{"report_id":"398b04d1-d49d-4163-83e2-416e777701e6","version":6,"status":"done","tags":[],"date":"2026-04-04T15:30:21Z","url":{"schema":"https","addr":"mixtum.us","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mixtum.us/","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"title":"MixTum.io | Bitcoin Mixer | Bitcoin Tumbler - Mix Your Coins Now!","dom":{"size":25204,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1917)","md5":"81f95a192f1151164c26daaa8cf0ca77","sha1":"686caf61537140b0579b9c12ca8c8b07ded6b632","sha256":"d7e5d3a59214513675bd38dd679b6f8c1a0863fc9fa61aa48a2e780abeec894b","sha512":"1afc737d2c1cc3ffec31e777e3fee35c3d9f11e9c008b41082b159d352191178fb45ac10da330cfad31dae51437a9ce34c2560f976ac2bc64946c33f2056a9b7","ssdeep":"384:4atBxZRjgoMLclgTF/6M+tJp+dpV4tVc6BfBZOGxQxH6KxrqwvPwPKHwsE8rbhsH:4atBb5vMLcl2/6/tTirqHojE8rbhs7IM","tlshash":"0bb20662478c5f3f01631697e63527d8f09f9c7ae9739092b2fb804483d3c909d27aa6","dom_hash":"domhashd6c158d39146ab0aeec52992a2945140","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mixtum.us","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T15:30:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0","referer":"www.bing.com","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"mixtum.us","ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-03-31T11:21:50.478396Z","last_seen":"2026-03-31T11:21:50.478396Z","alert_count":19,"request_count":19,"received_data":837022,"sent_data":10014,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mixtum.us/libs/jquery-3.3.1.min.js","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-23T14:49:24.27203Z","times_seen":140663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/libs/toastr.min.js","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ee1218b09fb02d43fcf0b84e30637ad","sha1":"f871160d56be073d37159b169da23945fa132ab7","sha256":"1e0c2ad4e069276efa1d43fd1f7549912bfd64219119037e26574f27ca4d7143","sha512":"292be72897bf32e1850db5ec65a5964e86f7351e33a825192c1e003d7159199f94fecc1f1e1fc255a657737bc86bfa45ae244af814aea1ec432e1f3bee34507c","ssdeep":"96:OdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02tfrI:O4BtcvvRqIQcNa74c7rI","tlshash":"abb17284b220bb8b5b731079919f140b937673b2ccce5440763aa9987e7082897a7fdd","size":5251,"data":"","first_seen":"2023-03-07T12:06:48Z","last_seen":"2026-07-23T14:38:11.475536Z","times_seen":16036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T14:50:08.406221Z","times_seen":404387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/libs/helpers.js","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0d3357a242e7e87567e5869d8366d4","sha1":"bfa8a3a9e619abb83cb3363ddd14992bf745dec8","sha256":"e1c56394b9e1a163e48da88be3d5d266b6897b430391ba33809699e7c88d2e0c","sha512":"6acb4d520d22418134bc26426f81df644dfe8ce0538081724f4b415fdf9a1c45dc9d24b2fd357950d7b8a23601b528887a77ca5f40a1e1c68eea8e230d1936a9","ssdeep":"","tlshash":"4211bd4af3fd57e5c43b3484a937a59d717832a19ccba84dc898d98c6840aa56a97c0c","size":952,"data":"","first_seen":"2025-10-21T03:25:18.567107Z","last_seen":"2026-07-19T03:25:23.055138Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mixtum.us/libs/jquery-3.3.1.min.js","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /libs/jquery-3.3.1.min.js HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Apr 2025 09:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 05 Apr 2026 15:30:02 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6800cc1c-1538f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JGVtDWQtvAMPF%2B3%2F6BADVmxZe%2FggKxbsuEtDyG4g%2BS4LA%2BOvvEzil0JBLHJoKxevoB%2B7dYgtGCHyLzxcCTpxS87kKI94qHHhfpTOAGj2YRSceNLIYUFauwcmtY%3D\"}]}\r\ncf-ray: 9e715a1e9bdd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-07-23T14:49:24.27203Z","times_seen":140663,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/pic-05.jpg","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/pic-05.jpg HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/style.css?v=112\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 98977\r\nlast-modified: Thu, 17 Apr 2025 09:38:41 GMT\r\netag: \"6800cc21-182a1\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y381izZRhY%2Br8ok%2B7uDXaIhUz%2BwE1nbRRMXSz7kbB6ER4eNZdPtEsJutBnIwYVKEXhdpt3PkcopU%2BPjPVu%2FfmzVcbqEMp27gNuD6CyxERfucOgbOv8EVhlfKxIo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e715a20ac0d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98977,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 626x812, components 3","md5":"1c05a8ef2798504843a6d7f278cc204f","sha1":"cea2a89d07a5779e2b4ff21d740cce3f92a3817e","sha256":"8afb80e9450cb05d14e1b52d045233612fc3249291a85e16ccc4987c6f431bb1","sha512":"f8a2faf5c1071675bfad53861c5d73b564d19430e92c4ec985c96b24771cc723d2ca120e39b505d71489c4413fe29d54600eee2ba91e3026bd9133ea3bc9edcd","ssdeep":"3072:YqRiVaPmVV6pfS1O3xl7KzeQUfu5hyWcj157o:pRi4PKV5O3xl7KzeLfu+ldo","tlshash":"f7a3012eb958cfd875dc074420cb9763ba53d6f36297208324038299b6d3afc669b433","first_seen":"2025-10-21T03:25:18.559314Z","last_seen":"2026-07-19T03:25:23.075958Z","times_seen":10,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/apple-touch-icon-precomposed.png","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:03.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/apple-touch-icon-precomposed.png HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 40536\r\nlast-modified: Thu, 17 Apr 2025 09:38:42 GMT\r\netag: \"6800cc22-9e58\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hg4zW%2B%2F4OPCMfcAtgwI2Lv%2FC6f3JhrIF33zMNiYiLlByCLu8y6xaw959IfvFfVuKFFSBMiYesGlHvteRRMkyAHzXz8EAjwdxJekRmFNJb6GOQfTQgh5%2FWifpESo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e715a227c2935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"48d0a51499c82c32fd350bbdbed3f63e","sha1":"56de13304de2c64a81d2651de166ac8538bb6184","sha256":"8626d7700405e3362a281f5a00aa69820a6477bc13c5e6f8748ba385b725baab","sha512":"75c0b4625c3e73f30497833db35601396643364cd47c347d032fd6bab7cfafe8ac71dbe718b0d1546e7483d73e4622438c6087c0b9ffc68e369d08688d8babdf","ssdeep":"768:01BVcpVLJuHriOtH/y8NIBaAoyEwMyLHOx/2XjY+YMaxraHoxS1+QJtdMWofz:IBw2+Y/coyhMyLHOx/2NYhaHqS1+/R","tlshash":"3f03f2dfc2e7998570f28baca10db37ad19469f5b7aead19dd27108b20c172d05c28f4","first_seen":"2025-10-21T03:25:18.564099Z","last_seen":"2026-07-19T03:25:23.063699Z","times_seen":10,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/style.css?v=112","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /style.css?v=112 HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Apr 2025 09:38:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 05 Apr 2026 15:30:02 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6800cc19-1c37\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sDxEIqnZZ9zqeJOCER6snk9MWhvU8AA%2BhWA6UkGvRJilEmTvg4o1WSLK8sMVNvZIzklYScdQHCz20nSJoGwf4P8l%2BS6FwQoZ5uVvx3Bp4vfTtRcHSnV6Kl0XCY%3D\"}]}\r\ncf-ray: 9e715a1e9bda35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7223,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2b40d214ccd70e0ea2f30611534ce688","sha1":"8845dca31f5d61aa78699b27a6bb8271527a8edc","sha256":"eddaa99587151c4df215a028e5d33106c3d3545c9b7a6081ea32c737bace349c","sha512":"e0c62e618eaec6deab09373253360dc08ba484afdc917411700857e4331bf7b0fce7dd11039f8836668e29f4d405a660bb324df75db12155610057cee0d308ba","ssdeep":"192:Ayboew7yZLOpIcKmKvobBlkvRoKEkvlE2geivmdr/ZBMsWi:Ayb6IciobBlARoKEAlE2ge+mdr/ZBMsT","tlshash":"0ae1545665501883b227996abddcef24063d0cc66e1e0e7fb0657c2ca3485f01b63f7a","first_seen":"2025-12-27T08:28:30.405993Z","last_seen":"2026-07-19T03:25:23.086378Z","times_seen":5,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/header-bg.png","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/header-bg.png HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/style.css?v=112\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1168\r\nlast-modified: Thu, 17 Apr 2025 09:38:39 GMT\r\netag: \"6800cc1f-490\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g6KDlxtDhT33NZkY0DpKQAcnKYtbZyyMwLuW9UmgtLQNMQ6r9wG8HFQ%2FTFUn7I36%2FDKF7XHqHot2pJ1m%2FPYkwDpIoo66nyU6f89EIS6oNdbPgMkvn4fMUnhnwg4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e715a209c0835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 31, 8-bit/color RGB, non-interlaced","md5":"36c1a1a550dcddc12588f5c826d8f233","sha1":"8db050f3df66adf916c559f36e341118e121318f","sha256":"e7cdf6d43ded12241481479cdd2cc4398912f3bef5d3b9de3ff13fb3e95d18b1","sha512":"cf3b3f3c2333f7f91ed1b01684dfb1033b5b852651051369a4e687ba9a948b284b87b3d941aa8db99abb6974804b29cb5db8afdb86f891433751d48fb05f3653","ssdeep":"","tlshash":"ac213346ef816c428285f8853cf2d472d9928982dff0e0686ddbc46a18681b5947d9db","first_seen":"2025-10-21T03:25:18.576247Z","last_seen":"2026-07-19T03:25:23.089424Z","times_seen":10,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/pic-04.jpg","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/pic-04.jpg HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/style.css?v=112\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 157641\r\nlast-modified: Thu, 17 Apr 2025 09:38:42 GMT\r\netag: \"6800cc22-267c9\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toDFdzjjj2zR44x8f2V6WuyFRqj8Ou2Vfhp14GnL3CzRdelyh0Rj1COcdvJ4dwumgqxDvjEeFNvkXzo17eNNaTPWv2QaTNyDxKxq2AVSOweP16zy5o3mbqgshWk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e715a20ac0c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 861x1080, components 3","md5":"cb176c403d98877130f9ebbcd3a46f76","sha1":"df421e09d82409a3e53dbc68b021792efc08565a","sha256":"ae29a47413c09f0e736d981b1ebbaf654f512ef4b927750400bf22fecf24690d","sha512":"c5b13e2f2c5be949639fa39fb4ff0de6b7933d13b5e43a1616f0f599e829389acb1b74e750344ac378949916c196f7ad67e3af22ef4ef5b2a53ba59cb87a2147","ssdeep":"3072:XfnQN5RKBiIdvtQvJFGAfas1Op60ijN88RlVXa2mrfHUBQoYWnqa9aR:XfnQNi12SsmVijNX/a2m70BQrc9aR","tlshash":"cdf312ac759604251298db20c6e6678e3b97a3f4f09fa143b0e201c69c7bd9cfe5394d","first_seen":"2025-10-21T03:25:18.578203Z","last_seen":"2026-07-19T03:25:23.068241Z","times_seen":10,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/favicon.png","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:03.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 650\r\nlast-modified: Thu, 17 Apr 2025 09:38:42 GMT\r\netag: \"6800cc22-28a\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QiJIpy1es6g1SDIK1h4WDG54DmAtPa2Tc2KcDYu3NyNlajj0BcNSkIwgPNaSlyKK6TGmJmCmMgn4T6TRFYwAlTzBmH4rvwfdplm7lsOh%2BLdJmncikw%2BJ0%2Fc48AA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e715a227c2a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"363b1518d486192778464cc4d7beaa0e","sha1":"738f5678ca3d53fef49220234f5e4656ed47d705","sha256":"e62d2daad20bcde892ea93fb4a0fe3a6fac40d1af58165a39d14be77e97201c8","sha512":"530d5655650a0b136793095dcf988e6809510033da21d56fe0de1c66ba96002edf91b1b3ac56411a3a1808a1ba3272e019b4ec186798235f8d7cde5661d0b1ef","ssdeep":"","tlshash":"b8f062f7f0d482baeee9525b84c8924d1efb1a10b06248c51a2aa3a101d3988d1b0664","first_seen":"2025-10-21T03:25:18.57074Z","last_seen":"2026-07-19T03:25:23.081309Z","times_seen":10,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/libs/helpers.js","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /libs/helpers.js HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Apr 2025 09:38:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 05 Apr 2026 15:30:02 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6800cc1d-3b8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbZN1ePXSCJoEMrJaHm%2BztFgszVQD3Kckok1F9jkBkwV2OTgRplPIjfS61SYEbPOb9OrEK6oAJBzDcvNfNpPUjGy0PkHoI%2FYMZV2pDc%2BKMBzE6v%2BbK0VoA2dgXM%3D\"}]}\r\ncf-ray: 9e715a1e9be035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f0d3357a242e7e87567e5869d8366d4","sha1":"bfa8a3a9e619abb83cb3363ddd14992bf745dec8","sha256":"e1c56394b9e1a163e48da88be3d5d266b6897b430391ba33809699e7c88d2e0c","sha512":"6acb4d520d22418134bc26426f81df644dfe8ce0538081724f4b415fdf9a1c45dc9d24b2fd357950d7b8a23601b528887a77ca5f40a1e1c68eea8e230d1936a9","ssdeep":"","tlshash":"4211bd4af3fd57e5c43b3484a937a59d717832a19ccba84dc898d98c6840aa56a97c0c","first_seen":"2025-10-21T03:25:18.567107Z","last_seen":"2026-07-19T03:25:23.055138Z","times_seen":9,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/pic-02.jpg","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/pic-02.jpg HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/style.css?v=112\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14938\r\nlast-modified: Thu, 17 Apr 2025 09:38:42 GMT\r\netag: \"6800cc22-3a5a\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlJ2m7Y3N2Cb9LfwR4VIcFWDWPnn%2BInPC9tAEvHLgzSN%2BMc2kcXAXwJuZajNQY2kEKKdRYv3J3uIlRq%2FXaGvyy8VIvIMGGXBPCzE5zNiWETcgi3%2BUoUge7cpSgk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e715a209c0a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14938,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 112x464, components 3","md5":"083d6053586bb006c29047f49d290d43","sha1":"65ce13c818c775611a7f0d12382318071594e061","sha256":"b334ee1f6813f698d5fb8736c51f20546068e3850c3abb2657b437c8069c1c77","sha512":"0c114a3f6d2cafd1575006cb3a51f1406f690bb76ad81d15ef92c058f59bf3f96c77cc0b7da4434168b0317a8a53eaf9331721d379817a097e362d2801232b49","ssdeep":"384:8ntmoEnltqqePjjwKiYiyjBBjihqbZ0KNe0gUrUXWU:8nanlcqmtiYmKN67V","tlshash":"3a62d019f9abfc01f85992b804f1f50d195b09f6a8b0f151c42ff11f959a09c26bebd2","first_seen":"2025-10-21T03:25:18.587586Z","last_seen":"2026-07-19T03:25:23.061089Z","times_seen":10,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/pic-01.jpg","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/pic-01.jpg HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/style.css?v=112\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 87720\r\nlast-modified: Thu, 17 Apr 2025 09:38:40 GMT\r\netag: \"6800cc20-156a8\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYzv%2FBz1BokzvVOiaNGBKbq59DG7pkCq%2BUDzFxaLqahYIyn1st8qWZKjK6Y4oqK48DoW2rSKsYaJ0vRgj9wPp0eZjxWO6pvDtx0NyP9Jq7zI%2Bw1%2Bv5BND4RzaeE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e715a209c0935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87720,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 857x615, components 3","md5":"508834e5a95e829106fc1e12ac63a27d","sha1":"f252cb8ea73dca537c8bb2f154bcd99c3627de40","sha256":"d965297ae57843b53c0f48abb7143e84c055f4d0c05118b2c6722fefd7e14e81","sha512":"2dafe990813c0c2fe0d99c8df2801f23bfb6f1f5bb4c7807b73f553db1495f2390cf720fb1feed1a377d58648ac6f9545ce0af1d95561e3cb24f3e0572c3f3b8","ssdeep":"1536:OwTDk3b3KwgDG5SXuaeYb947PbXuFyuovD44phwWEp7dnEXaU7xgeW3R:566wga5xG6OEPvEWwWEFdnEXaU7WeY","tlshash":"ce831246f9be291b5f30515c2e8d692eb51099f98432d05ef4af8cdde3c42f31611aa2","first_seen":"2025-10-21T03:25:18.569107Z","last_seen":"2026-07-19T03:25:23.072648Z","times_seen":10,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/adaptive.css?v=112","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /adaptive.css?v=112 HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Apr 2025 09:38:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 05 Apr 2026 15:30:02 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6800cc19-d45\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIKFUf5Ug3w76O4GIVmZSohvvmDsvW6TQ1jkGgkW0buvur0TmvmHFvUUealmf6EdLoWmD43fwRR6cdRGJbxxvy%2BCN8kd9dhd3H5dewY6kUiw5r8nS41fkrICTqY%3D\"}]}\r\ncf-ray: 9e715a1e9bdb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3397,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9dc47257812aae8638adc2c3b71014e6","sha1":"fb249ff474a49ffb4647e16918a9b2288610ddcd","sha256":"30c8a4ba40d5c8b87e1c73d81a82f63249f55f362cc6c0d15ab0c76aaa77c27d","sha512":"0335e0f7ef42c116ccb0b2ef7e6cd229d6f3760c560ef248ff289b922a39ffecc79b3e30f0cff104dc5d9c8ac2da7cee538edaeefcd5a4c8b9e6be1c063af8d9","ssdeep":"","tlshash":"796101521770e048b12a45955dfa3fa50169c40bbf0ecdafa56fad39e5cd13210e3eca","first_seen":"2025-12-27T08:28:30.413464Z","last_seen":"2026-07-19T03:25:23.09317Z","times_seen":5,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/libs/toastr.min.css?v=112","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /libs/toastr.min.css?v=112 HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Apr 2025 09:38:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 05 Apr 2026 15:30:02 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6800cc1d-1936\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2B%2FpYKksbLiv%2BfDdwKUZBMfZa%2FtjeZSWogu2gd2gukAVrt6Bfvf2YSQWCTRJKus5i39sGqno7wWwav%2FBGIoATaqcbN%2BoAPt2K9dVCXlurUTgl4qLlQ0wxI2eX7I%3D\"}]}\r\ncf-ray: 9e715a1e9bdc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6454), with no line terminators","md5":"f284028c678041d687c6f1be6968f68a","sha1":"a668ec5d16eec86372216a8c1b161cdec3eebecf","sha256":"47dd690f8f315bea076e92581a7e7147443bb4c847e313ab5a7d50a8c44836d0","sha512":"e92d875b3545c6bb83959c48dec5ce659e3f789f007319101f5f898d27bf38d084a91f4be18b2ae49753e62a6ab7353b5876a5370cf006ffa2139d6034724da9","ssdeep":"96:XKZGSoKiejY1Sq9octKokNM/WQ78GhJZCjts/WP+zLmlDI/WKG8Czy4/WVMz2Tb3:XKZ6yjY1SqvKbBY8syRttzGjVMSbO6r","tlshash":"9bd18431da81361dfed3811af45966092d0be1b3e6ee5dae250fa1bcd2c67d06c33280","first_seen":"2023-04-05T23:07:13Z","last_seen":"2026-07-23T13:35:12.641701Z","times_seen":17121,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/libs/toastr.min.js","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /libs/toastr.min.js HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Apr 2025 09:38:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 05 Apr 2026 15:30:02 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6800cc19-1483\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZnp9JQGB8amtKW1ZwhkET4S670y6bvI%2FqC6vs2qzSorazxN%2ByEQP857ltBuxUQSXvLhiwfzcZw%2Ff38kAvR6umTb5y%2Bcp6KjUIIs8ZTWUrdLTTEXpBnSqa0aF4o%3D\"}]}\r\ncf-ray: 9e715a1e9bdf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5251,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5215)","md5":"8ee1218b09fb02d43fcf0b84e30637ad","sha1":"f871160d56be073d37159b169da23945fa132ab7","sha256":"1e0c2ad4e069276efa1d43fd1f7549912bfd64219119037e26574f27ca4d7143","sha512":"292be72897bf32e1850db5ec65a5964e86f7351e33a825192c1e003d7159199f94fecc1f1e1fc255a657737bc86bfa45ae244af814aea1ec432e1f3bee34507c","ssdeep":"96:OdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02tfrI:O4BtcvvRqIQcNa74c7rI","tlshash":"abb17284b220bb8b5b731079919f140b937673b2ccce5440763aa9987e7082897a7fdd","first_seen":"2023-03-07T12:06:48Z","last_seen":"2026-07-23T14:38:11.475536Z","times_seen":16036,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/logo.png","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2318\r\nlast-modified: Thu, 17 Apr 2025 09:38:37 GMT\r\netag: \"6800cc1d-90e\"\r\nexpires: Sun, 05 Apr 2026 15:30:02 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KXnK0Qi1pcZG6IrUp%2BGjfaV2tN7PLkU5qJ2356AYaa%2FtjHP1hU%2Bvi2Vye76Sz5pTFbADrJ01rW%2Fxn9zTY4%2F0hpd7F1LMHjlaLrU5CHjtpO5IcX8xs%2BP24x0OuMM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e715a1e9be335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 165 x 20, 8-bit/color RGBA, non-interlaced","md5":"2a641178f1edc4868e907e4141043c4a","sha1":"6ef25c710f328c3f592d9753a82a63d821407a77","sha256":"23087ace6eca9158e3abb3158181fdca20eaec0bee13a19b9ac50ae796e32a26","sha512":"69c550066e964c9f1942cc4feb14548b208751a5d94eb50b8ba6d7f97b971803758e6a93b69b498889c0b8dba864e141eb4626087f56cd9630b13933f7934aa2","ssdeep":"","tlshash":"2f41e847fb40210176dad7a210e9a837ac97cb108120d17a1cdea967c9770d75be52cf","first_seen":"2025-10-21T03:25:18.584321Z","last_seen":"2026-07-19T03:25:23.05824Z","times_seen":10,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 04 Apr 2026 16:18:02 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7iurUalzz%2FQ9rkVAf5AXdk92kbj6qFzmWoVrtayOiCcc8ZZFGpBY9sKiIdi8L6%2Fd4N7kotx%2FT%2FKLNPwgF5SpDQjEWuitBwJCawT7KVYOGTlLftrbFRZtfl1KpXY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncf-ray: 9e715a1e9be435a6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T14:50:08.406221Z","times_seen":404387,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/pic-03.jpg","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/pic-03.jpg HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/style.css?v=112\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88566\r\nlast-modified: Thu, 17 Apr 2025 09:38:40 GMT\r\netag: \"6800cc20-159f6\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvzxfCpHglI8gJfLXOUndyRl52N36rRpfr4uh7%2BYN8MXqQll9AxV3Bm2srvI0PCVrddMB1O2HCw7JMXWAgHVmp4a4nOVPxYStF7HKSX25Ku6ZItdyxmStzhxALQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e715a20ac0b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 598x559, components 3","md5":"1bde38d153bf0bfb3ea407e842a3cb1d","sha1":"54b7c6ff0cd996dacae9d1cf899cbc97e7abe54c","sha256":"92a0161773bbd99af67c94078ed70d6b820f99c29fd167e53e4271ca2d57535d","sha512":"ebf3cba49bc962b5aa0b7934507a0b531c015c3d409065e573cf4ceb7fbcdeca6c42fdaafd2a3a30cf25e4b0907415e4a07952f8cb5a4f6b5af10c36384ba191","ssdeep":"1536:JEoACeeCmSebHtVCkYW0vWcEabjEiNGXaZkmdUV5noBcP9:RACentebGvu+SaZjUzoBY9","tlshash":"3083bd616783ccdfe964577384a2ad0d66479ab2379c8ff8d413ff1ea080bb5c026192","first_seen":"2025-10-21T03:25:18.557079Z","last_seen":"2026-07-19T03:25:23.091367Z","times_seen":10,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/images/pic-06.jpg","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /images/pic-06.jpg HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/style.css?v=112\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52961\r\nlast-modified: Thu, 17 Apr 2025 09:38:40 GMT\r\netag: \"6800cc20-cee1\"\r\nexpires: Sun, 05 Apr 2026 15:30:03 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sKDX7EHYNMOohkEfBEjxeITFJU3l2B5nFld7f8u5xf2Pg9Ea6A%2F5wtQWfXl2EqEZSUejfZDJ6u9EJOX8IWtw0EByyd%2FFWcn6FNCcvxljVAbcSAM%2BE6Ad%2FG2tVs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e715a20ac0e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52961,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 531x367, components 3","md5":"862c4418834db1986c1fe8059dda1bd9","sha1":"5c969f4981bc684dc24318221f6e60fdff89d312","sha256":"885bd974952cac701b0a956f285d69042e842bf5974d5cb0acdc6eccf85554a1","sha512":"13db410b7929023f1eb5f21ea119fc3b1979e7bfc713a8470ddf38a8c0715dfe5aa7697cbde6377b90c21cfcdeb08207393385c27ccd498e37e4b3f31aaedccc","ssdeep":"768:GEJ3zqMPH9byAFoZpmywYrNC90iG0qJd2QMV5MFdR208kV+rY0anaIk32vM+nuCG:h35yqoWypr7iGd/pMJq+rY0aJM+uCG","tlshash":"d533e085bea5b66dcf0f458b02a7c3b2f9405af07e7bd0010e3c85d3ad6118925eabd5","first_seen":"2025-10-21T03:25:18.562528Z","last_seen":"2026-07-19T03:25:23.078823Z","times_seen":10,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T15:29:59.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpnRFratknVZdyvnf5qq6mXooSHlAL7HeghoX8S2vClHQCfcKqQgrIIuPkQIwrK1sgEU9x0yl2oEeNVDzYChAESrbDoisk2uJCBhlx1pzjq2UWJDo2O1jLRvrSQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e715a0a1fa68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":25492,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1917)","md5":"7ebe3e6e98cae4d6e7746275264e235b","sha1":"10911fed461ae4fe080f44ea2727a3edecf39656","sha256":"dcb018bccf0800572516964e08cec529f9ed2123304bde8e6d61e76f4b13fd36","sha512":"325ed418ef197a070a1288136d37304895e050bc1d1ea75ad230ec8f9a7c91933a555be37539c59aaa3c31c16bf1f4c67f6e824c1a01c0b4a3d65282be189b58","ssdeep":"768:5itjb5vMLc62/6/CTirqHojE8rbhs7RmG:5itjbNV62yKT/dkG","tlshash":"c2b2f662578c5f3f01631697a63427d8f0af9c7ae9739192b2fb804483d3c909d17aa6","first_seen":"2026-04-04T15:30:23.281108Z","last_seen":"2026-04-04T15:30:23.281108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3209,"timings":{"blocked":39,"dns":29,"connect":1,"send":0,"wait":3127,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixtum.us/bootstrap-4.1.3/css/bootstrap.min.css","fqdn":"mixtum.us","domain":"mixtum.us","tld":"us"},"ip":{"addr":"104.21.34.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixtum.us/","date":"2026-04-04T15:30:02.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixtum.us","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:03:40 GMT","end":"Thu, 11 Jun 2026 23:03:39 GMT"},"fingerprint":{"sha1":"AA:F0:29:A4:67:EC:9B:34:5C:06:31:0B:CD:84:06:AC:5E:58:B9:6B","sha256":"D0:1A:71:55:37:7C:D8:20:BA:49:5A:40:11:A7:B1:C7:C3:DA:18:D4:13:7D:5D:AA:64:60:74:DE:1D:FD:24:7B"}}},"request":{"raw":"GET /bootstrap-4.1.3/css/bootstrap.min.css HTTP/1.1\r\nHost: mixtum.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixtum.us/\r\nCookie: PHPSESSID=dv26b4b40lk3ni23qe2gfg23pu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:30:02 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Apr 2025 09:38:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 05 Apr 2026 15:30:02 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6800cc1c-22688\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SH4qQ4xgQQ%2Bmm3kOTQvr9sFQlXbsOtQN4%2B4KrdK84wzvotLJUDWhXhCYZtq5hS35UeaRAn8ccWByO3bCetqTt3Otr0WJWXqdeV52%2F%2FepUMv2tfUpVQfmqwaJA0%3D\"}]}\r\ncf-ray: 9e715a1e9bd935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"04aca1f4cd3ec3c05a75a879f3be75a3","sha1":"675fcf28f9fbf37139d3b2c0b676f96f601a4203","sha256":"7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11","sha512":"890415fa75ed065992dd7883aed98bfbdfd9fa26eec7e62ea30263238adca4eecd6204f37d33a214d9b4f645ad7d9cc407d7d0e93c0e55cf251555a8a05b83ff","ssdeep":"1536:un1QWSUPBT+QYYDnDEBi82NcuSEz/NvT/gIENM6HN26e:q1L7PDxYIENM6HN26e","tlshash":"bdd373a7f5a0312da467c61864d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2023-04-05T03:23:19Z","last_seen":"2026-07-23T14:40:16.726091Z","times_seen":22662,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"mixtum.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}