\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08PC4Ea9Fgc%2BuM0cybQOXelNPlPVc6iAq3f8OXanPcAKHI5toHQt5UGeGBPPw2zfSq7qNuI%2B9HJrS764SFU6CAESINsPHvvtDAhCPsseNImcfFkgKCTbUt%2BwmEJrCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e32759a7acdb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 584 x 532, 8-bit/color RGBA, non-interlaced","md5":"3e770683cfdf6b856c6101560d065757","sha1":"87a8eb2a5c9e54841dc04280afa807fc033397da","sha256":"25cdeed5590c5ccca1e9302bf849a1a56dbb6635e0d2dfc9a0cadc9d3e510b37","sha512":"1f997a496650e4767d09ebfd6a6983558973d7b0aad5e3ce77d48ccfe8c1a017c11202338ebc5c11523a201068ec0d4c0ba85480533065921fa0c43a047d34c4","ssdeep":"768:sKR6uVo3tys0aTrIkJDxlM4bfit0g99KP0n0AsWju/5B/BvqTUyTm+e+fT/8:sBuVodlD02DbLLmEotHa/5eTlTmjg/8","tlshash":"8723f257e2fc9d8c2ad51383204678a2b6ff75f94d8081504ae2f1b37bd69213a16e35","first_seen":"2025-09-23T17:21:13.834634Z","last_seen":"2026-04-06T21:54:39.701712Z","times_seen":157,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/03/ico_bg_image_17.jpg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_17.jpg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 181984\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c65158a84e8b9b0e3bb122c9d6f66962\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m11jbFeOvcXj97KR7TWzlOo1DEqK%2Fk9A7hn6k7lctef5YRN3Ui6SyMVRtnJNcTJ780k2SwZTp%2FhqjXBrGLRepVqwZfpeg9tBWvmBrxD3IYd2%2BXyjGxZVTJCh9Faetw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e32759a8acfb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1176, components 3","md5":"5f4937231d239f01c8503d7bb7cce83b","sha1":"c801abd3e5d669897a891fe66ed997eb13de5073","sha256":"5ac795ba09b7890a433d7ab2909f2532a2d9e0acc415dfe57f6e2bd62f31e38c","sha512":"cf95aca979a28da1ee8cf823daab8c9f866cc789005d9f7e1ce69022de40da396c12a79dd95cc195beb912885374bb1cc8dd1e6ff6796b588b1ea2ed28d1b57e","ssdeep":"3072:ioWCJz83R3nk4ESh9s03FWj/5RFkTLKvqxNtdgmpn7AtftxhxjEETbuq2x+NB:iuz14ESl3kT/C+UNtL7aTfjEEfZ0+T","tlshash":"960412a2e5d934f9c0bc5bf1038213368e67e5e99be7710d4f1544ba2a0839aecf7164","first_seen":"2025-09-23T17:21:13.816899Z","last_seen":"2026-04-06T21:54:39.702564Z","times_seen":155,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/style.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/style.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"82beb6503ffb5838af009b9f8457fd53\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VCwo3s%2Bu9YIlm1czse3uqTXJdR9odXaOYku6HGFSbHKFCjYIKuo21DYe%2BI9nTHQ46p%2FqMOEt%2BDFWYFbUN%2BN%2BqUNewGqYJL3LK851AXHNvm4y7cg9qjyxZ6L0C835A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275964a4ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33549), with CRLF line terminators","md5":"153bed32355b0ccdb158e75fc7e8be75","sha1":"95dc8d7b3b9e6fc5069ec2b3c14d746b1c91e6e1","sha256":"9bbc5f00a2812065135f6e4593f4bf5b756a35339af4fe0031b2165fc3d1ffb3","sha512":"a6d66bc492b69e7d1a06989d1cba7fc47c8a49cbf2dd11be27e1d0d9d4dc0b43c5cf167a8b1d3ef962f7b9a689811ef5600bf97660dd467efa2f1ef1e8640250","ssdeep":"3072:Nd8rcHtmSVN5AWk/YK78eYRwfwOSqxfr9h961RR1Ro:N6Q5AW5qfwOS4","tlshash":"dd64b7a9aa0106465333df34e3d5b775ee2a21b3cb0704e9f694d5158fba94c027aecc","first_seen":"2026-02-12T22:33:01.92884Z","last_seen":"2026-03-28T22:12:53.829885Z","times_seen":129,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"f638c92128f53339375cecd50f912848\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bl3Tq9hpB8nw3bX9lHyD7uzmqBgnLoQN8dTRxEPtD%2BJ%2BKit7ywaaIFbHBaWTvXMFmhmzarmBGrKnxUBSwOS8tkpiaujAXZe5d0gw1fh70wampN%2FIK9M5M7PsoPQKkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275970a8db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-24T03:20:59.825003Z","times_seen":132902,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/isotope.min.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/isotope.min.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"461b1baf42bb1afc09137ce0d2009a1e\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XXei86pHFHAB6H1LhXpPwxwveKR3X%2Fc4AGp49Fk1Om4z9BT1o5gfcranTbFJoExRBxIzfTv7QJpbW%2FK0dXCTfx2U6tQMAeyJYfCwIJO%2BuC2qQqD4%2BOnmyWoYkPCCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275978aa3b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40858,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32031), with CRLF line terminators","md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-04-23T14:19:22.119632Z","times_seen":863,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/03/ico_bg_image_15.jpg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_15.jpg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 31371\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a96f4cba7fc0940c15591b63de6b0462\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9TK9d5h%2FFixXR4lOUyH9oOthMU%2BNO%2Bb2g99tMUi%2FWcwy13He9wNfUKWRh5jRJdYltaEvyBqoXBCOe7b%2FIEiGTTxb5fkDgUYZlGINFoG%2BLzd1rUwjOa2Q1YC0p8tMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e32759a8ad1b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31371,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x999, components 3","md5":"786b62a430113bce0d29bffdc7b74c11","sha1":"5d788d55b79fc7732739decc608d5fd595930132","sha256":"6738f45cc12be7faf1a7072db6140caf8cf9e55ca4f59f9fffcf9d802eddb5f2","sha512":"ecb33c182acfc6c4788a528e0f367c38e31524861f13e13bba7dffd38b109e84863c8f1a2ed9f3fff29eb6801614f4785fa2e666c376114a2419e66a7fd7f5d7","ssdeep":"768:pcHpb7mDKuJDEOp7h62aAg4B+S/mpXljR/:ypbKuuD1pdng4A","tlshash":"84e2be3ef20cd486e46b46fb6892b3696d36bdd2740d1b24e50380df2782b3849345eb","first_seen":"2025-09-23T17:21:13.818499Z","last_seen":"2026-04-06T21:54:39.703371Z","times_seen":153,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-content/uploads/2024/05/cropped-favicon-kwarden92xkwarden92.png","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:46.130Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-favicon-kwarden92xkwarden92.png HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T03:19:36.197118Z","times_seen":14127568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/odometer.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/odometer.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"f4d935b2b3712b8e2d6b58ff00f55579\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxgBL7ysXkVJew1DRtVla7%2BIqcHVEJ%2FM9XJxWuOS4n0PyV0LQaAck7B5CYEtmIkS89JkUZ1HgPveHw6t9nIBNxF8JCJ2SnfJvF8olWugdONMkH7a%2BHnbX6WwhxNOsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ea84b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21077,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (447), with CRLF line terminators","md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-04-19T19:53:53.758092Z","times_seen":267,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"1fb0a9d4670be1615dbe745bbd8356d7\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AuQJJ2Ct1eyUGUE8u4a1v6IxwBHe%2B9N51%2F%2FIokGNbha%2FW0Nf9PhJPDxfQx2sYXQpvSDL7%2BBCNiNqAJ7Hn0zVAR0LBct35Klmse1T7iEWn7tJ1v9Q2Hmbrp1blHCdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275966a54b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"cf41d159bff445828e1ea9dba51915e2","sha1":"41b76a6e211ae7817be30d052e4a642d734e13a7","sha256":"9882a286ae102ec1c390fce55fb105dfa3adf34f60f4cb0d45bd347c2ff64363","sha512":"ca84ae65aff496de2763d3acadf15dd010f4a866485676a0398e1c0f7f558ba526b8cbd24c68703f2e5744706b9a0d440a3fffcbdb68b2f9a89606ef7de62407","ssdeep":"3072:vRuQvmKEBVJh/PJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gg:vRu3/+ch","tlshash":"aca430b2f894241f23674cbd30e0b92abe1701f2d5c21fae7568e6945e0686f353a735","first_seen":"2025-05-14T13:55:44.787961Z","last_seen":"2026-03-28T22:12:53.804761Z","times_seen":131,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"f2bb34f80bc435c09eabc02d9af36caf\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yTTHbLv5vGt3IeElYQ6NTgtZo1dfmM%2Ft8glcXQeYkI1%2ByuA8VcRDYM4vr7KWr3%2F8HI3q%2F6AW4VPIXgki3%2BnEYH4joflAdXYf%2FF8pMH2u1oHCwBByTYgxJ5wniqjUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a61b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-24T03:19:30.886052Z","times_seen":737679,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-countdown.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-countdown.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"3b1c8d1f7f5f8a4ee7b3c327d7d366ba\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9somqEEzkI7Vg9ozWl%2Fu3kBekNz17f%2BZWHI9UxcTDfoBEy1y44%2Bc3HRCso5yltmRAG4k8Un%2F3nRuodlmgV%2FP7Uv8gX%2Fq1NDHrWBJoD2J5CnuKvDdj6WpNhAyKWwUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275968a6ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7464), with no line terminators","md5":"212f5ce9f95f1d2ff0f6efe93c3acf61","sha1":"c3c7f5f6899c9edb16c29729996939208e52c09f","sha256":"aaf441d85a777d30a82e3b28288e8242378b1674fd891ef37e82dd50a7d3a4b1","sha512":"b0d30c7db2a57f148ff22e8b0500a99c3e3e84a3c69b1a8d01b8fcb74bfbfb790baa728f1de73d2952da2bab94f963857d34075cc792e034dbd07d94f8718961","ssdeep":"96:hrQXrdjPqo3LIicBB9pETvb/Rw/8lT16Yg:hrQXrdjz69+lT16L","tlshash":"43f156d04e70133baee7e114bbc4271c3eda9d02f316459d63afa52ebd6e8b9102c549","first_seen":"2026-02-12T22:33:01.869793Z","last_seen":"2026-03-28T22:12:53.805683Z","times_seen":67,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/icons-material.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/icons-material.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"c857e7174909b27df06784fc024033ea\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78rrcFEzXlJ5a%2BiP8BtkngO8079CMVZKNiufbBxWZS31FlXelH3AFSe0g%2BdcVTcQPTIDmNHSnALMr1Ru4fTISo1szIct%2BP4IkQkq%2BLROWWPQscif9MMB6hinp3bg3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275968a6bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9aaa085b9e60c9e64686bdc5b503db2e","sha1":"461806c0c6891cdaddb093b0cca2eba1ef018250","sha256":"999b3ff1e204d85707226e7191480f81ab7c847d5b1ef67c1d9eb037939fb8d0","sha512":"f1d3441b88abcf8d5670943ab9df601cbafab97b77360d0d2d700fe8a38f98158e21dbae849ec432ba3295dbb39b949990dbcab3ecee25f21db56d118eb13f46","ssdeep":"768:n7xYmW5iuG6UcoJ307fxgxXWB45H627v2S6zvERXsE/fNY0Eu7sxst0OW2ho:2zgPtVe","tlshash":"3e53ddfcd94d00ab9781ea81e3a16f921b0da5fcff42195dd1463d0ea5c762339823da","first_seen":"2026-02-12T22:33:02.024438Z","last_seen":"2026-03-28T22:12:53.806593Z","times_seen":129,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"22052df4b2ff22faa67cc0a50c1bde4a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I1bLckd1nzGB0pskZX%2B3BIL3qM%2Bgodr5J%2BqnKad9z6tKZwSEW6yyctJ0YDCLQAO%2BKq1NE47eO60YElTaTDSRoJ%2BbBTtty5KHMUeeSvZnkAOz9X7fJK7w25omYtodbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275969a76b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9087,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.688242Z","times_seen":175,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/ico_bg_image_21.jpg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ico_bg_image_21.jpg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 73867\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"aea2458f6494423cf6cfeb15ba470484\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJOQZLgpLh2BiShpOmhmIp4AnkGy%2BzGG3WQc4s9H41ntMk%2BvHR3%2FpGuyDVQKHdY27HLLsMjmflIiFPEbFY%2B1BelX5xPUKUD3Z%2BXVhQDKGBf6v3lIOgGPqvaVWrYPEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275998ac2b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x942, components 3","md5":"458a0e14f470dadab5c34323e17c17cf","sha1":"2ebf6135d3b2557b40068fe7679b7a63a8ea0786","sha256":"e8c9be9e4900e6c017e17a426d7787d276594de17c45703d745a4848f740d05a","sha512":"ee4459dcf0366cba28f94e422df00576ffada051ab05b547387cd6127e90afa7fd86cc3d0f2f943c7e226512d96a7bd83d73658f77dbddb475dbb829a9c3c81a","ssdeep":"1536:NR6ylmQrNMaXX7z6/2je6bRyOOGOJKYfJSb9OkB8vZkv6D2duL9epfyE2vEjqijm:n6HmDy/2jeK3OGEE7qv26DzL9epfyFvh","tlshash":"0a7302cbb70d0daef9e49038ae4c1b4555bfacd245c0061d3c05d0adbe19397b96d1e9","first_seen":"2025-09-23T17:21:13.917053Z","last_seen":"2026-04-06T21:54:39.700298Z","times_seen":157,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"4e454ac61e7cf64e0651f57e3e7a492c\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2By4g3RiMfUrZZ%2B5VSmtHmFBvhHJTIieBSZbJE%2Fyde2a6xr2BzrgUp7s1CB9qP7%2FL9l7vFdDuxBkjUga3RCSNQN3aAh4VXRaf0KRRXB8zuiAgbdPIDRrmDymMnVrSIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a57b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"caf2bcc067214f053488ce0906bd11a5","sha1":"9c2023253751662efc2bd5f5b80ec333fe16d412","sha256":"44ce7be5b22ba80e67c3f7cc0c3682ba98f3aab5def5332bff9fef1d83bac579","sha512":"cb39a93d9f9006ece0dfe8be246af13356a80817275df7d2d2cc16b0e165da8e4bb25489654a412e5f586b8791651f8b1c115580b710d1066dc69210559841cd","ssdeep":"96:wZ3IuNurbCJNn5UHZXaa2sOTBslSpUqSnqbz0zO2brwa82M:w/JN5kB2sEBqA7SU0zbrDM","tlshash":"6991cb6e9655300aa037af84a7bf5a56ce700451ba0701bfb0ecf12183d57fa71b28dc","first_seen":"2023-04-07T23:48:35Z","last_seen":"2026-04-22T04:16:04.931906Z","times_seen":288,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/kucoin-2025-Q4-2.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/kucoin-2025-Q4-2.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\ncontent-length: 9670\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d3309ad4dde150b0b575931614efebad\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aaaOuJsH5qVEkI08Pz%2FK%2B3BdmfFghyAH3HIvIdjx3tmx7sOXCAv%2FdeeFM0xHoaJ2jwey%2F5dymIBIpD%2F%2F%2BgXkrFath4RLuvPd3fCPCmPQlQQf8OSo8fk8%2Bi6fRjEmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275969a74b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit/color RGBA, non-interlaced","md5":"9c2533073e8f452bd4d199abb0158c41","sha1":"506e9dfb938a2b093c0ecb866820d650e21d425c","sha256":"db47d35f7dbd1546f83bfbb5d79814a9b7332524e74f606a3596789eb879f2dc","sha512":"936e4caff3ffeeeaa2c14e785a953d61fa2b8d4d8b0929d080ab94414fc2ab839953f327c738b3f44082104e5321580f69a7b2d2600d9e392b412356a2d337c7","ssdeep":"192:3SsknkanQlCHJ3tPXRX5wUS0bwNlLR92DLKbJbhDIv3J+JVscXQ1WE8PgXMSkl:i/nx6Cp9pm40lLRgLKbhyQwEFPeI","tlshash":"d6129ece86e0eb4a277d7a4a49b8a3279e3716c0a483b7b528d4c9d1206d153dc0ddf7","first_seen":"2026-01-04T15:50:41.341702Z","last_seen":"2026-03-28T22:12:53.836602Z","times_seen":120,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"4c74937fac90e8cb27a7fc5575e6e9ca\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYFV392jcJXASUh15X7zj%2Bjd2V0AHLePh%2FOA6eQJlIYWJV180tOTBKWipCxy5PLTt%2BKpQXIKQ0wCZxfZ8xgl5lWb7wcaqA%2BR%2BXUckhMlmevUd1xCHvh8264YxR41bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ba7db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20852,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e3231804e3d5ba9a5e75e2f3fcfc864a","sha1":"85ba8bf46f104424fde024c3c5976aeb17141f1b","sha256":"92827490d2a95989f1163e13a5de6867ba4ec33b6dd9449c4d36d692a7d7aa79","sha512":"1cd852cc929ced5ee822db4684604dab710d7d18e615217dbb6c15058ce0c19bd339a53bf021bfb62a9040f61413aa82e6cba97446b2669be42ae2e63bfac2c9","ssdeep":"384:HkQ/wP+gdvChAcc3Dv0vlxXDKW571+bC4c99pa+0SPV1upYwGjAvf27L:HkwNAcht571+uf4Vaj+2v","tlshash":"df92c89955422c62157a633edb2b92caf37500630206a115384dbed83fbca7453f6eee","first_seen":"2023-03-14T14:29:01Z","last_seen":"2026-03-28T22:12:53.860393Z","times_seen":95,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-sticky.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-sticky.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"565a746834b1ca308b431b4904806efe\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BHEQJjry1iv7igmKf9zI80hl2oU8s8S65rhHjgimVhlO%2FbTsEKDJ%2F4nwJdjshNGKfTG%2B9SZu8zlVMZ08EFsjPqIn11y7sQxtetVVyRUiG%2BxovmKpZwlMNz5804YNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ea85b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-04-19T19:53:53.668155Z","times_seen":163,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"74ff329c6708e45f5739f227244115fe\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmlJzeiGMWVPskbqKKM345gWVWULjbWjq76NU5HZf6DduGPFTp9runnjsPZnO8AdfUQlInt28SQIxeCWXheME8XdDjQMqQoWUE6saO032ryFFkcBuiV7vv8NWphRaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596fa89b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22639,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (623), with CRLF line terminators","md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-04-22T04:16:04.961145Z","times_seen":369,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"2e4facc1c8628fb931d4fa443776aae8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiyzQyno3Kj13%2Fqgj42LaPjb5uL7u%2BZ%2BWbM3YUrB6GUWqoAS6uQ8PLqD8u1C2kUuujcWMJbtkLRKBAo5I1hiFBsbEUJ96x9YKJIAB3cK%2FZeOb8monL8eqUy7lvx5lQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275973a93b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20418)","md5":"b00a0fd5e283160549de2c7b36243b7b","sha1":"f2401243950cd9624002921265e46a518851f12b","sha256":"314ce6baaa3218eb171fa2c278d7fdf1b9872305dfa667e9cbf2df77c83a9a88","sha512":"e5e5a424ae0b221f578433025184deab93115575391a7feb1528f45e621976b3049f6bc5e1fd484b469a60c2d4706f7156b61c614c28da5bd41e110f1e49d2a6","ssdeep":"384:sekk5QRKhEJhCoJptuxOqU5SE3RG0F+D/W5OhS4uLSav4Rd57q:sekk5xhEJhCoJptuQSEhG0F+DO514uuA","tlshash":"4492c968ba5070f556b7373bf13b3b197233383a948651106415d8783abed4e222bf9d","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-04-23T14:19:22.085859Z","times_seen":2274,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"c6e781052ccd1115bb92b4ab5bf5fead\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DU3RC4Fwl%2B9b%2Fm%2Ba5vjoKhy60%2BiiU5VKhfX6Pi4ueLZ6J8PkiBuNh3BtJXEto%2FYGlvSsqWwG2S9t7DzY7BrcGmuL9k4W9A2tS%2BN9H9cplesFgf58wZEuHWXbYY9ZvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275973a96b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4192,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3973)","md5":"2f470a58760eed9ec50dd7e6992198d3","sha1":"84bd23fc02189aec468209610e80a6c2a593723e","sha256":"df34f3aef92fa54088e14b001bfe002d36ff6d765b24cbd9f47e2208e103625e","sha512":"e7675d597056d853027e43328f4443010284fbd0ae72b3faf0e7521981fc0b483e4d21e65cb701dba18a9b4e66c3322aa1f6b6c2d8e57a481d8eca135079109c","ssdeep":"48:f2O3fh38YGfZ1NpuWouwcteWZyxwpYw4enmkFfDkH6s2/wPL9geCkxph:u6XWoJcteWZyGpH4mmkPoPL9gYxv","tlshash":"f68112c7b35430a0535ba1db912b4b1ea22a35be400a105cf875d4e67f799062aa2b7e","first_seen":"2023-03-08T00:15:09Z","last_seen":"2026-04-21T15:56:51.018533Z","times_seen":193,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption-child/style.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption-child/style.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"8d8b93d25190f26fc87657489a6da7b6\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymcSNcET1AJhfn7GlPmlvXO1NtLaytYnxznNNvUx45NcSdZa3EQtBq0JT8bonKoHJ%2BMrprPfAXcIs%2FN6TJ2eNSf7eD%2F6VJviG72GP8coft%2FQQAm%2BLEamkzHcRR8DGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275964a4bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"34387ecab3438430e1db1ddabb819392","sha1":"2399057aed36574d63c95999ca748524b46feccd","sha256":"4246028fcbae512ffb144dc94ecd5d1be28f406833fa3c950a603e6f00f0a2bf","sha512":"eb9367ec5a2261705ab1ca084205438f784849fcc90f5e22c76ccaafde4c9f53c820ab0356c26809bd4007e3dc06d410cb46b9bf059662d7faaff791721d2d1b","ssdeep":"96:nbhhUXNaSCMhZCfKgX+7C1V+ZUXNXw/qoaG6cRxR/CzwQnxTJZxRsp0xy63zCx3u:RMh8zXLr+CUq/l4S26exe","tlshash":"afa186d6b6b0920078e25a647a63fb467738d417c30adfb8bad0201c9fc53c69662b5d","first_seen":"2025-11-15T16:36:12.602426Z","last_seen":"2026-03-28T22:12:53.822827Z","times_seen":85,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-hovers.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-hovers.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"3f4b51fe0717dba73b0d67f78cd014ae\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmraQfzOeT6klAOQAdscx3HoJ5Sd6n7LPBYC%2BEJfmH%2FbSaca2knT6EF74DZ3sBe%2BpIg%2BjfWHvMinXLD2lpQriItyJvLFns1B%2BOQqNZf6Kw%2FP2zjGvz5YE6CFMKhloA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a56b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56766,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56766), with no line terminators","md5":"d6b65c516c44b45530569efcfd592771","sha1":"9d5f19b0395585f4b1511dea46a78541ef4628c8","sha256":"1ee1186a1b8ce215132c03d212d96c144bb904c6073300dcf2719f0d00061520","sha512":"0afb2e45dee060247747724c66b8e44ee1a519ece0baf1f0eec28c14a9e529d02fc3fc78bf6815c14332b20c833cd738d959d2aade23886a9a4a91e204a20933","ssdeep":"384:MpB8wKwAQxcKcpBxxsYTZpWzyjm4DI6f9vC65DrIELtzASUoSgQJOQUVjCdiiPZz:vRxzHyBIEeN9XhzNKlJj5Q9FM","tlshash":"f843ed3e13081e54d3a75b48a1cfa1749f6da270fea262eb792f8b4b8316b151133747","first_seen":"2026-02-12T22:33:01.882657Z","last_seen":"2026-03-28T22:12:53.893967Z","times_seen":67,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/TweenLite.min.js HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"70b91d90a210188676c474bc53124a74\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5OWSXSsy2KoxktPXe9YTk88QgEFZL3J7JZoeDx7Lp8Zr59w%2BInYMzPFmoQEYKlBIJIWdqeNlc%2FTkj1LvzrJIOdizR4KIGtbbuWL3rZ8gi%2BGPnnWrkEkrdQaEJcCLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275969a70b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27139,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26755)","md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-15T16:18:55.364541Z","times_seen":253,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"a80a2016329da01cb5c848113ed35222\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbD45BkLn0MqmhivEVawP%2FMmvsYiGy%2BW1Tm8DObyMq2Y1jU%2FoyATQfuQ6d8Hz%2B5gw4jVvSzHuUH8u71MsAHqr5G8cUC7SZfuP9wkWZGUK0NKB1STsXurL40b%2FTY76A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275972a91b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-04-24T02:50:54.944328Z","times_seen":14925,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.931Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T03:19:36.197118Z","times_seen":14127568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/03/5-1-ct-person-1-ct-person.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:46.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/5-1-ct-person-1-ct-person.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:46 GMT\r\ncontent-length: 5610\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"802ac0944094ed74a221e249937db9ec\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxvI39xUoyi4jA0mpgaOo5M4uk5Pe%2BwaN8R31WX9%2FJjXqWmzxS3cB0XnzYRBB2nQXGuaeYpmay2nE7RpmbvrFeHTXrF3znJnYPrwr%2Fj%2FtJQpTMdJG4U10DbxNrsOYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275a0bb1db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"806dae03f08c0109becd3e4d272d14bb","sha1":"d01c9ea5e69468aaa288b2d88b37aca4947e9575","sha256":"301d85824116849476525dd5cbc65f5069482fd57eaec3d14be4a654d9060c9b","sha512":"7957bcb5e8baa414f3f1f84e8a882576af991a27c3b0f125a7f87b355a3c9e4bd530a39aeb162975fdf6eadc525d3d96e2d56e665d3291c3df6864b041c0f1c4","ssdeep":"96:yZxvH/92/zTeCkk+UeJJ+lR/0U6pNk4+KOm4v77y9bAuA2wEcMWVl:sg/zMXgRsjN+u4v77y97fK","tlshash":"6fc17d57eafd280aecc5a0b40b92ed2869d60c2329574c38f36fb021f8118b33750237","first_seen":"2025-09-23T17:21:13.976894Z","last_seen":"2026-04-06T21:54:39.738304Z","times_seen":147,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/functions.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/functions.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"f48287d7fc6827d01cc1597e56a14d91\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3sp9IGKbvmXaujyd411tnauyN8iOeaAPI9pZpxCAYTpGjvsJxxwORYBF4fnLrj%2BjKdaWtHDmTNX1YjV9IyrCqfMpPxSs1Z67UMnAQZzlfEZeIZ%2FHwLdLwQ2XQ9TyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ea87b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15321,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f1f216166c4934e1b8bb88ef8fde29fe","sha1":"1d620f5b7d5cadfdcdf9e936f8e4dd0cfd1259bc","sha256":"ba8d4cc28ed1f2e9489d85f7516b41d107009f3dfd0d37d2ca89f1504b779bc0","sha512":"a687c5cb13b1b6c0e0bc95833d35957995d9801c855064c28985f0ec910d95791691bff97b54c3133fd4dfa9f81426c12be2c90b24b90bb952b0a873469057c3","ssdeep":"192:Hd/dawE67ve+QFLaZPGvfrBPxz2LGWDI2A8fzx3cM63K7Tf:F8uvjQFLHvfdZz2LGWDIofzzL","tlshash":"5a62a494fbacb46a54773039d83e51cd663e10728b424c37fcb9912c29c15aca37ae2d","first_seen":"2025-11-30T07:03:11.310513Z","last_seen":"2026-03-28T22:12:53.832519Z","times_seen":84,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"f2641dcf293ec6a0a4f6ff15263faa3c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXt3P21F%2FyMtFkaPghtcxe7rylIUjtqND40%2FStZAAj0NcUBR7VPJ0ZIT%2By8pnCG3Cncqn5xOGqZ6r4OM9larXNahzpDDkAChZcTwhXnNGJmmAtBPR0HhmOID%2FHsU7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275973a95b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2545,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"ec326b42443a0157a582537ef34df2f5","sha1":"ab66c9ec3093da4e360b62e13074caef8ca787d9","sha256":"6c176a55f46c95137c6700b0777db49956705fe356f8ed5ffcb8b450f6d96b57","sha512":"86f59f4b483698b197a53b49a5157e10fc0bfdea56c4be44d2635f87ff7a9accac0bb5bbfc58b70ec7860343ec2cdd45bca3989b4d608f9af5e14b86a08b35fb","ssdeep":"","tlshash":"d051bc0f7410704a0adb2192d2bb1a8d633bffb81409519c31bc99e5ad7ec1e7613bb9","first_seen":"2023-03-07T12:10:54Z","last_seen":"2026-04-22T14:28:38.927806Z","times_seen":489,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"2bcf1d999450929ac2c0b89c928326ef\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Torqp2JfPAgosWSFhI0bU9qok2%2FZIc%2FkzLzxXpOxQB1i%2BjHDa6Y4TqkPHcUjhPAUxProgz2ciJUljggRK%2BzD%2FJMTEtVBoWRfzMvMu%2B%2BuDBvnbeFsinoLrThShQ0f2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275975a9bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"a5408d409564a6760732e4e109be2d14","sha1":"d3aec6649da5c307fe7e9ac984144a25262e3894","sha256":"b24666135c9845314e4dfb7cc1a7d7a350082eb9c8e24fcb5a305ae8230d28fe","sha512":"bc1e6ba15e7ab6e7a540f2acd6d9097d06e9093a8a792b8b079fad1f0686a394ab64e030c929fa7aa1d72bc3a5dae705688a38b2af8e062e6a9e68b19c808be6","ssdeep":"1536:cj8SDd8Z8Wa02mUUPxyU6WVsCRx0hX97Y9e/nkt0wgsmbaHRTMWLNMjD45cCQL:UqmotQSE","tlshash":"f873ea4cf306626a85ab1395340f178d913732602587a92c74bca5e2a5acc1e36fff7d","first_seen":"2025-07-09T19:54:12.258708Z","last_seen":"2026-04-06T21:54:39.699612Z","times_seen":156,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/3-1.jpg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/3-1.jpg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 56101\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4d8b28ac3351a86181bcca1cf760181c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVdqOlz1B2vG2Aqwat1QTSzSSc%2BQaGdsggCQGR8JNXivKazvymBJl8%2B1R8CayhxFZob6wfgFKxQbEEI3vnOLblvV5EnhtR57NI72T5vjyh31QzOguqDm1Y0jI%2BM2vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e32759a7acbb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x599, components 3","md5":"4cd8932bebc3794f5db9282819d80eb2","sha1":"5d86bf9d7def61f522eb9b33ee9c9d062dbc85b8","sha256":"ff979850a3dd684c7daaa053d592c5424791cdbf6b162fdbb82dc7de7b0112c9","sha512":"3235bc41a8d8e397ddacc1b2139eab1ccea4033517bb4a94fd9d7ba123037ff3075c63111cac54b5015fe33521fb78556e1f3805ab077cced64ba036b28d5b95","ssdeep":"1536:GIZMf0uMmSpsBZBbzSZen2tfc3fpqd/oQ/8l:BZd36Z9SptfGSA","tlshash":"4e43f22157a01250e07dc3f74b854a20da9f7f566bc84c9a773ded3f312db2028ab59a","first_seen":"2025-09-23T17:21:13.814692Z","last_seen":"2026-04-06T21:54:39.730437Z","times_seen":157,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/02/ico_bg_image_12.jpg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_12.jpg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 16183\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"18b3f37a2dfae07d8d7a42b8ad8cb31e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNzl5uZ8MB0zbQJCMR2VzDqTmPiwNTRWvCUgwLKSlGzmjP5lPs69DSLXnlVMqAr%2BTnMC0AUEvqTPEieBISliPOyZ9VwxVtx%2FFvh45hBUkOhnjFr4ztyaMl3dg58nTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e32759a8ad2b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x864, components 3","md5":"1186878c2256a14df4b09506be6de099","sha1":"875705fa45727ee610e128af394794199065c002","sha256":"aa0cbc52f570f875871f6c6a14a978dbb4df3423588fbbfa925416d6b26fe2e9","sha512":"dd9525308b0e89bf6861ef62c8bb5b55f2a79046599cd4d0f8d0eeba86dd72266fa0d929109f3e0a69796a5dc02a825b4d6ceac078248e91786db476bab2cfb6","ssdeep":"192:YAFgLoJcHU6bxWEf8gBO5MMMMMMMMMMMMMMMMMMMMMMMMMMZrQ/U7141hKTeRQOI:bMoJc06bTSHZrBJTS0LMhZMXhnuAbyYb","tlshash":"41723b52ef0250e6c40e273159da272eb6231d767ef0055e8f8b40b5b9a63e09d1eac9","first_seen":"2025-09-23T17:21:13.84674Z","last_seen":"2026-03-28T22:12:53.882034Z","times_seen":133,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=bitcoin,ethereum,binancecoin,ripple,solana,dogecoin,tether,usd-coin\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=bitcoin,ethereum,binancecoin,ripple,solana,dogecoin,tether,usd-coin\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kadvun.live/\r\nOrigin: https://kadvun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"ff4ca72dbb8774ddc2a78810ef74069d\"\r\nx-request-id: 76dc8fc0-8de9-4c8c-a214-2d5c2b4cc15c\r\nx-runtime: 0.006255\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e32759bafe71ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7412cc7c6104b62230de07483467db3b","sha1":"ee555c7154d82d5389b30b4bf9dc9b41c3f80af4","sha256":"a2ae4ff543f8ee32ac844265a574a86cd9150425abdbf678f2fc7187db866cca","sha512":"d90f131843b07e4bdfc561131b8b327212f4c9c2142145fbccf68c3bfc6e362c3c1129ccbc3c976b528a608fe054f2b31c3234cb01c385aa54479e979450c99d","ssdeep":"","tlshash":"fcd0224020b0457b0c0b0ef18c0237a0e9cf987d140c430a818cebc30d6e3ff00414e8","first_seen":"2026-03-28T00:19:14.52398Z","last_seen":"2026-03-28T00:19:25.721105Z","times_seen":2,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":28,"dns":4,"connect":1,"send":0,"wait":150,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.icu/","fqdn":"kadvun.icu","domain":"kadvun.icu","tld":"icu"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T00:18:44.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 18:14:38 GMT","end":"Tue, 05 May 2026 19:14:35 GMT"},"fingerprint":{"sha1":"2F:BA:6E:48:63:98:56:13:DF:8C:F6:07:98:78:21:D4:91:E5:27:05","sha256":"48:72:40:49:93:C1:9A:93:29:A5:C6:F5:9F:7D:41:1D:C2:ED:ED:06:73:77:72:69:5F:4F:73:A3:C6:E1:3C:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kadvun.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0COtC5cFsU9ofDIrlvXHorZ95%2FBht1c3sNdiIipPRSmwLCV6UZ4xawTU8yO1Z8hjeZfZtomN%2FGN5EgiURk%2BzIucnC5ccyF0AAh7X7XvjwA3CcGzJo1Pm95UFk81U\"}]}\r\netag: W/\"699e1227c6587573f86f9d64a0fcfb6a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e32759349612efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"b8f6f860411e6b8c980e1349571c0713","sha1":"1ec5f8f30781f4cbd68c7fae81e2d505091da814","sha256":"f7e9aac35e686842d79bd3c8dd408ee0133b7f53aae76feeccb188e5ceab462f","sha512":"08d2ca3a2d89234f1e857415dad7986320928bcf8d3c982c4ada1a09e7163c04977b7785985f32def2fb087a16a5fdeb393d89a8c6cd04132e49bb0263e11445","ssdeep":"","tlshash":"cdd012bb15c02c0e45b07bb858c5f1a9a483295669982620f59071572ff5715cac3692","first_seen":"2026-03-27T21:48:44.124633Z","last_seen":"2026-03-28T00:19:14.525891Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":69,"dns":56,"connect":1,"send":0,"wait":15,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.easing.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.easing.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"aa6e3aff818fc3bd3653acb09687c7a5\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQyK6P4t1B9F%2BsryuJuD%2BXBDgyBxwpm2Jp%2FGGI35LSyVT9Ria8BhnPI4CwSczIw4K7U0vpPfWUM8Avhg6BCHOg4NbU8hnrsxPWP8ymyTqTk8CZs7rbm1fP0KgPDYmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ba7bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-24T02:48:41.529737Z","times_seen":1004,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"66168331343369527a5d8368d71c340d\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUgbnG1Q2IRlM2PEjseHUHARDBDF5Gq7BtByujeaCblbXyjFgqCnhv3XPbkL7ddUijSy%2BzvWISXo1EKuBOQPaoC%2BrMu2r%2BWPmrFehjetfIAJGc0w6v5M9%2FvtCwnE8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275973a92b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-24T03:13:36.026393Z","times_seen":168428,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.transform.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.transform.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"27da4d60461b3dadb7e90833c435ec9f\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uzg9SxNEMzja%2FaSR0KBAZhf%2B9qq8cF8IGwp%2FuII%2FlB9AmsI5XV5lvlY1EfG%2B1QmSy9LBkg8n9%2Fd2Td8QkMQVlQaRGOCCc6ducQJ6mTjKU1RPxgtPw5nGglkuEQKTrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ca7fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15261,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.671833Z","times_seen":295,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.6","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.6 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"cad58eeab719873eb92491af380add86\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AaR7l3nP3r2OnDF8yYU%2FK8cquxLDI5KR57xAQc4ZSysvPuuq4rUra2iz7sGh7fIC8hG3V9imcvpyxGNHwXGzwym3ZhqPQuTb0AItX28UR9QByn6JbampgZCFyZbMyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a5db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60333,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators","md5":"61e8215810a2bb1b3508e130c80fda90","sha1":"caf7d572582d14abdaf4410762ca7115c2375de7","sha256":"982c1f335963f2284703682fb6251346477f078bd1f8ea9c53449b7a5c9bd576","sha512":"1368b4707be9c3732ad129116ef7a6c7c6028bdad2c2b6a29488e252e0d4ee73aeb9053167b46ba37045a042ee9d29dab9ed8d0c7ed7ec487d90a44e61505b53","ssdeep":"1536:26hMbEX0uzVQw/kubIukhqQ9HmU2WMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dz:nb/kubCs","tlshash":"ae43c67198921da82327ca81e7ec0bd49e25cd329e030cadf597321dc39e599467e7ce","first_seen":"2026-02-12T22:33:01.919088Z","last_seen":"2026-03-28T22:12:53.898134Z","times_seen":129,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"39f692d72101e1415237e8dfd3ed3b1f\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57DAYnPMocEdtyMB%2FVRq5ig3wEsRHM4A%2BVT8UdgQsRhks7gZJiizBz8A9XeDKL1l6aAH%2BLd%2BqOjTo54A1lQ2kQUIeGYNXsGSorzZyQ9wy4BLsUAEEoY0E%2FN7v8RV8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275968a64b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124185,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42889)","md5":"e5cd17674ab1e7e8f556707b9e894175","sha1":"c1b2a4a4f6fde101fc5bb4918c75fe8c2b163eb8","sha256":"a4aca4b3ad7c3976cfbd935294d071c1e276081e7a8ddeaf030ab5b5e280204d","sha512":"7da897d1b48763afd7e941c5a2ff10b58e0edbd511fcd2cc1ff9369fdd5ab03666ac3173f3973b4306c8c24c39c7e9acde15217fab961f122e091cfe9c59309d","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0KK:a66U+9UWRW7CK8s+muaydMr/IMlK","tlshash":"04c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-04-23T17:31:04.679386Z","times_seen":1052,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"be6ac329611b1c1d9a09a9ade4faa547\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qB64tsIJbxCurzUqYUcDox%2FxngiKcebuUFByhaPUJIMNWdczOcBI2nKC1QvUUcisXsIgiPvi2ehJYkxFsVfOBzVGYfaMEq3GhmgRpae2TcY%2BQNAuEVBW5fuVkB4mbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596aa77b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18496,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-04-19T19:53:53.665109Z","times_seen":163,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"31cf198915395cc2f486af64c0583ab6\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZN9eOk2ejR71YWf7C3ZQOH1JOQu97Z9wtCBapVLg8qyGOsmudEGYeg4Dn49SBvhY8cyd8lFBd7LGtumjR%2F3zxUiMwpOSwtV97Np%2Fwhdvg29uIG%2B86xxmS%2F%2Bc0AaB1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596fa88b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1396,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (524), with CRLF line terminators","md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-24T02:48:41.541118Z","times_seen":1538,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"f29ba9aeb436bc61f4a58384b6333c73\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTpaHcH4znb7FIQalvkS8w0f7REiIRIMTb7oP34%2B2HYXfiLfH9KR8k1xB1Uyr1SeYRx79dxH2DgdSc3IEFV0yyCDWKqBWGTGAKoC7ovl5n1Df1MzcPqEi2b5RxhlAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275972a90b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7210,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (7210), with no line terminators","md5":"9b87f794937c2ae5df31e5e511fe318e","sha1":"01a6d9cbe423a8d3bb2885ce81d72d287ca79e88","sha256":"545dba3956c64fe4c4d9180ce27a6bd1d99c590d2542c20458d75f9480f2d1f3","sha512":"5e20138e4664b884cbae8ffda7715c7a244b9fb5ed4273aea1580f30c44f0f75fb2872bd645086763eb2b51ed8bda8634cf5cf310479eefe5e6a161a6b5db8cc","ssdeep":"192:Kf9RlITvkEHsWRTRpHXHVrO9X/JXPr45VdLyB0I0cFz1OSmJ1nL4J+W5l9l3uX:Kf9LIlTRNXHVrO9vJXPr453LyB0YsSm1","tlshash":"43e195f32e2c2870daa3c06f38a918d44d3513d2e3601294faeedb2b34e574f561a755","first_seen":"2025-11-13T05:54:05.473487Z","last_seen":"2026-04-23T14:41:56.926401Z","times_seen":495,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"45a3838ca8c1e318ef55c67b16534155\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5pHKvuOwJmHExRNNDCRpQLaeOv7kMbQcYQTQNLvxt6u8Do9WdHWeRwQL8Cd8vA%2FNY6nKZA4QqOLYlvnCdN8d1saImt7Iuw%2F1Q%2B8HW0OBDW1l%2B3b%2B40MnloDi1rwdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275977aa2b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3902,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-04-06T21:54:39.666435Z","times_seen":158,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T00:18:44.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYKbDGUWS5oS%2F0e4CoYDOxebXC2vnisBMUJ59xsv1D6z9g6jIAjomCX%2FdeUEoAue1KuZP6OBuBBir%2FeJZS4Z1th0BEL9aZi%2F93UR3r%2FqJV6a8%2BDLQi1E2a7QU7ncGA%3D%3D\"}]}\r\netag: W/\"3d928c745c413d081b2b88cb0f1e5b20\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e327594df6756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Slider Revolution:6.3.6","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]}],"data":{"size":171125,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9067)","md5":"bcdbcf5c4f9044e48427bad017eea879","sha1":"815ee5d72311e16df60ef6fe240711dc2e9069d5","sha256":"ce0811676f50711931cabb370c433f0aa5660e931e058af0d346fc567fe79089","sha512":"9325245d8920954124dbe9282b189f4b6b3aa62b09e5bb29e6a326b75b6759cb46df05db4232f8523e5a0dee87c56f25f4638424f9783056463f333580dc82b4","ssdeep":"3072:w82teChSJgyAX/ZvDBvDMl3Ml7MlPMDxfBCVMlrMl8MldMl6Ml6MlKMl6Ml6Mlua:wX1VvDMl3Ml7Ml0DxyMlrMl8MldMl6Mb","tlshash":"9af3d632a859183b126716f4a035671eb2a7c717cb078ad8b3fcd3a85fc5de8592358c","first_seen":"2026-02-13T01:04:31.636146Z","last_seen":"2026-03-28T00:19:14.534446Z","times_seen":4,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":42,"dns":20,"connect":1,"send":0,"wait":45,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"16bfd548c070201d2c03eec37e8285c4\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSJG3sgLJGfJPPrUNZ4kwKrqudX56SkgOxQ%2Fm6yl9B0bD5URytvAKG6nUPW6Q6lc82NYN4phhpJLmeXiTWlY75KIb9r8HwbT8tPWm1%2BHjWKhrHpsAfAEgb5dLar3pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a5fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-04-19T19:53:53.714366Z","times_seen":163,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"30f87566ccb3e69a02bf9cf540420649\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fqq3jxYhWczQdn2NcljhzvkwMwH2zfQt6NcBFYWCTN8qSgZdP6gbwDnKPEzsBtTZeeeSG4A71ZS3Dm3rKq1oKCJRUiBDw41SEpP1qAWz4Q3WEyaqv%2FIOCK5rLYzSfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ba7ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-04-19T19:53:53.757615Z","times_seen":163,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"d55cfea9c716536fd857751be9807669\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csHt%2FU9h9FMHDRUOJKtHWfh6OBYIXuRgS0UZYztihf5aMq2hCoHCrzGZUIRgVyY4DmIIvGJ%2FtyYlHMHQgM1jVtu4WKD1huX%2B5mrD8qX8AvuPAit0vthkygGov%2FuLPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275970a8cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-04-19T19:53:53.717669Z","times_seen":163,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"a14a31592d392858b7c6ea2c9f916636\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hfflwRu7T8xyMsZXuzEpybi95N4GOGE6FB5%2FVmWGr622EIp4yDjU3uHsjQqYMjua4pZr2dqcFTTAKxleU2AsQ6jSI3hLaGIhLAd33Sf00QENVJuPEdTXT7BGm8uYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275976aa0b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11969,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11969), with no line terminators","md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-23T14:19:22.104571Z","times_seen":451,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/03/ico_bg_image_14.jpg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_14.jpg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 20399\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fd250b6602004aeaab2b9e0772274e08\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pnDDgecSNp40XSmJZK0ql6vji8nNkb%2F8ZdH0ZwUoUY%2FMo3G6SFfPj%2FIeidDtL%2Fg%2BCyIwUO7EejPWvz0UxFRV9Guj662czYMhNcHSe3IVy0JKqb%2B1FhRA7zqLd6rPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275998ac3b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x577, components 3","md5":"4ebb60c90b921e74f1ccc5cf12f8fa0e","sha1":"0ee975023d22ca00478be58824bec08e6caafe71","sha256":"50323967d41b7789c88c0322c8636bc7106294b15f0df21f31b22f9ea8832db3","sha512":"ede18a7b347596aca735e06be50894db65391196d61a0aaf809eb9e52d061c46f9763425867e6ea53957e1549ae9443b9c5712e1e55d49103d725a2173fd27af","ssdeep":"384:2Zkv8K4B85oTDhVvf/sHborXK81QpvntlDpcAxvF3sQl4NeKRw:2Zkv8xB8GJVn/sboDK81w1tXxN3sI4Ns","tlshash":"57926c120715871bd88da3b22c874260be659d4df525400bf2a720b5af9d3fefc2d1d6","first_seen":"2025-09-23T17:21:13.950169Z","last_seen":"2026-04-06T21:54:39.700945Z","times_seen":157,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/02/ico_bg_image_1.jpg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_1.jpg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 6732\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"eb81945f923fb5c7be44fb7723eff11d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOkime42wBtZsHmw0MOQfO0RHI7si9mbeEc4CDwC4toTPAHED6M2GPJo9FvDUWNReWC9Xtk8tKAEcDVluAxSVCkB9q09biSOKIWRi7GhtjVMDcvMkbIbqOidhvsEEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e32759a7aceb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x354, components 3","md5":"a6444d582842d7178c462499c49d2b8e","sha1":"e3f2c15698e90668e13ed2cad7cf92d848426ff3","sha256":"10daa070bb1c3cb4aa492d52cd7e33c47da45e041684e5aa1a921365384b8949","sha512":"6ecbd626384f0d9b5eb5102afc1f857451e27ac778ba3905f693eaebfb024a9c360101a53142497c0e3f1e15fac4d01acb136e5228ae2c4a963fea2449c192fb","ssdeep":"96:k/hoJJTgqetm80GkXBvNhx8XoVlxHR4xerak1HZRZ85vE/m6Gzh:T4qe4c6xooVd4U7g5va8zh","tlshash":"edd13ba3d704a267c41d173140cfbab2bf661d62ff90072a1a9944669bba3a07e43f01","first_seen":"2025-09-23T17:21:13.863238Z","last_seen":"2026-04-06T21:54:39.716453Z","times_seen":157,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/03/3-2-ct-person-2-ct-person.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:46.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/3-2-ct-person-2-ct-person.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:46 GMT\r\ncontent-length: 7534\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7aca8608bf1ab7855f307a1b84f60052\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i06Kuu1IcE%2Fi5Sp%2F7IxGXVPWEV9p3Dk8lIJXoLQcJHG2Y4ZfKCyUF2aY%2F%2F8wXclVFid5vdoK2uvndQY21R3%2F5eYbBR42i675faVi0uo6XP5KMxmSQTrlHNDs0ukTmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275a0bb1eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"320dc3eb07326903bfbe06fda8242a05","sha1":"da0ec61f0b0d5ce4b6a93983d5686b3bc563aef3","sha256":"f59e579de32ba2c8469073d12ac77c54adc8d5a1f43e03e7921351c8469b8037","sha512":"9f0d5be981bc53aca2288a1f8a8b53878bfcf5b64a40185de5209a8d0023aa53c7681719019bfe9f2935092867f2fbe902ce00023d2e454880a3c238ffe653e6","ssdeep":"192:h/CrfYOk55HplUhIXxuflDv8N1zwNmCZtxV:hcYOApgI8p8NKoOf","tlshash":"65f1af8dcb58042fe5a31233c51fee375f6a029936bf19e95a73b2c6540b228f0718c8","first_seen":"2025-09-23T17:21:13.840373Z","last_seen":"2026-04-06T21:54:39.667104Z","times_seen":147,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-additional-blog-1.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-additional-blog-1.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"41759797bb3f2d4f29263f5918890c63\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukcl%2FgFSEeL0RIKdPLN%2F7eBRZYnyQWAAzTWWK7Bmnuw1PNoKliPD6eXLxM%2FjY5qdNd4qfuqSOcp8%2FJav2F46JfWmG1Z3fvfimNTwaKkkltnTTKtDRgSSRlFDof%2Biuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a58b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13309,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13309), with no line terminators","md5":"ed70b1c891eb81c7187f50d30dcea083","sha1":"8a3b1707c86da119b85a4bfc9f34f608c0f65cbf","sha256":"f56e83df98097c74606f63c35b56e0e72a20de0f194f420d4df31e2de0f4fe45","sha512":"ff70c0db807e4b97403b0a7ae6f93ebede295c483168f04035403403c44845d3cac2fc1bfdb4c4c674460aa2467b8c2672c35e03958d0a453a70327136f2f167","ssdeep":"192:VBF1xuNlhtllyNKjt/XkyDcWj8LOQBWPOIOIBMpsy7qO+yLJYmAbA1RJPK6KN3OI:oNljllyNKh/XkIusy7qO9LJkaIAtl2","tlshash":"7952bc25146e693eb77b61fe2decb0a41e5ba8b3d7d15968f5e6c420c34c24e30a132d","first_seen":"2026-02-12T22:33:01.880514Z","last_seen":"2026-03-28T22:12:53.883671Z","times_seen":67,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/css/dist/block-library/style.min.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"3e52e3068d99f20a4128e106095b318f\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMxTHJOEou09e5JN3VP4%2FpZrfNj1H6AwECWWEv41UnokPJ0Vwm2vhdHwiE3GwO2jWqvqBlB94Kxq1FqWZzWYs9US0bRx9u7tafAFZFGJe5HyBBiNv2eXiaPotLxJoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a5bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-04-24T00:53:02.543373Z","times_seen":20954,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"a3760a7da16ce062c8ac1bc82b414f76\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A42gLJcc8T1Sh88UrSJZ2CNA1o1czbV7GG1BvCpQUH%2Fce9JuZP%2B4Esrllzj10ObbAaqVfnh1JlHqX6nsBQuhUZAmc2PZ4KojvBFgiEgAnxAfg98omua7aRFBGK%2BG%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a5cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3fd2afa98866679439097f4ab102fe0a","sha1":"dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd","sha256":"ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b","sha512":"82811ef42abd80cbebd4a74d35475fc3871478fc25a486b08bb7e04921b7824db56c56b2191e9ab56a421552b483a2e64f966396711e5f248afae9d1ded22cb2","ssdeep":"","tlshash":"12511164660028504bff92d77ea9db047b6e7481ce1faf97b0c21a3c5b786851223e5e","first_seen":"2023-11-16T07:59:28Z","last_seen":"2026-04-24T02:58:23.960368Z","times_seen":74725,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/exchange.svg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/exchange.svg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"aa0da66c1310d1f43e7d90a7d1483ceb\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsaS7DkhL0at5bFyUnBQN3JLf8OyT%2F9qdGlMZQEa6rx1cDCKxAAn2%2F9vxanjf48wkDVPB9guZ4JNBLYm2QV74u6s7T0eseWeWUkcd6HU9gGiWoS21Yamy%2BMez9bo%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275969a6eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a69a67f83ea54c19898a3eeff671a312","sha1":"452cfac167d7b3848110792e04aa7cb7bcd5ade7","sha256":"cdb5e844aacebe4a6133defb09a2749451bcc360773de958cf6fa92aea49b498","sha512":"8c66353844ce34b164add4646e363ffe5e62c79e8f24406729636698e111d84b5b1fb9764db974f949a40a4bd526d68b3330f31f6593d746022167bf6cb0143c","ssdeep":"384:Jd1qObtPD3k6xzkUhrlyN9/1ErNLkeBgV0Sq5rcLFZYz90vnL1tdvorJFhTH9N0a:QcPD0Az7ryNELkeKqGnt56/PN0a","tlshash":"17b285cb473881f4785c53bc5a7a2ec7337564ece4b1864c937f99046943eaa2728ea4","first_seen":"2026-01-04T15:46:29.930321Z","last_seen":"2026-04-22T06:04:38.449747Z","times_seen":96,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"79517631503b0ef8e65478b9dd840aff\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1W03GBRLWlfbfqfZwusPwaUL7tRRbUYhUbqKTrM%2Bab6NntfkcIjEa4LyFnYlRp0Grt0qVg%2FZxCgIacg91T3wQUd5hHyEdn%2BOWr%2F33DDdyjjwDLowSZNxGnYEFS1Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596da81b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10332,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10150)","md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-04-24T03:13:36.011498Z","times_seen":12703,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"e64f263cb15522fd1b4c9fdde09e7071\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4P7CDXwl8jJyvGy%2F3Q47siifPX97MBXnf7B%2Bz7TahF%2BQz0LfkPKJHYRu7nCfDj6FgI9nCAQTeZMfJP7SxQqDHSW6xkxu5fJ8S5e1qQzmvFIidMAA4ZIk915cQkB2pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275974a97b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8853)","md5":"5ff487a413612cbbf6bc391c10ff7bac","sha1":"acbbd8a96ecad33158f29e45afcd41e4b2dd6579","sha256":"357ad057de8ffc0fc9df301dd1873c3d482e926791195ee262da3886269f84d8","sha512":"9af6cf849fcfe777ee1daa2e5ccd79dc1b11013470db78b4c165a81573ccab4f6f1757082cf0fe643c95afdd42283ee0ee89522923a0e1c1303f5c07a8f3ccad","ssdeep":"192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu","tlshash":"1c1251897a0574220bdf80fadd2f834aa337582c640640bdb0d4d4ed19f1529637bfb9","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-04-24T03:36:56.974599Z","times_seen":6513,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/02/ico_bg_image_10.jpg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_10.jpg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 101341\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"54ad602982b03720e4f27e846bf66008\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8TiQnheA2e%2Fc6506i5fQ3Xlr77txuDKtxrZa4P8WRZJ29K%2F0aj2aaiKo0%2B2qgUHxQTLzQldPdOkyHTu9i%2FRSpSaxUyI0PWykar6%2FHxPjS8d3QyY8QA2198ygJST%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e32759a8ad0b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x965, components 3","md5":"38f1030f349797feebb0242aeb9b4866","sha1":"6fed5f414b490e6aaa9a7741fcbf00ec582554eb","sha256":"06821ecc09227f1d795f767ac38bafc8e3f5aaf3a65828976100993eee7a3248","sha512":"9bce33fb67e3e8b2cdad7efec22f397f74362fba7255410bd55198c76a48e66d227b5a155d0017fb2d9824f6a9b06b8c9f8b2375b4e7cdbb857603350b37b732","ssdeep":"1536:NyRTqmKXoEjSN1XNoiWFbPWUvJEhGt3j+h5vXCLdGbp5U5XlFyV0C3pnNkr0wRT+:NCTDEIFkPTJE8t3j+h5fsdGdi5aLL","tlshash":"6fa3121984803d84f59d4576e27edabb2e1e7cb1d49c6b3f79c1aeb22d131c8e84141c","first_seen":"2025-09-23T17:21:13.865526Z","last_seen":"2026-04-06T21:54:39.680993Z","times_seen":153,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/03/4-3-ct-person-1-ct-person.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:46.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/4-3-ct-person-1-ct-person.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:46 GMT\r\ncontent-length: 4330\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"183dccb4656ce9001dbb7daf4489a2c4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mx1PzkF%2FPzxUk1wCzCW7uWlO000P2fsrFE3UudhE2m15ryCVeycg9stfMguYiLXIxtGQXIbra0jBlnclOz1L6Qa4YaHIbw%2Bz8j%2FukdBis8BfaAcD1UEExKMdlOF7uA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275a0bb1fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"71f5c1c49263d5057bb25f58466fd988","sha1":"e4c41617bed780a190cf1ddbef03327ea9e943bc","sha256":"f0e1503933eefca5525489e23b5e0aa6ba9b381987dcbe50fc2d0da6267ecfbe","sha512":"d4d18b9cd5839abdba8dd83a773a2eb1eb5b8810179b85ebc885a5ac3d8f29e6aa5a2960ee529b06cd4aa895a0532baa5cf9a71d99b78425f52a02c64796477e","ssdeep":"96:y15qh/dTsZh2RDpyz5D9P37IY3OTzItfcNC23LytdeW6:25qvsZQolLbOTMpcNC2b0dE","tlshash":"82914c2eabd48e25d9e92e31dce9f64aca5715f1078993b68dd3070f4d0a20f54c2283","first_seen":"2025-09-23T17:21:13.896993Z","last_seen":"2026-04-06T21:54:39.717133Z","times_seen":147,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-preloader.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-preloader.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"60f9e5bc9a217740606bfcc3f97c7ab9\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcyMzlAEPK3kXfAeK%2FO%2FKTIQIWVsEzxHmfuKfPJ6eMNt29gUxLdgwQvgfzXKawi3CRZgKuM2sXfPTAPxUbx0h2C1O0BcZmVc2UnFExfuNtU8cyM8oKaMba2mvAfSNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275963a46b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f67d979c93da4ae5cb1ca62261d19df4","sha1":"8ad553fb8f726daa1bf40c730c0627806d530adb","sha256":"567319f85d81a0b9d661c472bd31e41854318372040fae4d140eb96301650b37","sha512":"a15e574490b23878614345d2b82d17bf4a4893921de79c9b9598b2f32d56a66814e57d573ae42fcbf6bdfc994ed5900d708e432862df9dd45f22506a0a4e1156","ssdeep":"","tlshash":"5b6168b87965c1825622ef19b7f44e300fd872739d56c4b7f0922c1dc2c06ec9a329ab","first_seen":"2025-09-23T17:21:13.857918Z","last_seen":"2026-04-06T21:54:39.721387Z","times_seen":161,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.6.0","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.6.0 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"39896048c288006e9b0d9e92ad0e3b2b\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSWjkwYYM2W2F3puKn2Imktn3oe1KcryLkT8AvM7eeMq83PgB29hwdWnODNTHgPECgD1OQ5PT30Uz63W1O3SHdb1rVC3cS2b7UsD29NtU5c7cmJfNas1pa3abeS5yA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275968a67b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"7ce23df41f0df13d8aa07058990195e6","sha1":"c01b09e729d3e094c91a9baa9a6e4a3c2df4f8dc","sha256":"dac931a95dbb1bd18a6440cae735af9d8c52b383d426379c3bd9520ce375421d","sha512":"a400560f1b2a3aa1064d70f64a26edef459950a3059682d9ab412ef81653f5ba649515ff34d234b1f57c87b95c77d23902b4f54105fbda91082ec14998714905","ssdeep":"768:bxzNdWjDhTsG3iD4Wjt3hk2wnKicP1PVW48Ycs+lx5PVGm7IsgpspzdlICjqC4B9:bUHuUiusij8","tlshash":"d5441360b9400697a61f6c7c3594f739280776b2d24e9fdf7062ea60d6882cf752e31e","first_seen":"2023-04-11T00:56:32Z","last_seen":"2026-04-22T14:28:38.946852Z","times_seen":499,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/coinbase-2025-Q4-2.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/coinbase-2025-Q4-2.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\ncontent-length: 10706\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fe43779c22e7fc2d20f680d1fb07254b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6K4ZrlLtbrBUZRFY5WVObua5VYJlB%2Bh%2FGDA8CkaImdUWYY9%2BXtP%2Fn1difXBKYsdQPA%2FKb7W2mfRG4RMu6HLuUBC6r8fcx%2Bg7SupNoFpawidDpAGxRl%2FhpVpgGlWmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275969a75b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit/color RGBA, non-interlaced","md5":"fba92594ac075f3f248ee46d2592498a","sha1":"20c7aed53a79c8a1b1729f9bf9350b670d6630fa","sha256":"7e0e563404a4c6459c2c7fe6b8e20807427d5a0267afb34ab3dc825313a621e2","sha512":"c989e3d4fa8f68d88cf1ef249c4a5ca99aceca6b5375e4d70fc0ae157ea30944c3a08df75b18c2a171af913448d082a5323a182e9dc2e8e0261e8d5831169743","ssdeep":"192:3STkngUgnwaleF0gGPZsAg67egPsOU3tgWb2XiXx0Lmi:i4ngUPqiKP1sdHbAiXx0L/","tlshash":"0022ae0af48dcd10930ed55a99d26c334ab76184ffe1ec2e94f818a7607857a8c3c9da","first_seen":"2026-01-04T15:50:41.385843Z","last_seen":"2026-03-28T22:12:53.828094Z","times_seen":120,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/raphael.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/raphael.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"846cc2a9acab258ca3715d84c0a5226d\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIoEn5mOiKMNhAfSoeKVzf0CtYZw6zipkp5jWuZ8tq7xa1dLs0%2BYW8tz%2FwsgohmfP6z5Nxa5hCnJdtUDBGaqTGLxtxYHwG%2B21vZMbDarJVxlbxzBl1p4gulX0LOggg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275974a98b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60293,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60079), with CRLF line terminators","md5":"32e8807da0ad8402be1be8bec9c5acee","sha1":"e9d46ef5cea4b8c425360593409bf82a66d61fdf","sha256":"c717bdad5e5ddfd453c9872d1efd50954f553e0d4cc5555fc477f728da6a3b5f","sha512":"42fd11a0d902098ad1cd05ea62389ac954ba87dd4cf80918911b93a2987c714aab3c2c8a1e43dd6b679f82f7a8564714b649b7d98e1cd1016c1a99d8037d21e8","ssdeep":"1536:dQYvQregCAWnAwA6/ebeO5XcK0/UEe3vdF+ZoQmCQqMik3qT:dQYs+O55D+Zou","tlshash":"76434bd933c530a783a5b6e1647f1607b02ad898b64d8c5eb108c1c6adb88d5217bffd","first_seen":"2025-05-18T21:06:06.138845Z","last_seen":"2026-04-18T02:31:12.268921Z","times_seen":177,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"9e0aeea0db4d034e07eb911c1f4be07f\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NICciuxygfsOFvujrIOkO%2B1yFe7TuZZ1RxulujauHEapwOCum66jW5Z8usZLT6HprQk5UjsWLs%2FIi7ZFzlnMf%2FaY37DvdEdmH51nuW4sKpD4FHl5CkqWnn0RG8M0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275977aa1b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54800,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators","md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-23T14:19:22.105306Z","times_seen":421,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"f6c2e03a9f180431a34637f4d01b3f89\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Xp94sMD8RPTZ2MMsOpxAP8EcvOBM5Efpt4Rd%2B7UA6jR7Y%2FXMZgUkh94YnFlLxqYboTyJdVgHHKg24AIXonbayI5niS3OTR5lNtx7URgH3EgiTAFwZQ%2F281qcgtbwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275978aa4b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6555,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6555), with no line terminators","md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-04-23T23:23:11.68012Z","times_seen":4989,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/team.svg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/team.svg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"00d4717a3cc77989336f4ce63895afb3\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XmOU4zECcrO3Z3Yt0kfkfdOMb2XR1UFCncOM1t23hJGDGQQji7L2dH9D4lpfaoZI1OQeag84fURdBUIj4CwUdvLqcQgY2rvxTb1oDeMNdXtVIdtbM%2B0WteAshOY4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275969a6fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7c7156d81ed785d5baf27783fd8f1d8","sha1":"021643b5ef3b3af8dad778f247e0cbdb4c24a601","sha256":"497b759dadbdb054e60e5773b8e3e9fb0ace4b6b7f63dc82077db74f8fecb3ce","sha512":"80e4945d82045102cd2b2174bc3b72b4f1b9bd099fe327183cd9bb2f249b206143de155f3816ca8e9efd262da65fb2a4332b79f656a4bcb79d1694d96ba920c2","ssdeep":"","tlshash":"3e7165e9cb3d26bc94d89b1ec2aa2e0131a3180d75e34b5c738b95015e22f599f94cf5","first_seen":"2026-01-04T15:46:29.959104Z","last_seen":"2026-03-28T22:12:53.873568Z","times_seen":82,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2022/03/binance.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/binance.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\ncontent-length: 5113\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a92b8b5b7bf4b52ce954d7b308c36380\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lan0bZbW7qiC2%2BvpiEtsuYiOqgWRDxB0VAtHRnn6Ck9Z23nHxmfMhXsfVGoewO7LnZjzlIjBoXitX9UvjJ%2F%2BvZa3ZbbdzTlthMkvPS7Ekw%2FTvQXBUKzJoREjn2VBiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275969a72b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"9d999e5d22850968f7dd2d0841627bcb","sha1":"949a9ddbbc2832957739c78cac64fe3a74f12aa2","sha256":"89816f3f685191889ad1452c6f00a1a009eb37d11f4947478b4eeca0cfaa1da4","sha512":"b7e0a01c047c1bf2a7e212fe0e2ce79eac1cd089ea778551b3fcfdc8fe9925a7b704990a967c07bfec1d6d7c3a1d7cc685cd9d0961f18d146e48f2ba23cb4e8d","ssdeep":"96:SSPZU/7ZxI/GhTn1roDcq4Hn/4h+5F2aRnbYitmn7aQQbcSKyFL5X9J:SSxu2GroAq4H4+FRbYZGVYS3Fpz","tlshash":"eab17d7debd825929dc72a7744f8255c0b344d9b349251888a98360c2d7be380b80f9f","first_seen":"2025-09-23T17:21:13.859538Z","last_seen":"2026-03-28T22:12:53.807504Z","times_seen":145,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/svg4everybody.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/svg4everybody.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"0ec27227a7e4f374ecaf5c51773df2d8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A2bYzUxDmrh11U8MnjHh5Fe%2Fap31Okv9pyg3GSE%2Br2%2Fuhc48lQvr7fv9lk%2Fxqclskh47ZjsGigpTuakpNOy48pL%2FBGWtcwTUgfmPRYqvjj%2BnIUJnHekAVQL%2FfNARBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ba79b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-23T14:19:22.088644Z","times_seen":331,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"881e1061bf4278c6903b9246f18cb765\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLLYnZjDemWHs4l6gKIgyjI3sY1PD556WFpqLaH%2FpEDrAG3lQJVvvcILTHUCmF1srsugZzl2stvIGhmLpm31Fgmn%2FM6GD5eL0gX8TP%2BZ60WceiVNoE645K3nvd3ITA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596ca7eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15556,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9e48f74ff2ec65ade3b0485ce35fdf51","sha1":"87041cd6aef74b8f0ab3d1ae2e03e2ca0db14cf0","sha256":"d5e2c551ce5c731d97827275aadc2c47329529d8a022739aaa306b8d7344f802","sha512":"3f8bd4bb1f29d83293ef4d18a5db6d7d2d85e3dd5604b9b14f1463ccb56698dcb420e1e79eaa4734e36b8cadf353f26c7bcd4ab272e59ce472d2ba8485a06d45","ssdeep":"384:+gpDy3SLtWmOeKQCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/EfaQzFHKZuxs25oohbZxG2C7H","tlshash":"af62fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","first_seen":"2025-07-04T07:44:29.938072Z","last_seen":"2026-04-19T19:53:53.663165Z","times_seen":146,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"eeb30d84fa04c63738963d0e6f6e6afd\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bm0Cy%2B6CW0xBp66z9NGoLgY0QTR7Czg%2BEdPgKsPyTTMOM392xtnIY%2Fp9Ubm%2F9laAMyNreI08qocoRTqz4pBYXSepzmnIUv7kvdDse%2F3aZepYuSrW4NhpyLq%2BCH4A3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596fa8bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.751953Z","times_seen":175,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=usd\u0026vs_currencies=usd,eur,gbp","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=usd\u0026vs_currencies=usd,eur,gbp HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kadvun.live/\r\nOrigin: https://kadvun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"b31baaa751ffc4afb40394c36e2c12be\"\r\nx-request-id: c7003f3f-509a-4e1c-8217-ab01f0bd810e\r\nx-runtime: 0.008185\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e32759bafea1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fecd85e37cc119a408d1aa908654bb67","sha1":"88f419f7f1a745cf95d73b78db223e3bf0ba4fb8","sha256":"664087206470fb597e11e61b714ff0d656cef74ae2dbf890a9fcca4b095b364b","sha512":"d10285e002fceed7f82e52cf9c53cf9e46032dfee03c77f7f5ea627ca9ed862af2389e30736bd879c44aef08861f91e1c33c844f5db7bbc00d90cfe0f49c2a43","ssdeep":"","tlshash":"e790020092a005275914786a1c066344e453a7555acd06012008cc45149e0ff60060ea","first_seen":"2026-03-23T23:33:49.689373Z","last_seen":"2026-03-28T22:12:53.923557Z","times_seen":17,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":30,"dns":3,"connect":3,"send":0,"wait":145,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-widgets.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-widgets.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"f361f2771c365227203228e219939483\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANQn4SIxc5t98JdrdHH4KE%2B%2Bv9kvXHuIypUkBugkW%2BUnlUtgC0v3nDQrGLcMK6FSI1mBNPwmjaS2sD%2BnC5gslRXiaQsJx455axFO18tYK8KXb50dtb5aldqf0rH3bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275965a4eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83308,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93bdaf73f3fc24703ae635e8a95d20b1","sha1":"f8ece8ea1556a3b467adeede8cba565448f20d8b","sha256":"d36e14f8e75d0bf691403c0d5b463aa7d292697f7e46f7cae9709b877a777a24","sha512":"df032802f6961ae979500263eb8d33f74a5eab81170db6363f899b60b7db3759082cd8091bc8ea73981c97a21b0171b50de881491e312cc8861b6f22d1ba7f0f","ssdeep":"768:NjO/RpmKWcIo9x0nk6kAkikmJnk4jdO5B2lcemJFSmAe68:QHxok","tlshash":"488353aeda1915467237991967aa7ea1ef9810d7ce03096cbed073014f7a4cc0a73ecc","first_seen":"2025-09-23T17:21:13.851769Z","last_seen":"2026-04-06T21:54:39.660815Z","times_seen":161,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"4246d10d2b2916f8ac319ae99cdea463\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gR8jB7m%2Bykv1CvRsdEFhgBtYldlgm7gfuy%2Ft3lLpQvMQtllLc%2FoReWMJd8iKhm%2BSOrJrKzUgKMs2mRrAj9b7eRz782feXjacuslI1D7jV4Aa%2FylYD4%2F47bkZtv2Ahw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275968a65b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":860,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-24T02:48:41.537456Z","times_seen":490,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"4bc48ed8dee10ce47fea2c45887fece9\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojt4Z1IiZ%2BJOLKn0k733%2FdBLcaVcT4Ak3Bmh2m4nLzmt%2Fe08vPP22mNZMXi9s9PTJ7yMM%2FAmhC%2FEN6TcFwNRhn%2FfEseWmqbnajW9Pl5Z0q0G0dbSu%2BuEFsjIHHMBLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275971a8fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-24T03:20:59.768205Z","times_seen":131350,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-content/uploads/20kwarden8/04/3.jpg","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.571Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/20kwarden8/04/3.jpg HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T03:19:36.197118Z","times_seen":14127568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/fonts/material/materialdesignicons.woff","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/fonts/material/materialdesignicons.woff HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/wp-content/themes/cryption/css/icons-material.css?ver=6.9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\ncontent-length: 88492\r\ncontent-type: application/font-woff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"397de425ce246af3fde97812758fb5b1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6cBFjtHJ9bML8SxYV5hepqkMnDEyZSwPywylwIO13N5Lsx1mXMHhgvJT%2BvW9RWo50dT69x01EWwQMAEe9BKqbjivrHs2F9u7M%2Fa45v36ae0uDQgSRG%2FC0KP2Xo6zA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e32759b0ad5b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88492,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 88492, version 1.0","md5":"4957887614ccc9456a40789924f4df2a","sha1":"71da0b3f089e0c502a25576ea931a25204819c16","sha256":"4d53fbbcf651e6ed2e9dd1a23b5e65359ff8368ba1e1c4fee3ef499510c51397","sha512":"b29455016e5707434219d839c59121b29b290e851658a27d406959a037a4ea8b08134d2ec2d1ecbb4607218cd652bc11d511e0751198565f6f74a412c9e0f8c0","ssdeep":"1536:kipw1ZxRc7lb7U9Y/yMu1pCSSyvdi7bvhmSJx1+Wb+0MQhDDDP:3qTDc2K/opCSPi/5Rx1+U+SDDD","tlshash":"05831223abcd8947deb33cdd52690cde2ea198dd1b0722437998943e82c1eee7d50147","first_seen":"2023-04-11T08:34:17Z","last_seen":"2026-04-24T02:48:41.52026Z","times_seen":586,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2024/05/cropped-favicon-32x32.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:46.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-favicon-32x32.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:46 GMT\r\ncontent-length: 1337\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5921b731000f2a3886d6a1115ec06b93\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BW35nd%2F2jNjqtE%2FglJT0hRZUfSBp8MvgRxTc4Byng2YEYAu4e4xuwWqBy3GAltpu4q7G8HYsrTJmeYWZhJHvelxgn4y7uwGLW9udmlGi4jiqDBZcxfrjQFhDURXbTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e32759e5b11b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"401ec1ee6cb4d94f7555fe9b6d23c271","sha1":"d67908fffac1f44ee61d9ad2f3480ba1d79b504b","sha256":"e294708c5c5322d9f09b56713ed987dc6a6fe6de34c36221bc784ebda6c7576b","sha512":"cce72c9894fae83941349d1f79b02a9bfcb1ea276c8732a625153ee89011ac6f3d40a021f4a3af20be88ac9a0e56a6918e1477c24f18346eaf59bb58b3f6c048","ssdeep":"","tlshash":"9621d85104d34c806763e2a0728b22d89f5a3e9c78352c3c1029d6ea19f2d7eb6f63c8","first_seen":"2025-11-15T16:36:12.62441Z","last_seen":"2026-03-28T22:12:53.924292Z","times_seen":77,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/03/3-1-1-ct-person-1-ct-person.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:46.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/3-1-1-ct-person-1-ct-person.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:46 GMT\r\ncontent-length: 5624\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0e471bded8d37dd72f4c2ef2b3519ce1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfyKja5oqaYLgI3JJxyy6heC4giclex0Dbt%2BIXVmna5ptTKzSCMSGsuWjGRVja9XFOlaXzfNf3rF%2FGiktAtdis8UNFe9sDh%2FAAQpD3S1B0%2B0npzyEpk%2FhH8U0hVHfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275a0ab1ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"4d7fae2b69d7f2708f23ea6f60ca0cf2","sha1":"56c4dc2418ac289bf07ae1c0c6f2099d2d377fc4","sha256":"c02de1dd4b4a4accd2e314cb2ca0d94996feca82fcc6f5627ba6628359c958b1","sha512":"f0b628dee6cfc292b14719879cabc481d59e22a6abed1e1319e5c4d03f598334651b275cd022dfdb29ff58f079bad1aad4e79eeb2f79fb29f7a7906f7f039e54","ssdeep":"96:yhWFI+nPzb2DyrShOcikTUXMF90AswesSOeQ46mgvXGlsK6c:YmIUsgtcfUXq0A6snD4jdF","tlshash":"68c17e6559b6b870c482fefd83b0cbf581b64a1d1e150b2f5df998a16db2208c9133c8","first_seen":"2025-09-23T17:21:13.926126Z","last_seen":"2026-04-06T21:54:39.68363Z","times_seen":147,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2018/03/6-3-ct-person-1-ct-person.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:46.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/6-3-ct-person-1-ct-person.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:46 GMT\r\ncontent-length: 7703\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"710f027649af935a40ecdeb9b1096da8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5d2fGhsRdc%2BuuLRiRgaC%2BRA42DJhDbJeNMs1pqtDVqQ25XKvmHwXJ9gZovzZdAifujAMwbXalaqmqR%2BXPELLejBE8p%2FI8P8g%2BqK9MKzGIjXH1xvo9nHIOlaAkxdpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275a0ab1bb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"139587ee1590b65ae116ee0b53f408f3","sha1":"989d2d9ddcb42b2c723f6fba4be89d21185c4d1f","sha256":"c00a1808e9d3c3e023acb957df85c6c02ffd617ae7e2a9f5e733541fb727ad61","sha512":"7ea5e9db4529c83ed6214fc37539ecd55d6477ffe38fa285022c4e72705bc758f0650edc2e8bd4bb951a3388fcd44916b5d038bb2eeebcb5248ee06ec3cd5139","ssdeep":"96:ypL2iKWJArcGvbGEuUZkXw51sRJbgFeIo3y9jWaxhLMDDO8p0xo4PX5M52iqnIpx:u2YQPviUuX1B5C9Wa/AJpUUchNBcx","tlshash":"b1f17d85c2139025f3a693377df7856c087e4cde9b63afaba25356145c82b4914d888f","first_seen":"2025-09-23T17:21:13.830132Z","last_seen":"2026-04-06T21:54:39.73292Z","times_seen":147,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-vc_elements.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-vc_elements.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"8b9c03bbec980274ba301800761cb825\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pJ6oseqogOr%2Fjr1U8zPwB4lpVafneddn8V68B5fS7BTEE5rf6bagDjbckN8Y5C3uT5oqJZPZ%2BwBGDSONRRUCsKZnJMFYbR6i29qXX67dN6qwjRSJ7g702eGqk6thQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275967a5ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"84108daebf35697ccbbb809d0c7b7926","sha1":"8a2fbbbbf1ef10c61e0f167129fa87c311b6d603","sha256":"eabd0522a5694f6aeefbcc9e76e6951e6326da3436d0b183e737587ded428e86","sha512":"7e27e282ba1b730ec9f11933231fb654ddacf1f17871ccd125ef521b00a3add351f784783d37e208fe107058e5a46f360c604c1578984e11ccbe55d2e0302a08","ssdeep":"","tlshash":"9a61327434a63dcf76036f8a67bb622d5e0694a4fd8b2eadb7dcd170e6095081830196","first_seen":"2025-07-04T07:44:29.955259Z","last_seen":"2026-04-19T19:53:53.743314Z","times_seen":163,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/js/diagram_line.js?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/diagram_line.js?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:45 GMT\r\netag: W/\"c294c0fd7455462e693acc048178360c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xXgyBRrWTKxuOExztf8s2tOluajMkl8k3v0gCws5Rtzs%2BKlIoY5z5Un2ObDhs%2BwOKLTpcNNoxK%2BZwwBWVCPDuneZI6AoZ9EeuyLmIWrFm0PdK8%2Bt4XT76CcCsxjCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275975a9ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fdd5d3007f950d7ce06ded6ab40eba01","sha1":"fdc5e5909c613a82ff03de097b74dfa6028af50f","sha256":"8310f3b925f0513da6d9d90f28af1eb51a2f3326df70056e6c0c958c20b8c728","sha512":"04722a163a5f9f9682ea4c9717dbd00d702fe894eb38b74a9b4722332aa0311fb009efcaaf98f605d5bce8bd69549a223ffa0fae970d28bd1f80fa4a08c3c561","ssdeep":"","tlshash":"97313294b029644d1b7b2321743f4a0fb53bc453b52a90d8f9d980a33aa48623323d6c","first_seen":"2025-09-23T17:21:13.947389Z","last_seen":"2026-04-06T21:54:39.698242Z","times_seen":158,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-reset.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-reset.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"9ba70fe8b234178b5292238adb5852e2\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dct5vrePG7xvVEr4WzwRAB%2FlIbd3%2B2tEvuc7rHM057mju2n6DQByotOcaXNI%2FViQ5HBy22vrExKP2axFcCrv%2FHIIAOuaW63WvAN7wUYzqlHqcgGsmBeo743KWw8ygg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275963a48b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4097,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b3c589bc9c1635c3a6679dd054a4682","sha1":"6ad887b2f4dd83c695bc661ff1eded4131d3f632","sha256":"be4f6284aa304b9becf68fc6c817f9384ce831d9d14f708a1211c4e59c3056d7","sha512":"f7e4cf88a10192ded4d9289440acf82a17a2962b0370bc1fe6c33dce258a91d67258a06a149a2d641480e082a446b7845498c5b70147e4b5a1781ef168f258d3","ssdeep":"96:GTBNWefkzbdR+tIMfW/5cG1JqBdDEcPTDEXLgEH7:GTvW1d/MfkDuDVDkgEb","tlshash":"ee8101fd660012cc93229f58b7f2af645e1001718e1f817ef890adad92c69152af2776","first_seen":"2025-07-04T07:44:29.918936Z","last_seen":"2026-04-19T19:53:53.761211Z","times_seen":163,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-grid.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-grid.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"72046f5e551dc64adcac3214a00d4516\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fo2rFW2x3B075TRAR5vgMCb8esVJYDZ5uvLpwg2TtqhauNq3%2BgOL9e%2Fxy4EUxlXnELgfi5OqHR7zBwX8tTCuSNdUlqQ0G7Eqz8ZwnXf1ij3gW6Hb5gwXb37WbtvoyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275964a49b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7936), with no line terminators","md5":"168190f59e5dc198a3b25a5f35301a90","sha1":"96d7e8ad2a8ff591c81fd3e32605e69cfd8a2df0","sha256":"908b6843c450e4c2502d33762bdf26ad300d1f7a2d69095bd499c6bef1ccdc36","sha512":"8fca70c579d9589c84626334f40280d05e7146e179146e2254b4c8ed55c993bd017e7c80e36cf0318258ac68554bc756a2ed862c02781714b6ab7e1afee8faf2","ssdeep":"96:18IvHGGEfETIDAR4yPzqJAj0dXEtEhQjI5/:18IvHGHKaC442JaaUShaq/","tlshash":"27f19fc49d316d67503ace2b7091bc4b50ab380b3bb2eebbf3f52d559caa9874851503","first_seen":"2026-02-12T22:33:01.87692Z","last_seen":"2026-03-28T22:12:53.833354Z","times_seen":67,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/themes/cryption/css/ct-header.css?ver=6.9","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:44.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-header.css?ver=6.9 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"fc42a5675691a5482f3917c5c2f99618\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L9k3d%2BGf%2BLNpWjN3iTf4D49jxi7STBRaCf5U4OytLsUdwm%2BoxAagaSzXfSt8JJ3O8Xb07M1egRqYPJ2setcaij5onEwqaT1viaHUfpTL8EsYsVsk8%2Fo%2Fuk08N9lFpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275964a4db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15754), with no line terminators","md5":"9d4c249bb440a36ffd7972d7d50f1b56","sha1":"3a8d4669542b2ca7e19b81adb55c166e09fcb868","sha256":"da7e1429591722fdb005526646f57d89c3252c36fda3e7eadb4c969cdd886ff1","sha512":"16d4d8d0d9f0324ed42d1a5e20cae950b48d7f8d3c4de8109e15a4f26bbfb7e859eae13eccb0ed76d09100197826b84ffad5355db5c783c4ee0b388932e60ef6","ssdeep":"192:7vzxx5bvsvsv7/VnT9AVvRvIi7vRmv5LvaA5EgJtaFEN8uuoFmEtRKpeX92EGA6i:pjSStT8N1O515cESFoFmkuEGA6Lvpo","tlshash":"e662851aa9d83a3813375925e2d079b463394104fb726951b3f6673fc68de8902b3bcd","first_seen":"2026-02-12T22:33:01.891245Z","last_seen":"2026-03-28T22:12:53.908445Z","times_seen":67,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/output-onlinepngtools-7-1.png","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/output-onlinepngtools-7-1.png HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\ncontent-length: 7805\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1ed65976e9110cfe77e2e755b1d7bf41\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rh602kViEkxr%2FwT%2F%2BAILhegPrbnp4cSZQbITDNZB%2BKj7dfUpTrJzrgS7y8%2B5U%2BecdgGH1aTp9Rwd0nwUTlZtKeEVL5UqpxOi54ZJA3EgLBaTad06s%2FdV1pujOQhgxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3275968a6cb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 128, 8-bit/color RGBA, non-interlaced","md5":"5a37142549ba0b01e1c6e8194920ef48","sha1":"ec779b539630cea38da3363341163c842919f920","sha256":"639c80da7fdbcdbe613cbbb99f386ab34d788f92b5a353c82244da8368f3e5ec","sha512":"396ffbd84d557584bbd517f4bdfaaa54a9bf4d3c9badfb2b356bd129ce51b96408f5afd9468b1e8ff31533f6eafb38fe76403bbf07a2c9e6438ed398a7038301","ssdeep":"192:2LaJjgh+nTxKb7HEaMpyKt/gQzGt2mmVYk7/4VnVH:2L1gA7YsChzA2B90n","tlshash":"64f1bfa9bd024a127ef7c4165d2b9faff85303dc13b1ae0502e95d7c1221a29ca3d8a1","first_seen":"2025-11-15T16:36:12.67332Z","last_seen":"2026-04-16T05:30:57.414132Z","times_seen":60,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-content/uploads/2025/10/white-paper.svg","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/white-paper.svg HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"0d8fecfb746888dc22b3443575ee440f\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLYuuShYP3vqEMLGvaDzxz0d%2FX1x%2BLreN5XnEV4ve76iRjXPIzeXssEaIcX5AKBQlhbVcH2x%2Bt%2FcQvJiYuB%2F%2FREwm017yzT1lnD3gmnNYOVl4k3pb0zyQoS38%2BCH2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275969a6db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5759,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ac7604fb6549093533bc763e9a91ab8","sha1":"4fa2ee7e08df271a5fdc392d073bf90168ba40f3","sha256":"aa5961e259f40a4a90d1f7e049520e0719df41f700db6bffa796291556407d78","sha512":"d51673fe512dc47e48622817d5963f39a0356532ec30b34d2b11b684840542a246782aac20f9ca99ecb5a7ece4af631621901b87df4036f99fc17f56dc69fecb","ssdeep":"96:7tz1nnHzOzr2tjzDDaNGVzdVOpDeLdfSuOPQy3jd60T4:Jpyz8n8GDVT5SJlQM4","tlshash":"dbc1445e073d86d4ec6c63ac69b635cb737879acb472e294e38b6c0528017fc19609b1","first_seen":"2026-01-04T15:46:29.871275Z","last_seen":"2026-04-22T06:04:38.442894Z","times_seen":96,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/easing/EasePack.min.js HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"6a368a4df0f5e7641fb60b076a2ae2fc\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Vzmp6wHPTR26A9eRSA9%2BWGpyTdBpBdwMMsQuMTMLbedzOkE%2FpFje93VlKar76b3SYVS9QD0GqarirQsu7fDxe%2BzX6b4o2UFYhGYRVHlsDjOdI6pooonlhg%2FQwK3HA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3275969a71b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5467,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-22T09:26:51.862836Z","times_seen":379,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kadvun.live/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3","fqdn":"kadvun.live","domain":"kadvun.live","tld":"live"},"ip":{"addr":"172.67.129.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kadvun.live/","date":"2026-03-28T00:18:45.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kadvun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 18:45:19 GMT","end":"Tue, 12 May 2026 19:45:09 GMT"},"fingerprint":{"sha1":"69:04:FC:EB:EE:52:19:56:0D:42:9F:A6:44:AC:FD:BD:6C:78:B7:98","sha256":"9F:A6:20:B0:1F:20:4E:80:9B:7A:EF:86:BD:86:C0:66:A4:C1:3C:33:AA:6C:DD:54:6A:04:6C:49:68:70:F3:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3 HTTP/1.1\r\nHost: kadvun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kadvun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 00:18:44 GMT\r\netag: W/\"dfa2e3ed71f6e6d6ecbc1502f9b545c2\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUj1soQXyIkkkjWtj2PnhQ2p1jVmm3mSp9Z2BpToO1HQDDMdXk%2Fs9VELWUd40HcuKD6ZrfLj7lPBdn%2BLCr1ngMR3BtRvR4HqG45SQGAUoNH%2B2oXRh7MVrvUlNKjm5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e327596da83b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-04-23T22:04:01.833632Z","times_seen":2774,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"kadvun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}