{"report_id":"00148ff4-0c7d-4b1f-a26b-b099fd16a72d","version":6,"status":"done","tags":[],"date":"2026-05-08T21:14:23Z","url":{"schema":"https","addr":"anonymixer.com/","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":0,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"final":{"url":{"schema":"https","addr":"anonymixer.com/","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"title":"Anonymixer - Anonymous Bitcoin Mixer","dom":{"size":56053,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1992)","md5":"d8cf4c4da3ed208c643c1e81123e41f0","sha1":"96d0971fdbffda2676a2ee2356471328e2b6a038","sha256":"906ce213c1d50ec5cd4e133f46bf6a3a4be9cc202110edb1700329c542870294","sha512":"1b70765c4f09822cc5a449d1bcad5f2248c055d2a28b7a9f93f4187a8832a0bbe7bc3d400e259bcd2e11f632a688cf56a62a05cd353f94d8a5fc82b25fa7da6d","ssdeep":"384:QdfjAzvHFkhiHKydSEC2nwGIcbyYiiGk4F/7W9K7/gkjyRJiro43QIln2:Q5M7ayS+wGBbyYiiG1ly0dj6gro43rn2","tlshash":"1743bd31d4e53d7b11a381f46da0ab06ef92d687d90b6d4a3bec86d54fdaf468c03808","dom_hash":"domhasha660ebcf4150c019cf0e945f3430c1aa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"anonymixer.com/","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":0,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T21:14:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"anonymixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"anonymixer.com","ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"domain_registered":"2019-01-03","domain_rank":0,"first_seen":"2026-04-04T15:24:55.142312Z","last_seen":"2026-04-04T15:24:55.142312Z","alert_count":7,"request_count":7,"received_data":806128,"sent_data":5402,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"anonymixer.com/","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-13T19:21:03.420392Z","times_seen":218528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-13T19:27:31.191019Z","times_seen":654368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":true,"md5":"305b08d0843fd6f6f740ed560048b704","sha1":"ba8ab4f83de8493bc36422463868a0201918643d","sha256":"d1ffdb1d33484cc9da7b3e0e9d3bbc9dec190be37dc4baa3ecd505683c6c7287","sha512":"9f511ee7cf1869f319eeed5013208a2e31413c40cd4d2f4480eff9f777ea6456e02eb164dfa7f28e3636807643883f88190ebe021b356630255c1418aa193e19","ssdeep":"","tlshash":"4ba0020900436f567a06c2119979e75365f8d067ba676a7509bf5c3ee18fe184408e25","size":71,"data":"","first_seen":"2025-09-02T15:06:09.748542Z","last_seen":"2026-05-08T21:16:43.082759Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/assets/javascripts/anonymixer.js","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f1f2939b66a561e90b8842fdb268414","sha1":"bedf83ea435a8cea9742bcac237e71f321c14063","sha256":"7f3daf79d42e10e1a4e4112a7a4e2fd179aecad2a858ac13a1e35616bb0aa9f4","sha512":"0d4c50d79bba44e6821af1b17b941cc1d719d4244aea0ebde865e7ad09bdf4bfe6d124015131f57dba4bcc20e2179e4ccd4020c0262a5d3c0129c8d22764c22a","ssdeep":"6144:SDtJY1g6yz6fhv7RaMJXpyqjQEoN0qinilQf0m15hytlQgVqtChLgdzgmnWKMSkU:TVfpytls0m15hysu8g9bSktPHajn4o","tlshash":"7d64c7c1b905b2665326713266170046fe1f1e9032cf8f58f1e679a47f6cb56b02aef8","size":329445,"data":"","first_seen":"2026-05-08T21:14:28.505651Z","last_seen":"2026-05-08T21:16:43.079676Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"8013a8d2664e16146e089e00813b2103","sha1":"396d86238026eb579f138a2448ee7339ff1237c1","sha256":"fd038e98baa0428d5f951460d7bfe61601f591c5c36d364f251677364103d5f7","sha512":"1bac23a2f35d792a92288d0d151542913bd8a9704399f68cb87d7b13ceba11a22dfcacbd24e9f3b523dad1eb9e283df052c6094fcee2ecacfb5b618ac0ab8051","ssdeep":"","tlshash":"2b90020500425e457902c20155656703519450472666597508ba5c2de10f6044004525","size":52,"data":"","first_seen":"2025-09-02T15:06:09.750392Z","last_seen":"2026-05-08T21:16:43.085279Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"anonymixer.com/assets/fonts/cerebrisans/cerebrisans-regular.woff2","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anonymixer.com/","date":"2026-05-08T21:14:06.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 00:08:17 GMT","end":"Wed, 13 May 2026 00:08:16 GMT"},"fingerprint":{"sha1":"30:02:FD:89:18:8A:65:96:42:86:96:D6:CA:59:7E:27:C9:4A:BE:E3","sha256":"27:D0:9F:F8:5A:1C:7E:10:06:94:9D:55:44:4A:E9:9A:20:39:FC:0F:21:A0:D7:4B:AE:ED:8B:76:DE:08:F6:4A"}}},"request":{"raw":"GET /assets/fonts/cerebrisans/cerebrisans-regular.woff2 HTTP/1.1\r\nHost: anonymixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://anonymixer.com/assets/stylesheets/theme.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SESSION=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InVzZXJUb2tlbiI6ImEwNzhkZmZiLWFkZTktNDJlMy04ODNkLWZlMzE5MjY0NmRkMyIsImNzcmZUb2tlbiI6IjI2NzUwMjdjZWM5MDkyNzcwMTQwZTA2OTI4ZTBkMDJhZGM0NzhlMDAtMTc3ODI3NDg0MzQ0Mi05NjNhMDhhMTM4NTJjODVjM2Q5NTE2N2EifSwibmJmIjoxNzc4Mjc0ODQzLCJpYXQiOjE3NzgyNzQ4NDN9.vS0F5QZCCNey-4soNAXrhf3sPpa13p-_Ee17KOHWAmo\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 08 May 2026 21:14:06 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 27596\r\nConnection: keep-alive\r\nETag: \"b13a44a712597bccaf0bfcd61c4c89b6673ac618\"\r\nVary: Origin\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Thu, 31 Dec 2009 21:00:00 GMT\r\nOnion-Location: http://btcmixer2e3pkn64eb5m65un5nypat4mje27er4ymltzshkmujmxlmyd.onion/assets/fonts/cerebrisans/cerebrisans-regular.woff2\r\nReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nStrict-Transport-Security: max-age=63072000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27596, version 1.0","md5":"49d71b9db8c141f70ca8062dadea8dab","sha1":"86bc542ec420896f74f9e4f1259fea336f1b2003","sha256":"85ea6d781ed440e14548f11efec3410e1ad450418dceb93ca7b6884e64c61b42","sha512":"a93d64770f68bb7c5b926515375fb75664cd50acb7841542eb8902cfaed554f0fc6df4663c7a8193cd596e9c19e25ab8a7ec15ac10845e301a4300a326986c1b","ssdeep":"384:sYSbGRAzw2pSrHxVxYqehfL0glQ3gzzAjvc1/3CFbMVVJjbBl+Z1i8eYftHDS:sEQMHHe99TzzIc1/3WMBbb+LitYftHm","tlshash":"f0c2e1048e5fc5f7e830307c7e51c2acf9164864ae934289d685bd4976389cc9fc56f6","first_seen":"2024-08-19T15:13:39.561288Z","last_seen":"2026-05-08T21:16:43.06947Z","times_seen":11,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":932,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"anonymixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/assets/fonts/cerebrisans/cerebrisans-medium.woff2","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anonymixer.com/","date":"2026-05-08T21:14:06.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 00:08:17 GMT","end":"Wed, 13 May 2026 00:08:16 GMT"},"fingerprint":{"sha1":"30:02:FD:89:18:8A:65:96:42:86:96:D6:CA:59:7E:27:C9:4A:BE:E3","sha256":"27:D0:9F:F8:5A:1C:7E:10:06:94:9D:55:44:4A:E9:9A:20:39:FC:0F:21:A0:D7:4B:AE:ED:8B:76:DE:08:F6:4A"}}},"request":{"raw":"GET /assets/fonts/cerebrisans/cerebrisans-medium.woff2 HTTP/1.1\r\nHost: anonymixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://anonymixer.com/assets/stylesheets/theme.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SESSION=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InVzZXJUb2tlbiI6ImEwNzhkZmZiLWFkZTktNDJlMy04ODNkLWZlMzE5MjY0NmRkMyIsImNzcmZUb2tlbiI6IjI2NzUwMjdjZWM5MDkyNzcwMTQwZTA2OTI4ZTBkMDJhZGM0NzhlMDAtMTc3ODI3NDg0MzQ0Mi05NjNhMDhhMTM4NTJjODVjM2Q5NTE2N2EifSwibmJmIjoxNzc4Mjc0ODQzLCJpYXQiOjE3NzgyNzQ4NDN9.vS0F5QZCCNey-4soNAXrhf3sPpa13p-_Ee17KOHWAmo\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 08 May 2026 21:14:07 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 27756\r\nConnection: keep-alive\r\nETag: \"193dc560c62494d5a0dc3506c84a32b94bf4da27\"\r\nVary: Origin\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Thu, 31 Dec 2009 21:00:00 GMT\r\nOnion-Location: http://btcmixer2e3pkn64eb5m65un5nypat4mje27er4ymltzshkmujmxlmyd.onion/assets/fonts/cerebrisans/cerebrisans-medium.woff2\r\nReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nStrict-Transport-Security: max-age=63072000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27756, version 1.0","md5":"fe84e701e15335f33b4996efd79891c6","sha1":"fe542fe6cd06d14ee20c9b1750fd04301f82fb77","sha256":"313e9934c8fef6324342189122e2e0ee7f2a76193347cb67510678006fd4b358","sha512":"83c8f0d13a762d25ead297e3d7b03f844760725a81013efb67d8788f756170134dc2544ec7062dfc69f3c1bb6f9724268354ee09a685abcbd146974e819b712d","ssdeep":"384:W7+tT/Z1nZpYXMA7d6T4zpV+7bEAGg4tIp43cJFxwfAm6K8Rc/s9G5H/aOX8WC5A:WC1BUz4MA3vpXSAn8Ug5HA4s4xX3wVF2","tlshash":"47c2e04cc1245baac0bd3dd6cc67e3018383a165b06f954bf7679122c56c3619eb8fe2","first_seen":"2024-08-19T15:13:39.560604Z","last_seen":"2026-05-08T21:16:43.081574Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1058,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"anonymixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/img/custom/sprite/sprite-source.png","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonymixer.com/","date":"2026-05-08T21:14:06.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 00:08:17 GMT","end":"Wed, 13 May 2026 00:08:16 GMT"},"fingerprint":{"sha1":"30:02:FD:89:18:8A:65:96:42:86:96:D6:CA:59:7E:27:C9:4A:BE:E3","sha256":"27:D0:9F:F8:5A:1C:7E:10:06:94:9D:55:44:4A:E9:9A:20:39:FC:0F:21:A0:D7:4B:AE:ED:8B:76:DE:08:F6:4A"}}},"request":{"raw":"GET /img/custom/sprite/sprite-source.png HTTP/1.1\r\nHost: anonymixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonymixer.com/assets/stylesheets/theme.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SESSION=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InVzZXJUb2tlbiI6ImEwNzhkZmZiLWFkZTktNDJlMy04ODNkLWZlMzE5MjY0NmRkMyIsImNzcmZUb2tlbiI6IjI2NzUwMjdjZWM5MDkyNzcwMTQwZTA2OTI4ZTBkMDJhZGM0NzhlMDAtMTc3ODI3NDg0MzQ0Mi05NjNhMDhhMTM4NTJjODVjM2Q5NTE2N2EifSwibmJmIjoxNzc4Mjc0ODQzLCJpYXQiOjE3NzgyNzQ4NDN9.vS0F5QZCCNey-4soNAXrhf3sPpa13p-_Ee17KOHWAmo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 08 May 2026 21:14:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: \"429e7fa4fd8d49d9c20a6a49244fd1e2ee96c77b\"\r\nVary: Accept-Encoding,Origin\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Thu, 31 Dec 2009 21:00:00 GMT\r\nOnion-Location: http://btcmixer2e3pkn64eb5m65un5nypat4mje27er4ymltzshkmujmxlmyd.onion/img/custom/sprite/sprite-source.png\r\nReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nContent-Encoding: br\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 592, 8-bit colormap, non-interlaced","md5":"35df365b28d2505c1da3ab7c22950430","sha1":"63260cddee63176a767d4d2c7b0bca92c65cf4b6","sha256":"97528a73f4304a9a55fa8f19c51476804764cc271191860dff9b98f745a7a8ed","sha512":"600ba5d8787f50594f8c652c6079588c17bf6a7678a1f392fdbc1e2381dabaaf1032a64d0fa2d26afbdc2342cc9a0d84be88b60db572ea9a922d1a1be58b5ecb","ssdeep":"768:URw6h/L84zQ7c3zZiYmSYSiqw+LwVJohYwZgw3qhLL:URwwTJkc3diYbiqnLwVwt36LL","tlshash":"e3b2e125a07a489cce78e20d88b15e2ac6968db15edf776e740eb48610f3d153bc3bd1","first_seen":"2025-04-25T10:07:30.916Z","last_seen":"2026-05-08T21:16:43.070455Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1355,"timings":{"blocked":126,"dns":1,"connect":59,"send":0,"wait":1100,"receive":2,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"anonymixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/img/custom/anonymous-character.png","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonymixer.com/","date":"2026-05-08T21:14:06.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 00:08:17 GMT","end":"Wed, 13 May 2026 00:08:16 GMT"},"fingerprint":{"sha1":"30:02:FD:89:18:8A:65:96:42:86:96:D6:CA:59:7E:27:C9:4A:BE:E3","sha256":"27:D0:9F:F8:5A:1C:7E:10:06:94:9D:55:44:4A:E9:9A:20:39:FC:0F:21:A0:D7:4B:AE:ED:8B:76:DE:08:F6:4A"}}},"request":{"raw":"GET /img/custom/anonymous-character.png HTTP/1.1\r\nHost: anonymixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonymixer.com/assets/stylesheets/theme.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SESSION=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InVzZXJUb2tlbiI6ImEwNzhkZmZiLWFkZTktNDJlMy04ODNkLWZlMzE5MjY0NmRkMyIsImNzcmZUb2tlbiI6IjI2NzUwMjdjZWM5MDkyNzcwMTQwZTA2OTI4ZTBkMDJhZGM0NzhlMDAtMTc3ODI3NDg0MzQ0Mi05NjNhMDhhMTM4NTJjODVjM2Q5NTE2N2EifSwibmJmIjoxNzc4Mjc0ODQzLCJpYXQiOjE3NzgyNzQ4NDN9.vS0F5QZCCNey-4soNAXrhf3sPpa13p-_Ee17KOHWAmo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 08 May 2026 21:14:07 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: \"cc62070e129efc3b02a7031dfa56aea24444848a\"\r\nVary: Accept-Encoding,Origin\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Thu, 31 Dec 2009 21:00:00 GMT\r\nOnion-Location: http://btcmixer2e3pkn64eb5m65un5nypat4mje27er4ymltzshkmujmxlmyd.onion/img/custom/anonymous-character.png\r\nReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nContent-Encoding: br\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":34588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1022 x 1003, 8-bit colormap, interlaced","md5":"12b64dc5d71f7d5e7d1a31dd34ed3596","sha1":"f0e988fdee4b9b1fea41512a2c4e7b13db7f26c2","sha256":"22679b1fd78e60dcbc2322433a8899f45bf91e1454d284bd3612c189080b074b","sha512":"790078e23c51e88e329fcca2f35747006d3fdeefe91aeb9cb6ee50fb31fa8970dfc0084cc5f5250c4c7fafff5dc0758f5e7edebebe81491dc600dc1833ebc066","ssdeep":"768:PzGg3oXuZ+D9FvicqEky4aqQREXiiFBmAPCIHhF+OY:Lz3GbvyNqmBmAPDBFjY","tlshash":"d9f2f1e7a078b8d12578100b1d3a397c977eebbe97c6102327e3b236f7b48e52155280","first_seen":"2025-04-25T10:07:30.909305Z","last_seen":"2026-05-08T21:16:43.072459Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1582,"timings":{"blocked":125,"dns":1,"connect":59,"send":0,"wait":1317,"receive":14,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"anonymixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T21:14:01.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 00:08:17 GMT","end":"Wed, 13 May 2026 00:08:16 GMT"},"fingerprint":{"sha1":"30:02:FD:89:18:8A:65:96:42:86:96:D6:CA:59:7E:27:C9:4A:BE:E3","sha256":"27:D0:9F:F8:5A:1C:7E:10:06:94:9D:55:44:4A:E9:9A:20:39:FC:0F:21:A0:D7:4B:AE:ED:8B:76:DE:08:F6:4A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: anonymixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 08 May 2026 21:14:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding,Origin\r\nSet-Cookie: SESSION=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InVzZXJUb2tlbiI6ImEwNzhkZmZiLWFkZTktNDJlMy04ODNkLWZlMzE5MjY0NmRkMyIsImNzcmZUb2tlbiI6IjI2NzUwMjdjZWM5MDkyNzcwMTQwZTA2OTI4ZTBkMDJhZGM0NzhlMDAtMTc3ODI3NDg0MzQ0Mi05NjNhMDhhMTM4NTJjODVjM2Q5NTE2N2EifSwibmJmIjoxNzc4Mjc0ODQzLCJpYXQiOjE3NzgyNzQ4NDN9.vS0F5QZCCNey-4soNAXrhf3sPpa13p-_Ee17KOHWAmo; SameSite=Lax; Path=/; HTTPOnly\r\nOnion-Location: http://btcmixer2e3pkn64eb5m65un5nypat4mje27er4ymltzshkmujmxlmyd.onion/\r\nReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nContent-Encoding: br\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57217,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1959), with CRLF, LF line terminators","md5":"8b9c8acc6c25ca4abcc1e0082a2e769a","sha1":"80ca1bf46486bb420bcd6f73dea4cef7725e96e1","sha256":"5430ffdcb153568302e2243c0461f3980d8328f8fa4919163c69c21f1ed83aa7","sha512":"93eea7bc5e81b6be288849dbad083b7c0a14e084dcd0d5c0379deca7de1ae9da3027d6411affe48d02fc09a46b9cdd059728f096fa7c4c151841345d47de7935","ssdeep":"384:qdfjAzrrkxWFqPDP0W2j5voYvh1OrFMsRWfRq2gkHf8JBa9pu6IzHaiAFL:q5MCZc5voYvh1E7EJBH0ba9puXiFL","tlshash":"e1439b3294d53d7b01b781f45d64ab0aef92d187d50b6e0a3aec87c65feaf468d43808","first_seen":"2026-05-08T21:14:28.502008Z","last_seen":"2026-05-08T21:14:28.502008Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3619,"timings":{"blocked":1191,"dns":1065,"connect":62,"send":0,"wait":1231,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"anonymixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/assets/javascripts/anonymixer.js","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anonymixer.com/","date":"2026-05-08T21:14:04.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 00:08:17 GMT","end":"Wed, 13 May 2026 00:08:16 GMT"},"fingerprint":{"sha1":"30:02:FD:89:18:8A:65:96:42:86:96:D6:CA:59:7E:27:C9:4A:BE:E3","sha256":"27:D0:9F:F8:5A:1C:7E:10:06:94:9D:55:44:4A:E9:9A:20:39:FC:0F:21:A0:D7:4B:AE:ED:8B:76:DE:08:F6:4A"}}},"request":{"raw":"GET /assets/javascripts/anonymixer.js HTTP/1.1\r\nHost: anonymixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonymixer.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SESSION=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InVzZXJUb2tlbiI6ImEwNzhkZmZiLWFkZTktNDJlMy04ODNkLWZlMzE5MjY0NmRkMyIsImNzcmZUb2tlbiI6IjI2NzUwMjdjZWM5MDkyNzcwMTQwZTA2OTI4ZTBkMDJhZGM0NzhlMDAtMTc3ODI3NDg0MzQ0Mi05NjNhMDhhMTM4NTJjODVjM2Q5NTE2N2EifSwibmJmIjoxNzc4Mjc0ODQzLCJpYXQiOjE3NzgyNzQ4NDN9.vS0F5QZCCNey-4soNAXrhf3sPpa13p-_Ee17KOHWAmo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 08 May 2026 21:14:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 329445\r\nConnection: keep-alive\r\nETag: \"c29fe65f56e23253f001e98360cc0e643ca39a7e\"\r\nVary: Origin\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Thu, 31 Dec 2009 21:00:00 GMT\r\nOnion-Location: http://btcmixer2e3pkn64eb5m65un5nypat4mje27er4ymltzshkmujmxlmyd.onion/assets/javascripts/anonymixer.js\r\nReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nStrict-Transport-Security: max-age=63072000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":329445,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"data","md5":"5f1f2939b66a561e90b8842fdb268414","sha1":"bedf83ea435a8cea9742bcac237e71f321c14063","sha256":"7f3daf79d42e10e1a4e4112a7a4e2fd179aecad2a858ac13a1e35616bb0aa9f4","sha512":"0d4c50d79bba44e6821af1b17b941cc1d719d4244aea0ebde865e7ad09bdf4bfe6d124015131f57dba4bcc20e2179e4ccd4020c0262a5d3c0129c8d22764c22a","ssdeep":"6144:SDtJY1g6yz6fhv7RaMJXpyqjQEoN0qinilQf0m15hytlQgVqtChLgdzgmnWKMSkU:TVfpytls0m15hysu8g9bSktPHajn4o","tlshash":"7d64c7c1b905b2665326713266170046fe1f1e9032cf8f58f1e679a47f6cb56b02aef8","first_seen":"2026-05-08T21:14:28.505651Z","last_seen":"2026-05-08T21:16:43.079676Z","times_seen":2,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":122,"dns":1,"connect":59,"send":0,"wait":119,"receive":186,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"anonymixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.com/assets/stylesheets/theme.css","fqdn":"anonymixer.com","domain":"anonymixer.com","tld":"com"},"ip":{"addr":"89.147.111.62","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anonymixer.com/","date":"2026-05-08T21:14:04.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 00:08:17 GMT","end":"Wed, 13 May 2026 00:08:16 GMT"},"fingerprint":{"sha1":"30:02:FD:89:18:8A:65:96:42:86:96:D6:CA:59:7E:27:C9:4A:BE:E3","sha256":"27:D0:9F:F8:5A:1C:7E:10:06:94:9D:55:44:4A:E9:9A:20:39:FC:0F:21:A0:D7:4B:AE:ED:8B:76:DE:08:F6:4A"}}},"request":{"raw":"GET /assets/stylesheets/theme.css HTTP/1.1\r\nHost: anonymixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://anonymixer.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SESSION=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InVzZXJUb2tlbiI6ImEwNzhkZmZiLWFkZTktNDJlMy04ODNkLWZlMzE5MjY0NmRkMyIsImNzcmZUb2tlbiI6IjI2NzUwMjdjZWM5MDkyNzcwMTQwZTA2OTI4ZTBkMDJhZGM0NzhlMDAtMTc3ODI3NDg0MzQ0Mi05NjNhMDhhMTM4NTJjODVjM2Q5NTE2N2EifSwibmJmIjoxNzc4Mjc0ODQzLCJpYXQiOjE3NzgyNzQ4NDN9.vS0F5QZCCNey-4soNAXrhf3sPpa13p-_Ee17KOHWAmo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 08 May 2026 21:14:04 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: \"40e7ae4886699721e880647658adeb66e4d8ef8c\"\r\nVary: Accept-Encoding,Origin\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Thu, 31 Dec 2009 21:00:00 GMT\r\nOnion-Location: http://btcmixer2e3pkn64eb5m65un5nypat4mje27er4ymltzshkmujmxlmyd.onion/assets/stylesheets/theme.css\r\nReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nContent-Encoding: br\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298898,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65288)","md5":"c3dc2d30dadd87064228b42726abb348","sha1":"183e94728382e36ef3a7e5d2788b969422f24575","sha256":"7cd9e76a11fc8cdaaaff6b9a17f35a3d4fa14906c84cad54ff54c9d6fe7322b5","sha512":"d66401f7dd026e9bf1f50e1081d2707483208df670906e2b4133c2c4c6385e5bb30c6bef941a2d55cecc9c767a3abfae3d879fd08b944a0aaf38ea28a9c1a48e","ssdeep":"3072:36A8EJVMUd0sNLiimQQNk6hNO6yiXnc2G5:36AzVMUd0sNLiimQQNk6hNO6yQnc26","tlshash":"7d54a7a9f9d03519a597c32ed0d0b6b82d1f4141e7620ebff2677b54cb891ca1a23e0d","first_seen":"2026-05-08T21:14:28.50893Z","last_seen":"2026-05-08T21:16:43.07715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2033,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2032,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"anonymixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}