{"report_id":"37072402-bd3e-4364-b918-206609f7b564","version":0,"status":"done","tags":[],"date":"2026-06-08T15:59:31Z","url":{"schema":"http","addr":"whirmixer.com","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"title":"Whir Mixer - Protect Your Crypto Privacy","dom":{"size":52923,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (603)","md5":"222aa7f6fe6245d8d44b73e8d576e2b1","sha1":"ce624081e117625c573862af9cfc3f5aa4b65a54","sha256":"1582b765df17a783a2ae347766a421153cfd479c21d9bae2593d5ed22a73bf67","sha512":"cbbedcdf80f17803c04a5b61280f579f11ac40ee490f50c9a90ffa5dc8547adad0dcda70bcd58ae5191a0fc21b3a48a8d75bc7b2ce4aebb445bddbd742a2c43b","ssdeep":"768:9n3BjZFiqrelj9R5yAYbuhMqV4gpqlRr3fKra3aDcx3VkoaeMrjPb:9n3BjZNezyAYjwyNJaeyjD","tlshash":"f133602165f4223306d7c0802ab68b2fbf86c24bde2a155576ac87d56fe3c9acd3355c","dom_hash":"domhash31a283d02763d5cff9b6b04472a2aafa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"whirmixer.com","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T15:59:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"whirmixer.com","ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-19","domain_rank":0,"first_seen":"2026-04-04T15:14:43.901691Z","last_seen":"2026-06-04T15:29:16.825069Z","alert_count":32,"request_count":16,"received_data":511918,"sent_data":8315,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcd33b440e223b611f6cb9725cf68d7c","sha1":"365edf47377ad21fc56d6ce1652721f96b77ee93","sha256":"4701566211d9f7a8fa89ccb6d185d7980938775b799f01779ec5f6a7ea95c865","sha512":"2ee09e7bfb3eba894480872ba7ce862d488d6c240da39c4343634fdcb86148bcaea5da1d7971ae075e297a985c86143faec05a714c994fd03edd3a7eebd66607","ssdeep":"","tlshash":"659004003f10c750117705440430c044100001f0c10cc1dd01d3110557c43c77c13175","size":43,"data":"","first_seen":"2025-10-21T03:29:17.708155Z","last_seen":"2026-07-13T01:51:04.385536Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ce0487cb2445b9d22816bf300b6dd8a","sha1":"38c2fdee0a0b82b43c418500ae59320b3b84da7b","sha256":"fa792e77d5d7a120d37049995d748b457f363010cd79d92e0de697fcb6570e56","sha512":"27b7beb0b6ee9054e75eca5e0b65fb42b9d1b47279abf72e736b943f3f197da504161a07c8887278b3e8614aff6b3b6e66d7cf28bc28537ef2f043e814ad79be","ssdeep":"","tlshash":"39c00200f15e71c46e37150331f151405f4854c550dd4005755cc8553f75651f415177","size":143,"data":"","first_seen":"2026-06-08T15:59:34.477137Z","last_seen":"2026-07-13T01:51:04.386062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dd7afe8f0e8814c06ad719b59fed53c","sha1":"e2f1db543f84d0dc97b5624686b0d0745a7eaab1","sha256":"62e37395566537c9bd1ecf19036a1845cbd49f83bf296afb72457fce7d380d38","sha512":"ba4552acec84826a57ef8bf776abb40ea98151c908789f167ab953d7eac1da58246b9c0c6a462ae6dc52618e70628481da93732f27ec5f48ac1e348722982624","ssdeep":"","tlshash":"bfb00200715d31cd6b77150372f140515f5b35d550ed4005f59cc45517f5651f415d77","size":127,"data":"","first_seen":"2026-06-08T15:59:34.478118Z","last_seen":"2026-07-13T01:51:04.387226Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/packages/jquery/jquery-3.6.0.min.js","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-17T22:37:08.702294Z","times_seen":491482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/js/scripts.min.js","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d1cda2a69b6648b6f58ab8a9cbdea3d","sha1":"a1d4270392af16b14f2d660a44458695fc179579","sha256":"dfe7973aaafa16c656efb7f11f57132f84c2bc6f3629a005ac1e88f2731d4d24","sha512":"0c1a63a33ac30ec4e9cb39d73ed1dec055387c449ee65cfde5ba17ee01bb6cd2c9aeeddd683a4795101fac4e9bb4ca90ada9c34913b5dce800e5bce5b8502fc7","ssdeep":"384:WoXMMhJtx0AOvHXKjKEPRnCjB1JWKbZZ3tpn:Wo84Jtx0VXKpPRn2x","tlshash":"8282e959b3203a6f52fb63f3306bde05a3f219a7960e8154d13e90765e70442ba1bf1e","size":18776,"data":"","first_seen":"2025-09-03T16:18:02.965957Z","last_seen":"2026-07-13T01:51:04.381689Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcd33b440e223b611f6cb9725cf68d7c","sha1":"365edf47377ad21fc56d6ce1652721f96b77ee93","sha256":"4701566211d9f7a8fa89ccb6d185d7980938775b799f01779ec5f6a7ea95c865","sha512":"2ee09e7bfb3eba894480872ba7ce862d488d6c240da39c4343634fdcb86148bcaea5da1d7971ae075e297a985c86143faec05a714c994fd03edd3a7eebd66607","ssdeep":"","tlshash":"659004003f10c750117705440430c044100001f0c10cc1dd01d3110557c43c77c13175","size":43,"data":"","first_seen":"2025-10-21T03:29:17.708155Z","last_seen":"2026-07-13T01:51:04.385536Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ce0487cb2445b9d22816bf300b6dd8a","sha1":"38c2fdee0a0b82b43c418500ae59320b3b84da7b","sha256":"fa792e77d5d7a120d37049995d748b457f363010cd79d92e0de697fcb6570e56","sha512":"27b7beb0b6ee9054e75eca5e0b65fb42b9d1b47279abf72e736b943f3f197da504161a07c8887278b3e8614aff6b3b6e66d7cf28bc28537ef2f043e814ad79be","ssdeep":"","tlshash":"39c00200f15e71c46e37150331f151405f4854c550dd4005755cc8553f75651f415177","size":143,"data":"","first_seen":"2026-06-08T15:59:34.477137Z","last_seen":"2026-07-13T01:51:04.386062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dd7afe8f0e8814c06ad719b59fed53c","sha1":"e2f1db543f84d0dc97b5624686b0d0745a7eaab1","sha256":"62e37395566537c9bd1ecf19036a1845cbd49f83bf296afb72457fce7d380d38","sha512":"ba4552acec84826a57ef8bf776abb40ea98151c908789f167ab953d7eac1da58246b9c0c6a462ae6dc52618e70628481da93732f27ec5f48ac1e348722982624","ssdeep":"","tlshash":"bfb00200715d31cd6b77150372f140515f5b35d550ed4005f59cc45517f5651f415d77","size":127,"data":"","first_seen":"2026-06-08T15:59:34.478118Z","last_seen":"2026-07-13T01:51:04.387226Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcd33b440e223b611f6cb9725cf68d7c","sha1":"365edf47377ad21fc56d6ce1652721f96b77ee93","sha256":"4701566211d9f7a8fa89ccb6d185d7980938775b799f01779ec5f6a7ea95c865","sha512":"2ee09e7bfb3eba894480872ba7ce862d488d6c240da39c4343634fdcb86148bcaea5da1d7971ae075e297a985c86143faec05a714c994fd03edd3a7eebd66607","ssdeep":"","tlshash":"659004003f10c750117705440430c044100001f0c10cc1dd01d3110557c43c77c13175","size":43,"data":"","first_seen":"2025-10-21T03:29:17.708155Z","last_seen":"2026-07-13T01:51:04.385536Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ce0487cb2445b9d22816bf300b6dd8a","sha1":"38c2fdee0a0b82b43c418500ae59320b3b84da7b","sha256":"fa792e77d5d7a120d37049995d748b457f363010cd79d92e0de697fcb6570e56","sha512":"27b7beb0b6ee9054e75eca5e0b65fb42b9d1b47279abf72e736b943f3f197da504161a07c8887278b3e8614aff6b3b6e66d7cf28bc28537ef2f043e814ad79be","ssdeep":"","tlshash":"39c00200f15e71c46e37150331f151405f4854c550dd4005755cc8553f75651f415177","size":143,"data":"","first_seen":"2026-06-08T15:59:34.477137Z","last_seen":"2026-07-13T01:51:04.386062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dd7afe8f0e8814c06ad719b59fed53c","sha1":"e2f1db543f84d0dc97b5624686b0d0745a7eaab1","sha256":"62e37395566537c9bd1ecf19036a1845cbd49f83bf296afb72457fce7d380d38","sha512":"ba4552acec84826a57ef8bf776abb40ea98151c908789f167ab953d7eac1da58246b9c0c6a462ae6dc52618e70628481da93732f27ec5f48ac1e348722982624","ssdeep":"","tlshash":"bfb00200715d31cd6b77150372f140515f5b35d550ed4005f59cc45517f5651f415d77","size":127,"data":"","first_seen":"2026-06-08T15:59:34.478118Z","last_seen":"2026-07-13T01:51:04.387226Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/favicons/android-icon-192x192.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:09.148Z","timestamp":1780934349148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/favicons/android-icon-192x192.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:09 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=6,i=?0\r\netag: \"68a55ddd-264e\"\r\nexpires: Tue, 09 Jun 2026 15:59:09 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Va9gXMA%2F13lRoEhhWDDhu4C5i%2BR5YQZA6MlDo2ECgkVq656fzXbh22UnzKqD8KjgwiUKnmK6hzLT2VY3b2TGAoFvLZQtQoCsmEQyUsF3G3arIyp8xrLPNEgL4GExzJqm\"}]}\r\ncontent-length: 9806\r\ncf-ray: a0891a22395e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9806,"size_decoded":10529,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"2e4f178ad85c5f6754864c1866e23d80","sha1":"5d130987320d11beab70042e8fb0db61e139cbdc","sha256":"d48e541b3428269a6c449f235769811bed976ae0ce392a9c4d559fe14ecf0d03","sha512":"6e3102822a31c4298f2ac280a2348b3e5acf57ec8812628f08cd6925511cc0a634863a82f1c9fa3286afaddd88b893f25c94762b021e8125c7696dc836bcdd66","ssdeep":"192:SHikeGry0b4aEQXmkPxrpHXPqy4NWBnFo/8HCTWisgrLzZMolIt:SHik1pvXmkZNiRNWBnF+8H2zhMvt","tlshash":"ab128ea436e800b204fa7ebff9f558a41952b64cb75b0fb4f8200dab7fb0c55068459a","first_seen":"2025-09-03T16:18:02.970897Z","last_seen":"2026-07-13T01:51:04.372249Z","times_seen":12,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/packages/jquery/jquery-3.6.0.min.js","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.798Z","timestamp":1780934348798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/packages/jquery/jquery-3.6.0.min.js HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68a55ddd-15d9d\"\r\nexpires: Tue, 09 Jun 2026 15:59:08 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEpwcQAzvewpkhQ1QSlxEL%2B2Y%2F4k93uqL44po2hZ5CI2Xf1wU2O2kfmJv0bBC3tcMRtYaKx8VyuITecLMjaUX8BaBgCdBk0%2B8T81iFkmgiWYnkKryJfhnxmqH%2BapHFNz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0891a2008ba3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":31888,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-17T22:37:08.702294Z","times_seen":491482,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/js/scripts.min.js","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.800Z","timestamp":1780934348800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/js/scripts.min.js HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68a55ddd-4958\"\r\nexpires: Tue, 09 Jun 2026 15:59:08 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCyf6IvU98sMb6wf3GcRIuKDomiczUMWPCbVZ94YZfS4ELQTvrG8SBwOexMBVpoOJ3zblWgAy7h8T%2FHtNY%2F4eqOe0aHmvdpPW4OROMJyXZ1okJK9Z1jOupdkJDhFwo3y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0891a2008bb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18776,"size_decoded":6209,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3690)","md5":"0d1cda2a69b6648b6f58ab8a9cbdea3d","sha1":"a1d4270392af16b14f2d660a44458695fc179579","sha256":"dfe7973aaafa16c656efb7f11f57132f84c2bc6f3629a005ac1e88f2731d4d24","sha512":"0c1a63a33ac30ec4e9cb39d73ed1dec055387c449ee65cfde5ba17ee01bb6cd2c9aeeddd683a4795101fac4e9bb4ca90ada9c34913b5dce800e5bce5b8502fc7","ssdeep":"384:WoXMMhJtx0AOvHXKjKEPRnCjB1JWKbZZ3tpn:Wo84Jtx0VXKpPRn2x","tlshash":"8282e959b3203a6f52fb63f3306bde05a3f219a7960e8154d13e90765e70442ba1bf1e","first_seen":"2025-09-03T16:18:02.965957Z","last_seen":"2026-07-13T01:51:04.381689Z","times_seen":17,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/content-2-xs.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.814Z","timestamp":1780934348814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/content-2-xs.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=5,i\r\netag: \"68a55ddd-16c\"\r\nexpires: Tue, 09 Jun 2026 15:59:08 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqZi%2Bh5DAXlzzhtuFF9kB4qheAT3YotmdV1Qy5N2kk30HZb5oDRCvi5OLahs0KdZUzaU%2BvNs8qJ9OgTDy5iCdN%2FMj4wOX7Xg6oFO46l9ZrlvJ6Ag7Uv7T%2Bdji%2BF0%2BAVp\"}]}\r\ncontent-length: 364\r\ncf-ray: a0891a2018c53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364,"size_decoded":1090,"mime_type":"image/png","magic":"PNG image data, 14 x 15, 8-bit/color RGB, non-interlaced","md5":"deaf73214684343ba8c9fc5d6b1a50aa","sha1":"fa0824b7fa02a4713e3d8e2303b3f58698add62e","sha256":"7206adacae29aa7efe1ecdd46dbf8ec029259b49234e920217b501d4c364e87a","sha512":"9ba812853b12a4611963b347226c030e165c348d39a351a671e8acfea24b26074812e314e3d32875078eb7a7ddd7a31dee32d2c153452ed5407339434f814927","ssdeep":"","tlshash":"14e0c0d76bd06d45c714563d0e22f0d55121872683b35a6c9bd9d4b9243931c70c8297","first_seen":"2025-09-03T16:18:02.976053Z","last_seen":"2026-07-13T01:51:04.383871Z","times_seen":21,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/decor-2.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.963Z","timestamp":1780934348963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/decor-2.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/assets/web/css/styles.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:09 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=4,i\r\netag: \"68a55ddd-190a\"\r\nexpires: Tue, 09 Jun 2026 15:59:09 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cT%2F8ekzrkT4M%2FaLvjMSyfFYNKs5hWwseToTRUxS8vkrLtZWZtKEny00CELtKRW%2F5EXhziL2XrY5M1p5hCTjQjPcoKtNT7pWDoP8NLwGEL8v3071LCpqQ6WELS7NMqO0i\"}]}\r\ncontent-length: 6410\r\ncf-ray: a0891a2109233181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6410,"size_decoded":7139,"mime_type":"image/png","magic":"PNG image data, 140 x 360, 8-bit/color RGBA, non-interlaced","md5":"85a1debf3c4ca7e71046641794f60140","sha1":"0551e0f01d169e14c1aaf3669cb4632026198ec2","sha256":"75b9f3230a86506f100f6531bfd9010e27cc47757d168722ad5b53f67909b7dc","sha512":"9f19763f69ce92e3dc14c2543611107ec2a3e6d80becc10ee16e6fcd570d352bbfd1c769e7836b18322d8c9b59c25e2e829f7f2409fda5047030b953b0267b1b","ssdeep":"192:BohMwwiWKUPZBZ3ehPVReJtB1yUJmpoyxjxDST161Y:BohluKQv3ehPqtBEpoyxjxD416i","tlshash":"77d16e7a2a31eba05edfcd7470858f37d5eb89790be19b09cb77704d3447d029650828","first_seen":"2025-09-03T16:18:02.968781Z","last_seen":"2026-07-13T01:51:04.373713Z","times_seen":19,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/fonts/jetbrains-mono/JetBrainsMono-ExtraLight.woff2","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:09.015Z","timestamp":1780934349015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/fonts/jetbrains-mono/JetBrainsMono-ExtraLight.woff2 HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/assets/web/css/styles.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:09 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=3,i=?0\r\netag: \"68a55ddd-11094\"\r\nexpires: Tue, 09 Jun 2026 15:59:09 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KgKcxWWU5mVyCiwaUGwKq1lckJ%2BZQqfPhPiTPMsZT40LjyBoRN2L%2FEkFbukEg%2FORgeRdfb4ibj0wHGHqJp94OmUW9P4wBEvO3Cz0QUJcrh3ljouv%2Bm6i0kjp5O%2FJ6zAX\"}]}\r\ncontent-length: 69780\r\ncf-ray: a0891a21593a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69780,"size_decoded":70512,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 69780, version 2.15860","md5":"8a95b9f3167630fe43a63e43a83e5b2e","sha1":"bec36c59eeb4b9605fa043218425f7458ee946ac","sha256":"a74bfbb733f8edd84e647bd6527cfe69564d91d14fa90e7475b23041cf72678c","sha512":"1b8004feea8c89719b209e93347f168f03f32229f48b6fdb81751649a6dde2876e6e8108b309a123aeefe7e44ac4534a7856d431c1d97ec8be0b9dc6530e4f96","ssdeep":"1536:DdPwWslFq88xyETd7MLTbu2LQ8Cg7n5xRVZf7tosm:DdqTheyETd7cTbBLQ8CafdtoB","tlshash":"b663020b4132a249a85c832ec9c71414b9b74e95b2e4ceb2454ff6e93a7c79147b1ff4","first_seen":"2025-09-03T16:18:02.984387Z","last_seen":"2026-07-13T01:51:04.375114Z","times_seen":22,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/decor-3.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.965Z","timestamp":1780934348965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/decor-3.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/assets/web/css/styles.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:09 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=4,i\r\netag: \"68a55ddd-2dc0\"\r\nexpires: Tue, 09 Jun 2026 15:59:09 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MIKzfnuDp8QX4IqSc9wrbvrGRXAb2G2%2BzUQN7n3kA6iEHhcDfBOrWeDZHhj8giNnBgwSaMvpho2%2FbV4tyeLGtu1Yv3j0GeBQQDpyq3FjiT8SS6xZ0%2BqTYe%2BOIQeIreIE\"}]}\r\ncontent-length: 11712\r\ncf-ray: a0891a2109263181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11712,"size_decoded":12437,"mime_type":"image/png","magic":"PNG image data, 270 x 402, 8-bit/color RGBA, non-interlaced","md5":"7f9f2a928facbbcb43cd8c06cd607bc7","sha1":"0f0e49c237c8e75b4b7ed0bdb030ef9dfc390939","sha256":"5215dc743482e61aeaf5ac275fc8bf22849a5685ba246bfdfb36cdc1e52e7a64","sha512":"c4a1aed1b1087e074f96112b4efb488cb6d055016f06fc0ec190d42a6470f0cecc9b7088084a0b3095e6dc572fe3ffadbc4e466fde14137c6865020e7552c30b","ssdeep":"192:W8kCkWHZiTi1g+cSQwtyBaTEeWRpINJ8i58GdzXQ/bf6I1/QD7KvEWW5RQ28yu:GWHZiTi1/si3kpI78rsg51r89Q28d","tlshash":"5f329e2426fac0189eeb0ab42294af6737af5217cbfd4712f90454cda1a2d0864497f7","first_seen":"2025-09-03T16:18:02.973938Z","last_seen":"2026-07-13T01:51:04.383398Z","times_seen":19,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/fonts/jetbrains-mono/JetBrainsMono-Bold.woff2","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:09.017Z","timestamp":1780934349017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/fonts/jetbrains-mono/JetBrainsMono-Bold.woff2 HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/assets/web/css/styles.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:09 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=3,i=?0\r\netag: \"68a55ddd-1160c\"\r\nexpires: Tue, 09 Jun 2026 15:59:09 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sABtcnSYAsbIkM%2F0MSBIDcGAZHBSlk0W7ZJ77CBq8Ojtio5GvjmfpGoQPryoFkIHz%2BTEXPA3DUXVRzbceywhpX3aen6Kp7UxP5XC8Miu2AGDhU%2FcUoOHC3EmOrlpK4u7\"}]}\r\ncontent-length: 71180\r\ncf-ray: a0891a21593b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71180,"size_decoded":71908,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71180, version 2.15860","md5":"846172004976073c0aff81d4eac924de","sha1":"cd5145a1050492ef6fec4ab31d077cc0b8b90241","sha256":"df3f86c04988d8f7fc516db3e95ec6b630cdc67bec91fe4297c6f8e132be1037","sha512":"3d738467133fbff65dde797180bcd29e44eb960f9194a844421022150c9b675c3b4e1529c621c5b7dec4a8c6431b98b80feb20f58d818bcd4e07aba44865f9c6","ssdeep":"1536:vvf2K6Bu/iNDv8r1t9GMW4mTPMqvRi378bP:vvf2K6Fur1CVTEqJq7Q","tlshash":"596302c9d19517c6dedb1b4cb03f2f262152b610b2843fe672ad37d4dc2a9a150ac9ca","first_seen":"2023-05-17T09:13:21Z","last_seen":"2026-07-13T01:51:04.378569Z","times_seen":42,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T15:59:08.438Z","timestamp":1780934348438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=swneBntUltJoR4wDV%2FGzc2zekyWJEbHfL7W7pH4c2UjU5fZzQA221O35MvOVtiOaiIKIE5p%2FRKhJ%2FB3j%2Fq7Hhh%2FVqBcGa%2Fnmojg7iYmeraWs%2F8hRCEZZJM44gYbmDW%2B%2F\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0891a1de8383181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":52627,"size_decoded":10777,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (603)","md5":"59b818aabe4094b9b6eb47ae7395e288","sha1":"941617164dc6bcbd7c8634a4e390c97abc62b41e","sha256":"1f15ffa478bccdbf33ecc3741c601a0ce6e384688dd13e445f64e33674b1bc3d","sha512":"53757332b0b8900d22174dc143e73f455ad68bd99587e6cd231bc54a305cf1cbe2eb04c4c733bf910b67c18b329dabadbe3f1dad3dfeeb9e15a0d72797e93a6e","ssdeep":"768:/F3BjZFzzrjOP5yAYbJhMqV4RAJw8YSYKYQSFscUCVL/aVMmer9:/F3BjZOyAYAYa5RaVpex","tlshash":"e533716125f022330697c0c02ab68b2fbf86c25bde2a155572ac87d56fd3c9ace3355c","first_seen":"2026-04-04T15:14:47.829689Z","last_seen":"2026-06-22T02:33:37.846073Z","times_seen":4,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/logo-white.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.809Z","timestamp":1780934348809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/logo-white.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=5,i\r\netag: \"68a55ddd-601\"\r\nexpires: Tue, 09 Jun 2026 15:59:08 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C58JtqGwuaVgEfInZnCm4s931AEjRHPKC5PLL1u4B8HlUbNa3J8THU2AeJWtCPzV9k3Pb0DgvSKY0BarHx0dOsIAofoE0DBrj6atbb%2B9aG2c6DxWkIwTtRMYCD4TpV3x\"}]}\r\ncontent-length: 1537\r\ncf-ray: a0891a2018bf3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":2254,"mime_type":"image/png","magic":"PNG image data, 134 x 132, 8-bit/color RGBA, non-interlaced","md5":"b96dfdd26946842a3a7fc5ad4957c4d8","sha1":"21620d16a94b1412a8844ab4948fbf1fc4994c6e","sha256":"c7d574de77c1eefc84badfd39f5d233646d6c5e64eb54cb8f5e23f11925942f1","sha512":"428e65b0c58832dc25ceb8e7d79876074c5f40a04436b705414a1ecae774fbf6adae5a6cd99d21d54f0d999c7cae792499a60aec7c3b8af20e9a517257c7d97d","ssdeep":"","tlshash":"de31f795168069e5cb3a19b4834813a6ef754063ecb090ea9a9de324c84c4f16eac7c0","first_seen":"2025-09-03T16:18:02.972965Z","last_seen":"2026-07-13T01:51:04.37719Z","times_seen":12,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/content-3-xs.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.815Z","timestamp":1780934348815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/content-3-xs.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=5,i\r\netag: \"68a55ddd-110\"\r\nexpires: Tue, 09 Jun 2026 15:59:08 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiEd3W7%2F5pap1FUYdWNLiztLwxFqr2ir2B1EtDIyhr2qpZ2v5FkyJsoECRXUdz3wkAIPF0PrYaucTTegbbiMHnRpt4UYI2vo6gFXrz%2F6Kc9ji6o%2BHvHetIEr515KBzoS\"}]}\r\ncontent-length: 272\r\ncf-ray: a0891a2018c73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":992,"mime_type":"image/png","magic":"PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced","md5":"7868e17625e1aa34b5c642e4e68a6168","sha1":"b8143600413f6bf77f0a22a54712b8e365856dc9","sha256":"196b74af1f1febc7dcf8e0be6f691b6cd29993afdc111fa573f59399cc9ad206","sha512":"7b371f1cbfa81f92a0db605ce5635986d115d1e20bc8832db19d708d54d803443c568089e917f868b37028d1e09c057ab8e41ebff1b072c5f781f08ae9078b3d","ssdeep":"","tlshash":"52d02bea20827d75c6654677df942473f4201221c330474c148b253a76d92a9e5d928a","first_seen":"2025-09-03T16:18:02.97204Z","last_seen":"2026-07-13T01:51:04.372865Z","times_seen":19,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/fonts/jetbrains-mono/JetBrainsMono-Medium.woff2","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:09.019Z","timestamp":1780934349019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/fonts/jetbrains-mono/JetBrainsMono-Medium.woff2 HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/assets/web/css/styles.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:09 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=3,i=?0\r\netag: \"68a55ddd-11350\"\r\nexpires: Tue, 09 Jun 2026 15:59:09 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyWry%2B9xeHt2v8YPYvRvBTr7jrJuB0lBTCwTEk%2BrNx6FgqsFhpgrWqRjo%2BjDIkUtgje8%2BR2nWddjnjZ67XSaQSWRcNbbX%2BynYLJMB8Ym89Immq2vbS%2B4n69%2FTiCsc0CK\"}]}\r\ncontent-length: 70480\r\ncf-ray: a0891a21693d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70480,"size_decoded":71216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70480, version 2.15860","md5":"b3d288697e572f369f96c9ffef4e688e","sha1":"a3961e1169800e4abd32a6866203091843c89006","sha256":"2a49a1e6536afc38297fcd75e3f076eb85944c063f789693ff0e38630d07d480","sha512":"ca43006a7fa89058c502ddfbc76c65716be3d0bfb1e4d10c5d13db0c986e6479a7c9471b30b712e53a03759040367880dec2e6441db03ae7fb1bfdf2ab881248","ssdeep":"1536:GzJWzbfazqvM5N6Jqj7FP9KgzX1vUsVjHV0z2z2G:GFoazqvD4t5zlvUM0K2G","tlshash":"be6302ef41616f86b577e7a9e1b8550a09bd5a0b11237194c0853d43eb318f01bf8f97","first_seen":"2023-05-17T09:13:21Z","last_seen":"2026-07-14T14:43:04.482747Z","times_seen":40,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/favicons/favicon-16x16.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:09.149Z","timestamp":1780934349149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/favicons/favicon-16x16.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:09 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=6,i=?0\r\netag: \"68a55ddd-22d\"\r\nexpires: Tue, 09 Jun 2026 15:59:09 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6W%2BcFcgPO%2BJo8N7X%2BAJHa4%2F9sm13m77H2SCXPQ1q7lGks5FrykC3Hq0L4f6edHkuZ23kLBz4xoEj6meq0c%2FjbysNMxgFbIFrB3MKpWCtpvpE7xy%2F7PZNd0B8c0M5foP2\"}]}\r\ncontent-length: 557\r\ncf-ray: a0891a22395f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557,"size_decoded":1286,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"39b1307d7b8ed333b154796163887d58","sha1":"8d291a62056ac13882d2799bc1617d5fcad122c6","sha256":"303119f96aa6951bfa0d1ff0476e497f073575ee0710c48fd0541b95d34e5c4c","sha512":"c88b499db6f31724f2f853980cfdfa5266135078637fb9f7e2873296c3ec45a8f1df65bcc34325685541a2e6a1cbbc2989094d272887152541bda0af525bd33b","ssdeep":"","tlshash":"c9f0969e878176a2cde0ef37621492917cfdd77050b17d0c2a0f843d818c1646c70f1a","first_seen":"2025-09-03T16:18:02.981906Z","last_seen":"2026-07-13T01:51:04.376102Z","times_seen":20,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/css/styles.min.css","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.796Z","timestamp":1780934348796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/css/styles.min.css HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68a55ddd-f364\"\r\nexpires: Tue, 09 Jun 2026 15:59:08 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykKQXypdHOAnRmQ2HL4vkjmHD1khUgsLidR%2FRZOycb2PqA20i6Bjmgf4R9lulviqFxxmw7hZg6X%2FbTL%2FJX0IpMEafYhgVe4Nq8x7l%2BoovckwwfxDaF6XQlUZvUSQo45x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0891a1ff8b93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62308,"size_decoded":13413,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62304), with no line terminators","md5":"bb33f825839aa513de3a9e8ff4996fcb","sha1":"64f401a0a6645493cc6276090862d257d8b66417","sha256":"8f8218d88a7627af716ae5053818dd9588ab247c5c219e622349c64913428d3d","sha512":"88e994880e95637667446ccdb79beba621d54c4de0b2eca8aee75bdad3d9849a0c3d86faf4a7980e431d047e4bf53e3e93d1b8702b0c88cc08c52f3a3df66fce","ssdeep":"768:++Y+g+rjXQCucoxr7+8ThLeZXyf952s8sbZQO:+BtLCfojeZjO","tlshash":"4953d611f615343df02bda36b9c2baad31289503eb530bebe556a175c6ca0f713b1b09","first_seen":"2025-09-03T16:18:02.979497Z","last_seen":"2026-07-13T01:51:04.380133Z","times_seen":15,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/logo-dark.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.811Z","timestamp":1780934348811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/logo-dark.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=5,i\r\netag: \"68a55ddd-5b6\"\r\nexpires: Tue, 09 Jun 2026 15:59:08 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKEFd49tIkfKL9E2JAJUFD%2B6eG3uSXxDN2zBVYidBUsL5ZR5iHygR%2FgUFovbmR5aEF7UbyLboLEBxX2poHhz0u5jEaxmZrxySqmzOMwv7JQi5z7g2Pj%2FKzKWyklSjBap\"}]}\r\ncontent-length: 1462\r\ncf-ray: a0891a2018c23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1462,"size_decoded":2183,"mime_type":"image/png","magic":"PNG image data, 134 x 132, 8-bit/color RGBA, non-interlaced","md5":"c49e5a709884bc4691685202eb38a4e2","sha1":"5dd32d00608b2e6ad78fac3636513c0e5e131361","sha256":"bc683c20b671b82de488bbb2e1f6fe5af4cb4ccd50ad559e96094a824fc2472b","sha512":"3a26e1b05f0230bc33d541e46a4ef63c84e5caec44853cb2607a751daec3cd40f59f53d6e7950fca17a6ea4e141ebd290251a110eae940437e4fb1ed097e49a6","ssdeep":"","tlshash":"b4312bd86aab6873cdf12271b5d85a03bf29f1842985e043ddb34b349024cdcf653900","first_seen":"2025-09-03T16:18:02.963247Z","last_seen":"2026-07-13T01:51:04.382855Z","times_seen":12,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whirmixer.com/assets/web/images/content-1.png","fqdn":"whirmixer.com","domain":"whirmixer.com","tld":"com"},"ip":{"addr":"172.67.200.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whirmixer.com/","date":"2026-06-08T15:59:08.813Z","timestamp":1780934348813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whirmixer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:00:51 GMT","end":"Sat, 11 Jul 2026 21:59:26 GMT"},"fingerprint":{"sha1":"E9:02:07:16:08:B0:10:B3:AB:71:F0:CA:7F:7D:1D:A6:BF:A7:2A:AB","sha256":"D5:89:75:6F:8C:09:28:EB:4A:8F:00:1A:31:F5:95:DE:2B:3C:7C:CC:68:A0:F7:EC:BC:E7:79:22:41:C3:29:8E"}}},"request":{"raw":"GET /assets/web/images/content-1.png HTTP/1.1\r\nHost: whirmixer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whirmixer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 08 Jun 2026 15:59:08 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 20 Aug 2025 05:32:13 GMT\r\npriority: u=5,i\r\netag: \"68a55ddd-8341\"\r\nexpires: Tue, 09 Jun 2026 15:59:08 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zJDGutRkhhzpfMm4rXJK%2FaJjlF%2BIQy47k4Xqgm%2Fqgwj6F66TdWTVc0AlckHONn6RUbOT5F3ryxn0NRrbE7iGH79r1%2F7qJnP51l2tjC6q9LhK1CHZJcpBesfftdpjcKUy\"}]}\r\ncontent-length: 33601\r\ncf-ray: a0891a2018c33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33601,"size_decoded":34326,"mime_type":"image/png","magic":"PNG image data, 724 x 349, 8-bit/color RGBA, non-interlaced","md5":"8545414030d51f22fb689cf9454724ed","sha1":"795e34379a76ce1ae09a9aa0a6a4d2b891ab5ee6","sha256":"e8e6c87fbb64d0bcbe8867526b1c924d45cc33b7cdfda3ffd97481740b3d5041","sha512":"561d7ffeb426f91ebcf6155ee6b16a694c9b029091f7f67b0ebf3f5c6c38699ab61875aeb7f42b7b966a6fbceb32d7c837b391632371f6f5f1ddec7702a86325","ssdeep":"768:i3vs9qbfFwSgvevYtWw4boi4SmY4ttvt/aiiLTB0/q:i3vshvvewtni4S4fvsqy","tlshash":"d9e2d0935d73da980c8300f124fe5f639f7b548a69c0bed1e318fb1e9154da1925e129","first_seen":"2025-09-03T16:18:02.980918Z","last_seen":"2026-07-13T01:51:04.377681Z","times_seen":23,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"whirmixer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}