{"report_id":"7fb5cdc9-46be-4bc5-a070-652909f2cc30","version":6,"status":"done","tags":["opendir"],"date":"2026-03-08T11:46:41Z","url":{"schema":"http","addr":"aresxx.serv00.net","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":0,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"final":{"url":{"schema":"https","addr":"aresxx.serv00.net/","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"title":"Index of /","dom":{"size":745,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b1d3f392fc027591314ac7921706ade5","sha1":"58552f32f70327859fff35c76578a65eb025f7a9","sha256":"bfe2bfce70a5e0bb828f0516cdbe31f5f4c184ba28e947878ce58d53491dc3fb","sha512":"449effa53689ab59ba58b24f92832b98c8862282912a21b347423504170755e5b1da9f6bded2ef319ec6fe70446038190ee07e7897a6e0d682c01a11a03d4afc","ssdeep":"","tlshash":"4e0168c6ddf63255eb6557a19c75f71d0b5a11c8c2309614706d3dc3df896a00f162d1","dom_hash":"domhashb20b440fb27205ee892c151b01a29aab","first_seen":"2026-03-08T11:46:43.471306Z","last_seen":"2026-03-08T11:48:11.060517Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aresxx.serv00.net","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":0,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-12T11:46:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null},{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"summary":[{"fqdn":"aresxx.serv00.net","ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"2019-06-03","domain_rank":0,"first_seen":"2026-03-08T11:46:42.037311Z","last_seen":"2026-03-08T11:46:42.037311Z","alert_count":103,"request_count":34,"received_data":111804,"sent_data":20431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":68386,"sent_data":1082,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":20218,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/main.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c02e946fe528329cbd6a7377e12d4566","sha1":"570790a9b79df546ce021088e1e68bbd511f2a43","sha256":"26fabe452b0cd62327c2f5139c56173703a035442dd890565af1e72a8864cb84","sha512":"94deb8d40d3c42fe925d5bd7cbb2e95aea655afae26c53a7ba2793d9f2e2fccd9582ceec5ef120cc68d22efdeaf5019e243cf64d867a975e58bbd134d14d3f81","ssdeep":"96:gGKupQHToU8oMLLXlHPX58m1pw/WCytfOxH766wyJIT0OyQxkMzC7QvA5mmIzJ1L:gGFQHTqoSPXT1prCytWxyyJIT0OyLJmX","tlshash":"bfc11bb6713d967302df27333175a38972321098159f824440ad8a25133ceaeb5f7fd4","size":5791,"data":"","first_seen":"2025-12-29T02:55:37.254872Z","last_seen":"2026-08-14T03:01:54.599996Z","times_seen":1305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aresxx.serv00.net/","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T11:46:20.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nset-cookie: anp-anubis-auth=; Path=/; Expires=Sun, 08 Mar 2026 11:45:20 GMT; Max-Age=0; SameSite=Lax\nanp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446; Path=/; Expires=Sun, 08 Mar 2026 12:16:20 GMT; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4441,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2504)","md5":"0267b59aebba33821cec48e17dd6f4f2","sha1":"a4c3d17b125985d85fe98f9bdd1a697fed0a256c","sha256":"e006462f9520b9d4b98c429ce443d0ea07e3c68a8402f2bd6096a8a2a73df150","sha512":"f369289986f1106b717939a823d43e36cd927f422ab0cafaed3e40b3395d0f61945bd7996f0c619fddbb84679d8492f9f6f69834db3f4fb0f9af213e71673a88","ssdeep":"96:zJawDlRb9/Gt0EmiTCwbf8Ox2dDvZscvEUtrNnFN+qGtuDsb:TlRb9eyEmiewA+0DhscvBNnBob","tlshash":"7191e8139c6ac04e0e834dd53ba0a79c7b6ec0178b16cc1879ec64669f867bc42776dc","first_seen":"2026-03-08T11:46:43.473875Z","last_seen":"2026-03-08T11:46:43.473875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1293,"timings":{"blocked":588,"dns":81,"connect":58,"send":0,"wait":117,"receive":0,"ssl":446},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/xess/xess.min.css?cachebuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:21.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/xess/xess.min.css?cachebuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 57569\r\nlast-modified: Thu, 05 Mar 2026 13:00:09 GMT\r\netag: \"69a97e59-e0e1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57569,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57569), with no line terminators","md5":"94e91f9f4856772ce995d2a09616351f","sha1":"befdbf8f3029f633d7e7b2dbfeb4c6c066136d45","sha256":"16f9eba9b1bf4cff7d7656cdfe9b4a9c088ee3ac4fc556371774a989938b41e3","sha512":"3d7bffadf80655bf1d6b38be94b2f76911e444f246de6bf2cf735cad8ddf033456cf6bd350923589181d388b7382f2bff2b861cb7ffb5b155cf32c4b0c95487e","ssdeep":"768:1GTdUvzHen7M2HeLMiMMSZJIftllvfNAW037h+TV7hXeQlgCFS/MhA0BQuMIbUCP:IUp8PMKClllvlAv0VJeQTvhViaTSGew","tlshash":"504341378a0994b06d787eabcba7390d45b8f58398c357c890ad1d64dd3ef0a394f258","first_seen":"2026-03-07T00:56:39.208095Z","last_seen":"2026-03-13T12:07:41.145264Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":968,"receive":749,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/locales/en.json","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:23.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/locales/en.json HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aresxx.serv00.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:22 GMT\r\ncontent-type: application/json\r\ncontent-length: 5630\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5630,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c56ae0b6f72f0437ca39e0f044f6d518","sha1":"11491b35166ac3fe8e8be27547c5ee8ba5020627","sha256":"1e7bc10f8c46bd794e72a6ba0cb0f3f51d6fb7545958b7d89f9c9ae6dc05b1cb","sha512":"779087d8bf39d3a9928129f6c6b33ffabd64104ec39d626202205e1f355304baaec5902c26e2a31e39ea3c031e042d3479be014b08632115ef28e6762646aacf","ssdeep":"96:iD8r9nFYpVV+qGtsA+XpRV7ZkvRpUDIeqAODR3N5tJxgnXa1BNw:Rr9OVVZBXp/7Zkpq8eEDRntXAqc","tlshash":"1bc1a82bd948112709c202d1a245a6e7bb51ce6b4320371c5b8b612f16de93f8377dfd","first_seen":"2026-02-23T07:27:07.586252Z","last_seen":"2026-08-14T03:01:54.654991Z","times_seen":730,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:23.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aresxx.serv00.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 23:57:11 GMT\r\nexpires: Thu, 04 Mar 2027 23:57:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301752\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-14T03:47:50.614182Z","times_seen":261598,"resource_available":false,"data":null}},"time_used":1503,"timings":{"blocked":651,"dns":1,"connect":59,"send":0,"wait":126,"receive":74,"ssl":587},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/favicon.ico","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:30.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446; anp-anubis-auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhY3Rpb24iOiJDSEFMTEVOR0UiLCJjaGFsbGVuZ2UiOiIwMTljY2Q0NS0wZDk5LTc3ODctYTYwNy1kZjMxODE5ZmY0NDYiLCJleHAiOjE3NzM1NzUxODQsImlhdCI6MTc3Mjk3MDM4NCwibWV0aG9kIjoiZmFzdCIsIm5iZiI6MTc3Mjk3MDMyNCwicG9saWN5UnVsZSI6ImFjOTgwZjQ5YzRkMzVmYWIiLCJyZXN0cmljdGlvbiI6ImRhOWFkZDU5MmQ3ZWI5Y2NhNzcwNWNiNDg3MGQ3ZmQ0ZTk3MThjY2Q1MTQ4NmM0MjYxYTcyN2E4ZDU2Njk2MGQifQ.3D1LHlUab8NEFpVjmYzeizj9Nb0f3_8R5T038MtRqv779yRAXP53or2-aMkFb1TzHxx_77Uf-T-E5_o080RkAQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:30 GMT\r\ncontent-type: text/html\r\ncontent-length: 2645\r\netag: \"6695c3fb-a55\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2645,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d26c2f3de92265ad78114f62378b76ff","sha1":"f6712226583319e17f597d28ce60334f723eaedb","sha256":"80384391957848665eaea84e57eca5e408c2761ca1c6f8253de62180d7c6ef21","sha512":"d63dc6cacb11e5f56a7082f188ac46181b925d5b4417e0c494d53a9ab042d1c7af93685f136bca2b3e213bae6149892dfbd2b2e8d3f0767c475f0ec860e51a4b","ssdeep":"","tlshash":"5d5164278aa7921a7442c0e47be3a75277168287d10ecdac7a5da1c9cf805f4d5b328c","first_seen":"2024-12-03T05:44:10.426436Z","last_seen":"2026-07-07T10:09:52.822734Z","times_seen":19,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/img/pensive.webp?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:21.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/img/pensive.webp?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11324\r\nlast-modified: Wed, 04 Mar 2026 17:54:27 GMT\r\netag: \"69a871d3-2c3c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41d0a0b35ecb280c4d6558ab996c37e2","sha1":"d39b882bfa5133e5c915b554daf8da612dffaecc","sha256":"34253f00628fb569fbcb9b6237114896e1727200500504831dcabdb3579bf1b0","sha512":"ad807b810d5413b4f3d06971ba1217726978d7e7b45403564f41d6bab2181416e502ad9f0ba7fb5efa7dbef1801bdafb2ec0e62d77bec8f348de36244be81518","ssdeep":"192:OVGww2vnppFEw77nCPCy5eS0YKBTnTlWkdBKWfhl0LsKbSZ/hvk+dNqfYTFa:OUInFEw77naCy5eDBNXdBK0hW72k+vTo","tlshash":"ff32ae3ab7bd0326e940bb78c4ec9e19886e184d57748bb2c644b07825b1dd2fa115bc","first_seen":"2026-03-05T17:26:40.670166Z","last_seen":"2026-07-25T08:11:58.041157Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1828,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:23.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 7378\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7378,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5951)","md5":"a02fea9652fbaf3a7ec9ea444605e22b","sha1":"9fc8c7107b662d9f88eea4de042ca9e96845f6fc","sha256":"b78b9a584956e9b8cc79241a0b88b820f3bad3ad1a94114a972651f545d815ec","sha512":"a4b24ddd3460d522aced7cc6e2a2109d0bbed16ea551ea24d28a51f09746d8444cfb6e688f334f0c5e96674598bb8ba0d7cd1df033e7939e549f38dcfc4513fc","ssdeep":"192:gGFQHTqoN60k88kjMvvGgDVeQ0a4NieGghLdWJ+:gGF6qoNg8RAvGgDVZQNiLghLdWA","tlshash":"6be129c4ba95623043db62b240eb8c8fa23ea434350d045cb529e9f63575c6d867bfb9","first_seen":"2025-09-19T08:25:05.601775Z","last_seen":"2026-08-14T03:01:54.702722Z","times_seen":948,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/main.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:21.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/main.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5791\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5791,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4373)","md5":"c02e946fe528329cbd6a7377e12d4566","sha1":"570790a9b79df546ce021088e1e68bbd511f2a43","sha256":"26fabe452b0cd62327c2f5139c56173703a035442dd890565af1e72a8864cb84","sha512":"94deb8d40d3c42fe925d5bd7cbb2e95aea655afae26c53a7ba2793d9f2e2fccd9582ceec5ef120cc68d22efdeaf5019e243cf64d867a975e58bbd134d14d3f81","ssdeep":"96:gGKupQHToU8oMLLXlHPX58m1pw/WCytfOxH766wyJIT0OyQxkMzC7QvA5mmIzJ1L:gGFQHTqoSPXT1prCytWxyyJIT0OyLJmX","tlshash":"bfc11bb6713d967302df27333175a38972321098159f824440ad8a25133ceaeb5f7fd4","first_seen":"2025-12-29T02:55:37.254872Z","last_seen":"2026-08-14T03:01:54.599996Z","times_seen":1305,"resource_available":true,"data":null}},"time_used":2001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2001,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:23.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aresxx.serv00.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 00:03:06 GMT\r\nexpires: Thu, 04 Mar 2027 00:03:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387797\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-14T03:33:07.732413Z","times_seen":256529,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":204,"dns":1,"connect":60,"send":0,"wait":127,"receive":54,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/favicon.ico","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:21.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 2645\r\netag: \"6695c3fb-a55\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2645,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d26c2f3de92265ad78114f62378b76ff","sha1":"f6712226583319e17f597d28ce60334f723eaedb","sha256":"80384391957848665eaea84e57eca5e408c2761ca1c6f8253de62180d7c6ef21","sha512":"d63dc6cacb11e5f56a7082f188ac46181b925d5b4417e0c494d53a9ab042d1c7af93685f136bca2b3e213bae6149892dfbd2b2e8d3f0767c475f0ec860e51a4b","ssdeep":"","tlshash":"5d5164278aa7921a7442c0e47be3a75277168287d10ecdac7a5da1c9cf805f4d5b328c","first_seen":"2024-12-03T05:44:10.426436Z","last_seen":"2026-07-07T10:09:52.822734Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1605,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:22.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 08 Mar 2026 11:46:23 GMT\r\ndate: Sun, 08 Mar 2026 11:46:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19532,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"29573797cf2c35117e1b66f9f5a8d8db","sha1":"24a25e950b173801a2f0bd3ce20bb9912f725930","sha256":"f68fe943272dc76197ade3669bd9edc44cb8f00013c0f9268477e2e5684eccba","sha512":"3939cbeea0bb7dd2ac9d6f11f52f06075cf9f595e86d40b85a041bf828890a7d0faaeec3dd2e904a2d48b5e8c1d04ca66ec296bf5e32c802829a00cf9ca37c19","ssdeep":"384:4353m/R/lFx7u7Up8pTHskcCkhkx+kRkg1kUqY4nkbk3kk9fw95969W9yN9/qY4I:M1EVhYEMTHFCiFyg2UfIUk+H00YNRYjw","tlshash":"22921c91086ba004db830cd223ce7e36ff0fa2506445d579abfe1a9abcdbc66536571c","first_seen":"2026-03-07T11:22:54.48402Z","last_seen":"2026-08-13T08:33:43.216513Z","times_seen":43,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":220,"dns":1,"connect":53,"send":0,"wait":118,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/api/pass-challenge?id=019ccd45-0d99-7787-a607-df31819ff446\u0026response=00218e3e5f27770c1d989e7c49fae459602a35099cd65f831958f55197ec236b\u0026nonce=5376\u0026redir=https%3A%2F%2Faresxx.serv00.net%2F\u0026elapsedTime=994","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T11:46:24.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/api/pass-challenge?id=019ccd45-0d99-7787-a607-df31819ff446\u0026response=00218e3e5f27770c1d989e7c49fae459602a35099cd65f831958f55197ec236b\u0026nonce=5376\u0026redir=https%3A%2F%2Faresxx.serv00.net%2F\u0026elapsedTime=994 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 49\r\nlocation: https://aresxx.serv00.net/\r\nset-cookie: anp-anubis-auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhY3Rpb24iOiJDSEFMTEVOR0UiLCJjaGFsbGVuZ2UiOiIwMTljY2Q0NS0wZDk5LTc3ODctYTYwNy1kZjMxODE5ZmY0NDYiLCJleHAiOjE3NzM1NzUxODQsImlhdCI6MTc3Mjk3MDM4NCwibWV0aG9kIjoiZmFzdCIsIm5iZiI6MTc3Mjk3MDMyNCwicG9saWN5UnVsZSI6ImFjOTgwZjQ5YzRkMzVmYWIiLCJyZXN0cmljdGlvbiI6ImRhOWFkZDU5MmQ3ZWI5Y2NhNzcwNWNiNDg3MGQ3ZmQ0ZTk3MThjY2Q1MTQ4NmM0MjYxYTcyN2E4ZDU2Njk2MGQifQ.3D1LHlUab8NEFpVjmYzeizj9Nb0f3_8R5T038MtRqv779yRAXP53or2-aMkFb1TzHxx_77Uf-T-E5_o080RkAQ; Path=/; Expires=Sun, 15 Mar 2026 11:46:24 GMT; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":803,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":5534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T11:46:30.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aresxx.serv00.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446; anp-anubis-auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhY3Rpb24iOiJDSEFMTEVOR0UiLCJjaGFsbGVuZ2UiOiIwMTljY2Q0NS0wZDk5LTc3ODctYTYwNy1kZjMxODE5ZmY0NDYiLCJleHAiOjE3NzM1NzUxODQsImlhdCI6MTc3Mjk3MDM4NCwibWV0aG9kIjoiZmFzdCIsIm5iZiI6MTc3Mjk3MDMyNCwicG9saWN5UnVsZSI6ImFjOTgwZjQ5YzRkMzVmYWIiLCJyZXN0cmljdGlvbiI6ImRhOWFkZDU5MmQ3ZWI5Y2NhNzcwNWNiNDg3MGQ3ZmQ0ZTk3MThjY2Q1MTQ4NmM0MjYxYTcyN2E4ZDU2Njk2MGQifQ.3D1LHlUab8NEFpVjmYzeizj9Nb0f3_8R5T038MtRqv779yRAXP53or2-aMkFb1TzHxx_77Uf-T-E5_o080RkAQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:30 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-length: 803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":803,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"77c0f7b054704e58ac9f05afccd45219","sha1":"93af6c245fc26c18fe76720e33dc00309539ef8b","sha256":"a492feceee76315cde11f4886e13e3b692fcf2e5ed94687feabfcac607407f54","sha512":"b02ff996c432b1c4da9e4f627aea8a50a5ff90dce463da2a920a02b72ceee59d5b8b6f36643fd225e7b7100be3cc2dbaeea89ac3d5654bb9fd9bc3a07abaaf56","ssdeep":"","tlshash":"ae01c9c6cdf13394e77517e0a872e71e0b1612c882709618302d3cc3df8a6a40f0a2d1","first_seen":"2026-03-08T11:46:43.481737Z","last_seen":"2026-03-08T11:48:11.077414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Audit - Open directory","verdict":"none","severity":"audit","comment":"","tags":["opendir"],"meta":null}]}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/img/happy.webp?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"128.204.223.94","port":443,"asn":57367,"as":"Atman Sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:21.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/img/happy.webp?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 08 Mar 2026 11:46:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9814\r\nlast-modified: Wed, 04 Mar 2026 17:54:25 GMT\r\netag: \"69a871d1-2656\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25381fdc040c3cb2fcdc7c71cdb570b6","sha1":"796fda9d4fdedb56103b2a7195a5b0a02ba2a5a7","sha256":"cf61e5c06edd82b23e22ecc47e57c647413489cdc3e8f87e827a7b67cf89a9ff","sha512":"0fd3c8247b3fc8b8b0e23421a3347e3cb827c037cbe5bb003b62b4978cdb2677e032dedce73bd5651fbe8faa5f8c30bf2cc5692c3da66f2e03906127d484589b","ssdeep":"192:qVGww2vFA+R7SUj6mvAGdudn+UT7RCmSMw9lGunBeMLm7yiCYgz:qUINAS7ZNvAgut1Iww9lGu0MLoI","tlshash":"07129e9042dda335d688cdb042e90feb57a4306a4459ab7e8310c2bbeff75e385404e6","first_seen":"2026-03-05T17:26:40.672841Z","last_seen":"2026-07-25T08:11:58.046355Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1828,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aresxx.serv00.net/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0","fqdn":"aresxx.serv00.net","domain":"serv00.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aresxx.serv00.net/","date":"2026-03-08T11:46:24.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.serv00.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 11:23:50 GMT","end":"Wed, 20 May 2026 11:23:49 GMT"},"fingerprint":{"sha1":"72:13:31:70:A0:8A:CC:4F:41:F0:F6:42:3F:0E:0F:3E:0B:F1:93:CF","sha256":"56:96:04:79:04:5C:7D:4D:1D:29:88:E9:64:BE:17:D1:98:D4:40:C6:11:8B:17:95:F3:5F:BE:E2:78:55:A8:B0"}}},"request":{"raw":"GET /.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.25.0 HTTP/1.1\r\nHost: aresxx.serv00.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aresxx.serv00.net/\r\nCookie: anp-anubis-cookie-verification=019ccd45-0d99-7787-a607-df31819ff446\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T03:51:58.108275Z","times_seen":17880330,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-08","alert":"Phishing Block","trigger":"aresxx.serv00.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"aresxx.serv00.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}