{"report_id":"432672c5-03b8-48dd-a0ce-7d5192e46c34","version":0,"status":"done","tags":[],"date":"2026-07-18T05:44:24Z","url":{"schema":"http","addr":"arvax.xyz","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"arvax.xyz/","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"title":"LimeSurvey","dom":{"size":77685,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2945)","md5":"a3519a83986a874f43d2a005f5ac1960","sha1":"d6d243ff05f2d830cf672dd82a78d2429ca1c465","sha256":"7dacbb4b04883c69f299f63e18ae282ba364356ff33b133c3446036f3500b403","sha512":"390075b69868426b3548859b46cc40cd0cccc00746a02c8241ae27d1eb4225887a3ef48233f4557a10752046beb9b5f8fe50770220f33373c7f9303157bfda0d","ssdeep":"768:Tdq9nsNB2U+Mdf67iXNHAUAfntMoymq+EzvvGWT:Tdq9nsNB2U+MR67iX0trq+EzDT","tlshash":"257322106af1547e018362d5a5702f24ed874143e340e806fbad07bbaff6e59893b75e","dom_hash":"domhash6da673bc429be75f17c2c31effcf5f0b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"arvax.xyz","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T05:44:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"arvax.xyz","ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-04","domain_rank":0,"first_seen":"2026-07-18T05:44:26.442782Z","last_seen":"2026-07-18T05:44:26.442782Z","alert_count":84,"request_count":28,"received_data":2322824,"sent_data":14441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"decimal.js","description":"","website":"https://mikemcl.github.io/decimal.js/","common_platform_enumeration":"","icon":"decimal.js.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/dd37922b/em_javascript.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd20042c1b10973f4d81b4b25676ae66","sha1":"f01f87ddf1a892ce9950adcff09be9bfd016e7e0","sha256":"83e686c632948daedb1dafdf0f6a2031d97762e54c31009267c26ae7fa496b17","sha512":"c17eb6c871dcaffd563b0d0035b20077c3efac4ce8cd57084b4a7387fc26177a527a7ad4c4ceb028723293e4c893e5d357ce5f31d52840894d1c944a961f9785","ssdeep":"1536:pVANNxZg7421igbqwkZDI7UftcGoHlCiDHZvv5Dm4U:aNxZgcTga+70G5vRxU","tlshash":"bed394ada9d321110e0be1785baf6045b666c463634ccd58bc8f93305f2193962f6feb","size":141180,"data":"","first_seen":"2026-03-30T18:40:18.180789Z","last_seen":"2026-07-18T05:47:52.238265Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/cc38bfb2/build/lslog.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbccba1b8f07e271fe99b2cd6682f917","sha1":"b42f17b17b817d206b3e49cf2a134abaa355b9d6","sha256":"25e71903cb7e6c040b94554218d56439c51ec9070214cddae2b4114bd010f3b0","sha512":"a80c6eef61711e7f446f7e39e8d254a8aad7fcc7e4ebd17d9ddade2618b9151f6edad5a6c290a2966da52ae565c9ff829ea4ee71397e95bb48d6b8b85cfdce1d","ssdeep":"1536:4gDQTgJC2e7pkW4eg9HUdcrjsKzEmoJWg1LjStQE2vqQK8mWVy26wLTmR68QqMym:4rTgJC2e7pkW4eg90OrHwVJ1XSWE2zKK","tlshash":"ac83c946bfd07161b66672894e1f700af3384427d89cec50b98de5e8bbd142443eeb9e","size":85620,"data":"","first_seen":"2023-05-04T07:24:03Z","last_seen":"2026-07-18T08:15:37.373794Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7cddf9f/scripts/theme.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c4856347bee425a2b41c8c7b7bde06","sha1":"f6c3b7f8470bbb3b4776dcee1291322711eba1aa","sha256":"f918df3a5ab7bc37b742f930ddf9463ad82f806adc8672265f8a6d83945b45e4","sha512":"aaf65adcf9ca4657fbd42a41f9a5dcd6373ec22385a94408b6830b7e53f3fc8a26b64d30d681e19517176c6a8e300b60e4ff0e831a157a2f90fedfc2a2ec98bb","ssdeep":"6144:hwoojGbwQW5VQ8dDhVQDQyfBz+S8s/lzpB:f0yfBz+S8s/lzj","tlshash":"bc54930a7dea2162456be53e972f920af7314093410ded10bc9c87982f64c7952fefe9","size":281141,"data":"","first_seen":"2026-03-09T06:48:30.7304Z","last_seen":"2026-07-18T05:47:52.260495Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/b0ca0eb9/nojs.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be8afb4e2fc669632ab988a7059bf1ef","sha1":"2c07f44e3fa2f901c29a13b118e6abddd9e8e0d2","sha256":"a846f07a8b253e18decc21dc8b07d75eac862095b29b015e831681e23efa3371","sha512":"f27974cf279df1358f4d3c773c695fdff0816798e2e768d05a599d129216d075d306f603f669b349b766d11c2d9cdcb81ba6871a8bf5142d2045684c55e42961","ssdeep":"","tlshash":"dad02233b066983d2e531c99322d07c4b8744242ebc11f0690b98254ea30c941b00fc8","size":199,"data":"","first_seen":"2023-03-07T01:41:53Z","last_seen":"2026-07-18T08:15:37.393956Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91dd7b94bffcb4dd4110c6f950df7f85","sha1":"3dfd456b5b0d5906847f111657acb69f05cba7af","sha256":"e5e1f1c50c7bb1e03c134c47f9991b30b4ca7bd43a4cc41facf80b6acd88ea56","sha512":"c5bdda1d4093eb9375899121c1a5668eea1c1134091e2a1fb15a8df13a2857230f5326af5f6ab81010ea8f0828ea514b1d7c5a913cd829e0706180c4312e138e","ssdeep":"","tlshash":"b7a00296438085309a3154075a397e99bc37cc1621108000234868a03581fb756d8f46","size":64,"data":"","first_seen":"2023-03-07T01:41:53Z","last_seen":"2026-07-18T08:15:37.412875Z","times_seen":252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d4edeacbeb22314975d74327a00c02b","sha1":"a881ceadec570ef5aa7c25c3c2fa4b96f31e8355","sha256":"a1cdede1456a150bd585d79f1b20d312ace8e6cb7d28514bd8d2f774ae901837","sha512":"cae97fb5620686145637023d6469cd8b4cecee6df592e384499d2582aa9f5179f02ff9fd0389563f7fc08589815ddf9d8888afe857ecd779f52978069b1d70dd","ssdeep":"","tlshash":"ddb09b4415e6118700e851f1461ff0016ed1876d3374c680765ec039463f0d7115e6f7","size":123,"data":"","first_seen":"2026-06-28T06:04:50.663659Z","last_seen":"2026-07-18T05:47:52.267559Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"676c9635cfb43e1cb6f5e8888fe438f1","sha1":"0f15b53a22d1223c23ec718ac71d131c0c1b2031","sha256":"939c8efd80b0242dec6a5b920d343c3f986b60bbf2177cb092fadc002b76088a","sha512":"ab50aa256d9cd8a00bb541d6790750e6198e498fa0fb362d015c92fcd82e6a081c6e00e7877130677eacdf9936138b4f96d12d1c0c5ea1130b2a140056a5eff1","ssdeep":"","tlshash":"a9b09208bed2e3200061208f2a23a20d9020ab376600812bf62c2a842b115138a696a3","size":114,"data":"","first_seen":"2026-06-06T18:21:06.903571Z","last_seen":"2026-07-18T08:15:37.414738Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9718597b04ea6db691edaf82ca9b41f0","sha1":"08aa476a8c9b0f3be09093cf0b924834462b8c19","sha256":"d5aa1e6dd96760c87bb1ec45348d1e0b2890c68253540950a434121dec17f2da","sha512":"459a86ac7a084825a96dfdc6a8457c7ba548a3782a2fde4c7c40f53736b5c7343541d05210303157c1e12189be228f804aee619848635f7e29f57fa0e8a8a638","ssdeep":"","tlshash":"c0f02bf644b128334065a633041cf056ed82ca3ad7084e914abd6c346ae03370ae7f49","size":644,"data":"","first_seen":"2026-06-11T12:28:50.681627Z","last_seen":"2026-07-18T05:47:52.270558Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9676d4e22f6a57a477107d544ea38119","sha1":"e7a5dffbe8a758a1f97c9e57a4867d3ecf94e7ae","sha256":"538ed64878a0f8731c3bf42aa8df62844165bd511e182bfb226b56f9857da4e1","sha512":"a1d387791ce3eebf1510312d95559837b56ec37d9902f6a2e2d68c13477407b23ff5b3e337cb6c31dde6fa2fd97ef459715d16b683c33e628edbe50558471484","ssdeep":"","tlshash":"5011890c9ee1f51250b7356f7eb3820888324657b685c467fb6c0b442f823598ebdb96","size":919,"data":"","first_seen":"2026-07-10T00:33:09.720067Z","last_seen":"2026-07-18T05:47:52.271954Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbfb6956f34e13da265212236341ebb9","sha1":"d1631a1403b606075ac44f7470f3466f6dc11a14","sha256":"8f235bc2e3b907362cd054d1aaa802585c1949a17e5c1ef86112470a02a3df40","sha512":"ca7928aa87d12e404d68fc031af7fa4587b549450ef7ebd512faa5d5314906dc5dc8a7079de568b16ce6f26a76132b424756aa7eb3892fe18515f156319af8ad","ssdeep":"","tlshash":"7a80000cfa83ca3200b0228f2b23a20cb022a228aa20800ac23028c020000032a380ab","size":32,"data":"","first_seen":"2026-06-06T18:21:06.915346Z","last_seen":"2026-07-18T08:15:37.420621Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/69dbdc06/jquery.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-18T08:40:11.62508Z","times_seen":180034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/75be1aca/pjax.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90c11e6c3cd1d7721a0b344ff3d3c94e","sha1":"d682e43c412fc91fb6b27c98e7d854bd25151e23","sha256":"c1df6170ce89dcca8ef9a319e8761f6a904bcf1f84418619c26eca07bbab6a73","sha512":"0692210d0b9d2828632714f7094e6c6077ba4ef98194d5154f6333230f41ba336c4edff887a71c911aea8f07dfa748a75f0c24670b3af3aa41979ff484f67aed","ssdeep":"1536:qSF2tQhtheUXmMWXX0FZu5tA+8/ZFsW3Pq0taw1OkCt:qktheE5q","tlshash":"9f433e9e28e7617194ab717e8f9f6409b13091671409ce503c1cd7e49f60a389aebfec","size":56096,"data":"","first_seen":"2025-04-18T05:18:07.635428Z","last_seen":"2026-07-18T05:47:52.259413Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/8ccdb016/decimal.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c45b938ea3055218957fb754c248d02","sha1":"dd3eb57e2b3968b62463e814eef8dfadc1b527bf","sha256":"fd10a24b79763cc81be1484129358c40b215efdefbc216737ca2cba715a50bf6","sha512":"4ebd75190fbed3f80875735e319ba88ec3a9e40b4289ef149a37d484fe11701faf2bb69694a8aaf6c840d1f24001366c5dc6db10ed14b2d3028b24d2e88f811a","ssdeep":"1536:loO0rIfeZei699aQG1BwQ7i8DzPlMgZb3DoZK5ptGsma:9i9QeL3Rppnma","tlshash":"7ad3932c27d361f6261764780bdf7040e339942722eabe82b84e43e06f91d3667b5bd5","size":131722,"data":"","first_seen":"2025-04-18T05:18:07.666765Z","last_seen":"2026-07-18T05:47:52.245228Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T08:42:33.616506Z","times_seen":399381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7f8e248c/build/embeddables.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3490c33c1f863f7562c250b44bcf122f","sha1":"91baecda1a53855aec873407bd70583ca084d681","sha256":"5951d78bd42b23e6b8c84206bbbd202c1af3e1755ce0e945055ad352d3a7d484","sha512":"053be68f8650516a686f0ce34c96a11d53e2db25dc88c10eccb911889b1d7040ce910774d17702b3106e7f8e559b39567c603d784969b572e32fa80aeb139bc0","ssdeep":"384:y0lVYqiaK55rNge5/KQ0s/CrhFHUkoxGw7InGo4pBdVBgRS3ej7kZxAELOLfuQY1:FljcNge5/KQ0v5AU8dMwZ5OLfe1","tlshash":"feb2e9bc3252bd3a479220b61507400e71b65959664fe470b2ace8a1bd7cd8de1b7f2c","size":23406,"data":"","first_seen":"2023-03-07T18:07:23Z","last_seen":"2026-07-18T08:15:37.38931Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7958990f/jquery-migrate.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a36b8e9cbfb4a675225aa408c4d15c0c","sha1":"fcd46de9c99e71ed586a850d877fd3b01e8269fd","sha256":"16eb18d9c6303cdd50ac58db5b2b116c5dcc4c43c89424f268f6d13fc599fb19","sha512":"403b23497d664ad048027357c77d5dcafc38c157478e89cec2b91a221a62225cea19409db08eb633042d1e9245f8da72d929929464913a8356402385a6a6ec3a","ssdeep":"192:arprDN+e3IUefKSfI0bP1CMjt9kdgOFWIa/aC3+sZv9LRS:arprx6PfK2P1CMjt8FWIa2sZVI","tlshash":"cf52c86db566b9714eb732b9b03bd30b71b205cd5a0d8940d19cc8f6287d89e812af68","size":13467,"data":"","first_seen":"2023-03-07T01:07:00Z","last_seen":"2026-07-18T05:47:52.258479Z","times_seen":10583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7cddf9f/scripts/custom.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0a677d94a89c4b94b251cef7f0fbc9","sha1":"a2fab06ff65347905248b1d1fb95f71ba62e507e","sha256":"d05ef54cd06203000f540f57994893db0912b4fa34beefd5cac3dff912f80189","sha512":"55df17fc700c1f8ee536cd46905583c4d87f532fb8179c7c688c9c5abb814389ca18d5d3808e84e05af7bd7e47378f67bf229c19680c6f71944b05c745eac7f8","ssdeep":"","tlshash":"47c0123a7c24df615231c4aab08ac4e2e571a1260a849051a8c636a90f3d625425d724","size":191,"data":"","first_seen":"2025-08-26T07:05:47.94021Z","last_seen":"2026-07-18T05:47:52.239898Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/b3a97f40/decimalcustom.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80290d21b5a5aeccdcd6e89582e45456","sha1":"4e8d66e5705008d586b6749c30414912b6a266ae","sha256":"f52fdf7e54230bc39449c78c467e808d2c541639c91b495be475afa67dd1716a","sha512":"0aafa5f4bb3403e98ab744632da37d0aec7439ddd0e1dbe204f229ccf1cbdb1bbb99ea5921be5e4f8c21942eb9c872d55e9a0d623d19d07bd99c9c2f6225fa5e","ssdeep":"192:NqS6030d0R0h0d0T050h050N0R0B0F0p0x0p0x05070Z0P0x0V0B0l010d0Z0h08:NqSL","tlshash":"2302acdc2af7a02081abb03d4a2f51427439cdab18cdffa8f85d4b506f42d2b9a915d4","size":8903,"data":"","first_seen":"2023-03-07T01:41:53Z","last_seen":"2026-07-18T08:15:37.388261Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/1e59c3bc/moment-with-locales.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d458b68730a7330653700489333a7837","sha1":"4059aeca1d0b99aec8006b37a927f09d9c0e794d","sha256":"430725b95468277dcbccc27e08e3d873276c0082737310b0b1ad330392511847","sha512":"e363c4d2b77ec19da13577ed94cefc0527a1206cdeccd790bb38a18810af504077095c47bec4a117ceb0056c1039137134836504fbaaeeb1b859684d89354716","ssdeep":"6144:cHOUXP7AhVuhTDGfNXqh/IT3TSZWkcSO2dpmcsmhce5NuNWPllei+BJkWomDBT5D:afAhVuhTDGRk/W3TSZWkcSO2dpmFmhcp","tlshash":"c774c8cf63e66b8e4a142116cc3dad0d284d0f81d079db35bfba5187f51ca2846bab71","size":369019,"data":"","first_seen":"2023-03-08T01:19:33Z","last_seen":"2026-07-18T08:15:37.386044Z","times_seen":2625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.0","filename":"https://arvax.xyz/tmp/assets/7958990f/jquery-migrate.min.js","line_number":2,"column_number":970}]},"http":[{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/b53ca126/remixicon.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.799Z","timestamp":1784353428799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/b53ca126/remixicon.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"1d55c-656cf2ac156a8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBRh%2FMetXtaZKjDlQLE78q8257%2FV3F8Gg67QVdvU94%2B9zRHYeY%2F6h8iXECNVM49gIJg7GwmGGYB%2FGsQrDqcRWwEFNGGzQwZbwf4eTDrO9Ih4Eakb7sUuoajObwg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc1f8efb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120156,"size_decoded":16764,"mime_type":"text/css","magic":"ASCII text","md5":"46a6ec15f4b25201928096edebc7ec97","sha1":"d1ad3e631dacd82ee4dd769c3c21f6f887e573de","sha256":"f317ff168377c5b94d740f17e27e8859d4f89abd2ff2416c0041684adcfa1004","sha512":"7916dcaf992dd2f8362a0979041288a97a19d1fd65a5ee0898cf06cb324dee6ae1511e7bc4f876257fb945af33961e50656c445505bd30e7cc6821048e731c30","ssdeep":"1536:Vacvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM2GSsRoF:Vr8v4cYcKZ7clG","tlshash":"34c3b8beea4f44841702e8d66367274163b9b67dc9817c7ad413788df3c766883862ec","first_seen":"2023-06-12T00:53:51Z","last_seen":"2026-07-18T05:47:52.26139Z","times_seen":460,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7cddf9f/css/variations/theme_apple.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.801Z","timestamp":1784353428801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7cddf9f/css/variations/theme_apple.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"55f6b-656cf2ac23d20-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=myILooq%2Fu%2FVMUmZX12nqDzuDl21bfkMdsrIzIx8jgj7QPhfSNB8kVtvzu%2FzRrttRff1iyocP9Se5UHeHJIW1LT0kKvc01jUFrJNrMKq5i6WlGoUDwnBdmA7he%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc1f8f1b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50255\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352107,"size_decoded":51031,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"75f1690e80225219798721c78bf0a3be","sha1":"790a9e808aab8624018bc6ee6ca57e6c63820b84","sha256":"60e9f57d843002126223791797bc74c5681221e3482d3ac942c42ed886c897b1","sha512":"9208172ef55c456cc59036a4dfd0046163b3515928fb2ccd8c21d371b9e4b60ccdacf327af815bb83d3e7f180397e9142914040ecbfed91730a3cc9c4c6e820f","ssdeep":"6144:1y6fg2tIjNbPZSFKZnSO0XV2/+kmYI1HT:/FKZnSO0XhkmYI1HT","tlshash":"53749759fff028047067866c7496fbe57b6d4082d60dce7ab6d62138df893c449b3a88","first_seen":"2026-05-05T00:09:10.417242Z","last_seen":"2026-07-18T05:47:52.242442Z","times_seen":3,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/b0ca0eb9/nojs.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.820Z","timestamp":1784353428820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/b0ca0eb9/nojs.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:32:46 GMT\r\netag: \"c7-656cf6e2001bc-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4XXnbyxKLvpWkX7Ebq9P9bXLhSYIBUGlmM%2Bp35Gucwre%2BuCt7NHDNBunuE1uNNeYJlqReGP3tqTS8g07F9U3PD86mAshXZJr1DyBLpcoqAzRHdZbS8o6l1gylo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc218fdb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 179\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":953,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"be8afb4e2fc669632ab988a7059bf1ef","sha1":"2c07f44e3fa2f901c29a13b118e6abddd9e8e0d2","sha256":"a846f07a8b253e18decc21dc8b07d75eac862095b29b015e831681e23efa3371","sha512":"f27974cf279df1358f4d3c773c695fdff0816798e2e768d05a599d129216d075d306f603f669b349b766d11c2d9cdcb81ba6871a8bf5142d2045684c55e42961","ssdeep":"","tlshash":"dad02233b066983d2e531c99322d07c4b8744242ebc11f0690b98254ea30c941b00fc8","first_seen":"2023-03-07T01:41:53Z","last_seen":"2026-07-18T08:15:37.393956Z","times_seen":222,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/8b3cf3e2/IBMPlexSans-Regular.ttf","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:49.840Z","timestamp":1784353429840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/8b3cf3e2/IBMPlexSans-Regular.ttf HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/tmp/assets/8b3cf3e2/ibm-sans.css\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:50 GMT\r\ncontent-type: font/ttf\r\netag: W/\"2ae84-656cf2ac0d9a8\"\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4kGcBNEq6KwUmJJFZWy8PgsJb8a7zlVX7EyhYdqepM9nl1aOMUIbQT44JhqWBzcEB5qoYnmE0GOyWxEDAfRFLrBEH3vDaZ4Q%2F2riC9RbEF2kAZPiYzeHsTVaHM%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1cf2bc87914b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175748,"size_decoded":78102,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 20 names, Microsoft, language 0x409","md5":"1286abb632c5a409a0a997d11c994e34","sha1":"8e18e19c963fd6b0895620010d1a4adbc2d2caf7","sha256":"852def7e24f7b71bab6e8a5c9b02b203e45b0ef59697feaf116e7e8091ad7a2a","sha512":"7ec63f19acb0e3e9c2bab443b68280dbd290bec66461e3baae2fdaaae0260bc6082480fe4f1fcaf8c0c16c5287c605df023d29786e4f3e0aaa43a46f6632d3bb","ssdeep":"3072:IBEydOkAfyifuN7J1St4fJu72jgy2wc0cKAdmXA:IB/ZAjfuNGaJVjl9c0cKAdt","tlshash":"0604e84bbffb1b03e30b5ab58ce1d2741671f90baf76a5097c918564cacf20206639d5","first_seen":"2023-05-19T14:49:42Z","last_seen":"2026-07-18T08:11:18.980907Z","times_seen":528,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":683,"receive":335,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7f8e248c/build/embeddables.min.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.800Z","timestamp":1784353428800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7f8e248c/build/embeddables.min.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"12f-656cf2ac17200-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqXoeS%2B%2FkSa3RvY1K9qGzflXnn6bOrpW8tSn8g8YnIdamKjhYAAfOcH4olNDclXDDjvVG4jWsM%2BBXeQiL1YapS83XqSRSTqedaWqmNJUdTp%2FkslWQ9xr8PLlo48%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc1f8f0b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 184\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303,"size_decoded":956,"mime_type":"text/css","magic":"ASCII text, with very long lines (302)","md5":"92ee39a3fdbbb7665656068334afd9c9","sha1":"0ce88e5c0c5f9fe0feadd465af891a1588718d53","sha256":"e4b590e3841d06bca2c1b5c5455a4b8bd7853fe49c41f0fc12b31d9259369641","sha512":"4f61d7ae2ce73d9574ef7b8f6a9b3ad768b0005da686e6802c93493c5c2ef3f13c2aefd10355d64f13689d4c16cf094adeb8f44d2feaa3a66ee4ca40e7b6e05d","ssdeep":"","tlshash":"bce07d250720b6a4f722543f1c501112a099d26fda2afcea58f85311b7ca04339a314c","first_seen":"2023-05-04T07:24:04Z","last_seen":"2026-07-18T08:15:37.394753Z","times_seen":189,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/dd37922b/em_javascript.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.813Z","timestamp":1784353428813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/dd37922b/em_javascript.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"2277c-656cf2ac05ca8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtzfWvIfqjPh6iyBuo0ue7ybAv02HupNaV%2BWroAyECEFly%2BCfuKKUI4cH2FExqtr%2F%2FdTER5O8%2BL%2FtMeWFO%2FXHN7sNmFdXyN%2FHJRfc2IGoGIHjuwfNkomKbYTclo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc208f8b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141180,"size_decoded":36859,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"dd20042c1b10973f4d81b4b25676ae66","sha1":"f01f87ddf1a892ce9950adcff09be9bfd016e7e0","sha256":"83e686c632948daedb1dafdf0f6a2031d97762e54c31009267c26ae7fa496b17","sha512":"c17eb6c871dcaffd563b0d0035b20077c3efac4ce8cd57084b4a7387fc26177a527a7ad4c4ceb028723293e4c893e5d357ce5f31d52840894d1c944a961f9785","ssdeep":"1536:pVANNxZg7421igbqwkZDI7UftcGoHlCiDHZvv5Dm4U:aNxZgcTga+70G5vRxU","tlshash":"bed394ada9d321110e0be1785baf6045b666c463634ccd58bc8f93305f2193962f6feb","first_seen":"2026-03-30T18:40:18.180789Z","last_seen":"2026-07-18T05:47:52.238265Z","times_seen":18,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7cddf9f/scripts/theme.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.817Z","timestamp":1784353428817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7cddf9f/scripts/theme.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"44d89-656cf2ac20a58-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvRuTWJ4FFXM4t3QC6X2sr5aMITY2D2DJ5Ydzbg57fVbGn4JOzXeikV%2FRMhA%2FBNHKgngUVjseoalNB8YGgOmh2hcMxgwugmNJKQFcSUoMe6aZtYeG4V7MJMt1io%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc218fbb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 60129\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281993,"size_decoded":60908,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (860)","md5":"08c4856347bee425a2b41c8c7b7bde06","sha1":"f6c3b7f8470bbb3b4776dcee1291322711eba1aa","sha256":"f918df3a5ab7bc37b742f930ddf9463ad82f806adc8672265f8a6d83945b45e4","sha512":"aaf65adcf9ca4657fbd42a41f9a5dcd6373ec22385a94408b6830b7e53f3fc8a26b64d30d681e19517176c6a8e300b60e4ff0e831a157a2f90fedfc2a2ec98bb","ssdeep":"6144:hwoojGbwQW5VQ8dDhVQDQyfBz+S8s/lzpB:f0yfBz+S8s/lzj","tlshash":"bc54930a7dea2162456be53e972f920af7314093410ded10bc9c87982f64c7952fefe9","first_seen":"2026-03-09T06:48:30.7304Z","last_seen":"2026-07-18T05:47:52.260495Z","times_seen":10,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/bcf0e9ad/ibm-serif.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.795Z","timestamp":1784353428795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/bcf0e9ad/ibm-serif.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"929-656cf2ac104a0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKxVbMaXNg48TytQNbzMWyV42byqQLGIR6Eiv4h4ZHxIKVSMS6HFEBq9Tki7hjCtiIG31oUte5JoTOiReqkjX7aWdb9AzWu0agmpaphf6xxh2%2BgqkZR8uhSwv%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc1f8edb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2345,"size_decoded":1258,"mime_type":"text/css","magic":"ASCII text","md5":"dd6574f7a7408dfbacc908c9dbd87683","sha1":"e4f52344e4b95f03efa7d1ba6e741116d1c1e41f","sha256":"aee6bcfcef08ce0b654f902e5772caa9dbadc53bf9ebc1079ce2a0cf3e8f47d7","sha512":"f14f09ef93b85cf19da686831f68028a0f6116c57be4b1f70f9090439e3bf5d693c7cfb9d2c141e077657f78dda5608d5b16c493c4a76500f8b3284780ba224e","ssdeep":"","tlshash":"aa41f308102dd8019a113f99734b3e249a4d554f28eed66c2ff7484a8fe163f93b678d","first_seen":"2024-07-23T15:18:39Z","last_seen":"2026-07-18T05:47:52.236536Z","times_seen":53,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7cddf9f/css/custom.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.805Z","timestamp":1784353428805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7cddf9f/css/custom.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"142-656cf2ac24108-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0v7WVVKKuezjwZbCMkOGNuyxRBU6jh9ecvEkuT6XkgtvurMuRK1pvvNXOQlAhR4hyKtisb4OPohH853AwMPN6FhECnu7B8E18HB9d%2BstVTRyFn3aOuAHz2aZCjE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc208f3b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322,"size_decoded":970,"mime_type":"text/css","magic":"ASCII text","md5":"fc83399ee006c6a0acd2b574968ad2ad","sha1":"712276489c9dd963d2f86fd1227c532a456dbf56","sha256":"b65a0a2e6d0823858bf66942223911650e1a57b84f36c0f43d43501d9ce4024d","sha512":"46afc634a95371c596e62c42d2d037362a0e59491e5c63b08b1ba361ae5c92f466778d72644fa1c1d98e0be809928993689eaaafb4e993adadecee475109a59d","ssdeep":"","tlshash":"c7e07d6f0e15ce211074d336a28d98e3c31380038ff00815328d32380b7d395517d9b8","first_seen":"2023-05-04T07:24:04Z","last_seen":"2026-07-18T05:47:52.246958Z","times_seen":121,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7cddf9f/css/survey-list.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.806Z","timestamp":1784353428806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7cddf9f/css/survey-list.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"2b7-656cf2ac244f0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDvDt3w2Z%2BtCHk9sI%2Blftxd1DG5PXlAtwTibxacewSEl8vB85lUNcFj3Puov52VyNE6V8aOokMiL1RCNrMJCaXq3UKIA3gwzLdC8Q7J%2BmU0ezUwpn848cR8I7zU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc208f4b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 427\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695,"size_decoded":1197,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"54d41c4f91bad2f4c707898be6627f5e","sha1":"786ebb5fd6a33a57928fdbbd7b2236e2383c7067","sha256":"cd2726f717ae5da5dbbed3d8b93ae298f31b28b7805dbbf825463fa7fa48a014","sha512":"8459caba9117395a2908bfd14ce9084f09f88574d22657761a2f2da940b1bee78bb40ae2e65ddb1e913998befbe446041da599146936c5a876b9b55b0f2763fc","ssdeep":"","tlshash":"71019c0aa714eaf106c105a7fb3794c6f659d303275e14197e9d825c1f2b02943fa2a5","first_seen":"2024-08-19T15:59:22.040777Z","last_seen":"2026-07-18T05:47:52.251333Z","times_seen":17,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.825Z","timestamp":1784353428825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 20 Jul 2026 05:43:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzz4ehTdyjfKO6YBE1goiYojG0VqvcnUgSSDtAQ3f5L5EoIDmYrx6794opTh39F3a5WKPFSP42Vetpr6FowdO9X%2FzvIwIRjucUHT5LiiABU%2BQYkAf1mEUl2PdfY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sat, 18 Jul 2026 05:43:48 GMT\r\nserver: cloudflare\r\ncf-ray: a1cf2bc22901b517-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1280,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T08:42:33.616506Z","times_seen":399381,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/2cec13c9/poweredby.png","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.834Z","timestamp":1784353428834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/2cec13c9/poweredby.png HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 17 Jul 2026 14:32:46 GMT\r\netag: \"10f4-656cf6e20115c\"\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oE7BIxSiNj8DNo7vsPN%2BSc33qHeY1oJBZQJnZhYf4QZDVfo9qJEFG7nd89ihdpn0iw6IY8X9f3kc8FWi7lOlPPYT3BdFS86yZZ7l2rpcMuL893fN0RpnonOcm9E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc23903b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4340,"size_decoded":5054,"mime_type":"image/png","magic":"PNG image data, 282 x 45, 8-bit/color RGBA, non-interlaced","md5":"e256915401881780a3ecae7a3b87f527","sha1":"0d62d2e5b13dae0035ce2f930c3ed15401c3a0af","sha256":"e9a65e9c39c983e6677dd8a487124c246761316de9637cbb46e072af442faefd","sha512":"2a2503a22d2d6fec2b380a41921c4da84930d3999bd5ebe95512c41dbf96696b1212389635e301b62c36abee42bde0fc3d26585785236976a7c414e18713359a","ssdeep":"96:asUmw6+NYB9wdZEo+HhVFdTwXBhL+Z77zEdP6T3SJpMQcgN:asUmw6RBbph5wuZvIdiGIQpN","tlshash":"2b916ee945fc26ab4f6345215e2fcc76dc7684968478ab16bc20872044cd7e3475b2a7","first_seen":"2023-05-04T07:24:04Z","last_seen":"2026-07-18T05:47:52.25397Z","times_seen":33,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/8b3cf3e2/ibm-sans.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.792Z","timestamp":1784353428792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/8b3cf3e2/ibm-sans.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"99f-656cf2ac0c620-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BC%2F8D6LDVei302O0xHKy17gQWj3QU8%2BFsLZLBKJROW4t9c8Pyu0cqfqkWtoY1lM%2BeHmz8r%2BtWEqvZPWBnjW%2FRoH017T4xqES7%2F0fJHNfGxe1dCum7roPXz2cBrM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc1e8ecb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2463,"size_decoded":1268,"mime_type":"text/css","magic":"ASCII text","md5":"d6ba90a6afed46472ab3c6083f60aab8","sha1":"fefe7be245b25cc62d5b533cd1cfa35836741e8e","sha256":"ce3e3785977ca4e953cc84c1ed8160cdb21305486476fdb620784b2ca9281a4d","sha512":"8c7b1c7c2bc64f5259dd93f40775778a20edf15388da7e5d58be655b817f8fa24eaaddffa33f97a586e5f9b01bc68f07c8f8580de26240ecdcb602a4d3b69764","ssdeep":"","tlshash":"6d51025404af6401b2190dce730f3820955d41af24ded6383feb2a289fd252f93b279e","first_seen":"2024-07-23T15:18:39Z","last_seen":"2026-07-18T05:47:52.262212Z","times_seen":53,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7f8e248c/build/embeddables.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.826Z","timestamp":1784353428826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7f8e248c/build/embeddables.min.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"5b6e-656cf2ac17200-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=deyQZB5nzJFH%2F%2Fmfzmcf%2FOY9djC%2FujFd46KbPjpzMlH9PL8rLbeG5Mu59RMouFeLdPg%2BdHAl6ZYAml8M981VH7QoK09C9PILI6fr0sp9Ch%2BQmdh0aN%2BgAt7Z1R4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc22902b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7431\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23406,"size_decoded":8218,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23361)","md5":"3490c33c1f863f7562c250b44bcf122f","sha1":"91baecda1a53855aec873407bd70583ca084d681","sha256":"5951d78bd42b23e6b8c84206bbbd202c1af3e1755ce0e945055ad352d3a7d484","sha512":"053be68f8650516a686f0ce34c96a11d53e2db25dc88c10eccb911889b1d7040ce910774d17702b3106e7f8e559b39567c603d784969b572e32fa80aeb139bc0","ssdeep":"384:y0lVYqiaK55rNge5/KQ0s/CrhFHUkoxGw7InGo4pBdVBgRS3ej7kZxAELOLfuQY1:FljcNge5/KQ0v5AU8dMwZ5OLfe1","tlshash":"feb2e9bc3252bd3a479220b61507400e71b65959664fe470b2ace8a1bd7cd8de1b7f2c","first_seen":"2023-03-07T18:07:23Z","last_seen":"2026-07-18T08:15:37.38931Z","times_seen":194,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/3a11c766/css/font-awesome.min.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.797Z","timestamp":1784353428797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/3a11c766/css/font-awesome.min.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"7918-656cf2ac123e0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99lx37Dp85pmhyYnkJQaQfCi%2FIJtTjPWmDHbJDFvrOU4ACstNA1ftnGP4pRAAOHgEMnGyb2lMft%2FynSW8BKUJe7F9VwD%2FNa7mD9Ni33CKLe43C8a%2BSjcQH5rTjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc1f8eeb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7053\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":7827,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-18T08:42:18.001293Z","times_seen":299090,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/8ccdb016/decimal.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.821Z","timestamp":1784353428821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/8ccdb016/decimal.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"2028a-656cf2ac054d8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9J2AqOuCDSg6mt5gpZPF6doOXBMbDDsqewGluPiMpYhRG2UxpN54VRl4TRwVR4QHXCFAEReTOut4ZSYMTYPlvCEQr1FWb54xSnYBJarqJhCN2uvofH3NCBWLnGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc218feb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32514\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131722,"size_decoded":33289,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1040)","md5":"5c45b938ea3055218957fb754c248d02","sha1":"dd3eb57e2b3968b62463e814eef8dfadc1b527bf","sha256":"fd10a24b79763cc81be1484129358c40b215efdefbc216737ca2cba715a50bf6","sha512":"4ebd75190fbed3f80875735e319ba88ec3a9e40b4289ef149a37d484fe11701faf2bb69694a8aaf6c840d1f24001366c5dc6db10ed14b2d3028b24d2e88f811a","ssdeep":"1536:loO0rIfeZei699aQG1BwQ7i8DzPlMgZb3DoZK5ptGsma:9i9QeL3Rppnma","tlshash":"7ad3932c27d361f6261764780bdf7040e339942722eabe82b84e43e06f91d3667b5bd5","first_seen":"2025-04-18T05:18:07.666765Z","last_seen":"2026-07-18T05:47:52.245228Z","times_seen":99,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/69dbdc06/jquery.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.808Z","timestamp":1784353428808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/69dbdc06/jquery.min.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"155ed-656cf2ac031b0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ihb%2Fgnc7J44hlizeFp%2F2OsjdNl5JLIbGcRIZLjioLsNsLvuRGdcRyGLhoq8lVdafsNvenrY0jve7PfTTP0%2BDnFKFJa3yw7GllbDhCf3P1iXZw3htlgQROkb6%2BXE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc208f5b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":31145,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-18T08:40:11.62508Z","times_seen":180034,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/cc38bfb2/build/lslog.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.814Z","timestamp":1784353428814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/cc38bfb2/build/lslog.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"14e74-656cf2ac0aeb0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BJyLuZ1%2BQ3ueEqZ%2FpIZKWgn0fGBwWhxH0nJPoO%2B56F%2Fh1WmtdO4NI1%2F1aGJgdH7joGBk4juWll14BY9SvmJukkn4TP7MyPhPZG%2F%2BbBJB3llpUvI%2Br2vbiMPSas%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc218f9b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19814\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85620,"size_decoded":20607,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bbccba1b8f07e271fe99b2cd6682f917","sha1":"b42f17b17b817d206b3e49cf2a134abaa355b9d6","sha256":"25e71903cb7e6c040b94554218d56439c51ec9070214cddae2b4114bd010f3b0","sha512":"a80c6eef61711e7f446f7e39e8d254a8aad7fcc7e4ebd17d9ddade2618b9151f6edad5a6c290a2966da52ae565c9ff829ea4ee71397e95bb48d6b8b85cfdce1d","ssdeep":"1536:4gDQTgJC2e7pkW4eg9HUdcrjsKzEmoJWg1LjStQE2vqQK8mWVy26wLTmR68QqMym:4rTgJC2e7pkW4eg90OrHwVJ1XSWE2zKK","tlshash":"ac83c946bfd07161b66672894e1f700af3384427d89cec50b98de5e8bbd142443eeb9e","first_seen":"2023-05-04T07:24:03Z","last_seen":"2026-07-18T08:15:37.373794Z","times_seen":196,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/75be1aca/pjax.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.816Z","timestamp":1784353428816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/75be1aca/pjax.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"db20-656cf2ac0ba68-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eHfkgEgkp%2BZkOQvyif0YJOJ2oV%2BBCCIb3fKwUaQqm%2FX6zr8UvWkVfoZpNl4ahd8fpTnsm%2FsevFO6oFLZ0UTa7oYZe2B9dK8rTJQga3r%2FaFxh2M6rKCaQguM6O0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc218fab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12705\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56096,"size_decoded":13489,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"90c11e6c3cd1d7721a0b344ff3d3c94e","sha1":"d682e43c412fc91fb6b27c98e7d854bd25151e23","sha256":"c1df6170ce89dcca8ef9a319e8761f6a904bcf1f84418619c26eca07bbab6a73","sha512":"0692210d0b9d2828632714f7094e6c6077ba4ef98194d5154f6333230f41ba336c4edff887a71c911aea8f07dfa748a75f0c24670b3af3aa41979ff484f67aed","ssdeep":"1536:qSF2tQhtheUXmMWXX0FZu5tA+8/ZFsW3Pq0taw1OkCt:qktheE5q","tlshash":"9f433e9e28e7617194ab717e8f9f6409b13091671409ce503c1cd7e49f60a389aebfec","first_seen":"2025-04-18T05:18:07.635428Z","last_seen":"2026-07-18T05:47:52.259413Z","times_seen":101,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7cddf9f/scripts/custom.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.819Z","timestamp":1784353428819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7cddf9f/scripts/custom.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"bf-656cf2ac20288-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTkh73tUb7H7AcwXVgFg7FBvuGH3tIjB0ezQr4jpe0NldLpYPH9NB0uA970JI5AFWtG08EH02hl1O01Dzvef%2B8K332uFSZuyvVNsFXYR5l8DSbsGbtLYOMByF5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc218fcb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 145\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":917,"mime_type":"text/javascript","magic":"ASCII text","md5":"4f0a677d94a89c4b94b251cef7f0fbc9","sha1":"a2fab06ff65347905248b1d1fb95f71ba62e507e","sha256":"d05ef54cd06203000f540f57994893db0912b4fa34beefd5cac3dff912f80189","sha512":"55df17fc700c1f8ee536cd46905583c4d87f532fb8179c7c688c9c5abb814389ca18d5d3808e84e05af7bd7e47378f67bf229c19680c6f71944b05c745eac7f8","ssdeep":"","tlshash":"47c0123a7c24df615231c4aab08ac4e2e571a1260a849051a8c636a90f3d625425d724","first_seen":"2025-08-26T07:05:47.94021Z","last_seen":"2026-07-18T05:47:52.239898Z","times_seen":36,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/b53ca126/remixicon.woff2?t=1681573354175","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:49.846Z","timestamp":1784353429846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/b53ca126/remixicon.woff2?t=1681573354175 HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/tmp/assets/b53ca126/remixicon.css\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:50 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"22038-656cf2ac13768\"\r\naccept-ranges: bytes\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8UZfpfed%2FA3tLuwQr96I1BjfoC5g9N4larfHw6BhP4aGRhLTGgM5%2BqtuT3bCB8W6irWkHlGIm9Z0I6rHrXgmg1yVJY%2FK1VzcSE7fNxyCNxVDiQJjRp5nvNxhYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc88916b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 139320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139320,"size_decoded":140045,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 139320, version 1.0","md5":"d266138bc7c2bdda6d332a47c17b7755","sha1":"8d183355ff355e7d1ae250a1219c4e9ceb5975a8","sha256":"b6cfad87ad9807edb296db136d7b1d00454a5b510c29cc54a05b1a3fef73c4a9","sha512":"5a84eb1dace4a56957e5bae00c41a840db1db23e9246dc19f294ca3c281527a7feb4d52c8224390d95c67edbd97cc7b9cd09073ffb3602311a46fafdbe9c2040","ssdeep":"3072:RJjFMwEzyOlTm4YfmiNdECTCwW1BvfdSmfrNRSca8YwuaSW:8TmPeKEC+VvvfdSmfPTjuaf","tlshash":"a6d312b5c20f384dc2b30b93cbe0b2955eea3d372b0a1796d9e8d324c42569c9915d75","first_seen":"2023-06-12T00:53:51Z","last_seen":"2026-07-18T05:47:52.254787Z","times_seen":199,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":714,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/2cec13c9/favicon.ico","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:50.177Z","timestamp":1784353430177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/2cec13c9/favicon.ico HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:50 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\netag: W/\"3aee-656cf2ac01e28\"\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOsHsnVkD1PlPC5udSX0JStY8o25KtYpvpZO2o8ToMsNfeuTFNFu5p8uhF%2F%2FV6V98Q%2FBTDDm98Kb8h3VYlNKHER%2B14tkKp974%2BGtENjBunkfw6C1EDf4f4DDCnM%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1cf2bca991fb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":5452,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b55ad3f0c0a029568074402ce92aca23","sha1":"db6ac2b253d104849612b9fb480f9aaf12cadb05","sha256":"70ddd035485cdd41186c05d9b8823857622adf14febd5fb426bfa437868bcd44","sha512":"61d9c4a63cdfd4fbaf1b979dc53019e5373476095ed91319fd8f58c1717e37f066ece6b85799f8782880b7b7048463debffd1de9b57482d3a257a0f9919d9957","ssdeep":"192:jAttGttZttntt7JcNmLkSHXU+nFvxfb4htj3SyYwApBa:jAttGttZttntt1L3JnFZj4htj3Sw1","tlshash":"09623f4fb7224475d0733d3da10d32497b061f6c1a60a172a3bced29399ab646ef032e","first_seen":"2023-05-04T07:24:04Z","last_seen":"2026-07-18T05:47:52.250462Z","times_seen":159,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/8b3cf3e2/IBMPlexSans-Medium.ttf","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:49.843Z","timestamp":1784353429843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/8b3cf3e2/IBMPlexSans-Medium.ttf HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/tmp/assets/8b3cf3e2/ibm-sans.css\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:50 GMT\r\ncontent-type: font/ttf\r\netag: W/\"2b3d0-656cf2ac0ca08\"\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSXoDp5P9fXwA2SkqM5sNkepX3aymHYdknn3Azk9i628aPMei6tJ9Ahd1Ee405qUJsyAzr2lQbM9JRut%2FowdsJ8nXllMBKN5EBRFpfsaW12SVZwmBnEUEWePztw%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1cf2bc88915b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177104,"size_decoded":82730,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 22 names, Microsoft, language 0x409","md5":"361336a2ed1908c5cd8dec2e10aa71a2","sha1":"754f3b3406638d2b8da0e71dd4449557add0eccf","sha256":"11ddde88c29ef7e51f5c03da7fde285085469879139d006f631a62dba9bbd069","sha512":"0f36c033be1788c994dc2ea3e6f1bbf578b22fe149ed01c7990f4774b41929cd10a0af8a3e18749a2bd4d7a25cf1df9fc4e496b44b7290e939467ad63589d7fe","ssdeep":"3072:PD75d6O6YDPpq0bdpV/hGwSuDJinlx30eqZ6t/gmB:Pxd6Hco0bdpVzSmJqlx3tqo9gmB","tlshash":"6704e75abffb1b07f30a09b58ce1d67413b1f90bff62e5066d409654d6cb2428a63ac4","first_seen":"2023-12-11T17:17:03Z","last_seen":"2026-07-18T05:47:52.265459Z","times_seen":220,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":669,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/1e59c3bc/moment-with-locales.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.811Z","timestamp":1784353428811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/1e59c3bc/moment-with-locales.min.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"5a17b-656cf2ac03d68-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Op%2FRzChzQlqN84M797Or62btVwcn%2FUPV%2B%2BvJWIxTAnZCv2gI7gLMtvFhSTBnXV3h%2BaQzuzSm46ZCjxpACCaxVMWWMCpOUhwxvocTQ1WoZFxMXELVpFoCFsiYPE%3D\"}]}\r\ncf-ray: a1cf2bc208f7b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369019,"size_decoded":76296,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d458b68730a7330653700489333a7837","sha1":"4059aeca1d0b99aec8006b37a927f09d9c0e794d","sha256":"430725b95468277dcbccc27e08e3d873276c0082737310b0b1ad330392511847","sha512":"e363c4d2b77ec19da13577ed94cefc0527a1206cdeccd790bb38a18810af504077095c47bec4a117ceb0056c1039137134836504fbaaeeb1b859684d89354716","ssdeep":"6144:cHOUXP7AhVuhTDGfNXqh/IT3TSZWkcSO2dpmcsmhce5NuNWPllei+BJkWomDBT5D:afAhVuhTDGRk/W3TSZWkcSO2dpmFmhcp","tlshash":"c774c8cf63e66b8e4a142116cc3dad0d284d0f81d079db35bfba5187f51ca2846bab71","first_seen":"2023-03-08T01:19:33Z","last_seen":"2026-07-18T08:15:37.386044Z","times_seen":2625,"resource_available":true,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T05:43:47.764Z","timestamp":1784353427764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nx-powered-by: PHP/8.3.30\r\nset-cookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npumjQb9wZyd0dsrSb1h887xm7SucDlC%2BbEF9Ks2eZ07sw5m2EGcbj8PqXBsRaBSpD9qASxetWOX%2FWP4m8l0gPjDJOS4E73BcxN%2FmuPBcd4NXCYBzITNwAEDNNM%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1cf2bbc28e0b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"decimal.js","description":"","website":"https://mikemcl.github.io/decimal.js/","common_platform_enumeration":"","icon":"decimal.js.png","categories":["JavaScript libraries"]}],"data":{"size":78126,"size_decoded":14662,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2939)","md5":"8860d7cc78d7e987ba24e993349337e7","sha1":"f19adc0f5bb3f6d5fe18d6f18d9eab576338454d","sha256":"63f00e73452001ce9104c87da326e8935db43e360d4ad9362d8faf807d720a70","sha512":"d430d6e96344177997632e6ae9fb2e2f82304d3bb5312f05093b636ee9338822ceda2ffb08a2e9bf58f85acc82ed2075b1320be432e243ef35bc121b01a9286e","ssdeep":"768:0dq9nsNB2NMdvIioO5HwA5Algjjkbuq+Ez8vyiP:0dq9nsNB2NMtIioO5uInq+Ez+P","tlshash":"687332107bf1947e118362d0a5705f24fd965143e340e406fbae0baadff6e68853b64e","first_seen":"2026-07-18T05:44:30.519383Z","last_seen":"2026-07-18T05:44:30.519383Z","times_seen":1,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":89,"connect":17,"send":0,"wait":672,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7cddf9f/css/base.css","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.803Z","timestamp":1784353428803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7cddf9f/css/base.css HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"70f-656cf2ac20e40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2co52jqHEkaEfpp7U9H5ndvcdEkm8o0zVeVzor1TIyeDwwvH%2BBQuhHsijL52PWWZBRsUlolX1VD65FqeXCV2asz2%2FH%2BKZ9z2BGZAFwmMqEH%2F8jLaz6f8T8bvEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc1f8f2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1807,"size_decoded":1468,"mime_type":"text/css","magic":"ASCII text","md5":"2adc2c721cb06dd479c4d58244e50822","sha1":"3f544073112b5a7d4c5101b3cb17dd347c834acf","sha256":"4a40fcaf6f4037e5c2bb8679e2b6c570c2d208fee2798469ee904d49bd31c46e","sha512":"cd3534e554ea06d68ef03323a16532c63ae89d5d66d0f32bbc49d9585a0830eb50ff8c742e93ec4b9f6fce3d6f5bd301709c7740fb0dcbc0ca8f93ed33e481a8","ssdeep":"","tlshash":"233114a72c4412426cf6003af9fc5e882166f08aa49641d9b5c5c54bbe9ddeb3cf8d9c","first_seen":"2025-10-27T06:15:19.501282Z","last_seen":"2026-07-18T05:47:52.243408Z","times_seen":23,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/7958990f/jquery-migrate.min.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.810Z","timestamp":1784353428810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/7958990f/jquery-migrate.min.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"349b-656cf2ac03598-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6coI5YMDlBVVM0576P4wlj%2BThoXiySHum0UQ2xde6HZegTzXxNk1Y0Etr%2FnXnp5aBk3UvSbAOs1N61BFtgz%2Fgls87t2fjGGO%2FHIFj6hUjnHu9fcNsinz%2B%2B%2Bey3s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc208f6b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4825\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13467,"size_decoded":5612,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13326)","md5":"a36b8e9cbfb4a675225aa408c4d15c0c","sha1":"fcd46de9c99e71ed586a850d877fd3b01e8269fd","sha256":"16eb18d9c6303cdd50ac58db5b2b116c5dcc4c43c89424f268f6d13fc599fb19","sha512":"403b23497d664ad048027357c77d5dcafc38c157478e89cec2b91a221a62225cea19409db08eb633042d1e9245f8da72d929929464913a8356402385a6a6ec3a","ssdeep":"192:arprDN+e3IUefKSfI0bP1CMjt9kdgOFWIa/aC3+sZv9LRS:arprx6PfK2P1CMjt8FWIa2sZVI","tlshash":"cf52c86db566b9714eb732b9b03bd30b71b205cd5a0d8940d19cc8f6287d89e812af68","first_seen":"2023-03-07T01:07:00Z","last_seen":"2026-07-18T05:47:52.258479Z","times_seen":10583,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arvax.xyz/tmp/assets/b3a97f40/decimalcustom.js","fqdn":"arvax.xyz","domain":"arvax.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arvax.xyz/","date":"2026-07-18T05:43:48.824Z","timestamp":1784353428824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arvax.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:29:21 GMT","end":"Wed, 26 Aug 2026 11:29:20 GMT"},"fingerprint":{"sha1":"BD:64:9B:4A:CD:A7:34:B6:0F:B7:62:3B:69:01:39:E0:3E:7E:D1:6C","sha256":"68:67:86:BA:26:B7:6C:03:7C:61:5A:4A:B6:6B:E2:9A:AB:4C:4E:7D:6C:AC:AE:A1:E6:B7:20:B8:6F:99:16:19"}}},"request":{"raw":"GET /tmp/assets/b3a97f40/decimalcustom.js HTTP/1.1\r\nHost: arvax.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://arvax.xyz/\r\nCookie: PHPSESSID=kqc3p7lcoa462mpgn4jif9jd0i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 05:43:49 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 17 Jul 2026 14:13:55 GMT\r\netag: \"22c7-656cf2ac058c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drvKVHw7QdOb3J4VI%2Fm4XPD1Wua8gaKkM2yMbfAwoHws5y4TDjIIuFvrzU4PJcbNsrKgvSsIbKKfS%2BeJ5UT9LvR66nTTyi6MaWmMAmNNlHRk56UHEX5XfEUlyNI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1cf2bc218ffb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 513\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8903,"size_decoded":1289,"mime_type":"text/javascript","magic":"ASCII text","md5":"80290d21b5a5aeccdcd6e89582e45456","sha1":"4e8d66e5705008d586b6749c30414912b6a266ae","sha256":"f52fdf7e54230bc39449c78c467e808d2c541639c91b495be475afa67dd1716a","sha512":"0aafa5f4bb3403e98ab744632da37d0aec7439ddd0e1dbe204f229ccf1cbdb1bbb99ea5921be5e4f8c21942eb9c872d55e9a0d623d19d07bd99c9c2f6225fa5e","ssdeep":"192:NqS6030d0R0h0d0T050h050N0R0B0F0p0x0p0x05070Z0P0x0V0B0l010d0Z0h08:NqSL","tlshash":"2302acdc2af7a02081abb03d4a2f51427439cdab18cdffa8f85d4b506f42d2b9a915d4","first_seen":"2023-03-07T01:41:53Z","last_seen":"2026-07-18T08:15:37.388261Z","times_seen":233,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"arvax.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}