{"report_id":"b680ce3f-ad15-4ff5-95a6-2050a915e8c6","version":6,"status":"done","tags":[],"date":"2025-09-02T15:06:05Z","url":{"schema":"http","addr":"anonymixer.biz","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"anonymixer.biz/","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"title":"Anonymixer - Anonymous Bitcoin Mixer"},"submit":{"url":{"schema":"http","addr":"anonymixer.biz","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-07T15:06:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"anonymixer.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"anonymixer.biz","ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-24","domain_rank":0,"first_seen":"2025-09-02T15:06:05.930234Z","last_seen":"2025-09-02T15:06:05.930234Z","alert_count":6,"request_count":6,"received_data":880574,"sent_data":3036,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"anonymixer.biz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T23:30:31.693067Z","times_seen":408736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-27T23:09:58.672774Z","times_seen":734483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"305b08d0843fd6f6f740ed560048b704","sha1":"ba8ab4f83de8493bc36422463868a0201918643d","sha256":"d1ffdb1d33484cc9da7b3e0e9d3bbc9dec190be37dc4baa3ecd505683c6c7287","sha512":"9f511ee7cf1869f319eeed5013208a2e31413c40cd4d2f4480eff9f777ea6456e02eb164dfa7f28e3636807643883f88190ebe021b356630255c1418aa193e19","ssdeep":"","tlshash":"4ba0020900436f567a06c2119979e75365f8d067ba676a7509bf5c3ee18fe184408e25","size":71,"data":"","first_seen":"2025-09-02T15:06:09.748542Z","last_seen":"2026-06-30T05:05:39.691663Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-27T22:55:34.891633Z","times_seen":236379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/assets/javascripts/anonymixer.js?v=11051","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c54dd4635d01e7bf091156cd70c27c5","sha1":"c888697ede68e9da9f6432ee42e526e49809403a","sha256":"3816d8d4f65f1fa71a5fc8ab804d8dc8da839915a70084c544bbbceb0c95717b","sha512":"5e4f2644723a3a8f41ad52cb786472416026946bd33c8e65ed2e10007e7d0b014256cacbbf1f9103c88ea9b849303bfb8321867bac7e13466dae3fad9b75a21b","ssdeep":"6144:OvKyLiC8jYY+virMF1tbw475mXPC3JkWi5q57+Pmc5WNihn42rtY/w//eHwRY6y0:U8jYxvir8LVVccNih42JY/XwFy/SY+ee","tlshash":"3e64c7c1b949b2665317713265170046fe1f0e8432cf8b58f1e66aa47e6cf56b03aef8","size":329035,"data":"","first_seen":"2025-09-02T15:06:09.742816Z","last_seen":"2026-06-21T04:17:46.602894Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"8013a8d2664e16146e089e00813b2103","sha1":"396d86238026eb579f138a2448ee7339ff1237c1","sha256":"fd038e98baa0428d5f951460d7bfe61601f591c5c36d364f251677364103d5f7","sha512":"1bac23a2f35d792a92288d0d151542913bd8a9704399f68cb87d7b13ceba11a22dfcacbd24e9f3b523dad1eb9e283df052c6094fcee2ecacfb5b618ac0ab8051","ssdeep":"","tlshash":"2b90020500425e457902c20155656703519450472666597508ba5c2de10f6044004525","size":52,"data":"","first_seen":"2025-09-02T15:06:09.750392Z","last_seen":"2026-06-03T03:12:00.686306Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"anonymixer.biz/","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-02T15:05:44.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 18:59:42 GMT","end":"Sat, 22 Nov 2025 19:57:34 GMT"},"fingerprint":{"sha1":"D8:DB:B9:45:A5:16:78:D5:8C:BA:20:8C:A0:21:B7:DF:57:7B:1D:E7","sha256":"BF:B4:C6:AD:D6:0C:5C:B4:19:5B:21:A2:7C:89:B7:64:EA:4E:C1:8A:3F:11:7E:B8:A1:F5:E4:ED:75:77:69:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: anonymixer.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 15:05:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emz4NfUSlgjy9P9ankSwluz56%2F1oNATQd0UKWLWBJzBizjDg4%2BZwU9GptdfsI6RsyF2riCDDQjP9rJnI%2FBnXeu465H71mVz7lrGGIg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=8p4i1hrho2f60ufr41utloesn0; Path=/\r\ncf-ray: 978de8428f4856c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57690,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1959), with CRLF, LF line terminators","md5":"96d48a85b32a185213f9550d285fab17","sha1":"dec35540a39f9fc94dfe3109712343085357c8c2","sha256":"2c7478998dc5677c6e09644985fb0eddd67df4f72238f9b4f475b0031d5706c3","sha512":"173bda5f3f16bee1fef35b76bcabfb697ac13a0075986e9e8c32a2a616e61aaf967ef71eef198e2d95e8079de6317942dc8298c9fff8bc03d149731dc55a40d8","ssdeep":"384:qdfjAzOrktWFqPsP0r285TwYvh1OrFMsRWfRq2gkHfgRJBa9Ru6IFIHaikFbp:q5MflH5TwYvh1E7EJBHSba9RuyWF1","tlshash":"2f438b32d4d53d7b01b781f45d64ab0aef92d187d5076e0a3aec86ca5feaf468d43808","first_seen":"2025-09-02T15:06:09.739022Z","last_seen":"2025-09-02T15:06:09.739022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4174,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":4130,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"anonymixer.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/assets/stylesheets/theme.css","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anonymixer.biz/","date":"2025-09-02T15:05:48.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 18:59:42 GMT","end":"Sat, 22 Nov 2025 19:57:34 GMT"},"fingerprint":{"sha1":"D8:DB:B9:45:A5:16:78:D5:8C:BA:20:8C:A0:21:B7:DF:57:7B:1D:E7","sha256":"BF:B4:C6:AD:D6:0C:5C:B4:19:5B:21:A2:7C:89:B7:64:EA:4E:C1:8A:3F:11:7E:B8:A1:F5:E4:ED:75:77:69:94"}}},"request":{"raw":"GET /assets/stylesheets/theme.css HTTP/1.1\r\nHost: anonymixer.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anonymixer.biz/\r\nCookie: PHPSESSID=8p4i1hrho2f60ufr41utloesn0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 15:05:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Apr 2025 09:24:08 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6800c8b8-68a64\"\r\nexpires: Wed, 03 Sep 2025 15:05:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ovu1aZipy3MmemuZ0Az%2FoEzyD0kUEVtOAdErI5eBWfjY4d0iQcDmzVvG5uX7bW9TlUokbtx%2F1%2FgxnXG0ZPAl%2FTVJeYCsvwZ3Q3A1uw%3D%3D\"}]}\r\ncf-ray: 978de85d4bf7568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":428644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9f5732f35db19790215688e58858a196","sha1":"c3e0fae9ea2917a4be5a92780cf295b52fe6cd88","sha256":"70d4cde9cfe48e2f37bda3d8867c8f11c88256ce31cfc7f24e6ce6c47c322cca","sha512":"ffbe93e6f25094163184f32b5c6e7a9b8c61903f9075b86e41ef8ebfa6f4db37472399d0193c04cd113a52f28e8938362c2c9231ea28f50735187d71c979ed16","ssdeep":"6144:93zMCIh1nnTNpUpWyqyCV6WzVMUd0sNLiimQQNk6hNO6Ew4kBr2e:9IhdTNpUpWyD4S","tlshash":"b5941aa9f9913519a597c32dd0d0b6f82d2f4141e7620ebff2677b54cb891ca1a23e0c","first_seen":"2025-09-02T15:06:09.740747Z","last_seen":"2026-06-21T04:17:46.60059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":410,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"anonymixer.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anonymixer.biz/","date":"2025-09-02T15:05:48.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 18:59:42 GMT","end":"Sat, 22 Nov 2025 19:57:34 GMT"},"fingerprint":{"sha1":"D8:DB:B9:45:A5:16:78:D5:8C:BA:20:8C:A0:21:B7:DF:57:7B:1D:E7","sha256":"BF:B4:C6:AD:D6:0C:5C:B4:19:5B:21:A2:7C:89:B7:64:EA:4E:C1:8A:3F:11:7E:B8:A1:F5:E4:ED:75:77:69:94"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: anonymixer.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anonymixer.biz/\r\nCookie: PHPSESSID=8p4i1hrho2f60ufr41utloesn0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 02 Sep 2025 15:53:48 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KAAUvgHm6SxJg5JOxVrJly%2FkWAhvfJz80uvMo4nZPvETk%2BeN%2B9id4fD%2FcVPBb2YNW63wkNOE302DClAbsEjvqSg6%2Fas0iURgS8Itfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 15:05:48 GMT\r\ncf-ray: 978de85d4bf8568a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T23:30:31.693067Z","times_seen":408736,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"anonymixer.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/assets/javascripts/anonymixer.js?v=11051","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anonymixer.biz/","date":"2025-09-02T15:05:48.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 18:59:42 GMT","end":"Sat, 22 Nov 2025 19:57:34 GMT"},"fingerprint":{"sha1":"D8:DB:B9:45:A5:16:78:D5:8C:BA:20:8C:A0:21:B7:DF:57:7B:1D:E7","sha256":"BF:B4:C6:AD:D6:0C:5C:B4:19:5B:21:A2:7C:89:B7:64:EA:4E:C1:8A:3F:11:7E:B8:A1:F5:E4:ED:75:77:69:94"}}},"request":{"raw":"GET /assets/javascripts/anonymixer.js?v=11051 HTTP/1.1\r\nHost: anonymixer.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anonymixer.biz/\r\nCookie: PHPSESSID=8p4i1hrho2f60ufr41utloesn0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 15:05:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Wed, 13 Aug 2025 15:27:18 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"689caed6-5054b\"\r\nexpires: Wed, 03 Sep 2025 15:05:48 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LYRsVao6k8lBw0bqA7VX0URCbQgI62rJUmOiR5t10pGtGKHeULy%2FJFyV3xX2tgBnOYwFOpYHuWiEeYVVJ1JaQP%2BEc0Mg%2FRj%2BB0g%2BA%3D%3D\"}]}\r\ncf-ray: 978de85d5bf9568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329035,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"data","md5":"8c54dd4635d01e7bf091156cd70c27c5","sha1":"c888697ede68e9da9f6432ee42e526e49809403a","sha256":"3816d8d4f65f1fa71a5fc8ab804d8dc8da839915a70084c544bbbceb0c95717b","sha512":"5e4f2644723a3a8f41ad52cb786472416026946bd33c8e65ed2e10007e7d0b014256cacbbf1f9103c88ea9b849303bfb8321867bac7e13466dae3fad9b75a21b","ssdeep":"6144:OvKyLiC8jYY+virMF1tbw475mXPC3JkWi5q57+Pmc5WNihn42rtY/w//eHwRY6y0:U8jYxvir8LVVccNih42JY/XwFy/SY+ee","tlshash":"3e64c7c1b949b2665317713265170046fe1f0e8432cf8b58f1e66aa47e6cf56b03aef8","first_seen":"2025-09-02T15:06:09.742816Z","last_seen":"2026-06-21T04:17:46.602894Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"anonymixer.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/img/custom/sprite/sprite-source.png","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonymixer.biz/","date":"2025-09-02T15:05:49.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 18:59:42 GMT","end":"Sat, 22 Nov 2025 19:57:34 GMT"},"fingerprint":{"sha1":"D8:DB:B9:45:A5:16:78:D5:8C:BA:20:8C:A0:21:B7:DF:57:7B:1D:E7","sha256":"BF:B4:C6:AD:D6:0C:5C:B4:19:5B:21:A2:7C:89:B7:64:EA:4E:C1:8A:3F:11:7E:B8:A1:F5:E4:ED:75:77:69:94"}}},"request":{"raw":"GET /img/custom/sprite/sprite-source.png HTTP/1.1\r\nHost: anonymixer.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anonymixer.biz/assets/stylesheets/theme.css\r\nCookie: PHPSESSID=8p4i1hrho2f60ufr41utloesn0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 15:05:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 25300\r\nlast-modified: Thu, 17 Apr 2025 09:24:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6800c8bd-62d4\"\r\nexpires: Wed, 03 Sep 2025 15:05:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oI11o%2FK5k0RacSApdSUT2CgFoF3hoVN%2BCxWkIVGQ4ZsJxl2VLTDfU3Du3ZE%2FRWPhyJd1JeKijhChuKi8zLuvSOwHTlIfLCSDANbBMQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978de865ec84568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 592, 8-bit colormap, non-interlaced","md5":"35df365b28d2505c1da3ab7c22950430","sha1":"63260cddee63176a767d4d2c7b0bca92c65cf4b6","sha256":"97528a73f4304a9a55fa8f19c51476804764cc271191860dff9b98f745a7a8ed","sha512":"600ba5d8787f50594f8c652c6079588c17bf6a7678a1f392fdbc1e2381dabaaf1032a64d0fa2d26afbdc2342cc9a0d84be88b60db572ea9a922d1a1be58b5ecb","ssdeep":"768:URw6h/L84zQ7c3zZiYmSYSiqw+LwVJohYwZgw3qhLL:URwwTJkc3diYbiqnLwVwt36LL","tlshash":"e3b2e125a07a489cce78e20d88b15e2ac6968db15edf776e740eb48610f3d153bc3bd1","first_seen":"2025-04-25T10:07:30.916Z","last_seen":"2026-06-21T04:17:46.604393Z","times_seen":7,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":844,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"anonymixer.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anonymixer.biz/img/custom/anonymous-character.png","fqdn":"anonymixer.biz","domain":"anonymixer.biz","tld":"biz"},"ip":{"addr":"172.67.188.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anonymixer.biz/","date":"2025-09-02T15:05:49.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anonymixer.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 18:59:42 GMT","end":"Sat, 22 Nov 2025 19:57:34 GMT"},"fingerprint":{"sha1":"D8:DB:B9:45:A5:16:78:D5:8C:BA:20:8C:A0:21:B7:DF:57:7B:1D:E7","sha256":"BF:B4:C6:AD:D6:0C:5C:B4:19:5B:21:A2:7C:89:B7:64:EA:4E:C1:8A:3F:11:7E:B8:A1:F5:E4:ED:75:77:69:94"}}},"request":{"raw":"GET /img/custom/anonymous-character.png HTTP/1.1\r\nHost: anonymixer.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anonymixer.biz/assets/stylesheets/theme.css\r\nCookie: PHPSESSID=8p4i1hrho2f60ufr41utloesn0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 15:05:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 34588\r\nlast-modified: Thu, 17 Apr 2025 09:24:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6800c8be-871c\"\r\nexpires: Wed, 03 Sep 2025 15:05:50 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xk%2Bz7Ab9BxkbW1Lpmf9q5E80ZNVYB%2BYwoLNXaYvOgMkFLPMFaONItO4QL6e1Ut0Ik1jM3a15luJ%2FKNFxpHNeSOBpq9ZivLFhcOc8KA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 978de865ec85568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1022 x 1003, 8-bit colormap, interlaced","md5":"12b64dc5d71f7d5e7d1a31dd34ed3596","sha1":"f0e988fdee4b9b1fea41512a2c4e7b13db7f26c2","sha256":"22679b1fd78e60dcbc2322433a8899f45bf91e1454d284bd3612c189080b074b","sha512":"790078e23c51e88e329fcca2f35747006d3fdeefe91aeb9cb6ee50fb31fa8970dfc0084cc5f5250c4c7fafff5dc0758f5e7edebebe81491dc600dc1833ebc066","ssdeep":"768:PzGg3oXuZ+D9FvicqEky4aqQREXiiFBmAPCIHhF+OY:Lz3GbvyNqmBmAPDBFjY","tlshash":"d9f2f1e7a078b8d12578100b1d3a397c977eebbe97c6102327e3b236f7b48e52155280","first_seen":"2025-04-25T10:07:30.909305Z","last_seen":"2026-07-21T04:57:51.74166Z","times_seen":20,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":833,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"anonymixer.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}