{"report_id":"a43a5ddb-74b0-4510-a927-7a5ae195da15","version":6,"status":"done","tags":[],"date":"2025-08-09T19:31:11Z","url":{"schema":"https","addr":"ethereum-mixer.vip/","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"ethereum-mixer.vip/","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"title":"VIP Ethereum Mixer - Premier ETH Privacy Solution"},"submit":{"url":{"schema":"https","addr":"ethereum-mixer.vip/","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-13T19:31:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethereum-mixer.vip","ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2024-11-26","domain_rank":0,"first_seen":"2025-02-26T17:04:04.334171Z","last_seen":"2025-02-26T17:04:04.334171Z","alert_count":8,"request_count":8,"received_data":303249,"sent_data":3611,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.5.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":942,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2025-08-06T16:58:54.172989Z","alert_count":0,"request_count":2,"received_data":139362,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":2467,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2025-08-06T23:02:34.665002Z","alert_count":0,"request_count":1,"received_data":161232,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethereum-mixer.vip/npm/jquery%403.5.1/dist/jquery.min.js","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-26T09:08:06.381192Z","times_seen":263409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum-mixer.vip/npm/bootstrap%404.5.3/dist/js/bootstrap.bundle.min.js","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f389f5d2622ce2090eca7c36bcb90bc","sha1":"ab27031159724e2421f6ff5c70f48e657abe9d39","sha256":"8d7089253dca29c9cd8d9deb7ec69b0a3d445f88f6a26478c719be1f90adcb01","sha512":"89c7978e36e6076af0a17f7729ae870073fe07be88635cf4a3787e3753de0ed452b3279eb54dffd10289a86c8f25c5fadf3cac35e860805c0c0bf6e2eddbcc8a","ssdeep":"768:du/iPy7+zZHVPVBNpwV7BTUB6/YLF/fB+4ed4MMAja+t+QnXLb1+uaR+orWieOJ6:deiayUYLZ83dPD3GAP6f2jX+i/Q2","tlshash":"2183834972a0b472069f61a6807b4a0bf2372c5da107b01cbad9d4ed1f7cd893167f7a","size":84152,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-07-25T06:55:51.751841Z","times_seen":10356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethereum-mixer.vip/style.css","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ethereum-mixer.vip","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 01:20:34 GMT","end":"Thu, 02 Oct 2025 01:20:33 GMT"},"fingerprint":{"sha1":"3A:0F:A7:14:DC:72:13:BF:0C:74:A0:29:4D:60:57:19:51:C6:A1:2E","sha256":"7D:D6:51:CC:75:A2:F0:48:55:72:1E:FC:DA:F6:29:D0:76:47:C8:90:74:D3:A0:5A:B2:DB:BE:72:BE:8D:8A:5B"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: ethereum-mixer.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 09 Aug 2025 19:30:33 GMT\r\nContent-Type: text/css\r\nContent-Length: 2667\r\nConnection: keep-alive\r\nLast-Modified: Thu, 28 Nov 2024 20:10:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2667), with no line terminators","md5":"29c5e713e7804602740dfa8a92492ca6","sha1":"0b1cf0191211744f5d8308f3039306d50e27e8d6","sha256":"b11181a6176e2341d5beb7728a083825143d51147ef0c369a22438f84d4481eb","sha512":"b6bd225e72ffcd6a6fdbd409c1552ce2f614177bf875eb1557d38229839afcbda287d3589c5a3eeb7e883d35fc78d8e304c8bd306ee429752fe0b4faabfee92a","ssdeep":"","tlshash":"78512077f9d5280b312b451e64e1f7b8583b62b2cb420f7df1a732a0d7421da2a63702","first_seen":"2025-08-09T19:31:12.498485Z","last_seen":"2026-04-28T13:38:41.021992Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum-mixer.vip/npm/bootstrap%404.5.3/dist/js/bootstrap.bundle.min.js","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ethereum-mixer.vip","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 01:20:34 GMT","end":"Thu, 02 Oct 2025 01:20:33 GMT"},"fingerprint":{"sha1":"3A:0F:A7:14:DC:72:13:BF:0C:74:A0:29:4D:60:57:19:51:C6:A1:2E","sha256":"7D:D6:51:CC:75:A2:F0:48:55:72:1E:FC:DA:F6:29:D0:76:47:C8:90:74:D3:A0:5A:B2:DB:BE:72:BE:8D:8A:5B"}}},"request":{"raw":"GET /npm/bootstrap%404.5.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: ethereum-mixer.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 09 Aug 2025 19:30:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 84152\r\nConnection: keep-alive\r\nLast-Modified: Thu, 28 Nov 2024 20:11:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7f389f5d2622ce2090eca7c36bcb90bc","sha1":"ab27031159724e2421f6ff5c70f48e657abe9d39","sha256":"8d7089253dca29c9cd8d9deb7ec69b0a3d445f88f6a26478c719be1f90adcb01","sha512":"89c7978e36e6076af0a17f7729ae870073fe07be88635cf4a3787e3753de0ed452b3279eb54dffd10289a86c8f25c5fadf3cac35e860805c0c0bf6e2eddbcc8a","ssdeep":"768:du/iPy7+zZHVPVBNpwV7BTUB6/YLF/fB+4ed4MMAja+t+QnXLb1+uaR+orWieOJ6:deiayUYLZ83dPD3GAP6f2jX+i/Q2","tlshash":"2183834972a0b472069f61a6807b4a0bf2372c5da107b01cbad9d4ed1f7cd893167f7a","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-07-25T06:55:51.751841Z","times_seen":10356,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":88,"dns":1,"connect":42,"send":0,"wait":83,"receive":46,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum-mixer.vip/img/eth-mixer.png","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ethereum-mixer.vip","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 01:20:34 GMT","end":"Thu, 02 Oct 2025 01:20:33 GMT"},"fingerprint":{"sha1":"3A:0F:A7:14:DC:72:13:BF:0C:74:A0:29:4D:60:57:19:51:C6:A1:2E","sha256":"7D:D6:51:CC:75:A2:F0:48:55:72:1E:FC:DA:F6:29:D0:76:47:C8:90:74:D3:A0:5A:B2:DB:BE:72:BE:8D:8A:5B"}}},"request":{"raw":"GET /img/eth-mixer.png HTTP/1.1\r\nHost: ethereum-mixer.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 09 Aug 2025 19:30:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 105881\r\nConnection: keep-alive\r\nLast-Modified: Thu, 28 Nov 2024 20:11:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 445, 8-bit/color RGBA, non-interlaced","md5":"027513b71e98283ccd3392e8a1074905","sha1":"de53937fc3ce34315d05443327cf1297f2a3546f","sha256":"a580fc9a0a5185084cd224003a221cbde4064b835087e4b07bf278001d36efc8","sha512":"37b6f5589aecff7b7c2587b66871965d39081108f0bd8b7f46c694e3047f004c0c603a3ac1f95938d1aedb6a4dc0e4b236122496d3f6de1e8f7756faa41675a5","ssdeep":"3072:aGqDR7EU656NTBqM2g/xm58SUOjWUScuts:dUxNlVrSUOyUSY","tlshash":"b8a312ce8750b6d34aae724acb9bf11516796ff8b2533898020ebe47f5681d3da014c7","first_seen":"2025-08-09T19:31:12.500868Z","last_seen":"2026-04-28T13:38:41.021344Z","times_seen":3,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum-mixer.vip/npm/jquery%403.5.1/dist/jquery.min.js","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ethereum-mixer.vip","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 01:20:34 GMT","end":"Thu, 02 Oct 2025 01:20:33 GMT"},"fingerprint":{"sha1":"3A:0F:A7:14:DC:72:13:BF:0C:74:A0:29:4D:60:57:19:51:C6:A1:2E","sha256":"7D:D6:51:CC:75:A2:F0:48:55:72:1E:FC:DA:F6:29:D0:76:47:C8:90:74:D3:A0:5A:B2:DB:BE:72:BE:8D:8A:5B"}}},"request":{"raw":"GET /npm/jquery%403.5.1/dist/jquery.min.js HTTP/1.1\r\nHost: ethereum-mixer.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 09 Aug 2025 19:30:33 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 89476\r\nConnection: keep-alive\r\nLast-Modified: Thu, 28 Nov 2024 20:11:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-26T09:08:06.381192Z","times_seen":263409,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":85,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.13.0/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 01:25:22 GMT","end":"Tue, 30 Sep 2025 02:25:16 GMT"},"fingerprint":{"sha1":"DA:FB:BC:1A:2B:40:16:07:27:DC:AC:27:1C:83:0A:53:D4:C7:76:89","sha256":"9D:29:3F:F4:AE:5F:81:A2:AC:DA:2A:E5:E7:B6:28:70:ED:CA:69:A2:02:75:E1:B5:87:B8:5B:08:2B:9B:62:7E"}}},"request":{"raw":"GET /releases/v5.13.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ethereum-mixer.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 Aug 2025 19:30:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 79444\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VY0Qi1bDkG9j5k9fzE7peMBTmfVeaiBBh2axuGp4xTaCNsiiQ5wlqBHMzdypE23BNQNGsTVl9HwMyDdgg6cQ67FBDbCXKMzrhs10S8yEXSO1\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"b15db15f746f29ffa02638cb455b8ec0\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:10 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96c9ab298fdfb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79444, version 331.524","md5":"b15db15f746f29ffa02638cb455b8ec0","sha1":"75a88815c47a249eadb5f0edc1675957f860cca7","sha256":"7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7","sha512":"84e621ac534c416cf13880059d76ce842fa74bb433a274aa5d106adbda20354fa5ed751ed1d13d0c393d54ceb37fe8dbd2f653e4cb791e9f9d3d2a50a250b05f","ssdeep":"1536:ogXevisOzyu5r4HjEIe9vyJFdiTCHnegAZ64RPmF17k+GbpJ0VxZrtbz:oTvissyu5eb0ciORAZ64Qrk+0Mzbz","tlshash":"6b7302c68d4ae504c87e0daa36b5a96651be9fc5720e4df6e8700cbcf1f12dc0266d19","first_seen":"2023-04-05T14:18:50Z","last_seen":"2026-07-26T07:17:20.223967Z","times_seen":27680,"resource_available":false,"data":null}},"time_used":8779,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":1781,"receive":6959,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum-mixer.vip/img/mem.png","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ethereum-mixer.vip","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 01:20:34 GMT","end":"Thu, 02 Oct 2025 01:20:33 GMT"},"fingerprint":{"sha1":"3A:0F:A7:14:DC:72:13:BF:0C:74:A0:29:4D:60:57:19:51:C6:A1:2E","sha256":"7D:D6:51:CC:75:A2:F0:48:55:72:1E:FC:DA:F6:29:D0:76:47:C8:90:74:D3:A0:5A:B2:DB:BE:72:BE:8D:8A:5B"}}},"request":{"raw":"GET /img/mem.png HTTP/1.1\r\nHost: ethereum-mixer.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 09 Aug 2025 19:30:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 6691\r\nConnection: keep-alive\r\nLast-Modified: Thu, 28 Nov 2024 20:11:06 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"71997e33fb62541f11f85625b3ef5b52","sha1":"95be37f47f9defff29e9d8aecf55a6bff55a5f7d","sha256":"510e99ffd682bebced4faea39fc014dcc2d45e37734fc4b066f395240ff11a7b","sha512":"e4d4a6bf101d62a67df0d3a60fc1e43afec8049f0ed2a42dcc89eea992256c991dc5bbdf4a75949ef108f36fefc82f7e142a37820aabe082b3311cc40a26f80c","ssdeep":"192:7bH3mX6CsAS6rlNp05Fv4sAlFj4PCqkuJhscgXgmEd/o:nXmX6CsB0Maq7FxmEW","tlshash":"a0d1af991dd7adad5a74722f2ac306078216101afafa8843fa43743e7d31f2860961f7","first_seen":"2025-08-09T19:31:12.503782Z","last_seen":"2026-04-28T13:38:41.023276Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum-mixer.vip/favicon.ico","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ethereum-mixer.vip","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 01:20:34 GMT","end":"Thu, 02 Oct 2025 01:20:33 GMT"},"fingerprint":{"sha1":"3A:0F:A7:14:DC:72:13:BF:0C:74:A0:29:4D:60:57:19:51:C6:A1:2E","sha256":"7D:D6:51:CC:75:A2:F0:48:55:72:1E:FC:DA:F6:29:D0:76:47:C8:90:74:D3:A0:5A:B2:DB:BE:72:BE:8D:8A:5B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ethereum-mixer.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 09 Aug 2025 19:30:33 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Thu, 28 Nov 2024 20:10:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"9bf8de38693175deb7f94acee89b824a","sha1":"42f7a639fb2d883e2744a31f36d849884c8ed258","sha256":"61923f679a6141c34e05d57f83f77a337384c20845a0d219c7d445bcb1197851","sha512":"bec15177d72a4d90bdc6307d1f2f090585d81ce68cc2b6067084af4f6c49e2d28f4006dc7bd226336bfead6e7bafb73604009a88b8f3b4bdaffd5ab7dfa4aaa5","ssdeep":"","tlshash":"14211c035d930a04c12cd2b3f762de2b0f03c63a9a7fb12a6f5101e988ea681a8c7091","first_seen":"2025-08-09T19:31:12.505186Z","last_seen":"2026-04-28T13:38:41.017281Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum-mixer.vip/","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-09T19:30:31.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ethereum-mixer.vip","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 01:20:34 GMT","end":"Thu, 02 Oct 2025 01:20:33 GMT"},"fingerprint":{"sha1":"3A:0F:A7:14:DC:72:13:BF:0C:74:A0:29:4D:60:57:19:51:C6:A1:2E","sha256":"7D:D6:51:CC:75:A2:F0:48:55:72:1E:FC:DA:F6:29:D0:76:47:C8:90:74:D3:A0:5A:B2:DB:BE:72:BE:8D:8A:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethereum-mixer.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 09 Aug 2025 19:30:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 8291\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Feb 2025 14:29:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:4.5.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":8291,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (479)","md5":"ce31358a1267db403bc66f11b97ba931","sha1":"7dc7c1e961b9dbe38cfb2d07eff693207d02a35e","sha256":"ab1d18e8bc491bf1ed5ec69bc762c4d766fb5a39e526e515c683386454c40149","sha512":"b530a42e5fb75e95c70c7ee41846e13e92d4a4cd9c09b395da52ad416b09227b22042a4aedbf5a37202d845231ef4d8b7202592c4dcf3343a401cdf14af8fa0e","ssdeep":"192:+04y+P4VYc4kttqRc9xOxDMt5Oafg1dASmgC:+jy+QCbSqm9xOx2fgfASmgC","tlshash":"2902b577064424fb025345cd6bf1fb4ab9c2d12aea2a1809b7fc538947c2fc9da7b449","first_seen":"2025-08-09T19:31:12.506817Z","last_seen":"2025-08-09T19:31:12.506817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":196,"dns":107,"connect":42,"send":0,"wait":43,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:43:39 GMT","end":"Fri, 10 Oct 2025 03:43:37 GMT"},"fingerprint":{"sha1":"C1:BD:D6:84:57:89:FE:9E:6D:F9:1F:26:76:1D:7C:45:E8:23:F6:35","sha256":"42:6A:B9:E6:CC:53:CB:12:2A:7A:43:B8:3D:90:FC:5E:4D:CA:A2:E0:3D:B4:2E:38:10:A6:6F:26:86:7F:D5:A0"}}},"request":{"raw":"GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ethereum-mixer.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 Aug 2025 19:30:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 96c9ab287a36712d-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"816af0eddd3b4822c2756227c7e7b7ee\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:11 GMT\r\ncdn-cachedat: 08/01/2025 14:01:30\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 95a4bfceb60aef83f8b0567810fa37ed\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160302,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65326)","md5":"816af0eddd3b4822c2756227c7e7b7ee","sha1":"c470239d4c7db36d56dc3a74a080c62218c6edc4","sha256":"5b0fbe5b7ad705f6a937c4998ad02f73d8f0d976fe231b74aef0ec996990c93a","sha512":"32844d968c5b4ad05c0fccf733fd819a74feae0e08b0cc4f917686876cc3e8b18d34513cd16de89ec02145c30032b4a8c962fdc43ec4aedd267a7eef47c2d466","ssdeep":"1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b","tlshash":"0bf353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf827376487892c70a73e4c","first_seen":"2023-04-05T03:15:58Z","last_seen":"2026-07-26T04:40:50.199237Z","times_seen":14473,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":36,"dns":23,"connect":3,"send":0,"wait":69,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.13.0/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 01:25:22 GMT","end":"Tue, 30 Sep 2025 02:25:16 GMT"},"fingerprint":{"sha1":"DA:FB:BC:1A:2B:40:16:07:27:DC:AC:27:1C:83:0A:53:D4:C7:76:89","sha256":"9D:29:3F:F4:AE:5F:81:A2:AC:DA:2A:E5:E7:B6:28:70:ED:CA:69:A2:02:75:E1:B5:87:B8:5B:08:2B:9B:62:7E"}}},"request":{"raw":"GET /releases/v5.13.0/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 Aug 2025 19:30:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9u3usQvgGARkVPOyZ6LIE2p6yTzlG9SLtB3oAyETQlhR1fYmWkD7k3V7m6h7uM8o%2FycsS%2FqVp%2B65O29PifZmFoU0EpkGyMktcEnZpGQ5L71u\"}]}\r\ncf-cache-status: HIT\r\nage: 925750\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Sep 2023 01:45:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"76cb46c10b6c0293433b371bae2414b2\"\r\ncontent-encoding: br\r\ncf-ray: 96c9ab287ed756b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58578,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58392)","md5":"76cb46c10b6c0293433b371bae2414b2","sha1":"0038dc97c79451578b7bd48af60ba62282b4082b","sha256":"876d023d9d10c97941b80c3b03e2a5b94631ff7a4af9cee5604a6a2d39718d84","sha512":"2fb31670aec534f73036a9cb759abcea54c760b750a996b3e58700804fb97271a6970f094f4dd0076fa8c4bd74d14781e9197364b531086492e3ffbe98d65dc7","ssdeep":"768:FEC319PiyLNq4/xMoAUHJ2kEBR/MMQyYJrXjBrth5Qzl:FEkPxLE4/6mHQpBCfdj9tMB","tlshash":"b643fcb8e54c01c9a731c44bff82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T14:02:03Z","last_seen":"2026-07-26T06:26:43.264928Z","times_seen":10176,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":33,"dns":22,"connect":1,"send":0,"wait":13,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum-mixer.vip/img/separator.png","fqdn":"ethereum-mixer.vip","domain":"ethereum-mixer.vip","tld":"vip"},"ip":{"addr":"152.89.61.96","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereum-mixer.vip/","date":"2025-08-09T19:30:32.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ethereum-mixer.vip","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 01:20:34 GMT","end":"Thu, 02 Oct 2025 01:20:33 GMT"},"fingerprint":{"sha1":"3A:0F:A7:14:DC:72:13:BF:0C:74:A0:29:4D:60:57:19:51:C6:A1:2E","sha256":"7D:D6:51:CC:75:A2:F0:48:55:72:1E:FC:DA:F6:29:D0:76:47:C8:90:74:D3:A0:5A:B2:DB:BE:72:BE:8D:8A:5B"}}},"request":{"raw":"GET /img/separator.png HTTP/1.1\r\nHost: ethereum-mixer.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum-mixer.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 09 Aug 2025 19:30:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 3229\r\nConnection: keep-alive\r\nLast-Modified: Thu, 28 Nov 2024 20:11:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 142, 8-bit colormap, non-interlaced","md5":"e18a9bcfc77cb7b80b5e6316ee229b14","sha1":"84e4b562140bb3cb5775fdbd76edfc7ef4235144","sha256":"9e0618d3569c5bb8f5ed0e84b4081467773dcd960eb3026899946b90ccb3b9c2","sha512":"b30b5d11deb6fdb5e605388ace9d1f94d0189fe5e7e5e46ccad668b9ff97dc5d0885d3ef5361e93043bb8b31c344e7b94e8bad49786d86542fc1d369986c587c","ssdeep":"","tlshash":"34616bc223ce4911caffda70ce238a4401df6fa11292b983448b3e896bfb5b05c500f5","first_seen":"2023-05-15T11:10:28Z","last_seen":"2026-07-10T08:43:28.340307Z","times_seen":91,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":104,"dns":1,"connect":44,"send":0,"wait":43,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-09","alert":"Sinkholed","trigger":"ethereum-mixer.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}