{"report_id":"c4d78b64-0636-4c20-a6cc-fcbc75aed00b","version":6,"status":"done","tags":[],"date":"2026-04-13T18:59:40Z","url":{"schema":"http","addr":"mixdrp.click/f/vk79zgd3hqv6m9n","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mixdrp.click/f/vk79zgd3hqv6m9n","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"title":"MixDrop - Watch [Mommy4K] Amuse Adore (Renaissance Woman / 04.13.2026)","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mixdrp.click/f/vk79zgd3hqv6m9n","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T18:59:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-13T18:59:18Z","timestamp":1776106758,"ip_dst":{"addr":"Client IP","port":41788,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"168.80.32.78","port":443,"asn":202769,"as":"Netstyle A. Ltd","country":"Seychelles","country_code":"SC"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 31","source":"{\"timestamp\":\"2026-04-13T18:59:18.080514+0000\",\"flow_id\":487501286793953,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"168.80.32.78\",\"src_port\":443,\"dest_ip\":\"172.18.0.24\",\"dest_port\":41788,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400030,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 31\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-04-13T18:59:18.058081+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"fn.unsharposmolar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fn.unsharposmolar.com","ip":{"addr":"172.255.106.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":1265,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-04-12T22:43:11.971821Z","alert_count":0,"request_count":6,"received_data":2707961,"sent_data":2852,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-12T22:38:35.592234Z","alert_count":0,"request_count":3,"received_data":58073,"sent_data":1848,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mixdrp.click","ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-22","domain_rank":0,"first_seen":"2026-04-04T13:17:52.28956Z","last_seen":"2026-04-12T11:38:48.480633Z","alert_count":24,"request_count":24,"received_data":1786334,"sent_data":12079,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":4,"received_data":180236,"sent_data":2192,"comment":"","tags":null,"fingerprints":null},{"fqdn":"usrpubtrk.com","ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2026-04-10T00:59:21.285743Z","alert_count":3,"request_count":1,"received_data":554,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mdstats.info","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-08","domain_rank":156004,"first_seen":"2024-02-09T23:22:57Z","last_seen":"2026-04-06T19:26:03.400185Z","alert_count":0,"request_count":4,"received_data":5853,"sent_data":1781,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-12T23:11:18.280453Z","alert_count":0,"request_count":3,"received_data":436199,"sent_data":1348,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":18728,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sotlpy6yh.mxcontent.net","ip":{"addr":"168.80.32.78","port":443,"asn":202769,"as":"Netstyle A. Ltd","country":"Seychelles","country_code":"SC"},"domain_registered":"2022-03-16","domain_rank":0,"first_seen":"2026-02-19T08:58:58.712824Z","last_seen":"2026-04-12T15:37:15.033945Z","alert_count":0,"request_count":1,"received_data":80051,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-19T08:26:11.725533Z","times_seen":451918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/player/video.min.js?v=8.19","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b57eb5452ebb18f777d224eb9b0fc06","sha1":"57ab88b660bffe5f0edb59c871ad564fc5b447ba","sha256":"0957d68a4f0298bad4d37b150b48cbb022f62ac9b660df7056dd6194f69e4dc0","sha512":"b76a85b39c50f738211d998cabaa4a38a65f74df57ce589328ea3b49552fa735ffdb4ba00abeccd4e1cf27863d8ed6a7fb44f133a59ba91173329a6008ff4e1d","ssdeep":"6144:F4fU5BUAlzdVtOfNHSTs33N8jubSZnHVdVkW4TqAY++hRIc+1qvP3vvsvfzLeGcs:F4M5BUkOGvtnrGqAY16WP3MP","tlshash":"4cd45c943394613742da9097946f0311733a9e6d6808c06cf93dfeda2de8e49b17bbb4","size":634005,"data":"","first_seen":"2024-03-28T05:58:57Z","last_seen":"2026-04-19T05:48:02.805582Z","times_seen":1232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-19T08:29:56.086478Z","times_seen":402995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","size":4272,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-19T06:49:51.783175Z","times_seen":9169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/jquery-upload/js/jquery.iframe-transport.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f77830c3579ddb6e4eda9c71102aef16","sha1":"ec096d3bf06961d157a17977e5b3377d1288e466","sha256":"e40d7519371bd17aba9b17f301ca3c7598fe8408baefd9cdebd2283944ac405f","sha512":"fb9922c78117a55ba0e7f7888b2c5df3ebf4e520ad7146de8cfa55248ba1c0a672ffbf8ba984787a84cf38f52f156782103a058965178d5db2a09f4eabecef44","ssdeep":"","tlshash":"b241319af9f9295130b2206458df7448ba320a3a26890830b0f45ca85d3ca4d6593fbd","size":2322,"data":"","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.617299Z","times_seen":1425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/ads.js","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"170cb502f8f209ca64ca4c271c7041e2","sha1":"bdce5bceee905dacef001063aa1d9c5f3c8f693c","sha256":"789581e03b9915bd79ea82a241817dcbbdeb1c240e540e9470fabf1998b41a6b","sha512":"55a0ed4b66206c2bc713f474e924197cfbf5779861c221f158ab16b05437345741eff007149d1e977b623084756782f8a3cfd6fe85e3cbca3b4ead650e743c2e","ssdeep":"","tlshash":"a190029189241086515e8051a96458802c005cf313a391d8c6588578495c256066d716","size":50,"data":"","first_seen":"2023-03-07T01:41:51Z","last_seen":"2026-04-16T07:06:26.028064Z","times_seen":1975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdstats.info/js/script.js","fqdn":"mdstats.info","domain":"mdstats.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd4e2373b2e8c4dac2e80159641c5f1","sha1":"e273656e58ca934d873204e68dd35670fde657ed","sha256":"021f0fd27042b279a49e982215c6dc3c3ab84e95b35553a119dfdbd50af6be94","sha512":"fb04feb14c2eb999da4b032812a447e1d3b9f0fbc85abcdfb886df2cf1bdc1bcae1684a4e118626ecad9441fa56302ff8981b4ded5da2033012eed2e8a258398","ssdeep":"","tlshash":"0621569b78423a758cb0e9a7aa2f7703353766257809a413910196533414e4f8379ecd","size":1346,"data":"","first_seen":"2023-05-22T17:22:24Z","last_seen":"2026-04-19T05:39:53.649517Z","times_seen":7854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/xads.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"170cb502f8f209ca64ca4c271c7041e2","sha1":"bdce5bceee905dacef001063aa1d9c5f3c8f693c","sha256":"789581e03b9915bd79ea82a241817dcbbdeb1c240e540e9470fabf1998b41a6b","sha512":"55a0ed4b66206c2bc713f474e924197cfbf5779861c221f158ab16b05437345741eff007149d1e977b623084756782f8a3cfd6fe85e3cbca3b4ead650e743c2e","ssdeep":"","tlshash":"a190029189241086515e8051a96458802c005cf313a391d8c6588578495c256066d716","size":50,"data":"","first_seen":"2023-03-07T01:41:51Z","last_seen":"2026-04-16T07:06:26.028064Z","times_seen":1975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea07afe20bb23313f822a8acafc27bb4","sha1":"58364197d834e61d853a28e04ed7bbb7031b2e1f","sha256":"b6fc29087be56d2973da79dcb56bc412248c53fa743a1380a5181fcfcb3aef0e","sha512":"508d447f7d466286a0c570184930176e5f5cc51afc7ac65f5e455094ab6961e2140ca1ef052147a0b10e7d53abd448dad0aeb0997100c4bae823557696048d0c","ssdeep":"","tlshash":"911102b21914a0350f321da1a2fedab5f442741df2588ae89911ded82eaaccbcd09545","size":1010,"data":"","first_seen":"2026-04-01T19:41:31.722911Z","last_seen":"2026-04-13T18:59:52.79099Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/e/vk79zgd3hqv6m9n","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"42929fcadb07bd2a141e97f103b8b1a8","sha1":"7b0d327514c50cecc601d5e87c13602b6bc543bc","sha256":"0bfe4f5b4b3f868c177c86b326cb96db9389361244399a5d157239789b4b233f","sha512":"a68b42a3f967c18d2bfef81b75a77c767ef6a92fd6bea84e3cebd623aaa775c65d3f5551cab25f258150e29bf2fc4d674687470b03a58d5746fa1f43b550511e","ssdeep":"","tlshash":"f7e0ab802a22080e1f80913230b633553cc3dc50708f04d7140128aec47e3afc8fc2b0","size":407,"data":"","first_seen":"2026-04-13T18:59:52.805439Z","last_seen":"2026-04-13T18:59:52.805439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/jquery-upload/js/jquery.fileupload.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4281f84f3fd3ab075827471357a7347","sha1":"7c52a9c48a24ce48c0acd916fa431aebe79eb1b7","sha256":"09649459c938dca393b14fb99c361752ec9c065c3a077d95d5901e6ed9757d83","sha512":"8a642b548c3e56f39227872ccef72a3436af01eef9964e276bc3ecf7358f44f7765a9a599e911daac10b3b06ee0d9c933ad63731e13155892de02ecf94b1d550","ssdeep":"384:ngdRu7AOujVHiPTU/4z4mdY+b9arnzLIAX0cLfGr77h:gfmTfPTC4z4m3b9iMF7V","tlshash":"3882d7957aa2b56941fb747061bf100bb232e86726890065f424cecdeb7c90978b3f7d","size":18869,"data":"","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.621622Z","times_seen":1425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/modal/modal.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"573d34f6e62f2141b8e8219727b43056","sha1":"92cc987fbdfba9c8930ad253a09bd956f774fd78","sha256":"51d0e7a42e0d4a0d00388563ab6472e9880280a3f6e16b9692da6f69ac7cae70","sha512":"20f7d8ebb0e8cae958c6d280eda7380b496eea48bfcf6e5e05d835d27ce00b4f5350c2bd43e82250831cd9b38e89f3c99cf258b058b97125fce07c7c86abd034","ssdeep":"","tlshash":"7a21d0bcb26f622848fd337c703e082a895fd831594312a1e2b6147155f5f2d5722ea8","size":1333,"data":"","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.619912Z","times_seen":1425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/slidebars/slidebars.min.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1753c151e33bcb2899033de50cd2eeb","sha1":"8561a520777caf49d0afdc412873b229fa0a2be1","sha256":"f6f14db0996436aee72c823029e3dcc6cc363ec3a46757044b6b63640b5ff144","sha512":"02bc2b239ba9ead9b116aad001db67067a07fb816028681580270c723d9ac684194b8372c59945110af42482b5fa8b06485548810bf716ff8c635d74dd752ab1","ssdeep":"","tlshash":"26613189b4413f14006b6516a04bca1f627cb994a10ac9ddfa1076ee2d7890f74d6f7d","size":3399,"data":"","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.623566Z","times_seen":1713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/circular-progress/circle-progress.min.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"481511eb62925e0a61fd380fa47a1e53","sha1":"20bde42f09f827b4cfbe960fa51ae204328ab611","sha256":"ae6109f5fd770666f0daef12209ffdba676f437dc5952881b20c04ccb36a1749","sha512":"48fdb796c882992646b983167eddf66067122cd2d6d033d4e96972fe9da4610ee87a852b275f639893bf3ebf85f3a8a8f3bc0e32b4bf2ec4f1bb48fbd64066a0","ssdeep":"96:RZEX7XLByf98JolejNqgqneQ3KQYVVsaAVB9q:7EL7yeQgoeQavsfk","tlshash":"cb9187c662939c1251b76671103f12427333b49d1a15d1bc7e7061ea9d3ae0a1afbbbc","size":4396,"data":"","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.603543Z","times_seen":1425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/script.v2.min.js?v=2.0.8","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e2a6707339642e0932f5bf1240b8f2","sha1":"ec48c7aef41e1ba5d6cc4524f0aba887c4d12bb1","sha256":"307c8bf04029f702617c71eedd1f8fa6ef2c29f0585bfd3a2c68ef850e81b508","sha512":"c9647ade057f30cc5b8e341462f9d2ed837bdf0a7faa9f8505dd9b3d1428ebde84993da1d522a306b730b6a9e53a9eb796a568206c22a463e443294468f4aeea","ssdeep":"192:xz/iSvmLcheQSaCYMUsy5HGqCnnouUhaUjzAI:xz/i8mLcheQSXYMUsydG/KqI","tlshash":"5e020a9cb450f07a01ff30b4117b2615b423a9a7ca06c461f49ee4d4bebde59a507f1d","size":8488,"data":"","first_seen":"2025-08-08T19:10:35.528617Z","last_seen":"2026-04-16T23:45:31.615721Z","times_seen":385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/player/inc.js?v=2.0.2","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3d5d56c809fdf1e0428268b2f5432a7","sha1":"3ce886463256256c8e4fea995449509c9cd421c4","sha256":"96b44eca420f26d66bc2102d47282fdb8ce40d8b67c7f57bbbd34725969fd1a5","sha512":"a8346f4bc24853580093566ccb191a5ed2bc173f4be2b1d923c5bd248e258e8333a194e537a45cebc48aa966a2d5adb8e5e009dc93e181ea732ba245bd948b7a","ssdeep":"6144:dyWdVW8SjoN6ok5sR1h9YEVn36Q3F+yviAVsBtK:MM1+yviAVsBtK","tlshash":"9064864ebae369919953702d473f5002b1b5a093509aec00b94cd7d4dff969882befec","size":323726,"data":"","first_seen":"2024-04-20T18:55:02Z","last_seen":"2026-04-16T07:06:26.021677Z","times_seen":755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/jquery-upload/js/main.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f7968edcaf43f9b2ebd58d74311ff7c","sha1":"f53ca538e9a2c0cd87b51babe9d03d2f91cf6d2c","sha256":"be076d81c5a67334d5f78a5b77db41b966fb7d254586b483ac5d1f155e89a91f","sha512":"909b77de750e8e44261db3805f63f8e01a0d255ab22384617316ca71a0275f64b73baf4b8d050cfbae4493255c5a946f47ffae17975c9dbd348f566a40a05be5","ssdeep":"","tlshash":"15e0c20c3844d86ce072b3b1c5fb6a0c7c3471a519914440b749cbe1ce6a4385bd3f28","size":311,"data":"","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.620533Z","times_seen":1425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/panel/js/scroll/perfect-scrollbar.min.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a10bcfa0a9c9fa9d503b5a498cac31e","sha1":"c4f6c403e99fb37cb496c3844b332823db7c5837","sha256":"a4ec9d558eeb7bc7359fe7c4820deea2c951fdd8bd34cb0e15727412c7f6c634","sha512":"3554bd9ee0ff3dee5b9c2badeb76402408f92f2f88e55d4bc3218602d2a0d019175215aef025bde97c3964d431bed0b36401f6762f78ed4279c73cf169201695","ssdeep":"384:KycVuy6etbUgQMEi4tKmvwtp/L4VDgveAuH/jDZ1OWoxKjTUpBlMn1deF+Rd6gjj:bcVLIgQMEi4LoUVDgIOWybI7joi","tlshash":"f8822b98321134b851ff68add48f470e73366013b74f04e8a554dff86aa87b56262f2e","size":18291,"data":"","first_seen":"2023-03-07T12:03:24Z","last_seen":"2026-04-18T21:35:15.249582Z","times_seen":3795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","size":871001,"data":"","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-04-18T08:31:20.790334Z","times_seen":18602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/e/vk79zgd3hqv6m9n","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3dfed90bf96166fdffec67e60f6a46b","sha1":"c67d20dae9ef9554bbbaada5742053875a82c17d","sha256":"769328fa7baead33243c5db4a216e6bc5414398c0a091b857bad37a6a748fe4b","sha512":"1e33f9dc290fcb759e628750d0a99077b313aaac3166b922444ee4d0cf27b48edcecaba15f659b4fc9d43d313160db0ae9573dda9e4105eed1bf139b3cb18c01","ssdeep":"96:M7G4sZMUOYOEyDOkEAekGtGK7G4sZMUOYOEyDOkEAekGtG/7G4sZMUOYOEyDOkEQ:M7/smdBxeDYK7/smdBxeDY/7/smdBxeO","tlshash":"34a184bd7b89a23914514120727e47573c7d5c83ad879854c2bc54d22ab8faf4fafe80","size":4704,"data":"","first_seen":"2026-04-13T18:59:52.806562Z","last_seen":"2026-04-13T18:59:52.806562Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdstats.info/js/script.js","fqdn":"mdstats.info","domain":"mdstats.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd4e2373b2e8c4dac2e80159641c5f1","sha1":"e273656e58ca934d873204e68dd35670fde657ed","sha256":"021f0fd27042b279a49e982215c6dc3c3ab84e95b35553a119dfdbd50af6be94","sha512":"fb04feb14c2eb999da4b032812a447e1d3b9f0fbc85abcdfb886df2cf1bdc1bcae1684a4e118626ecad9441fa56302ff8981b4ded5da2033012eed2e8a258398","ssdeep":"","tlshash":"0621569b78423a758cb0e9a7aa2f7703353766257809a413910196533414e4f8379ecd","size":1346,"data":"","first_seen":"2023-05-22T17:22:24Z","last_seen":"2026-04-19T05:39:53.649517Z","times_seen":7854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.13.2/jquery-ui.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255084,"data":"","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-04-19T08:19:27.860026Z","times_seen":25275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fn.unsharposmolar.com/s9L8IlEDHKCIhTdu/116946","fqdn":"fn.unsharposmolar.com","domain":"unsharposmolar.com","tld":"com"},"ip":{"addr":"172.255.106.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-19T07:51:58.510997Z","times_seen":13969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/player/videoplayer.2.1.7.min.js","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdf26d676c690d6d61ff9ba58119ec7d","sha1":"381fd2b25bc27783c45523a053850de42a099bb6","sha256":"cfe327bcfe0794a38c4e11def6e26e904691a1c4f237f811f70389044cc9454f","sha512":"304e611e6608c41c80fe9d3cbe4c022d30051e5da8d6dc5e6b60b56097e85535875f2339a1cc787a4c1ad38b98dcf441fb0dd8254c0c2052b78f8d716a243b58","ssdeep":"384:nOIsnIo+oT+epiIM4+DGtTbaKqK9pXpDibBUk0yRSnD0:OIsIWT+epYDGtnaKH9pXpDibd0dD0","tlshash":"8a8273902760919d03835e7b633b75cbfd6e0c690855889da586fc85acce723f5bb1b0","size":19161,"data":"","first_seen":"2026-04-03T17:51:54.253696Z","last_seen":"2026-04-16T07:06:25.98243Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/e/vk79zgd3hqv6m9n","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9220d03164342b56deba35f917dd0453","sha1":"4f41dbf9d9a838a2644c374f5342ab609b46c081","sha256":"17987816c4589ac92b6b57e67ffabfa0d9765a2264113ecc1154eb335beacf16","sha512":"3c788cff0e7416507b623f0198885a4f3ee35e4ca87f2ac050573f127fb7f3c7834e86a31578486ce9c594dfcfb8917a48fac62a36c43023870d3bfed4e5c82f","ssdeep":"","tlshash":"412133b53bca52b906914130357e0383697948c7ad875855c53e90c12abcf93cebeec4","size":1355,"data":"","first_seen":"2026-04-13T18:59:52.807773Z","last_seen":"2026-04-13T18:59:52.807773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"64abe70d9944486a7fc8a2421e051b31","sha1":"76c4ab0bc6883da01d9e7960e1b82e777619f902","sha256":"a8950135e5391cab8ddd0ca939f43b99c8c19ce6dfe01c831b45f3e2317f3102","sha512":"bd9f4bf8e5f7912e3bd119867091158adfc0558c724bdcb1e1264e1fc0bde97dac563efd9532007928d5298f684a33c3ba39c69b76ec0cb6d90c241526a90e3a","ssdeep":"768:kDUIk2ceJI5CyFSFVDnmiuPd6gwsmnwGjnfFIG3+Y8J0A:bWTJI5CyY3AP4gHGjuM+JJ0A","tlshash":"05f28e1dac1b74efdeae8ad21bf05bc4457c4299058b10b930fb10c35a62adbb85b59c","size":35949,"data":"","first_seen":"2026-04-13T18:59:52.809045Z","last_seen":"2026-04-13T18:59:52.809045Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","size":871001,"data":"","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-04-18T08:31:20.790334Z","times_seen":18602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-04-19T06:45:26.220523Z","times_seen":21817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fn.unsharposmolar.com/s9L8IlEDHKCIhTdu/116946","fqdn":"fn.unsharposmolar.com","domain":"unsharposmolar.com","tld":"com"},"ip":{"addr":"172.255.106.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fn.unsharposmolar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 07:48:58 GMT","end":"Sun, 21 Jun 2026 07:48:57 GMT"},"fingerprint":{"sha1":"0F:1B:7D:FF:8E:30:6D:5C:77:17:FE:38:BB:A7:68:45:5E:E8:57:22","sha256":"61:60:A6:E1:35:4F:38:58:BE:F6:CF:28:5D:2D:4A:EB:F5:53:B3:D1:C6:3F:D9:FC:BE:0C:2D:3D:2F:85:4B:C9"}}},"request":{"raw":"GET /s9L8IlEDHKCIhTdu/116946 HTTP/1.1\r\nHost: fn.unsharposmolar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5\r\nvary: Origin\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, GYFR29QT4J80VDR0ZHSJ, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires, Credentials\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, OPTIONS\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nset-cookie: GGI10=GxcBAMSqOZXNrL4QnWwrgcaH4b9A6y0/1PiHf0P6aBSRIJC8J9WEwuZV69W3UeMOT6Qv8v/BBqGZwQhNLTQ0x9JM1wGhKiYwjieVJ8P9e6UWMEAYY4Bh2M4p/ST6SdkZ7l1fGvnuQDv2iQS7oRYarifXaazApqH5TugQGjGVfdM3L+U29ffDZgQIYyEjHioYW6RN3932KDHRvE6vN/imiBJwEdMhIiqDrfZXJJtiBdsEMSdD9PvCxF+IUuCPog7hrv8/; max-age=3600000; path=/; secure; SameSite=None\nGUI42=G/MAAARCmUv50wNSdUP+j2dyS812AkMa6/a7xd11l0RZXUDRLNJIw/RWKdJfstA8rysLHX0ggUGx+Z0RMFiHw2Yqskj/Hb7hQxtxMKAh7PqBQbu5vr4Irh8YXZ6bg8Gw+e8wbzXofxBGV3Y6GtRCTw81SA70jqD47CIhekgone1rf7hXLTVok5myKg==; max-age=3600000; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-19T07:51:58.510997Z","times_seen":13969,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":246,"dns":169,"connect":18,"send":0,"wait":27,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"fn.unsharposmolar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","date":"2026-04-13T18:59:18.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 371108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 09:33:50 GMT\r\nexpires: Tue, 13 Apr 2027 09:33:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 18:01:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 33928\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":871001,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (697)","md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-04-18T08:31:20.790334Z","times_seen":18602,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","date":"2026-04-13T18:59:18.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Mon, 13 Apr 2026 18:59:18 GMT\r\ndate: Mon, 13 Apr 2026 18:59:18 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"609d186f1b9b4b02a9e7b2bdd0dd0705","sha1":"f07c9720b1747df33bc46d050bf67b75964337bf","sha256":"c1f7307bc2da4f3f9ac325993d250922791e34b948ea9fc0399cbf4c5b259f14","sha512":"293702c92c412ea1e6f7e2f6941598cfb03bcad4c4297214c26fe17ab75020ed08306f51af8a63c28ad6cab9dd433f06a9000255af9584bdcefa27fb2f177340","ssdeep":"","tlshash":"e2b012670510cc1c0c008f02c9a7d3f8f1029025dfd0c0f080241fec4218067541da01","first_seen":"2026-04-01T15:23:54.036142Z","last_seen":"2026-04-18T08:31:20.814432Z","times_seen":15153,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh","date":"2026-04-13T18:59:18.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 371108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 09:33:50 GMT\r\nexpires: Tue, 13 Apr 2027 09:33:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 18:01:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 33928\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":871001,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (697)","md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-04-18T08:31:20.790334Z","times_seen":18602,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/imgs/v2/menu.png","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /imgs/v2/menu.png HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 134\r\nlast-modified: Tue, 25 Apr 2023 13:51:09 GMT\r\npriority: u=4,i=?0\r\netag: \"6447dacd-86\"\r\nexpires: Thu, 30 Apr 2026 19:56:03 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbuoaLBcmGO06e%2BOseEak0OH4BoG0GGwWdl385JxLkUyOPiqnXlCiLHNx70qyjfY6entUpkSr6EceSrvrM%2B8drvZ6a0FopYIlVxvAVVxHOouCHYQ5Y%2Blp0k6KzgtEbg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc28e0569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 4-bit colormap, non-interlaced","md5":"56a3acde38cb23debf33736246bdea07","sha1":"e8f892b89030ab6afba20eba377cefff18b52f63","sha256":"bb238bc06e6addd814082d5947c5a671c3f79fcc253cf5165ae4b23897ce66b1","sha512":"6fa0d4b807d4400818efba5579b505207b99d69468e06d2c096a67a9dd836ee24e096bfa2166ba00f367813e1f7b493ec26f0781fd44643672a6a0c3c38b9e1d","ssdeep":"","tlshash":"9bc02bcdab70bca1c505111a21a443c088e60c00b5370a7a004074381831304a14e252","first_seen":"2023-06-17T07:31:18Z","last_seen":"2026-04-16T23:45:31.626935Z","times_seen":1420,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/jquery-upload/js/jquery.iframe-transport.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/jquery-upload/js/jquery.iframe-transport.js?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 19 Sep 2018 14:49:10 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"5ba261e6-912\"\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJazPpnycPhB1opOjrSSBY2QGasKeDsRiJre2p1klrjltk6CWix92EiM0j7p%2Fwmego0Ke%2BCIAQQLifL5b%2FLEmpb3dzBK77mEOBVZIme7taXe41Mp2XRujzLZ20gLRjc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc48e6569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2322,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2321)","md5":"f77830c3579ddb6e4eda9c71102aef16","sha1":"ec096d3bf06961d157a17977e5b3377d1288e466","sha256":"e40d7519371bd17aba9b17f301ca3c7598fe8408baefd9cdebd2283944ac405f","sha512":"fb9922c78117a55ba0e7f7888b2c5df3ebf4e520ad7146de8cfa55248ba1c0a672ffbf8ba984787a84cf38f52f156782103a058965178d5db2a09f4eabecef44","ssdeep":"","tlshash":"b241319af9f9295130b2206458df7448ba320a3a26890830b0f45ca85d3ca4d6593fbd","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.617299Z","times_seen":1425,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/panel/js/scroll/perfect-scrollbar.min.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /panel/js/scroll/perfect-scrollbar.min.js?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Sep 2018 11:51:16 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"5b98fdb4-4773\"\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1ZKnGR0Y0cm8PFQU9IxIC%2Bihauh1KsWVVTSEUSo5b%2BXPgCBsFwVFNgOuRPaej88gzbyRw6YTZM%2FwhwJox2iiJ5jllz8SeBrRd61wipHnYpbxt1fnU1V6kVCENqL5Y0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc58ea569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18291,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18216)","md5":"4a10bcfa0a9c9fa9d503b5a498cac31e","sha1":"c4f6c403e99fb37cb496c3844b332823db7c5837","sha256":"a4ec9d558eeb7bc7359fe7c4820deea2c951fdd8bd34cb0e15727412c7f6c634","sha512":"3554bd9ee0ff3dee5b9c2badeb76402408f92f2f88e55d4bc3218602d2a0d019175215aef025bde97c3964d431bed0b36401f6762f78ed4279c73cf169201695","ssdeep":"384:KycVuy6etbUgQMEi4tKmvwtp/L4VDgveAuH/jDZ1OWoxKjTUpBlMn1deF+Rd6gjj:bcVLIgQMEi4LoUVDgIOWybI7joi","tlshash":"f8822b98321134b851ff68add48f470e73366013b74f04e8a554dff86aa87b56262f2e","first_seen":"2023-03-07T12:03:24Z","last_seen":"2026-04-18T21:35:15.249582Z","times_seen":3795,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 00:37:47 GMT\r\nexpires: Mon, 12 Apr 2027 00:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 152489\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-19T08:26:11.384604Z","times_seen":215049,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":79,"dns":1,"connect":8,"send":0,"wait":20,"receive":2,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/player/inc.js?v=2.0.2","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /player/inc.js?v=2.0.2 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/e/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Apr 2024 11:36:00 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"661fb420-4f08e\"\r\nexpires: Thu, 30 Apr 2026 18:44:46 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1124070\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhjfUw89%2FlcF0G4pzqB1uBqZi%2FRz9PuFunxubkHO3LDjYsfizwW8kZBzG%2BX3ZbI5L8zmgTcdLV28QVnDm%2BKXF%2BJ2Ig6DfPR8SaN8F01lXvkbLaXskGdPSI0J9rSkU%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb500091a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323726,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9051)","md5":"e3d5d56c809fdf1e0428268b2f5432a7","sha1":"3ce886463256256c8e4fea995449509c9cd421c4","sha256":"96b44eca420f26d66bc2102d47282fdb8ce40d8b67c7f57bbbd34725969fd1a5","sha512":"a8346f4bc24853580093566ccb191a5ed2bc173f4be2b1d923c5bd248e258e8333a194e537a45cebc48aa966a2d5adb8e5e009dc93e181ea732ba245bd948b7a","ssdeep":"6144:dyWdVW8SjoN6ok5sR1h9YEVn36Q3F+yviAVsBtK:MM1+yviAVsBtK","tlshash":"9064864ebae369919953702d473f5002b1b5a093509aec00b94cd7d4dff969882befec","first_seen":"2024-04-20T18:55:02Z","last_seen":"2026-04-16T07:06:26.021677Z","times_seen":755,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/modal/modal.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/modal/modal.js?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Oct 2018 14:32:53 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"5bc74815-535\"\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2BRdfLq6IKJFKSu4FCnyf6Dfowlj3Hpz%2FRIVJf82npP5uvuu9xUk8psApCQgjkjOvCOw0awhTNIdta5f0dTEL0pdQo91URMwZDJtnf4Am7N4kYvUZNMKlIaPAMn1g1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc48e3569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1333,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"573d34f6e62f2141b8e8219727b43056","sha1":"92cc987fbdfba9c8930ad253a09bd956f774fd78","sha256":"51d0e7a42e0d4a0d00388563ab6472e9880280a3f6e16b9692da6f69ac7cae70","sha512":"20f7d8ebb0e8cae958c6d280eda7380b496eea48bfcf6e5e05d835d27ce00b4f5350c2bd43e82250831cd9b38e89f3c99cf258b058b97125fce07c7c86abd034","ssdeep":"","tlshash":"7a21d0bcb26f622848fd337c703e082a895fd831594312a1e2b6147155f5f2d5722ea8","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.619912Z","times_seen":1425,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/circular-progress/circle-progress.min.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/circular-progress/circle-progress.min.js?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Oct 2018 16:09:50 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"5bc0c74e-112c\"\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhT1v%2BM8GQKxEvAeMKaT0wtyhgjn1N2bcfvf%2F1UlEaa9oYj5iVyPzgExJcFny64GRHtZCZIWr4OMuXvoi797emPBYSXODpao0MkFc8ETdOF2Z9IQ73khglc4bULu318%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc48e5569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4396,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4395)","md5":"481511eb62925e0a61fd380fa47a1e53","sha1":"20bde42f09f827b4cfbe960fa51ae204328ab611","sha256":"ae6109f5fd770666f0daef12209ffdba676f437dc5952881b20c04ccb36a1749","sha512":"48fdb796c882992646b983167eddf66067122cd2d6d033d4e96972fe9da4610ee87a852b275f639893bf3ebf85f3a8a8f3bc0e32b4bf2ec4f1bb48fbd64066a0","ssdeep":"96:RZEX7XLByf98JolejNqgqneQ3KQYVVsaAVB9q:7EL7yeQgoeQavsfk","tlshash":"cb9187c662939c1251b76671103f12427333b49d1a15d1bc7e7061ea9d3ae0a1afbbbc","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.603543Z","times_seen":1425,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/ads.js","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/ads.js HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Miy3CfmvYfpz9bNjQKGWhPb4F10YMqsIadesYNf4pgO7G6bBxY9ZlUTjumvQCd6aGhtmAJTSQQ0mvr4F99ago6fMKGWq4hMUFnz4AO5IQzkwpu5YUN1GgKvnNIHsnEY%3D\"}]}\r\nlast-modified: Wed, 03 Jul 2019 14:57:19 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\nage: 1119792\r\ncf-cache-status: HIT\r\netag: W/\"5d1cc24f-32\"\r\ncf-ray: 9ebcb4fc58ed569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"170cb502f8f209ca64ca4c271c7041e2","sha1":"bdce5bceee905dacef001063aa1d9c5f3c8f693c","sha256":"789581e03b9915bd79ea82a241817dcbbdeb1c240e540e9470fabf1998b41a6b","sha512":"55a0ed4b66206c2bc713f474e924197cfbf5779861c221f158ab16b05437345741eff007149d1e977b623084756782f8a3cfd6fe85e3cbca3b4ead650e743c2e","ssdeep":"","tlshash":"a190029189241086515e8051a96458802c005cf313a391d8c6588578495c256066d716","first_seen":"2023-03-07T01:41:51Z","last_seen":"2026-04-16T07:06:26.028064Z","times_seen":1975,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","date":"2026-04-13T18:59:18.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 175503\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-19T08:23:37.809768Z","times_seen":748183,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/imgs/v2/i-download.png","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /imgs/v2/i-download.png HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 783\r\nlast-modified: Wed, 10 May 2023 11:24:56 GMT\r\npriority: u=4,i=?0\r\netag: \"645b7f08-30f\"\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDgrkpHD81yMoRknJAWGOtjJwo5%2FVpzoPSKUjeXaff%2F2soqtSlsMlWFlWhdacgilNw3SrVKr27qhdWYCB%2BrRZ8VTMugWOgvBcuGnNso2hF5ZqaiV7L2dj5%2BWq0yWY2o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc28e1569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 39 x 34, 8-bit colormap, non-interlaced","md5":"5af3f83ce6b22ea50970519ae0ec134f","sha1":"1c5a9d608640c591e544d032036c72fcfa83879f","sha256":"7e153d22b140a3b6d102e72fadd344368879281f84d1c1ca1a285d5c196436d3","sha512":"0725605f5748ab8d2811b4b181cc039d4ebbe9cc67b0f0fef835af773437cd33b322c464248eb38da0211cb9126a7663576df82209e71a745f8e7d10a2d5780e","ssdeep":"","tlshash":"760162af3359396edfd6001b6639e862be2adbd304d752d2700ccf2d002365b40da2e8","first_seen":"2023-06-17T07:31:18Z","last_seen":"2026-04-16T01:17:19.152788Z","times_seen":1319,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/e/vk79zgd3hqv6m9n","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /e/vk79zgd3hqv6m9n HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPuVYiM0T7ug6MBiaWBECKgKpGJBK8WFUXGZmQfj4T4lXs%2BXKSuoOkfz5Yg5ErUT7e6%2BMRBQ9IrF7%2FCrmU1Y19t0Zw6qokAKxTzg9GPYV0Ejn9ucKAqcXY7smQJcbMk%3D\"}]}\r\ncf-ray: 9ebcb4fe7905569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":631498,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (62622)","md5":"94949ba9c78eead311d34c81535fb2d7","sha1":"21d552c8185f7c7b7f0155cc7a5bd3a9f704b331","sha256":"73abe2649f4c5f1710f0720c272ed94fa22fad8de3e4afd310ca5fd63d66bf1b","sha512":"77abf9963002a9c642bca3481bb230a5c3c461a094a1e33f5b21c51ff1f1f1bc2dc3c9c86f625d544b86f5258d7514d6fc94d23c45132e840d55098102631885","ssdeep":"12288:wMdmFGhs+REIjWzpwlVvg1/LlOadVgIfcBwDlYD5jIWqrG:wMWGqb5wlVvLadVgBglYD5jIdrG","tlshash":"ccd4754536805582230f4b7b7b17b4e6f90a3caa7526198bf208bd7465476b3fae0733","first_seen":"2026-04-13T18:59:52.784208Z","last_seen":"2026-04-13T18:59:52.784208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdstats.info/api/event","fqdn":"mdstats.info","domain":"mdstats.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdstats.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:30:19 GMT","end":"Mon, 15 Jun 2026 05:28:48 GMT"},"fingerprint":{"sha1":"A7:99:AE:05:EF:2F:7C:67:09:7B:93:4D:2A:6D:32:2E:C2:F9:A5:0E","sha256":"C5:65:E4:74:99:E0:E7:32:95:20:78:93:C9:CE:C1:C4:1C:5B:99:C7:EC:63:11:DC:7D:41:4B:7B:7D:21:DC:00"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: mdstats.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 89\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":89,"data":"{\"n\":\"pageview\",\"u\":\"https://mixdrp.click/f/vk79zgd3hqv6m9n\",\"d\":\"mixdrop.ag/f\",\"r\":null}"}},"response":{"raw":"HTTP/3 202 Accepted\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GKX_r30eh6eq1KIvEGei\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ug7TiiOf6AcqCKsnOw2mGdMXzAR428a3duVvFcFpN4AA3RS%2FfbawiWLXt7bvljHlE76cZKjY5BiR7VAk6nQ6Ohe7W8aoN3kZnvVcNZAVzD7%2FUmGKaTyKllJCDPSR7ao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4ff5a34b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-19T08:18:27.015584Z","times_seen":397849,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":40,"dns":4,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.9136962361199531\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:18.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Apr 2026 14:13:58 GMT","end":"Mon, 06 Jul 2026 15:11:39 GMT"},"fingerprint":{"sha1":"50:8B:1B:83:23:95:06:0C:1D:F3:82:B1:54:EF:3F:BB:C5:25:36:A5","sha256":"EE:4F:5D:57:AD:37:01:80:BA:38:A5:CF:61:D3:A4:C8:E7:37:EC:F5:AE:90:32:F6:F4:54:49:48:D7:67:FD:9D"}}},"request":{"raw":"POST /ut/hb.php?cb=0.9136962361199531\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1479\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1479,"data":"{\"clientHints\":{},\"isScrollable\":0,\"totalClicks\":0,\"sessionLength\":0,\"ippMissclicks\":0,\"visible\":1,\"caught\":0,\"lastevent\":0,\"isFullscreen\":0,\"isTabFocused\":1,\"eventImps\":0,\"retryCounts\":0,\"isScrolled\":0,\"isMouseMoved\":0,\"pagePercentageSeen\":100,\"belowTheFoldSeen\":100,\"touchEnd\":0,\"touchMove\":0,\"clicksByType\":{\"idle\":0,\"input\":0,\"video\":0,\"button\":0,\"link\":0,\"img\":0},\"ufp\":\"Win32/Mozilla/Netscape/true/false/1280x10240en-USunknown4824 bits\",\"sessionStartTime\":1776106758,\"sessionId\":\"daaf1ffb79281f4f68a858b2011869f3\",\"timeZoneOffset\":0,\"zones\":[],\"pUrl\":\"https%3A%2F%2Fmixdrp.click%2Ff%2Fvk79zgd3hqv6m9n\",\"pReferrer\":\"https%3A%2F%2Fmixdrp.click%2Ff%2Fvk79zgd3hqv6m9n\",\"pTitle\":\"MixDrop%20-%20Watch%20%5BMommy4K%5D%20Amuse%20Adore%20(Renaissance%20Woman%20/%2004.13.2026)\",\"pDescription\":\"\",\"pKeywords\":\"mixdrop%2Cshare%20file%2Cshare%20video%2Cupload%20file%2Cupload%20video\",\"pHasIframes\":1,\"pWidth\":1100,\"pHeight\":510,\"vWidth\":1100,\"vHeight\":510,\"inIframe\":1,\"bsd\":\"eyJwcm9iYWJpbGl0eSI6MC4wMSwicGVyU2lnbmFsIjp7ImRvZXNVQUNvbnRhaW5IZWFkbGVzc0tleXdvcmQiOmZhbHNlLCJpc1dlYkRyaXZlclByZXNlbnQiOmZhbHNlLCJpc0NEUERldGVjdGVkIjpmYWxzZSwiYXV0b21hdGVkQnJvd3Nlckdsb2JhbHMiOmZhbHNlLCJpc1dpbmRvd0NEQyI6ZmFsc2UsImlzRmlyZWZveE1pc21hdGNoIjpmYWxzZSwiaW5jb25zaXN0ZW5jaWVzIjpmYWxzZSwiaXNDaHJvbWVGb3JUZXN0aW5nIjpmYWxzZSwibWlzc2luZ1dlYlJUQyI6ZmFsc2UsImRldGVjdENTU0Fub21hbGllcyI6ZmFsc2UsImlzSGVhZGxlc3NQZXJtaXNzaW9uTWF0Y2hlZCI6ZmFsc2UsInN1c1VzZXJJbnB1dCI6ZmFsc2V9fQ==\",\"sentTimestamp\":1776106758140}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 13 Apr 2026 18:59:18 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1PSVMyu559GEQ1OcyFJ4qJh6MduihgzuAjw%2BL2WrVRoxouOwZ8VThGXu7WkA5A4gTvWq8KRKha8xUxrO%2BYPgtStcdhz6Nn%2B2QHE8ADyQspl2IkKsaZUlLmmvwEGcoWkG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb5076a6a56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T08:23:17.134367Z","times_seen":13927866,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":40,"dns":20,"connect":1,"send":0,"wait":149,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","date":"2026-04-13T18:59:18.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42575\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 18:51:38 GMT\r\nexpires: Tue, 13 Apr 2027 18:51:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 18:01:48 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 460\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c37365f788822fe972e5f45379b4eba6","sha1":"7358cb54c4309a980e2c4c2b6bac8a7568be0d8d","sha256":"574a8f41f3f785da516a501e15b51e46d206be671b71b5b4790a3db8cb9acf3e","sha512":"5305308b8299dd7ad11673cd326e87fa3b9417b30c0c0b6bedfacd7067439faeb052be83aab7451ad9a725291a2e39ee3a709f8f05b4db679f88f8c1829537e2","ssdeep":"1536:c7Rpgh9C9ToL9gTNfWNfK4RxMDldthXwW5l1Dx7:c7ArC9ULiTYNC4RSLX1","tlshash":"05838e7338913a1afc2b8b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-04-01T15:23:54.060252Z","last_seen":"2026-04-18T08:31:20.77608Z","times_seen":16022,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","date":"2026-04-13T18:59:18.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 11:27:38 GMT\r\nexpires: Thu, 16 Apr 2026 11:27:38 GMT\r\ncache-control: public, max-age=604800\r\nage: 372700\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-19T08:25:37.656727Z","times_seen":562497,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/imgs/v2/logo.png","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /imgs/v2/logo.png HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nlast-modified: Fri, 21 Apr 2023 07:42:30 GMT\r\npriority: u=4,i=?0\r\netag: \"64423e66-9a3\"\r\nexpires: Thu, 30 Apr 2026 19:56:03 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xgdh%2FWxz8e4aAPVHHmZfi1FM8k9BRwpYYQXcQHEtksK7qba9Ae608rLv0w00%2F9GXyFsWgiUi2uECJ0JmuH5y6BK67f53BrY0lGa%2B9BCtVmyJyDuNjEIllvsSu8leEVg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc28df569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 218 x 44, 8-bit colormap, non-interlaced","md5":"f1db9829c6906486e06097e6dfb1c401","sha1":"101ca67c1ee9224c9f0ac0d67b0fba3f3f3de8ec","sha256":"665001775253cf85e2b9c72c81eb54cd9fa883d3730a0264c2b27567441930bd","sha512":"2a590e59205adac682b93eed1098a6e9b68aeca26beeda4b39c6e43bbffdbece825951a6aab83cca6802ac20fadaa97fbe9f83fb340e95731684f76fdf2342c6","ssdeep":"","tlshash":"65512d587d48982888df225e95b88924c8309c6519c9557cf13d7c4ac8f00f4ed62012","first_seen":"2023-06-17T07:31:18Z","last_seen":"2026-04-16T23:45:31.618346Z","times_seen":1494,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/panel/js/scroll/perfect-scrollbar.css?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /panel/js/scroll/perfect-scrollbar.css?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Sep 2018 11:51:24 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"5b98fdbc-a26\"\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCWk9UuJHTOzudZaFv6WBUsAvNviHXT%2F78x4Tg8APSttGQpbCSrkwT1Pd43JIxfw8P3qaTS6SOIrTJwpX%2B%2FipWxKwewAaAmao5S6J%2F1LsOHgu1vCUc5nCYWi0stBxFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc58eb569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2598,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"6f36b1309fbbde634a5d54dd1734274a","sha1":"a94e730430930b2e048352996ff44bf28647669d","sha256":"7b6508c9e8e04de8ebfec5de2ce1c4303bc46a0a279283eff7e248c1c900a91b","sha512":"db1ce7084979cb94f986e2768429b086f56d206545d63fda354109c22fc1ce958f284cec64f1a9c273f526b20c9a33e941a56271639856ef10bc0220f61c2ff7","ssdeep":"","tlshash":"b151cfba969627c5321b569e2befe755333e00c2be47ca1cb69730c46b073ed1532584","first_seen":"2023-04-06T20:34:37Z","last_seen":"2026-04-18T19:30:41.590921Z","times_seen":2459,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/script.v2.min.js?v=2.0.8","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/script.v2.min.js?v=2.0.8 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 Aug 2025 11:13:59 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6895dbf7-2128\"\r\nexpires: Thu, 30 Apr 2026 19:56:03 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrGIp%2BWOQdm65qhAUQrMtoDHzm4imZi8T8k6F4QiKDxmqxX1kttL6x%2B8KeVgxNITOyCBQuFjEiHN1H4NA4dr2amoWXP%2FmQszBHzO2P%2FplFVPfWWMjqS%2BFFEKMXHal3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc58ec569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8488,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8487)","md5":"41e2a6707339642e0932f5bf1240b8f2","sha1":"ec48c7aef41e1ba5d6cc4524f0aba887c4d12bb1","sha256":"307c8bf04029f702617c71eedd1f8fa6ef2c29f0585bfd3a2c68ef850e81b508","sha512":"c9647ade057f30cc5b8e341462f9d2ed837bdf0a7faa9f8505dd9b3d1428ebde84993da1d522a306b730b6a9e53a9eb796a568206c22a463e443294468f4aeea","ssdeep":"192:xz/iSvmLcheQSaCYMUsy5HGqCnnouUhaUjzAI:xz/i8mLcheQSXYMUsydG/KqI","tlshash":"5e020a9cb450f07a01ff30b4117b2615b423a9a7ca06c461f49ee4d4bebde59a507f1d","first_seen":"2025-08-08T19:10:35.528617Z","last_seen":"2026-04-16T23:45:31.615721Z","times_seen":385,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 00:37:47 GMT\r\nexpires: Mon, 12 Apr 2027 00:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 152489\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-19T08:26:11.384604Z","times_seen":215049,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":76,"dns":1,"connect":7,"send":0,"wait":10,"receive":14,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/player/videoplayer.v2.4.min.css?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /player/videoplayer.v2.4.min.css?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/e/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 06 Mar 2024 00:51:00 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"65e7bdf4-4554\"\r\nexpires: Fri, 08 May 2026 04:57:06 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 482531\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDMZazXqu9Ryj5dhyWkf6QqzQo%2BYeP%2BU550DcSwoRUI5QidGMafJlr9nayqOauYcIjeJ8BxQZCqEvUmePxdGLk9ZqiV4Ao%2FUJsWst%2FL%2FZjbUuqqgzh3%2BqyXtPkWkpxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fff917569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17748,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13480)","md5":"478555429113e12686a7870d90e0c745","sha1":"b6a76b657a7ab52cf13d25413a3f89d5995fbe4b","sha256":"f35d48f37b13ddb029454c9a918180c82a0c106427791af37e465679bc93aec5","sha512":"34b906acea247bf73d6f40ef3eabcca2ee4a119bee820c770e8e2b74e974461a8a789e5c92b3c95aca1437d58947c788d55dea375fbcd7b13b8299047d33f647","ssdeep":"192:UtrIgGQmwslXLa07wHcwnSZYOIWrghKEOfQREUTcLgJZba9f/nKWUMXH+O:Kc/epa97UMXHF","tlshash":"8f828452f145a6ee613fc2465ac2e766e73df042e2151beef51bb6748fce184182b2c0","first_seen":"2024-03-14T23:30:25Z","last_seen":"2026-04-16T07:06:26.027151Z","times_seen":703,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:39:53 GMT","end":"Mon, 15 Jun 2026 08:39:52 GMT"},"fingerprint":{"sha1":"84:73:AD:21:D7:99:85:74:5C:48:5A:0D:AC:D6:69:F6:B8:C0:F7:92","sha256":"E0:8F:67:97:65:DF:94:C4:50:AD:BB:CB:88:9B:3D:53:89:9B:60:FF:F3:D8:C7:40:94:0F:14:65:BC:FB:C3:B8"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 13 Apr 2026 18:59:17 GMT\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1010,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1010), with no line terminators","md5":"ea07afe20bb23313f822a8acafc27bb4","sha1":"58364197d834e61d853a28e04ed7bbb7031b2e1f","sha256":"b6fc29087be56d2973da79dcb56bc412248c53fa743a1380a5181fcfcb3aef0e","sha512":"508d447f7d466286a0c570184930176e5f5cc51afc7ac65f5e455094ab6961e2140ca1ef052147a0b10e7d53abd448dad0aeb0997100c4bae823557696048d0c","ssdeep":"","tlshash":"911102b21914a0350f321da1a2fedab5f442741df2588ae89911ded82eaaccbcd09545","first_seen":"2026-04-01T19:41:31.722911Z","last_seen":"2026-04-13T18:59:52.79099Z","times_seen":137,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":83,"dns":1,"connect":11,"send":0,"wait":23,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/player/videoplayer.2.1.7.min.js","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /player/videoplayer.2.1.7.min.js HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/e/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Apr 2026 03:42:45 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"69cf3735-4ad9\"\r\nexpires: Fri, 08 May 2026 04:57:06 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 482531\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSR0HDIEq144DGH%2B96RiQBVOHkoo%2FiwYkc22XVSbZKexEj5wZN%2BGjVP1xRr2ttcVNy8aifWCK2si6Bc%2BNECnZx9i5OnDtmpMGV34fy6IfXbXPeF4v%2Fc0gZglWI5G5Ng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb500091b569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19161,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19161), with no line terminators","md5":"cdf26d676c690d6d61ff9ba58119ec7d","sha1":"381fd2b25bc27783c45523a053850de42a099bb6","sha256":"cfe327bcfe0794a38c4e11def6e26e904691a1c4f237f811f70389044cc9454f","sha512":"304e611e6608c41c80fe9d3cbe4c022d30051e5da8d6dc5e6b60b56097e85535875f2339a1cc787a4c1ad38b98dcf441fb0dd8254c0c2052b78f8d716a243b58","ssdeep":"384:nOIsnIo+oT+epiIM4+DGtTbaKqK9pXpDibBUk0yRSnD0:OIsIWT+epYDGtnaKH9pXpDibd0dD0","tlshash":"8a8273902760919d03835e7b633b75cbfd6e0c690855889da586fc85acce723f5bb1b0","first_seen":"2026-04-03T17:51:54.253696Z","last_seen":"2026-04-16T07:06:25.98243Z","times_seen":136,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/xads.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /xads.js?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/e/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FcgCq2QQQB42ZSnR90uplK8%2FYEUi%2BBMOoiYJI02Yo3sMDLg%2FYCShL8WLZXQiIZGtvYt7gLDc9Dy%2F5P21Z2hvAD%2BAZZ0%2B1ZLQgjhOmQnXfQ1bZ%2Bv2%2FU6v8gRfDF00Hk%3D\"}]}\r\nlast-modified: Mon, 16 Nov 2020 14:17:06 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 18:44:46 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\nage: 1124070\r\ncf-cache-status: HIT\r\netag: W/\"5fb289e2-32\"\r\ncf-ray: 9ebcb500091c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"170cb502f8f209ca64ca4c271c7041e2","sha1":"bdce5bceee905dacef001063aa1d9c5f3c8f693c","sha256":"789581e03b9915bd79ea82a241817dcbbdeb1c240e540e9470fabf1998b41a6b","sha512":"55a0ed4b66206c2bc713f474e924197cfbf5779861c221f158ab16b05437345741eff007149d1e977b623084756782f8a3cfd6fe85e3cbca3b4ead650e743c2e","ssdeep":"","tlshash":"a190029189241086515e8051a96458802c005cf313a391d8c6588578495c256066d716","first_seen":"2023-03-07T01:41:51Z","last_seen":"2026-04-16T07:06:26.028064Z","times_seen":1975,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/f/vk79zgd3hqv6m9n","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T18:59:16.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /f/vk79zgd3hqv6m9n HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng; path=/; secure; SameSite=None\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDiF3B%2BtEi%2FG8ALylu8ppj5v5FoXUubc1QXswIVz0su4PUZ8kr6tVjGuzChvFdnBmqVJ1ht3a9ed8C2OKgf4aAojALegSyGPmwo2bDrTr%2BOl50vFoQQLc7guyeKrxzs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ebcb4f999ac56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":9682,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (335)","md5":"5114a404cdab081fafdcc18dd3981dba","sha1":"a30cca26041dca9eae13cbb86bb500f5ec279636","sha256":"7f1aad4be16aa498ca9cc1e9096aef200659cb70561382dd81066ae48c04d475","sha512":"703f1761d1b4ba4d18808e9ccbaed5ebae3de4a7276bd734ce3356363e3a839bf84a87061abd42a5d639e07a51c880edd5504f50e9aa44c9337d4f7842ee11ae","ssdeep":"192:oxltsakpc9uP2Oid2eOYZq3oJWQ+5x3n/nw1G5GcGcpI316D5ueaOXF:oxvwpc9uP2O4LOQqYJW5ZqHcNI316luI","tlshash":"f41273212d0c4d3a016312e6b4a5ff0ef0ebfe62d3075880a0fb56599fd1fd58a225a3","first_seen":"2026-04-13T18:59:52.792133Z","last_seen":"2026-04-13T18:59:52.792133Z","times_seen":1,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":57,"dns":41,"connect":1,"send":0,"wait":172,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.13.2/jquery-ui.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.13.2/jquery-ui.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-3e46c\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\nage: 1582250\r\nx-served-by: cache-lga13623-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 67, 9755\r\nx-timer: S1776106757.602445,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 67628\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255084,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-04-19T08:19:27.860026Z","times_seen":25275,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":51,"dns":14,"connect":26,"send":0,"wait":14,"receive":17,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/jquery-upload/js/main.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/jquery-upload/js/main.js?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o09Jd4JvdlzmOmwdPJ%2F%2BqnRc9YArdj9T2otbjFUNQr7Pn8wLXazOVStMVqCeaSuK7rZ1tNIcBzEqUD1zJa%2FdELXxylyaEPNdHkDAevgDDDSqLgPiTefciRqMnU%2Bsvmk%3D\"}]}\r\nlast-modified: Wed, 19 Sep 2018 17:23:35 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\nage: 1119792\r\ncf-cache-status: HIT\r\netag: W/\"5ba28617-137\"\r\ncf-ray: 9ebcb4fc48e9569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1f7968edcaf43f9b2ebd58d74311ff7c","sha1":"f53ca538e9a2c0cd87b51babe9d03d2f91cf6d2c","sha256":"be076d81c5a67334d5f78a5b77db41b966fb7d254586b483ac5d1f155e89a91f","sha512":"909b77de750e8e44261db3805f63f8e01a0d255ab22384617316ca71a0275f64b73baf4b8d050cfbae4493255c5a946f47ffae17975c9dbd348f566a40a05be5","ssdeep":"","tlshash":"15e0c20c3844d86ce072b3b1c5fb6a0c7c3471a519914440b749cbe1ce6a4385bd3f28","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.620533Z","times_seen":1425,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdstats.info/js/script.js","fqdn":"mdstats.info","domain":"mdstats.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdstats.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:30:19 GMT","end":"Mon, 15 Jun 2026 05:28:48 GMT"},"fingerprint":{"sha1":"A7:99:AE:05:EF:2F:7C:67:09:7B:93:4D:2A:6D:32:2E:C2:F9:A5:0E","sha256":"C5:65:E4:74:99:E0:E7:32:95:20:78:93:C9:CE:C1:C4:1C:5B:99:C7:EC:63:11:DC:7D:41:4B:7B:7D:21:DC:00"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: mdstats.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nage: 55078\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zm9AfaiykI%2Ffx9N5FDaamKNHp9fncpTqKmMubR%2BmUIXI16wrPuEQKoPHVdOgofWFroD%2Btr7YWQHhA%2F3mdQBklfVFi%2FJBh5CqDLZg2xB3ctSd%2BgT3K9%2BP1MxnNt0rFak%3D\"}]}\r\nlast-modified: Mon, 13 Apr 2026 03:41:18 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9ebcb4fcba7c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1346), with no line terminators","md5":"abd4e2373b2e8c4dac2e80159641c5f1","sha1":"e273656e58ca934d873204e68dd35670fde657ed","sha256":"021f0fd27042b279a49e982215c6dc3c3ab84e95b35553a119dfdbd50af6be94","sha512":"fb04feb14c2eb999da4b032812a447e1d3b9f0fbc85abcdfb886df2cf1bdc1bcae1684a4e118626ecad9441fa56302ff8981b4ded5da2033012eed2e8a258398","ssdeep":"","tlshash":"0621569b78423a758cb0e9a7aa2f7703353766257809a413910196533414e4f8379ecd","first_seen":"2023-05-22T17:22:24Z","last_seen":"2026-04-19T05:39:53.649517Z","times_seen":7854,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":19,"dns":33,"connect":1,"send":0,"wait":12,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\nage: 989929\r\nx-served-by: cache-lga21931-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 153529\r\nx-timer: S1776106757.126254,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-19T08:26:11.725533Z","times_seen":451918,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /cv/js/sender/v1/cast_sender.js?loadCastFramework=1 HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cloudview\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"cloudview\"\r\nreport-to: {\"group\":\"cloudview\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/cloudview\"}]}\r\ncontent-length: 2007\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\nexpires: Mon, 13 Apr 2026 18:59:17 GMT\r\ncache-control: private, max-age=3000\r\nlast-modified: Tue, 16 Feb 2021 23:57:06 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4272,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1143)","md5":"b427175fa1078775eb792756e7b6d1e7","sha1":"4c55c0233d3d9002b3449c025f97821f8bb8900d","sha256":"ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f","sha512":"af8d384188363378bc99c2e51523e74e1d18ba77d51bff7647a377a117499421f9e94477e09907925e46dad0a908b799a616d0b4855ffff064ba6350815063d3","ssdeep":"96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2","tlshash":"d191c68d7a70f4328aa138b6283f964ae37b50b5f4d4f0d5508ccce45a78e4a4726f6d","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-19T06:49:51.783175Z","times_seen":9169,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":39,"dns":0,"connect":22,"send":0,"wait":17,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdstats.info/js/script.js","fqdn":"mdstats.info","domain":"mdstats.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdstats.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:30:19 GMT","end":"Mon, 15 Jun 2026 05:28:48 GMT"},"fingerprint":{"sha1":"A7:99:AE:05:EF:2F:7C:67:09:7B:93:4D:2A:6D:32:2E:C2:F9:A5:0E","sha256":"C5:65:E4:74:99:E0:E7:32:95:20:78:93:C9:CE:C1:C4:1C:5B:99:C7:EC:63:11:DC:7D:41:4B:7B:7D:21:DC:00"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: mdstats.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nage: 55078\r\nlast-modified: Mon, 13 Apr 2026 03:41:18 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNwqlnwDYIX5Igrej7GpOG9Fll7iihUb3n0y5Vh8J4POR9bkH8Ep%2FsZB%2FxtMfGt74g%2Fi%2Fyguv23mItO%2Fjppjp3LkMiZCfDetrdmtE%2BoufKOK6%2FTe4kZepM9pDvanGdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ebcb50028b51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1346), with no line terminators","md5":"abd4e2373b2e8c4dac2e80159641c5f1","sha1":"e273656e58ca934d873204e68dd35670fde657ed","sha256":"021f0fd27042b279a49e982215c6dc3c3ab84e95b35553a119dfdbd50af6be94","sha512":"fb04feb14c2eb999da4b032812a447e1d3b9f0fbc85abcdfb886df2cf1bdc1bcae1684a4e118626ecad9441fa56302ff8981b4ded5da2033012eed2e8a258398","ssdeep":"","tlshash":"0621569b78423a758cb0e9a7aa2f7703353766257809a413910196533414e4f8379ecd","first_seen":"2023-05-22T17:22:24Z","last_seen":"2026-04-19T05:39:53.649517Z","times_seen":7854,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/slidebars/slidebars.min.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/slidebars/slidebars.min.js?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 24 Aug 2018 12:43:33 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"5b7ffd75-d47\"\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnLLO2COKF%2Bi3RgNPWAEdhsrxN80scy%2FwJp6GER9XukRbPY%2FzcYHu0CesePYoMsDUrgQMToecJYZO5gG%2BtkmAOyyaEi8U0L9v6m8P3iXmOBd%2Bb5z7A1SNMvrFvY3Blc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc48e4569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3399,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3122)","md5":"c1753c151e33bcb2899033de50cd2eeb","sha1":"8561a520777caf49d0afdc412873b229fa0a2be1","sha256":"f6f14db0996436aee72c823029e3dcc6cc363ec3a46757044b6b63640b5ff144","sha512":"02bc2b239ba9ead9b116aad001db67067a07fb816028681580270c723d9ac684194b8372c59945110af42482b5fa8b06485548810bf716ff8c635d74dd752ab1","ssdeep":"","tlshash":"26613189b4413f14006b6516a04bca1f627cb994a10ac9ddfa1076ee2d7890f74d6f7d","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.623566Z","times_seen":1713,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/jquery-upload/js/jquery.fileupload.js?v=2.0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/jquery-upload/js/jquery.fileupload.js?v=2.0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 19 Sep 2018 14:48:31 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"5ba261bf-49b5\"\r\nexpires: Thu, 30 Apr 2026 19:56:04 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7tsf8KFNXsg99Sf9MwoK8gB2ctr782UG6HcCbzPgYKI2T3So4SxhnHt4VaxWl1KeW3J1Jq8lnLkKxc%2B5hP06PerOrynDoJyN9B1lCnzNrEV7j33No%2F4CzIr2nCwHyI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc48e7569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18868)","md5":"a4281f84f3fd3ab075827471357a7347","sha1":"7c52a9c48a24ce48c0acd916fa431aebe79eb1b7","sha256":"09649459c938dca393b14fb99c361752ec9c065c3a077d95d5901e6ed9757d83","sha512":"8a642b548c3e56f39227872ccef72a3436af01eef9964e276bc3ecf7358f44f7765a9a599e911daac10b3b06ee0d9c933ad63731e13155892de02ecf94b1d550","ssdeep":"384:ngdRu7AOujVHiPTU/4z4mdY+b9arnzLIAX0cLfGr77h:gfmTfPTC4z4m3b9iMF7V","tlshash":"3882d7957aa2b56941fb747061bf100bb232e86726890065f424cecdeb7c90978b3f7d","first_seen":"2023-03-07T12:03:28Z","last_seen":"2026-04-16T23:45:31.621622Z","times_seen":1425,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@300;400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Apr 2026 18:59:16 GMT\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18042,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"46f0a0844739deb5b3ad28ec35021b49","sha1":"ccda4fc9bb50655a919e389870c5fe00ff2abf23","sha256":"f068cfb70e486aaf82bf309e3861f7a3684e10c89774f165f94ea99b2b37c6e1","sha512":"a683114d7c76b097c95e43ee550d6625f99e00c32667404354814a07b7848a94ba88cf9609bc52a3aef8a1f89536b06171b0a29f700370be29e80adc386957b8","ssdeep":"192:fCPPa2Skrq4nbqGIwV4G5zpDCKKf2XdrqJnbqGIwV4jozYSC77u2mIrqUnbqGIwq:6SqqY49t5qY47uOqY4P","tlshash":"60822b9000171850aa435de633ce7e34ee0f92627044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T11:26:58.619457Z","last_seen":"2026-04-19T02:30:16.753057Z","times_seen":1852,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":61,"dns":1,"connect":7,"send":0,"wait":23,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/player/video.min.js?v=8.19","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /player/video.min.js?v=8.19 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/e/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jan 2024 12:47:07 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65a7cc4b-9ac95\"\r\nexpires: Thu, 30 Apr 2026 18:44:46 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1124070\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3XrsBDhypjDy02YxNyBxXnvsCny3%2FiYifpB5kXxzdAsg70iTBjeYcdQQV4McFmdRVG13b0B2h8QYKlT%2FHV8t1tSnQ3DkIO37AMAxPLjfCUN12raCexbTXOuckZxEBeM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb5000919569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634005,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65141)","md5":"1b57eb5452ebb18f777d224eb9b0fc06","sha1":"57ab88b660bffe5f0edb59c871ad564fc5b447ba","sha256":"0957d68a4f0298bad4d37b150b48cbb022f62ac9b660df7056dd6194f69e4dc0","sha512":"b76a85b39c50f738211d998cabaa4a38a65f74df57ce589328ea3b49552fa735ffdb4ba00abeccd4e1cf27863d8ed6a7fb44f133a59ba91173329a6008ff4e1d","ssdeep":"6144:F4fU5BUAlzdVtOfNHSTs33N8jubSZnHVdVkW4TqAY++hRIc+1qvP3vvsvfzLeGcs:F4M5BUkOGvtnrGqAY16WP3MP","tlshash":"4cd45c943394613742da9097946f0311733a9e6d6808c06cf93dfeda2de8e49b17bbb4","first_seen":"2024-03-28T05:58:57Z","last_seen":"2026-04-19T05:48:02.805582Z","times_seen":1232,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdstats.info/api/event","fqdn":"mdstats.info","domain":"mdstats.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdstats.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:30:19 GMT","end":"Mon, 15 Jun 2026 05:28:48 GMT"},"fingerprint":{"sha1":"A7:99:AE:05:EF:2F:7C:67:09:7B:93:4D:2A:6D:32:2E:C2:F9:A5:0E","sha256":"C5:65:E4:74:99:E0:E7:32:95:20:78:93:C9:CE:C1:C4:1C:5B:99:C7:EC:63:11:DC:7D:41:4B:7B:7D:21:DC:00"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: mdstats.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 123\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":123,"data":"{\"n\":\"pageview\",\"u\":\"https://mixdrp.click/e/vk79zgd3hqv6m9n\",\"d\":\"mixdrop.ag\",\"r\":\"https://mixdrp.click/f/vk79zgd3hqv6m9n\"}"}},"response":{"raw":"HTTP/3 202 Accepted\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GKX_r5NkTWgUcoYvEGqi\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qzqhk4E35U4PWmEnZAlywtZIGxVmnYzI9woTdkvfdzKDBEupTduH0pCmObdkypH62bpRwl4Ou5vm6u4QAEYnxd%2BqjVAQgv%2FyQFIwr5nNEPsE9KVxB1xZiFVGuBtIIEM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb502e85fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-19T08:18:27.015584Z","times_seen":397849,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/js/slidebars/slidebars.css?v=0.1","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /js/slidebars/slidebars.css?v=0.1 HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Aug 2018 12:43:34 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"5b7ffd76-c03\"\r\nexpires: Thu, 30 Apr 2026 19:56:03 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2BDkCBnmh8NPlilxmlTZEwxO3SouN76taUbfmfkk1p6tF2F%2BQjD8sSuekPKFNbRQlbDUddiZ40Z3jVcwxVQ9R4n8c%2Bhi2xXE5CFiCJFXM%2BTf6vcJJffOcNvz4FNlGIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc08dc569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1e9e9c76e3facb22f54e9707ab4c9f61","sha1":"c73bd3dd59a2dcacc59f93207b6a635247d04516","sha256":"ba37e57b3f0068f52e9af9d9ca3052aff6ef7abfd9dad7fcc22d9b00253d8746","sha512":"fe48195dee03cb043315c7503a064d8f435f0eee9a4ca921ef3e8618238e85279d22ecf6d6bc0fc85092fd11c7efd90c52eb8d8d71592550064d20e5176eff9b","ssdeep":"","tlshash":"035135726e0014085b5247245bea472cdf3de2239f19cdaefa1d3a4e1f3db4f2186a81","first_seen":"2023-04-11T06:53:28Z","last_seen":"2026-04-16T23:45:31.622149Z","times_seen":1237,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/player/video.8.10.min.css","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /player/video.8.10.min.css HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/e/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jan 2024 12:47:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"65a7cc54-b2c0\"\r\nexpires: Mon, 11 May 2026 01:22:50 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 236186\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXMVg%2BLsDwUMCW%2F8HtIiHXDS5Y524EuR4evT58JVUXGf%2FCLxcDQDUp%2FlSWDBsMnFp87pl4EpaioWEvOncp3KjOlHMU4GmXnmhlaCH5hcPC6z4Zk1h1d5P12Kq75CIjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fff916569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45760,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45760), with no line terminators","md5":"9576cae2eb08f656230aed0e26732fbe","sha1":"3f2acbd2eb0ddae7c5fa0ebd81a892760a809746","sha256":"87590de8c7bcfa547adf9a7924bdb91a1733cb7ac308c40d5bbff34f82734dd9","sha512":"ef2816c090a412c23bb0da97b47c99bfe5bd78267002035c630695eed74bbd6b43c539804892f28a01ce86e7ddce217cd764bdf469c033c26e0c8736f8fa648b","ssdeep":"768:GVGmgN6zb1wM1EVXjbrhomAUvN6wwJCDDV7Dz:9mgs9l1EVXjumAUvN6wwJCDDV7Dz","tlshash":"6e238650f418cef9133e8181edc0eb26d33ef429dd9168a4e5677e6c8dea187252b2d4","first_seen":"2024-03-28T05:58:57Z","last_seen":"2026-04-19T05:48:02.790426Z","times_seen":1460,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/imgs/v2/favicon-16x16.png","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /imgs/v2/favicon-16x16.png HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1162\r\nlast-modified: Thu, 08 Jun 2023 12:41:50 GMT\r\npriority: u=6,i=?0\r\netag: \"6481cc8e-48a\"\r\nexpires: Thu, 30 Apr 2026 20:13:13 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 1118763\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6y%2B4pFQegFP46DXIuMHFzYbHenMksicK8yWEQUaT0MCQUtChGAVR6O%2BY4AwN85DoGaT4I30EhP5S71CPfrPQ%2FPeIkLIf1quvcXnfiL98afxkA0HBtHAt%2Fg5WC8nxDM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb5007922569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"e0f38ab405ae4403be29778964115abf","sha1":"fe542f0fe2250a0b704b530fe232dfa07ba9f6a2","sha256":"c2961fcd62ac75d2cbf83a25449e2b5728ef245e13e175e94c43626fa9463d5d","sha512":"d3d8d600b641ec1d58f12589005ea2b4a9f4d09ff120f7bf54815f6cfc98b23b0fd667b165cd762b9849ad03996b093e1577ec15ac4dbf36685f8337b63cabae","ssdeep":"","tlshash":"df2160d4f820e092422b271eeb1b0104ebbf203b4f4d4749bd0568241c8c2f915f1e62","first_seen":"2023-06-17T07:31:18Z","last_seen":"2026-04-16T23:45:31.627868Z","times_seen":2024,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:17.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /recaptcha/releases/kUYUkUlSyqkjTSMaN2w3RaOh/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 371108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Apr 2026 09:33:50 GMT\r\nexpires: Tue, 13 Apr 2027 09:33:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 18:01:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 33927\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":871001,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (697)","md5":"8abdc97e134e08d7698284ceb88e6707","sha1":"f5f054ebfe47fe8b4d08653c082a373be4c35763","sha256":"2f8d4cd6afd3ab3f8655d28d88ac6ce57ad4fe01fd767325d906a09a7a5e36a0","sha512":"c0c8857dd062021c2403ccbf1d423cbfe963ff28f162bf4e53206378ec2e1fd43910f05a6473928371ac73f24e98f2f93fd08230d172436983b954546fe9369e","ssdeep":"6144:qmP0lg3kOu15MkMCWBvlvSI8a5518W6aHwSyxzRFM21CHm7657fe0Ojboy95gBT8:9mz2vf1xwS0R0tOb95DT9lgO+8QaKEXl","tlshash":"cb055be8f4923ab19221b5fa407b205b933e7529d81c0e5db165c4f23eb4849607efb7","first_seen":"2026-04-01T15:23:54.040096Z","last_seen":"2026-04-18T08:31:20.790334Z","times_seen":18602,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":10,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sotlpy6yh.mxcontent.net/thumbs/vk79zgd3hqv6m9n.jpg","fqdn":"sotlpy6yh.mxcontent.net","domain":"mxcontent.net","tld":"net"},"ip":{"addr":"168.80.32.78","port":443,"asn":202769,"as":"Netstyle A. Ltd","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:18.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sotlpy6yh.mxcontent.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 17:07:19 GMT","end":"Sun, 07 Jun 2026 17:07:18 GMT"},"fingerprint":{"sha1":"39:18:D1:A0:5A:9A:7E:D0:5F:9E:68:E7:73:B9:1C:12:A3:EF:02:98","sha256":"58:E3:EE:3B:35:AA:95:DD:51:A0:7E:75:22:15:8A:DC:D4:D1:CC:90:67:39:9A:A3:0A:AA:B6:AA:4A:BB:72:91"}}},"request":{"raw":"GET /thumbs/vk79zgd3hqv6m9n.jpg HTTP/1.1\r\nHost: sotlpy6yh.mxcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Apr 2026 18:58:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 79714\r\nLast-Modified: Mon, 13 Apr 2026 14:51:25 GMT\r\nConnection: keep-alive\r\nETag: \"69dd02ed-13762\"\r\nAccess-Control-Allow-Origin: https://mixdrp.click\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79714,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.26.100\", baseline, precision 8, 1280x720, components 3","md5":"94ee88e1a5436ce0e3793b4cc0eb7e1a","sha1":"fdfdcbb25db9f98d016ea76a3f523942b1b8f334","sha256":"e6cf39c60688741d153901e44250b7e6058adbb97f9dc8b984d8f281ae93c3a2","sha512":"a9b0f10b9c97b9f13436925c87177bafb79307a84470bc5bbf73bdf74f4f2d40b46017b6560b07a4521c1f6479f0e1195f735a7ec187dec32a62e7446a0e9693","ssdeep":"1536:gDsSNGA9UYmPFumCCBVYHM2JIhKn2gCuDu16N+22bwrPz:qHeYqfB2rJIhSCuDk6NZ20Pz","tlshash":"9d7302691d304c169fc024eba8ee78660c86e57b76e5c002cb50996c73b2ff2d5deb49","first_seen":"2026-04-13T18:59:52.801541Z","last_seen":"2026-04-13T19:00:00.66487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":78,"dns":15,"connect":23,"send":0,"wait":186,"receive":27,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mixdrp.click/e/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:18.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"6C:45:27:25:48:F3:E6:FF:F6:DA:DC:6A:B6:9F:8F:09:A7:D3:E8:B8","sha256":"D2:23:49:63:93:F9:95:E9:EB:7B:49:41:97:6C:EE:7F:56:8B:B0:FE:46:E9:20:FD:F6:08:86:5F:CF:E8:97:F8"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 13 Apr 2026 18:59:18 GMT\r\ncontent-security-policy: script-src 'nonce-I_SQGycUVhZQ4jG-9MSBeA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54359,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (35943)","md5":"140d9196087891514b83bb57345d322a","sha1":"de696d9e6fc66ade05edc439bd305bdec52ebfe3","sha256":"6c46ff3266b2ca9deb90c8e04d8169f144e0317a9dc85abc3e474fc1005acd79","sha512":"1020eed90b9bc5ffcfd18e38abe048a3d3637de58d30bde14def4baae7bd40a742f9a419148df489241d331ebc5908475383e3afc00d6ef4de2d012145b82b33","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/6j5VDUIk2ceJI5CyFSFVDnmiuPd6gwZ:y+kVl2WTJI5CyY3AP4gHGjuM+JJ0v","tlshash":"7c337b1408075046ef978ce223d87f70ee2e8294614690b473fe4397eed3e97a16a39c","first_seen":"2026-04-13T18:59:52.80266Z","last_seen":"2026-04-13T18:59:52.80266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LetXaoUAAAAAB6axgg4WLG9oZ_6QLTsFXZj-5sd\u0026co=aHR0cHM6Ly9taXhkcnAuY2xpY2s6NDQz\u0026hl=en\u0026v=kUYUkUlSyqkjTSMaN2w3RaOh\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=d4g6bb6wgux3","date":"2026-04-13T18:59:18.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 18:14:15 GMT\r\nexpires: Sun, 11 Apr 2027 18:14:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 175503\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-19T08:23:37.809768Z","times_seen":748183,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixdrp.click/css/style.v2.0.2.min.css","fqdn":"mixdrp.click","domain":"mixdrp.click","tld":"click"},"ip":{"addr":"104.21.68.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixdrp.click","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 22:55:22 GMT","end":"Sat, 20 Jun 2026 22:55:21 GMT"},"fingerprint":{"sha1":"87:5E:D7:12:2E:38:19:2C:62:75:24:9A:D4:90:3D:E9:B4:D1:61:AF","sha256":"60:61:D0:3F:1E:9C:CD:C8:A6:67:C0:36:67:05:B0:F3:58:28:56:47:CB:55:42:82:5F:E2:DD:22:90:F0:42:0C"}}},"request":{"raw":"GET /css/style.v2.0.2.min.css HTTP/1.1\r\nHost: mixdrp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/f/vk79zgd3hqv6m9n\r\nCookie: PHPSESSID=ksvvdhmgc8cp7bfml4v57q3qng\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Nov 2023 18:45:13 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"65566339-494c\"\r\nexpires: Thu, 30 Apr 2026 19:56:03 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1119792\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nm5xtbxUEgGodz3N5v9ZsKHZvFpgeLMouvfSFCgCO4L4C1l3X%2BG%2Bl58X32BRKTj7A%2BfZ5iuexFWMHsYcOWsQ7IqNZXW5GwqrMuEsCdv5%2BVyac99xZm6sSZPzffxs6Rs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ebcb4fc08db569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18764,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18763)","md5":"1e57d0fe7ccabda4e546d881916a7762","sha1":"4fd1da9793ff1399abefc839ce5b09a83d8afeba","sha256":"dadc388c0520bb815a6472df470b729773cf80e175a0c62e60cd9eac7d7fc979","sha512":"fbeb57f608aded81063f9e0aad8413a1b8175c600630364542650ea0fccc3f05fe4c5a64bcb55ac833ef2b9b8e6f213dfdc58fd4f2ebfb5c5e69a8a675ea1948","ssdeep":"192:+tqMKRcoblpqMZud8VgssOa8Hn19+zj/UkqpQ1WofXgm7DMQfQzdw:30S4MAd798HiP/spQM+QmvfD","tlshash":"398209bb16c27ddda023803aa1c897dc0e21c563f05b4baa762f7c39db9515d2737286","first_seen":"2023-11-16T22:45:52Z","last_seen":"2026-04-16T23:45:31.614684Z","times_seen":1213,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"mixdrp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.4.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixdrp.click/f/vk79zgd3hqv6m9n","date":"2026-04-13T18:59:16.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.4.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixdrp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixdrp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15ec3\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 13 Apr 2026 18:59:16 GMT\r\nage: 471186\r\nx-served-by: cache-lga21953-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 104614, 17386\r\nx-timer: S1776106757.576812,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 31011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-04-19T06:45:26.220523Z","times_seen":21817,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":45,"dns":2,"connect":13,"send":0,"wait":15,"receive":4,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}