{"report_id":"4adbdb33-2aef-4fcb-945e-adb121e1d34f","version":6,"status":"done","tags":[],"date":"2026-04-04T12:32:12Z","url":{"schema":"http","addr":"bitcoin2mix.to","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"104.21.21.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bitcoin2mix.to/","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"title":"Bitcoin Mixer | Make Your BTC Transactions Private and Untraceable","dom":{"size":9612,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (504)","md5":"ca6934ba6074dc3597fb5d33d0a7ac93","sha1":"86c6b4e8407ce367667267c48f924fb032239536","sha256":"ced3b5dc8044026cd6d6ad677316cae70c3c8db451010630b525629de305360f","sha512":"c2684f1901060535447340287d284f23bc194444c5ba60729371d93ca5e9baf2c46e8ae0ec6c9a7c694e9c49b832316e115232c3328bacbf32c3ee5b61085444","ssdeep":"192:ffTfLXE16VzX7H1xV9tnWSjVbDbsU4C2d/rNpOz9fKXvq2EGDilqIm6sW:ffTfLXE16VzX7H1xV/5b3f4C0iz9Kq2a","tlshash":"2c12e93bf29435244773c060bffbeba5baa5d246a3285c61b68c80994be0749cc335dd","dom_hash":"domhasha5c8e062e5c3504c783e5fbb0eb6fb65","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitcoin2mix.to","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"104.21.21.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:32:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"bitcoin2mix.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bitcoin2mix.to","ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-04T12:32:12.792791Z","last_seen":"2026-04-04T12:32:12.792792Z","alert_count":5,"request_count":5,"received_data":34957,"sent_data":2244,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitcoin2mix.to/","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b364c1433fab876142612b6c8cc98dec","sha1":"b56546182795886e2999a0bd2e3c7d4dcdb5150d","sha256":"ed20a3213b3e1ffdcc9aa359198d2cf6a7f3766e79799a1fc893b853735dba4c","sha512":"fb8a275e3897160159afcfe8012635a3e013d5863fa62f583c88611fbb84c43be9d6cb4a7cb3cbd50bfb5d24a64f8a2614bd5a9b3ebf09448fabb19fb53cbf49","ssdeep":"","tlshash":"86116d6a38a7743446fbb2babedf6b16943153413050d681ea8c40a04cd1e10acbfcfd","size":1108,"data":"","first_seen":"2025-08-30T16:54:13.514553Z","last_seen":"2026-04-04T12:35:50.887571Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin2mix.to/","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b15ba4572e843813d003484b0e72873","sha1":"05506d829ea653fa9ddff299a953b3fd3b8acb5e","sha256":"23586c4606dfa9a75403da482d738c25fe0a52c3e1aabf4e05c874c230294bbc","sha512":"cdcc5f1a4e5077589b14b488d8914ffac8fe41fb181f761f50b7967f1a63673117d5bc062cb3a604703f6f0bd29cef7afcaa215749eb49a4e5dc790c17bc588c","ssdeep":"","tlshash":"f7d0a76d72a0316c102920b68a0bd525a722c72b6a5790b6714e5141b821f02c76f5d6","size":234,"data":"","first_seen":"2025-08-30T16:54:13.524922Z","last_seen":"2026-04-04T12:35:50.888739Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin2mix.to/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-07T20:38:14.941588Z","times_seen":295176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"bitcoin2mix.to/css/main.css","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin2mix.to/","date":"2026-04-04T12:31:51.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin2mix.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 08:32:16 GMT","end":"Thu, 21 May 2026 09:30:59 GMT"},"fingerprint":{"sha1":"EA:21:FA:F9:7B:7E:C6:F3:27:44:88:BD:8A:AF:5F:49:7E:B3:67:45","sha256":"DD:58:ED:59:C5:E3:7C:0A:96:49:9D:D4:C9:C3:17:DA:7E:00:F2:C3:73:9F:40:15:28:1B:8C:11:E0:96:3B:9A"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: bitcoin2mix.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin2mix.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:31:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 29 Jun 2025 20:34:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6861a372-b73\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMKCtw2jBKLtyARg27x8svC7QK407UOuWotFb21LxTNT%2BU9K5ItiVlm%2B6VawH9Gfp6u6UKFRC6mgAryxQnNx%2FWz6MdKqRFb3pi4e44PQWnuEmtjVSXGl7WGNO0j0D2spxQ%3D%3D\"}]}\r\ncf-ray: 9e70551d09671525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2931,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"d34fa0f20abc3216e8835255d3fc5c8f","sha1":"e3ae319419e9f2377250c0fc4084b2c888950fae","sha256":"aa5ee7997a86dd5f669b8af8ca703891ddb3e110e6c7e48fe221d52a473e9d11","sha512":"353bc3c1a283c9c4a09d0e6bb65709a3d7bdad937bc03fdd3363edcd6b481703e6405ba54040ea61c6475b974e36b6ec9b1daa39134c1b7ae7587070fef4673e","ssdeep":"","tlshash":"815121c7592b0449fa57b4387e675b5132899453810ec8fa3ffc301cefa92d04aa678c","first_seen":"2025-07-15T17:11:38.206954Z","last_seen":"2026-04-04T12:35:50.882577Z","times_seen":11,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"bitcoin2mix.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin2mix.to/logo.svg","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin2mix.to/","date":"2026-04-04T12:31:51.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin2mix.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 08:32:16 GMT","end":"Thu, 21 May 2026 09:30:59 GMT"},"fingerprint":{"sha1":"EA:21:FA:F9:7B:7E:C6:F3:27:44:88:BD:8A:AF:5F:49:7E:B3:67:45","sha256":"DD:58:ED:59:C5:E3:7C:0A:96:49:9D:D4:C9:C3:17:DA:7E:00:F2:C3:73:9F:40:15:28:1B:8C:11:E0:96:3B:9A"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: bitcoin2mix.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin2mix.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:31:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 29 Jun 2025 20:34:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6861a366-1c1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghTk1GT1OwGcvezNofugh0fF7NSDFNs%2BnR8nk7LRNgzDjrjb2YTXuwBYRgOelpMRKn7d5QxMlpJ1mLPbFpi7kgQXqjYsmyOsOTXBwHz%2BDYddb6TItxkOd7mjYX0VTraOug%3D%3D\"}]}\r\ncf-ray: 9e70551d09681525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5b0485cd6aee98e7cde3ff5057a463a","sha1":"7572418546e0382f9a691e57004e1346f2d0dadd","sha256":"547f52b809c2accdfa28e3e790c046be400be7f80a354e51b3f445fb50be0a21","sha512":"3a6fb9e72afd8757923ff178761ab3caee5a982d980bd1136c88e42540a9af936dcfe095c0a32b3d78cd017e724a05a14578e57cc7e795aa2c757f513611fb4f","ssdeep":"192:cz+P6EjX62uySRAHFmPrfthcRlXl1N+aRXets/9XEC:c/EG26CHSrfthM9+aRN","tlshash":"fbe177a8cba38978cec907f446b45d113aab441f7679e5eccb18e571e862cf940244de","first_seen":"2024-12-20T10:58:56.868453Z","last_seen":"2026-04-04T12:32:17.595631Z","times_seen":26,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"bitcoin2mix.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin2mix.to/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoin2mix.to/","date":"2026-04-04T12:31:51.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin2mix.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 08:32:16 GMT","end":"Thu, 21 May 2026 09:30:59 GMT"},"fingerprint":{"sha1":"EA:21:FA:F9:7B:7E:C6:F3:27:44:88:BD:8A:AF:5F:49:7E:B3:67:45","sha256":"DD:58:ED:59:C5:E3:7C:0A:96:49:9D:D4:C9:C3:17:DA:7E:00:F2:C3:73:9F:40:15:28:1B:8C:11:E0:96:3B:9A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: bitcoin2mix.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin2mix.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 04 Apr 2026 13:19:51 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8GhatfFiDcEE99Eqotz1euW92bCuNiV%2FDJs9TkgFBbPJ8A2G8ZtQU%2Fpiv40lVhZS6eOADf6blsEUGjYKHsTYYar%2BeNJbxQ0zL6ap3PkvT5md4CD2C%2FHcz2D71Y%2FGgKG6mQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:31:51 GMT\r\ncf-ray: 9e70551d09691525-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-07T20:38:14.941588Z","times_seen":295176,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"bitcoin2mix.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin2mix.to/favicon.ico","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin2mix.to/","date":"2026-04-04T12:31:52.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin2mix.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 08:32:16 GMT","end":"Thu, 21 May 2026 09:30:59 GMT"},"fingerprint":{"sha1":"EA:21:FA:F9:7B:7E:C6:F3:27:44:88:BD:8A:AF:5F:49:7E:B3:67:45","sha256":"DD:58:ED:59:C5:E3:7C:0A:96:49:9D:D4:C9:C3:17:DA:7E:00:F2:C3:73:9F:40:15:28:1B:8C:11:E0:96:3B:9A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bitcoin2mix.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin2mix.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:31:52 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 29 Jun 2025 20:34:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6861a36c-27e1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kmu21D5p5MBzdH9bO8NPE2RiIjx6UFJryL8n4zgx2eTwX9fwr9kq6wn7ojFimUz9s5ln%2BIUJo6uKwMH8Ctg%2B9J4c8AYXxzysISPwRoEwuzr57cUy0BlvmsCfFez77fMcDw%3D%3D\"}]}\r\ncf-ray: 9e70551e29801525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10209,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"c987c3fc17742c24973c01e2b41270ee","sha1":"918cfc5db2e87a543d058bb43615de37cb1da234","sha256":"d7ae9dd39d4942e4a98f537eb0a025718f323d53945c25858eb6ebedf5a5c018","sha512":"68b5eb2fb6221b607b5342128773502fe78c14fbcd46ab1351abf6eb0a226284c0275b1dedbd46c69b0c60143d30c49bfda0f6e79c66b365351d40377a72ace8","ssdeep":"192:fHkj+WAhyJ/8lrUqAcCVmP5VCELy09CCOql5bJYesHR09Z/lNKJjHaIWcON:fk7b7qAcSs2yCCHl52eOSZ/l0BHaRN","tlshash":"e322b0011b8249ae30d65b158b32b88a5f0c9d01c3f6916d36f7e1c319b5b4ce493f58","first_seen":"2025-04-07T03:14:35.163898Z","last_seen":"2026-04-04T12:32:17.597361Z","times_seen":14,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"bitcoin2mix.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin2mix.to/","fqdn":"bitcoin2mix.to","domain":"bitcoin2mix.to","tld":"to"},"ip":{"addr":"172.67.198.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:31:51.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin2mix.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 08:32:16 GMT","end":"Thu, 21 May 2026 09:30:59 GMT"},"fingerprint":{"sha1":"EA:21:FA:F9:7B:7E:C6:F3:27:44:88:BD:8A:AF:5F:49:7E:B3:67:45","sha256":"DD:58:ED:59:C5:E3:7C:0A:96:49:9D:D4:C9:C3:17:DA:7E:00:F2:C3:73:9F:40:15:28:1B:8C:11:E0:96:3B:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitcoin2mix.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:31:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 29 Jun 2025 20:50:37 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8w4zs0eapGgZuv2AmnWbALVlJant2m7rDeitwEHskL1RNHAjgQKZoNAOf5wy0puG%2B6UnAQMFgcyoOLjLODjlS4M7kXlhf%2FT5AzP6CjlN5V5i7%2Bj8F1SE%2B04oCASB82NADQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e70551b0f53712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9874,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (504)","md5":"b409efbfd85f49280feae4173f2850fe","sha1":"32b428f60c21938b00446b83a32cf3c6fbf69230","sha256":"71c8b41eb5727ad95ff8748a369e92bf05d129baae31a616885b03bbf5d1e186","sha512":"760ffc2cf56cdd6cda653a791006fd28d65b8d086be0db99e971e314ef2e1ae462f49126d1835d094c4c9cd4d6076d59c8ce8d473986d37fc017330386aaa27c","ssdeep":"192:9sQv61xV0wuWSvYbDbsU4C2d/rNpOz9fKXvq2EbSZweilqEfm6su:9sQv61xV0Ab3f4C0iz9Kq2Uuweq39","tlshash":"c2120a3bf29031244673c0607febeb99baa5c286a3285c51b69c809d4fe0b48cd735dd","first_seen":"2026-04-04T12:32:17.598319Z","last_seen":"2026-04-04T12:32:17.598319Z","times_seen":1,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":56,"dns":35,"connect":1,"send":0,"wait":149,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"bitcoin2mix.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
