{"report_id":"f6d3aad6-af48-4a33-8cb2-b48dbbe0ab84","version":0,"status":"done","tags":[],"date":"2026-09-22T10:04:57Z","url":{"schema":"http","addr":"mediacix.com/","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":0,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mediacix.com/","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"title":"Mediacix - Páginas Web en Chiclayo Peru, Diseño de paginas Web - Diseño Grafico - Marketing digital en Chiclayo - Animación Multimedia - Hosting en Chiclayo Alojamiento web","dom":{"size":71704,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (854)","md5":"f2368c1497a21aadb9c3a58a2e953fc8","sha1":"56783d75b5fb5bcbdf537e4519c18b04f58dc4fd","sha256":"d8b344f18deddfa8c42fda3253b350c2c3ef77ff30ebdae3f2bd57fc9bdd0cd0","sha512":"59230574b3d9f0656b1cfb17b679243757d2f8e34b91dea201ed52937e05c57f16d434f1783c3b682ea07013ad5e0b6932afde12bd63facac9025e50af7c80e6","ssdeep":"1536:o9lNsOtaOY/yzLQI0zrJhAg17JqdVWGPpc:i3sOkOY/QQN17JqdVWGPpc","tlshash":"b0633230908d1d3f011752c6b164279e729f8f3aeb238896f3fb436657cee88941b566","dom_hash":"domhash94e14708514bcd04607b8fe58d630a93","first_seen":"2026-09-22T10:05:18.538454Z","last_seen":"2026-09-22T10:05:18.538454Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mediacix.com/","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":0,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T10:04:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mediacix.com","ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"domain_registered":"2007-07-19","domain_rank":0,"first_seen":"2015-12-21T01:55:49Z","last_seen":"2026-03-27T08:28:03.008201Z","alert_count":636,"request_count":106,"received_data":6116595,"sent_data":53161,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Typed.js","description":"Typed.js is a library that types. It is designed to create typewriter-style animations with ease.","website":"https://mattboldt.com/demos/typed-js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery UI:1.11.4","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":8,"received_data":180377,"sent_data":4321,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":14,"received_data":644280,"sent_data":7903,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mediacix.com/plugins/bootstrap/js/bootstrap.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb0e635db142b1b9fce20fe2370ec6cc","sha1":"c5c481ca5a263031d938f6c12abd2fe5fb4b6a83","sha256":"5a4a5359110a773bd154da94c48ffd6a6233a29dfd5a9314555f5ae6c3e47459","sha512":"ddcff973930485feaef0476731caf0d210e4e9be47c6271fe5a9175a885f27509558b1ef1be42e791e0398d7d109bad33c3a912b11653c3290825bc0c7871411","ssdeep":"768:9UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXfl/8Gf3ZTbQ:m/76whqKGvl33ZXQ","tlshash":"9af29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","size":36874,"data":"","first_seen":"2023-03-07T01:15:27Z","last_seen":"2026-09-23T01:20:03.790722Z","times_seen":2312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-ui-1.11.4/jquery-ui.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43109e12e36805738ddf8deca737c53b","sha1":"cb6bc7d0b27bdf80a672b857bf6db0d41cc55995","sha256":"37fbfc8e36798a479dd09027315d1de63f53d75aa169c97b7991ae9afbd249e4","sha512":"2c906e31629ced4f66d78be9cdcc7e6c33c093530c0e87d2fea4248d427c3b34fbbe2b2607b114c116ee76716d67c56ef55790d2c3e7c3759093bd91773b2df3","ssdeep":"6144:UnA+sJQfWwFjn5nn5ZOlhgpRgqbb8wsucTHl2Ec/GdTieCu5t5Ql8Ry6tWWVIjVv:+bpsucTHv5t568R0O0rJdYq28cez","tlshash":"f6a4b7d5734f266f89ea3359583a9189ea3dc0b5d202807d789d58dc24a8c1843bbffd","size":487212,"data":"","first_seen":"2023-03-08T09:13:48Z","last_seen":"2026-09-22T10:05:18.583802Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/owl.carousel-2/owl.carousel.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db4c9c39a3af9343842156df81f25d08","sha1":"36af2c0bc454462355584a535897ca5ec6371f3a","sha256":"e04e2b4e27ae9881b1e161954cc00ba16c8c3a0ce73a179824756353efd6c481","sha512":"c402feb4cc9c11a4d2d30c8abf9f4f316e4115c1ce8cdde6df4645a904b5a864eeed249d372cfd52ee0d9def6fe50734d87f4ff4501b477882ef4708d65f2a68","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc79ThcGP:1cZelJ78m2cw8","tlshash":"70038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","size":40402,"data":"","first_seen":"2023-03-07T01:36:39Z","last_seen":"2026-09-23T02:24:29.593389Z","times_seen":1881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-validation/dist/jquery.validate.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c43ece3914ba205adce6a10fbfd0828","sha1":"9a40a00ab7fe8c5993238fe9c4c6547c2dafb134","sha256":"f075a7a9741e59caf10c40e916d8cbd01a4f1a6baed1f4d15b5019606e303e70","sha512":"d89ce0e380925cfac70dc4f35740adc89b6cc89f9af096bf8c58adc87c6bf7439fdf30aa36eb2a154b7b532461d276a50799739a7731e42fb69ea5f36ab9e48f","ssdeep":"384:QQpjAy+Jx6UtHYlHUdS2L7wQ548NsOAN/tllEny+Ww5MQPN3txwV/vtPx+OLDEoG:N+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVs","tlshash":"2392b68d77d670065a9630f4a05b660760b669a0a018e87cb5b8e4c1bef8fcc50f7f78","size":21092,"data":"","first_seen":"2023-04-06T21:12:22Z","last_seen":"2026-09-23T02:48:44.422757Z","times_seen":1351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.carousel.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7799c076398bbc16d26a067bf6692e54","sha1":"2c1c698dce1034c62c44c49ea914f7e370385323","sha256":"2f6728e4e86d7e94258096758a335bfc31e1c5f18de79ddc511709a5b17fda2b","sha512":"f2c86b5bebef499c2dc7767f812d3ab502a801a45447892e6190f37e86dda180db53fe28e5dbec84ccf3e93a5d357f3ed81fc7915fdf8ac8431a225a500bb0f4","ssdeep":"192:dTLfrr4FAkzMIrmQgedMzVIBD+L8EvCtRgiezLJZXTmnY:dfrrqzBrmQgedMzVIBDM8VCZjAY","tlshash":"78e1844420053daf46e2f38a959680f993fc190d471bd8647afb7079089c9ad067feee","size":7364,"data":"","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-09-22T10:05:18.617771Z","times_seen":792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae8f93b3fe7396e0a59f64e15ed9bdcd","sha1":"af74fa75fce86945823efa0428a8cca4aa25110f","sha256":"d2373378d19cc2477eeeee4f88cc63ef3f982bd7d92f37d595287a1d6a4ffa3a","sha512":"a3860c04b7d58db04bd3be4d64be8d0663eb2532b1e79c5cd09615e2ec32000a96fcf30e2bc81f32188f4fb4d06edfa5850d9bf5617fcba2d4f483bdec66ec27","ssdeep":"384:6T4Eq0uEBZbl7PgFcp3VuwEDgJHctUFIEssE1SrZyTOKT7:6cA/lKcp3VEDg9IE9+7","tlshash":"8ad2b8c4bd0438e9b25fd192c06f55692360fd7d8602c4f1ba96a8b92b1cd4236e3f5e","size":29941,"data":"","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.600455Z","times_seen":398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbfedcf9e6b7372365acc206ea8ff59a","sha1":"8aa2ec6355807bd6d8d3bd7a225d1c5bad3a4433","sha256":"03c970ea4c3f6d574182c00962623dc0f6f09232f52ca327cdaea24e6ebd71fe","sha512":"b5ddee1eb2ec2c61602c5029bd927a921de66e9d6ec5f48e9dd57e98fbf89ad6cab72f4b3ca461e88ea03604b2cd059ff6239bc63b817c5ea3507bcfd824ebdb","ssdeep":"384:Rdu1VJRyVIN72Ni4kUAtJsxwfB+icxIwpX2wgexB:RkDyVIN72N8pvuxB","tlshash":"65a2849576843ca7447362bbc16a50f47272ca34630bea1075efb1f058bccd523a7e99","size":22958,"data":"","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.591387Z","times_seen":429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/typed.js-master/dist/typed.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcfb037f7ff5e3e606e2e619f8067d75","sha1":"ffbc891d4f5edb70e6b4660956ab1f7ed5d8d6f3","sha256":"3bd211e3a9813c20ad216217fadcec95771b0d29c37ecdded1ceb4d547af9e9d","sha512":"c760556a21810e76317e62e15b15e8e3663f05a7313f34b2daf2462f6f9c28fb8208624977c8074dfc691707a8f72242a8f04e4fd2e7d1d21f780100d5eb4100","ssdeep":"","tlshash":"ed81640af183eb6559c251f004e70d0f5033ea382959d0fc75f5eaf299e8a49747ab78","size":3851,"data":"","first_seen":"2023-03-09T21:55:07Z","last_seen":"2026-09-22T10:05:18.623327Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery/jquery-1.11.3.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13c0a5055cca7b2463b2f73701960b9e","sha1":"e6082a7b52db82604ac446d2e6a32cb5af263781","sha256":"20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104","sha512":"2fa08436b5f748776d265944595a59581c6b06eb6eb239626de3338e0819b45852ead29d4997dc1f86dfbfb1b5d39dbd4dc9e44e6e38ba9f6006628710546ef9","ssdeep":"1536:zP10iSi65U/dXXeyhzeBuG+HYE0WEeLzFoNqLTW8+S5VRZIVI6xSb8Ch2ZbQnRmL:q+41VqLTW8xRrqSb8dGH77da98HrC","tlshash":"c793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95962,"data":"","first_seen":"2023-03-07T01:07:14Z","last_seen":"2026-09-23T00:57:49.861208Z","times_seen":4141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-countTo/jquery.countTo.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"850f48ccd49f23ba43b2d0d557fd9895","sha1":"28a477867fa519fdc4546c25c5b7a23f096156b5","sha256":"0a4823631ea7d539ef8d8ecb2e9e8171d5d055ab69c42ab6cf27d612c914cdf3","sha512":"2c6a3982f3b5e40a872b3fb918169b9797adbbb1fddd728dd676adff13c54df5f6758f30b27077224b1cfb9e540b38acff7a6bb733f1fd09a1c2b1603e43be4d","ssdeep":"","tlshash":"ed813749b75e2211a97b22e99f5b114cf778933b1443024879ad93c04f72839e6dafbc","size":3891,"data":"","first_seen":"2023-03-07T12:57:13Z","last_seen":"2026-09-22T10:05:18.610791Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery.mixitup.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18b7ceae34275ee2ded2d0ad6aaeb96a","sha1":"d39a6c0f18ae4f30890fd1b075497275c4df127e","sha256":"efcf96f0f089b853aef3bc252a4cd713347ab4965763a99a2e7e1bda21b71c22","sha512":"2417fb9b7900656e35030c72c4805a56b94b71820ba301913b3ff01f9de898da02345d08d7f992ec4ae19198de56e3887abc255ddffec5929c30d49b1fb3f241","ssdeep":"768:bbVEg7ZYHQY4KeCWTNkx/vzcUv8U4nyw/s4:X6N4K7WTNK/vzcQ8U4nyt4","tlshash":"7bd2f781335834b1161313e36eff5a0ab43bb1b4a505c864f935c4ea5aaf945b273b3b","size":28945,"data":"","first_seen":"2023-03-13T02:20:05Z","last_seen":"2026-09-22T10:05:18.558193Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.kenburn.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2af3650e079ea088f7467879470e0d8d","sha1":"f1c11075b88f893ecb1addfa957632e93181f85c","sha256":"2beef56f943cd5a4219ffa68183a1a5a5c1e0a1e3fb9e64d2dfcc68de258eec3","sha512":"8dcf2d6d75cb94564c1169d7bc3507bef20795d0abc1d9b52cf2061af2f818db7db6c9ba0222dd00a61728a10cf3586006c39b0460b50c76cd9048ced2d72b71","ssdeep":"","tlshash":"1f5176d434413c4e8c63d392998d13cb61f1f6151203994e97b93ac0aecce8d2a72b9d","size":3124,"data":"","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-09-22T10:05:18.559766Z","times_seen":1083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b502d4d272d1d45be88ad4c5dc1b9391","sha1":"dca9281c746ee88c8391e63745d0625f321429e4","sha256":"925dff987ca733064fdc994aa05aba0157b423f6ca594d0cd986712183b0f851","sha512":"7fbd315262bad8dc90a9721292c563aaa49aaa91d0573013c75a617c78f180a671c8bf9a99f31a66e5e77e4c4d8ea2f541baed189f902455e6e979ffabd2d267","ssdeep":"384:Tdzk6SRIBBqnFi4kWk9RvwjiuLgQyn0/K1eRu35BU1AyIyUZSaepZifSdCppY:jiiFfZQfE35BpwaGkSd2pY","tlshash":"9392a5a7f50418a5a51df5a59c6f53607171babd90088ea438f3f2b80f7ce02354aafd","size":20803,"data":"","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.549569Z","times_seen":442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/fancyapps-fancyBox/source/jquery.fancybox.pack.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ca8cd384931d74c4b6a9f592e987f69","sha1":"ae6318aeb62ad4ce7a7e9a4cdacd93ffb004f0fb","sha256":"2be721560b8cae178785531dc523d2f7b9b173bb6571536fed94a85c0d31c525","sha512":"08dc6dc5920101af800a446d10afc847548876ac8daa54f3b16d2d24e062b64e8dfa6d2374c0dbb025677e2f5843cddb57ec3e264fd26973e34c5974431468b7","ssdeep":"384:tNNKhdLEEmwXDJdKEuYcIOJxHcihYF/AxQ6SNp2ZWwYUduSh:tNcLEEmwrzuYcIWxHcihY9AOXQLduSh","tlshash":"c4a21861b2603d53d07b2a26414f550ea0320423fb078dfa746de9e85ba5bc426b3fde","size":23180,"data":"","first_seen":"2023-03-07T01:17:46Z","last_seen":"2026-09-23T01:29:06.037246Z","times_seen":2608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/js/main.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4553516ae04ee52ae606bfe579509b7","sha1":"bbc06cdf82e2c18cbb5352288b313f986e2dd1c1","sha256":"94d442a438406b8622431dd959073a5724edb4e0a5b4bd87228382b02550fe37","sha512":"c368ce0487f927c8b1ed2882c97a4b06b1e89fad683f4813742abd321dca9a50e79d26336f407f200baafc5355e19dc4c3f3fa0a2c3afeae404a0e54fbd62bd2","ssdeep":"192:hQdzX4M6OPPdkTnxZbphp6pXT7HNzOPA5Y+LhpVFeJL51S4LZspHt+e9fZ1vuZFj:hQCH0ZNzvFbFWPsdt+Y1v6eC","tlshash":"a052ef14331d1c7e647a3364853ad7ccda7ec42b91415478f8ae70a47fad8ec26aab4c","size":13715,"data":"","first_seen":"2024-02-25T07:50:09Z","last_seen":"2026-09-22T10:05:18.632195Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-appear/jquery.appear.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"72e1d93fddec7a7150ae9de2b334a1cd","sha1":"ca7c8b5a809c99dc298174665a70d743c5f4e6ec","sha256":"4805abc0dad7a370f34e4d5ae2e6bd87fd8ff42f7929febc0477601eab834b26","sha512":"b141fe520b6e08d010e4c87414574feb951122c7e0a2df0f8f55fa5df77e4c19ecad1b3561ea1896f3133d36793896343b66179f378a7f35b40edd1bc76ef6ad","ssdeep":"","tlshash":"9b31d06a34cb3e5647f7702f7a1fb6466121953b15829082d9eadd3c3df6c417813e14","size":1485,"data":"","first_seen":"2023-03-07T12:21:08Z","last_seen":"2026-09-22T10:05:18.599797Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/jquery.themepunch.tools.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"02f01e5f656eaec82f39104318a86559","sha1":"12195fd60755d042e2b87a65cefcb31caae088c7","sha256":"7722eb69e500cd417ad68004ff568351d3d47faee948468c311a8dd3cf7a770d","sha512":"09c60ea7c8fcbcf3b59581cee9160b48010627002809faeb5b72b0b5c5e56a7354792b3b687d87090db8f7633ffcd5abce73c89344b05183462016e2b49943ae","ssdeep":"3072:iJc8VnIZ6x8/72S4BhYld0pQOHyLEdayb:iJcinI0x8iS20SNHyLEd7","tlshash":"e9a34aca7251702145d611e5913f0a43733b98aa740e896cf258d9de3d3cdca21bbfb6","size":104767,"data":"","first_seen":"2023-03-07T01:40:02Z","last_seen":"2026-09-22T10:05:18.589659Z","times_seen":1561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd029b99cca4738916afc2d4c8626281","sha1":"461ddb43330f331d5e10b9a59e7dc0875775ea91","sha256":"1d638248f0b343ca46bba0aadd5dae169bbae6ba52e2054ff24d2404d7146d3b","sha512":"99a17ad159a406c45c1648d04c515ad9d36497397ce02d3fe30edf8da5432766518d6d41aa04c0b5dca6f5561cbf5301b73de49a06cb4e5885bce3493a39fca3","ssdeep":"768:0s8axPmdvO+/Poyp+KqbwgdJncRwrbnwRiSGm9Qd5OzvHkPKBXx8:0s8a9mdvr/wyp+NbwgdJncUbnjSfQbYQ","tlshash":"6d2309647a1074b259bb23a6855e8106b2b27c3dc607c450e6ff54789bbdd8d232afcc","size":47204,"data":"","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.611474Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"651b05d9124aeccbf2992fbfbe58e520","sha1":"4fb4d75cb96ca89d6215f46ac3b2843d3733460e","sha256":"4f6296e444d107bfb62fe165b3ea638ee10a603193cfd87e78d80bd3e289f57b","sha512":"c61ce8b633fa4d98c65d8f63bef95c5568f68806df8e4a10f2aad697b6eee18beeadcf5f357aebbbe7cdd7e5c07fd067228dd6de2e8e907f572b329dbf0b6a16","ssdeep":"96:v4/qK81z0/4nNJ/rfA1QU2VOBoRQgPkBVaSM1fxGcMqTSjRDrm:Q/D81HJ7A1h2VOBoRCBVatT7","tlshash":"36e19455f1052dff4463a6aba82702e7b2b1b68c8a05a9b8f057f15c3c7ca5105d36ec","size":6790,"data":"","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.590521Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.migration.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d01dd682b2b1c47e8975c74d5bdd768b","sha1":"8065111689f207d2b4b838a49525080cdf1fc5c1","sha256":"4f811fc19c67d51cc0c0fa6db44f0185d7e646210f18e1586356ceb53fcdcb11","sha512":"dcd1fa06e6aaa65cf4c694b17d92a3424dd3c8fb19fae7a0fc64291d2fb3dd95e91fe40a4a648ddc5e8d30e42a0e44f04e06d720485f71c2ef6701b39d731ef2","ssdeep":"96:FwvQcUKcq8/Ho+iPwSKO0728jiNNnDnJh0sw9qKjH+K8tOfwi8f:uvJUKFmo+iY772jphWr6jO4","tlshash":"12c13344a0a83c0695b352c392ce19e0df55f21e3946a4e5635ebe1d432c88276e7fdd","size":6080,"data":"","first_seen":"2023-03-07T12:08:45Z","last_seen":"2026-09-22T10:05:18.620058Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.parallax.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd0a21758d2ba7a10b37997d2b39f7b8","sha1":"d28441f9e2225a492f1f1f7924223b1204e0aa97","sha256":"65aa02cae25114e3ee163d509586827435930dba0eabca2dd059c3961a28d189","sha512":"ed26b067a5d3d698dd5d914bbae63a87c6a2fccb4eee0a6d5f24eae5c227b2d4074d5d0a75c8d959c1a1237386605ac4c024d9910c4ed8afab27dc04bf6b0653","ssdeep":"192:h+v9H9q1+1t1XYO1B7Rp6yZUsBpdyZU8f1DG7mpBuy:T1+1t1XYmBVpJxBpY7fgCpBr","tlshash":"e7f1c8625a142cb614b333bdf6ac0bd671318471950e8542b4fa38b92b6ce99077efdc","size":8042,"data":"","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.629252Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5e89ee0d380ff74e5747cbf0faf4fd4","sha1":"ab887cc33fc979a8a73844b756e65194f1bc5b70","sha256":"c350fa4a0da7403eccfc32600fe6b3d7beb5b590c53293b8f69bf68df6e43bea","sha512":"e9e93d89fca18d2591e605c47977ea48878f7838b1be7b9324c94f21f836d8e1384c7d21e646930cfae1b42d25caacb619f7817e56338f0a4edeaa4fff46eaf4","ssdeep":"384:F1aX4O+fkNgPwEN8vJ05g4p8QWwwBWCp1SjXUAgQN8yDFpkkmm:3rPwEN8Rj47RjTkBm","tlshash":"cec2faaaee2258a344536283d7f549195214cd33be33aeca33f590f505d305e22eedda","size":28128,"data":"","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.631468Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mediacix.com/images/mediacix-paginas-web.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.294Z","timestamp":1790071462294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/mediacix-paginas-web.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 93973\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 22:08:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93973,"size_decoded":94238,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 845x441, components 3","md5":"52d8fe351abdbd1450eb48af6a86069f","sha1":"35e08b2785be25403b3f53530078b15dc4fc9a85","sha256":"4276722c275ce5cd03ab5c932a960c7d0fc787d42600c8f027621f479b76e14a","sha512":"6ae0e4991782b6c5f5967f7b976d0fa71c7f3df1cb1dfeb4ed50710d5b3aea9fc30ea5983d2a448b4a73d38e63f2ef2d9be878546b338610d02fcfe65b27d455","ssdeep":"1536:5cetbd+sgMj9UgAYZ2zECgS8Z85KddsPdr2IeD9GO2hgrdoV+XEiPpI2r5f:5cetR+/MjTAYZHCg1e5kEp2GRu++0gp3","tlshash":"a09312985ac3d7c86b37e15826f35282c3d9643aa0cdded3b9fbd09171d25a00b5a6cc","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.54096Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1704,"timings":{"blocked":1597,"dns":0,"connect":0,"send":0,"wait":104,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/heros-cooper.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.295Z","timestamp":1790071462295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/heros-cooper.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 35072\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 17 May 2025 17:54:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35072,"size_decoded":35336,"mime_type":"image/png","magic":"PNG image data, 270 x 200, 8-bit/color RGB, non-interlaced","md5":"532400bb7968a890d024bafce831d672","sha1":"4e5f2e843e67054b8746494668ce047a2f64069c","sha256":"19a09ffa1278537bb48a022b1144b4756a84f7e99d7f2963275ccbff8c75ecf8","sha512":"997143bd503b4503f7be5e768811db317b50d26e20701361a461b9fcc6053563fd792a392b1f33bdcd675e422015a1fa4c336cb6b7a6f4160fe9bdfce90286a0","ssdeep":"768:jfZ63umEcDsa8RoFLQOFwmomFjqitd3S6URe81lYNn:jfZ63/Ec0SxNFjLd6VlYl","tlshash":"62f20209b1ab914f01cce396a976223cfe0f7965caa46e21916be0fb7851734250fc92","first_seen":"2025-08-26T07:51:13.486817Z","last_seen":"2026-09-22T10:05:18.542425Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2175,"timings":{"blocked":2066,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,100,100italic,300,300italic,400italic,700,700italic,900,900italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.210Z","timestamp":1790071463210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Lato:400,100,100italic,300,300italic,400italic,700,700italic,900,900italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:04:23 GMT\r\ndate: Tue, 22 Sep 2026 10:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7824,"size_decoded":1416,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"622a3603ee964627209b608cb1f12aef","sha1":"44039b8dfdf8e3a88e64efd87fa808658e98fff5","sha256":"43137f4ca5ae470fbe47ebd631ec82f343e141a8d147ee534bea91982d151dd3","sha512":"f0cf718a43a8491543251bb198f4aca0b80880503bd77c38d5dd81b3447e106b51656e6611da8045ab4c2616110657fab15827ca444e9edf736d004591a11448","ssdeep":"192:437v337Ul/J3l/lkw3kip/i3p/UT/o3T/T7wO7ZR6E7nx5u77QD:43b3o1R1lnfRuRUz8zTdf","tlshash":"5df1df92086fb518db931dc212da7d32ef0fa25064459831eeff14d8bc93d6a9362b0c","first_seen":"2025-09-17T03:45:01.934572Z","last_seen":"2026-09-23T06:02:51.736039Z","times_seen":6189,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/owl.carousel-2/owl.carousel.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.258Z","timestamp":1790071462258,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/owl.carousel-2/owl.carousel.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 40402\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:21:56 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40402,"size_decoded":40706,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32068), with CRLF line terminators","md5":"db4c9c39a3af9343842156df81f25d08","sha1":"36af2c0bc454462355584a535897ca5ec6371f3a","sha256":"e04e2b4e27ae9881b1e161954cc00ba16c8c3a0ce73a179824756353efd6c481","sha512":"c402feb4cc9c11a4d2d30c8abf9f4f316e4115c1ce8cdde6df4645a904b5a864eeed249d372cfd52ee0d9def6fe50734d87f4ff4501b477882ef4708d65f2a68","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc79ThcGP:1cZelJ78m2cw8","tlshash":"70038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","first_seen":"2023-03-07T01:36:39Z","last_seen":"2026-09-23T02:24:29.593389Z","times_seen":1881,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":647,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-validation/dist/jquery.validate.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.261Z","timestamp":1790071462261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/jquery-validation/dist/jquery.validate.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 21093\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:28:20 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21093,"size_decoded":21397,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20951), with CRLF line terminators","md5":"3c43ece3914ba205adce6a10fbfd0828","sha1":"9a40a00ab7fe8c5993238fe9c4c6547c2dafb134","sha256":"f075a7a9741e59caf10c40e916d8cbd01a4f1a6baed1f4d15b5019606e303e70","sha512":"d89ce0e380925cfac70dc4f35740adc89b6cc89f9af096bf8c58adc87c6bf7439fdf30aa36eb2a154b7b532461d276a50799739a7731e42fb69ea5f36ab9e48f","ssdeep":"384:QQpjAy+Jx6UtHYlHUdS2L7wQ548NsOAN/tllEny+Ww5MQPN3txwV/vtPx+OLDEoG:N+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVs","tlshash":"2392b68d77d670065a9630f4a05b660760b669a0a018e87cb5b8e4c1bef8fcc50f7f78","first_seen":"2023-04-06T21:12:22Z","last_seen":"2026-09-23T02:48:44.422757Z","times_seen":1351,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":684,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/fancyapps-fancyBox/source/jquery.fancybox.pack.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.274Z","timestamp":1790071462274,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/fancyapps-fancyBox/source/jquery.fancybox.pack.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 23180\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:19:10 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23180,"size_decoded":23484,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (645), with CRLF line terminators","md5":"0ca8cd384931d74c4b6a9f592e987f69","sha1":"ae6318aeb62ad4ce7a7e9a4cdacd93ffb004f0fb","sha256":"2be721560b8cae178785531dc523d2f7b9b173bb6571536fed94a85c0d31c525","sha512":"08dc6dc5920101af800a446d10afc847548876ac8daa54f3b16d2d24e062b64e8dfa6d2374c0dbb025677e2f5843cddb57ec3e264fd26973e34c5974431468b7","ssdeep":"384:tNNKhdLEEmwXDJdKEuYcIOJxHcihYF/AxQ6SNp2ZWwYUduSh:tNcLEEmwrzuYcIWxHcihY9AOXQLduSh","tlshash":"c4a21861b2603d53d07b2a26414f550ea0320423fb078dfa746de9e85ba5bc426b3fde","first_seen":"2023-03-07T01:17:46Z","last_seen":"2026-09-23T01:29:06.037246Z","times_seen":2608,"resource_available":true,"data":null}},"time_used":1070,"timings":{"blocked":963,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/dominios-web.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.307Z","timestamp":1790071462307,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/dominios-web.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10504\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 04:12:46 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10504,"size_decoded":10769,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x166, components 3","md5":"2b563d62817e5d7be7275424437d97c4","sha1":"ad34a5b0f89ac474f93a7ca9924a995854a4e25a","sha256":"a38bb2ad51378e595a671c1449aa871b5b51b9448c6e051975928c06fbbc98bd","sha512":"119fa92a380f00de01bca580f8c237c377e112f2ca070afa614db8222325cc869a11ba405b0507109154a823702e6336e0e09d01b38308a08cdd2f0c00847b48","ssdeep":"192:Jf2PvlMrAOqKFC+z9tKBJqoC2WOB/b4HPMdG99jp9CRqDaAVsNL:J+PverfDC+z9tOJqF2X/UPUG99jvSqGX","tlshash":"9222a0c8bb51bf34d91d08cb39b5a91da61148a579e1cc5418fac8035d38bb6b2ad3ce","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.545675Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1728,"timings":{"blocked":1618,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/alegreya/v41/4UaBrEBBsBhlBjvfkSLhx6g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.706Z","timestamp":1790071463706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/alegreya/v41/4UaBrEBBsBhlBjvfkSLhx6g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43476\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:50 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 30 Jun 2026 16:48:21 GMT\r\ncontent-type: font/woff2\r\nage: 64833\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43476,"size_decoded":44288,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43476, version 1.0","md5":"97a4bfd7b3ce13e852d6246ee6a590cd","sha1":"c01893fd0e74b8826d47c545e47fa578b8fea5bb","sha256":"2431eca3ed8ed66e713cf7093d170d77a083a793a5f19a615506d63770abd973","sha512":"a28f2af5e4c8c3a6774d676a6018e0a79f64cbb2b4f0de0d3e3086999bde70c9251246af85ffb19a0cfb97233da1c92a257acde29a8b08f591cb0f4556b0da4f","ssdeep":"768:2ARwqLQiIvwPKpYt54mHZTCDQCHpy51QsRzt7xb4YKptlD9Zc/:5bl0Y74sTCDAQsRztritNo","tlshash":"de13f1059546bd8e9113ef183b8c9b812c3a6e3df5bd7c04d8551ebf1c18a3d02b9a99","first_seen":"2026-06-30T23:27:25.007428Z","last_seen":"2026-09-22T19:19:22.996043Z","times_seen":204,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":95,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/css/navigation.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.236Z","timestamp":1790071462236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/css/navigation.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 62209\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:22:30 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62209,"size_decoded":62506,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b7f7468b5021f3e9b8d2cf944b54734c","sha1":"6a6d5c4bf56069d69374eb655afcc77b2c5baf9a","sha256":"8462ab06a93e3bbce6c1d5f69b442bf4aca054e6e062a47796c7e34423fda625","sha512":"65f2b13e1ed497d6d4b80052c8492d2f905a3aefbb6f893f2e62565866486cdb538c2ddba276f43f49a9fcc56930b73c49751c72230e5d8fd5243f742a0e68fd","ssdeep":"1536:CxvHMSBb7OnsUJvTB3oTuMowb0o/VnTIMSW1yyN1SxYvFMC/:a/+9BoSMX/","tlshash":"595365388e466104b233db4497e00baceb398027ea530a9ef79e74c6df6159c51ad7cd","first_seen":"2023-04-11T07:59:58Z","last_seen":"2026-09-22T10:05:18.546724Z","times_seen":299,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":112,"send":0,"wait":219,"receive":110,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/owl.carousel-2/assets/owl.carousel.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.240Z","timestamp":1790071462240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/owl.carousel-2/assets/owl.carousel.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 4831\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:22:00 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4831,"size_decoded":5127,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b85ec87b5b6793a864fe0021e771603","sha1":"3d9597960154859e2ab77ea3fe784be048a8abe4","sha256":"a993259b376645cbb442a1f05c6269ed583f07e9e71658fbc70c42e7d65c148c","sha512":"9b34cfe3911040d131ffea36c213e387dac94f86a1aa51ba7bb1678e57a5bdde481f7634234f6d3ebfc8b1f456b55cd104e5af1e514e9109f84c85f4027872e1","ssdeep":"48:2mePoJIfFfvhfOp64j1I7Z3hQJkCJxneVnYMCrXBVQ8eQcgCZ+FPyvfathPFgWEm:2VhwmIexMx+q+ATjFG1oVtcs","tlshash":"04a1feed1211114d54378bb41b9d9a1abe3d94a1ee12008cbaef6b1243dfe58502ff6b","first_seen":"2023-04-21T22:37:19Z","last_seen":"2026-09-22T10:05:18.547444Z","times_seen":82,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":396,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/paginas-web.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.287Z","timestamp":1790071462287,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/paginas-web.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17664\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 21:06:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17664,"size_decoded":17929,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 370x208, components 3","md5":"eda29896e6029606ead50656f76a95a6","sha1":"c10067a6b82bc169649390db3fd7f8518d982117","sha256":"e7e2bd3f80a53238558c1ba1cf4213a001912dbf368f5daff8bf041a07fee62a","sha512":"a4167303320dbc981f87adb2560272b74596c864a8398756df9ae54357112948d06188c553c25f16744528855704276dd777aca4791b336f7d4fc7cb2aee2d74","ssdeep":"384:2JS7UcV8B73FXBv6Aa/FNsXlSwycNc27yfQ3:8v73FcAa/IXlSwyQvAQ3","tlshash":"dc828d005a747f1edf99c06348b66b2e66a09478f861e14ce4aee3a24d1d1126d6f788","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.548019Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1950,"timings":{"blocked":1840,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.711Z","timestamp":1790071463711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:24 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nage: 65459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":51028,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-09-23T06:21:15.763559Z","times_seen":57334,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":77,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/css/responsive.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.247Z","timestamp":1790071462247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 16507\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 14:55:54 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16507,"size_decoded":16804,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"6ce2025119161d80e52ad64e60c517d1","sha1":"52da297a8afb7e1f5a10d4af01c246d386b08a30","sha256":"5b71e154cffed5bdf30565e2fc031698f2c11406b9be54a150a4446a73f1f888","sha512":"18dc6629da19b14d72ed0851df711bd6fcd17f713eebab58eb94fbc7a09a6ed242dcff455b48a4bd3d193ad1e80c44d367f0ec92acd577ef089b988f1f98734e","ssdeep":"384:g0Kr1IKRhREIEnCCtYWox0suRc2rY8iux8:g0q1BRhR1EnCCtYWox0suRc2rY8iux8","tlshash":"c5721019b606210c6615d2f4f6771fb5ee32e07aa3c740f8e9652127d3e948c06f69ce","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.549064Z","times_seen":7,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":588,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.video.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.273Z","timestamp":1790071462273,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.video.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 20803\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:23:56 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":20803,"size_decoded":21107,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20559), with CRLF line terminators","md5":"b502d4d272d1d45be88ad4c5dc1b9391","sha1":"dca9281c746ee88c8391e63745d0625f321429e4","sha256":"925dff987ca733064fdc994aa05aba0157b423f6ca594d0cd986712183b0f851","sha512":"7fbd315262bad8dc90a9721292c563aaa49aaa91d0573013c75a617c78f180a671c8bf9a99f31a66e5e77e4c4d8ea2f541baed189f902455e6e979ffabd2d267","ssdeep":"384:Tdzk6SRIBBqnFi4kWk9RvwjiuLgQyn0/K1eRu35BU1AyIyUZSaepZifSdCppY:jiiFfZQfE35BpwaGkSd2pY","tlshash":"9392a5a7f50418a5a51df5a59c6f53607171babd90088ea438f3f2b80f7ce02354aafd","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.549569Z","times_seen":442,"resource_available":true,"data":null}},"time_used":1067,"timings":{"blocked":961,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/sistemas-via-web.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.293Z","timestamp":1790071462293,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/sistemas-via-web.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17844\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 21:19:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17844,"size_decoded":18109,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 370x208, components 3","md5":"c15617f79c18ab338400dfe273497252","sha1":"62542fe08da212d5e7fe5439c18a96aab6a7bd41","sha256":"f3f9af35476b937fa73861f30d9eda066094e6a2d23ad5f5806f33075798bf40","sha512":"3ff35368bf17922fc4e827434ceb6bd26f38df5497b36e1ae5ced17ee8ecef3be0391e296f9bacd42df5b0ac38a66c90a1efd7fd1d20be2822e5b442cdee68c9","ssdeep":"384:Zl9M+aN+JuRjrJQXkBBf1gOESJ6JBxh/Gd/QBKy4yNee4KHgROT:ZlPaN+JuRveXkdJMBud/OBe2HtT","tlshash":"8982bf989829430ab3dbcd911dffa50769af324273d66c11cbfa41c38189d2cd2369e3","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.550114Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2059,"timings":{"blocked":1950,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/rent-a-classic-lima.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.302Z","timestamp":1790071462302,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/rent-a-classic-lima.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17411\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 30 Jan 2025 23:24:46 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17411,"size_decoded":17676,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x200, components 3","md5":"d8e512bcff3f2fbce998673c2b96afae","sha1":"24dd77ccc6d371d6400ed4e61c520dffc3e24067","sha256":"a478d88e1b7cc0e1a9c1aa1526ce8ad90dbf23d932ba8d85c2118304ca24e595","sha512":"cd219fdd8fe5e4b9323df77a2c4633d5c8991f2c7717e35e304b947584cd9daa4b0f548eba18617e3f2f55203865e81fa13ee332f11c67c83869ab933dafcf2a","ssdeep":"384:HYlWvw80U9zRHYUJVvVjdfGJCMX5Yu9vtvyLrjl0E2zXO/:HpvNCUJVNjdeYA5V7qLHr1","tlshash":"d872d03cdbe12ba7f5dca860ea712316e4191c69cbd6a41970b6f4b1eaf43c0c81006d","first_seen":"2025-02-12T06:25:21.655096Z","last_seen":"2026-09-22T10:05:18.55065Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2335,"timings":{"blocked":2231,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/pagina-web.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.306Z","timestamp":1790071462306,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/pagina-web.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7257\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 04:16:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7257,"size_decoded":7521,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x166, components 3","md5":"b4080c38bcae575099986322cbb3478b","sha1":"cb95028a37b719ac8ad4ee9f3b12ff4ca5879820","sha256":"4f5135c7437b021d1984c3a0df53eb85ef2fec70e604ce1aeaf52e424457b85c","sha512":"6db720988df3387915d3ccefa770dbca297dfd9d07efba775022ae9da79ba07cd9f35ef1e995061df42becad1f56c91301c78e9ab69eb890b7f3aed757a29a97","ssdeep":"96:G2IYtAp+xTgCSzoKfj5VriRHGQpnwjlsPgrE7wkv7lUI6kApA4uKyCCIJXvS6fmq:eoxnKfj5VriRHgTE7Fv5U5yfGXv3fmmJ","tlshash":"4fe15c5c77a4af44c445d5ba18b8a1264e344a98a4c0e3b76ffd0a73e19b9f84c316cb","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.551177Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":1602,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/google.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.322Z","timestamp":1790071462322,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/google.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3854\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:42:36 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3854,"size_decoded":4118,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"ad3ba834ae6563989d572e7f3f8c48d2","sha1":"fe2c15f99c72b7bf829df215a7c748b88306962e","sha256":"95e2313a5457a71d0a922175b393ed51485778768dd76077f97dabc0c5d9bb99","sha512":"0ec925a59d936cf782260b5aa27c9e7c66cc6d30405bc1f7d089f1261beb3eee3e36ab0d4ac3e0f9272869004963e0515a46f76ca5fe985e36de52d91008b1c3","ssdeep":"","tlshash":"4b813b15f711af86faade57114f3930f0617d26272a5d0591af9480674db1fe4a0b0e4","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.551711Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1271,"timings":{"blocked":1159,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/ios.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.326Z","timestamp":1790071462326,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/ios.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2154\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:48:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2154,"size_decoded":2418,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"bd0ddd2938210a38a969bbe8da2a0770","sha1":"0fcc03907fc59358cdb9779cb1a44f04bf601163","sha256":"61be5016be893e14a06d6d3ca9bc2bec0912e7e4d931012983bcd620899b69f7","sha512":"30dc3dca4f3490a006e2b30d3a850a4342d0a8a8309e37e71cf98fb98193e4be35c4bcfdb54b1916de21f2798388bebaf9a984de443272565d14ff2c6bfca6b4","ssdeep":"","tlshash":"cc41c655fa119703ca9cc33124fb933759439cc028d8aaad78fe88331c712b59a092d6","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.552259Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1368,"timings":{"blocked":1265,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.702Z","timestamp":1790071463702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:24 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nage: 65459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":51028,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-09-23T06:21:15.763559Z","times_seen":57334,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":61,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/font-awesome/fonts/fontawesome-webfont3295.woff2?v=4.5.0","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.697Z","timestamp":1790071463697,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/font-awesome/fonts/fontawesome-webfont3295.woff2?v=4.5.0 HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/plugins/font-awesome/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 66624\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:19:42 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66624,"size_decoded":66923,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66624, version 4.262","md5":"db812d8a70a4e88e888744c1c9a27e89","sha1":"638c652d623280a58144f93e7b552c66d1667a11","sha256":"ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995","sha512":"17222f02957b3335849e3fe277b17c21c4aaf0c76cd3da01a4ca39c035629695d29645913865b78e097066492f9cee5618af5159560363d2723bed7c3b9cf2a8","ssdeep":"1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ","tlshash":"ae5302303406ab26ecdf0e8776b888f2b4da91d37b5f22c753aa84115dc91d5d94ca3e","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-09-23T02:55:00.606212Z","times_seen":34805,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/slider/correos-corporativos-mediacix.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.286Z","timestamp":1790071462286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/slider/correos-corporativos-mediacix.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 627344\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Fri, 06 May 2022 20:53:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":627344,"size_decoded":627610,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3","md5":"92e1741121810eee60758c7cd17de226","sha1":"8ee96d8d3d46e66a25c42fee3169d542dbb5f6b6","sha256":"6324eccf649aa51b2e883f95ca2779b6bf30fcd5f2c0c45b00bd6745c3f9e439","sha512":"a05833ac085a8d82337587e067c1c83c880d7e5220d11cb64f4a2f81338e8ca975f33c5c2c348ea8174dbfa346ba31e8a1a06709cd5b9e960f3b8e9fae7dfa20","ssdeep":"12288:sQgwo0XL0XVQetTveVQ4d4daMrWN5SvlJBgt7uxtIBW+qQStWfl2ETQR:Lgwo0XLizwnoaGWClJ0uxmW+xSCl2EER","tlshash":"46d423aab0f884967ed122b73a01c545a1a37616e42c4096c7dbbff470f0e9715dc8af","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.553587Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":1383,"dns":0,"connect":0,"send":0,"wait":114,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/chiclayo-city.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.306Z","timestamp":1790071462306,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/chiclayo-city.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16885\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 05:24:28 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16885,"size_decoded":17150,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x200, components 3","md5":"b30642c1a6d2d4ce2e86a0ab49dbaab9","sha1":"18de19a9feb24d6e8b8d4a88d6c5f023d4bd1f8f","sha256":"d530f17f967cabbdcc13c4e302dd4e8fcbc34f1f89ad2dc10b3bb0daa790617b","sha512":"da6c912dc74834850ba93440b5a24057240c0499977c6cb43e37ccfba26825d202034ce482f7403d92a7e611c5bd0a2bb6c895188b59662255870b1dcc750cbd","ssdeep":"384:F2JoB6LDdjfANOwUIe4cOK7gGNx1UXG1v2mn:F0oqdjfA4w7cOkgGMa","tlshash":"4972d091ee437b4d8dfaf3332573d17c9024a4f22925cea5a63ca5876e6807210183be","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.554369Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2393,"timings":{"blocked":2284,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/css/gradient.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.226Z","timestamp":1790071463226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /css/gradient.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/css\r\nContent-Length: 710\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 19:41:16 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":710,"size_decoded":1005,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6e0ca205eea6cc41af759a19f831bf05","sha1":"b80616d9dd1a3814a01a6c4f9a68df55e38d4ce8","sha256":"fcd095f1815b61b81df7fa474ccd0eea6d32f44ce21318cd4df9354030155693","sha512":"c569edd2a056f5d1e3c5b6ba880b2a543cd211048f33ce9b58d23a94599e37fc0640ad5c62d30de36e5ee2b18f8516f90b5b5c4aadd0648742c0f1650ef708f6","ssdeep":"","tlshash":"5501d477104525ddf53ac6fad6715848e619c54e960365cae4e8fbe9b6228c0401c1e2","first_seen":"2023-11-04T10:25:15Z","last_seen":"2026-09-22T10:05:18.554904Z","times_seen":12,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.710Z","timestamp":1790071463710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 65523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-23T05:52:23.17553Z","times_seen":345061,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":32,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/testimonials/arrow-border.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.863Z","timestamp":1790071463863,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/testimonials/arrow-border.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 1626\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:18:10 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1626,"size_decoded":1889,"mime_type":"image/png","magic":"PNG image data, 400 x 16, 8-bit/color RGBA, non-interlaced","md5":"c700dfdbdf7ad8d887a7cc8cf2c6e1c5","sha1":"58ce7afc70cf03640bcb86597dd7c82c07532dd8","sha256":"6e29993d0fc3aae584dce8637ac30cb202a66e0164831267f9fe21cd0e041639","sha512":"5945114588998450e55f493d503bff100adb5cd0348a7c8f4e1cab2681e3cee0c2ba920080da8ad546f73c16657db32d5de2e4550e5112c0e1571721116c9543","ssdeep":"","tlshash":"c93195cda86128c2f3ada4c264e685368d5544c09dd0e861de8dd8a72620afd489e9df","first_seen":"2024-02-25T07:50:11Z","last_seen":"2026-09-22T10:05:18.556012Z","times_seen":7,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":864,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/kristel-importaciones.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.296Z","timestamp":1790071462296,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/kristel-importaciones.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 47208\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 17 May 2025 17:54:14 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47208,"size_decoded":47472,"mime_type":"image/png","magic":"PNG image data, 270 x 200, 8-bit/color RGB, non-interlaced","md5":"f19e9a744644a5d104fe9897c6ae2586","sha1":"2818c0293a9d78a934bf5c7dd751236c663f8a74","sha256":"17bd1ea142ba48fa1b99fc4867b085a7b14a9c73b9492ef08626bd34f1e8a2b4","sha512":"c0bab073fd18907fbe4ae683d3e6ec78559506baca1275d73968b64dc81c6fbf03bf1fa04dd5878667b795b8e9b95545295b0be3b5ab59296d01703f3fb8ced3","ssdeep":"768:5DSPT+K3diIauunHge1peVTFwxQOMx0PjPrVIdGFazeoomEIVtHjOTOSEiRNwbBz:5DSPT53KuMR14wxQOPPjjVIdXbokrqxy","tlshash":"d9230141ffa0f72f5bd541939f77e923a230e7234bf921e8ba52d86ed14c96241750a0","first_seen":"2025-08-26T07:51:13.465339Z","last_seen":"2026-09-22T10:05:18.556587Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2231,"timings":{"blocked":2125,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/clientes/infosystem.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.309Z","timestamp":1790071462309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/clientes/infosystem.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 9999\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 14 Nov 2018 20:11:46 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9999,"size_decoded":10262,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"2a881e1fac6adbaaca71885d057ab732","sha1":"414c4f2c7860b33307ff0ad7c0e53c4b0beb91de","sha256":"d14caf4b2d78b41973429fb51b4fa73871f5c62662c4f7fcdc0b66eb94da4a6e","sha512":"514b4155e135d05a4d44d71e6249a6350a9c1aa90974d99397c674491a48d93f5c5b6dbdb17653b4eae305e9f126b9bca1ba05dba854c5cd38afffb3e40eaee8","ssdeep":"192:smEtOiIPf0bYoAh0VUpPWFEh1hVtERepCY8103x8xrapp0rr:srtNI30FhWyirVtuACY81830rr","tlshash":"b8229d22e8274b18f9399cd039de4123712e56a4d962ef317e8ac492949c36c6078af7","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.557128Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2124,"timings":{"blocked":2017,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.714Z","timestamp":1790071463714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:35 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 65508\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49076,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-23T05:54:41.526169Z","times_seen":66464,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":95,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.715Z","timestamp":1790071463715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:24 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nage: 65459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":51028,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-09-23T06:21:15.763559Z","times_seen":57334,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":65,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery.mixitup.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.262Z","timestamp":1790071462262,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/jquery.mixitup.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 28945\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:18:26 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28945,"size_decoded":29249,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28520), with CRLF line terminators","md5":"18b7ceae34275ee2ded2d0ad6aaeb96a","sha1":"d39a6c0f18ae4f30890fd1b075497275c4df127e","sha256":"efcf96f0f089b853aef3bc252a4cd713347ab4965763a99a2e7e1bda21b71c22","sha512":"2417fb9b7900656e35030c72c4805a56b94b71820ba301913b3ff01f9de898da02345d08d7f992ec4ae19198de56e3887abc255ddffec5929c30d49b1fb3f241","ssdeep":"768:bbVEg7ZYHQY4KeCWTNkx/vzcUv8U4nyw/s4:X6N4K7WTNK/vzcQ8U4nyt4","tlshash":"7bd2f781335834b1161313e36eff5a0ab43bb1b4a505c864f935c4ea5aaf945b273b3b","first_seen":"2023-03-13T02:20:05Z","last_seen":"2026-09-22T10:05:18.558193Z","times_seen":24,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":686,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/correos-corporativos.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.292Z","timestamp":1790071462292,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/correos-corporativos.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23545\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 21:15:36 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23545,"size_decoded":23810,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 370x208, components 3","md5":"6b6603bd86e80e1c2bc715c81f31c13b","sha1":"6d7121b80146f27e6345cfc95ad09302f0128d76","sha256":"15c67ebbf7c9a38b56c1c45a2f89db97895bd30857106c1a86ef06223a596cb4","sha512":"115e6334122307fb5cdc60846a86a5ec993f30809237984bb942c8ef3d4104b971220c8422e55e290d32befc7de1c457d7c2ad7fd3c16656da3aeb6ba14f5161","ssdeep":"384:uP343kjBX54nPz7dy7I2oROnm22WEetIAvXZpISbLXmGC+KAAH:uf43VnL7dy7u0SBaIoAsbpAH","tlshash":"e0b2e14d7510eb015492e97650f8da3e39a1e04a4f22ccdbacf3b9d05dba7f9688f241","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.558714Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2060,"timings":{"blocked":1950,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/fancyapps-fancyBox/source/jquery.fancybox.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.245Z","timestamp":1790071462245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/fancyapps-fancyBox/source/jquery.fancybox.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 5172\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:19:10 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5172,"size_decoded":5468,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"02618305d14074745e090fd599ee2af4","sha1":"190ed5a08d5d59872503b341b403174e5b5127ac","sha256":"4851bae43cf935b15d7d12f0953ef30fa87cc408834eb20ef0d43e527a882573","sha512":"2891b499ba5e68528c3e10b9211b742672a7aec5afba8b41288e902652ba28b2d455faf3de5708e0c851fcf4e6ce77453240febd024eecd4b97f947542239be3","ssdeep":"96:hZ3IuNurbCJNn5UHZXaa2sOTBslSpUqSnvmbz0zO2brwa82mwVAGn80:h/JN5kB2sEBqA7Sw0zbrDmw5","tlshash":"beb1ca9faa51310a643b9f54a77f5a56ce710426aa0201ffb1ecf12483e57f670b28dc","first_seen":"2023-04-17T09:50:36Z","last_seen":"2026-09-22T10:05:18.559223Z","times_seen":66,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.kenburn.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.267Z","timestamp":1790071462267,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.kenburn.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3124\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:24:02 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3124,"size_decoded":3427,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2887), with CRLF line terminators","md5":"2af3650e079ea088f7467879470e0d8d","sha1":"f1c11075b88f893ecb1addfa957632e93181f85c","sha256":"2beef56f943cd5a4219ffa68183a1a5a5c1e0a1e3fb9e64d2dfcc68de258eec3","sha512":"8dcf2d6d75cb94564c1169d7bc3507bef20795d0abc1d9b52cf2061af2f818db7db6c9ba0222dd00a61728a10cf3586006c39b0460b50c76cd9048ced2d72b71","ssdeep":"","tlshash":"1f5176d434413c4e8c63d392998d13cb61f1f6151203994e97b93ac0aecce8d2a72b9d","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-09-22T10:05:18.559766Z","times_seen":1083,"resource_available":true,"data":null}},"time_used":907,"timings":{"blocked":795,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/slider/hosting-web-mediacix.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.285Z","timestamp":1790071462285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/slider/hosting-web-mediacix.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 369041\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 04 May 2022 17:50:38 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":369041,"size_decoded":369307,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3","md5":"729781cf79dbbb775ec6bb63b858df29","sha1":"34c594320856a33eb6fe94f5d9a4149e62453449","sha256":"0b3ae499489f7cd50393c289e59fa847c1f4afbb919ec0d8949aea8ac3f5ea23","sha512":"8eac0b9f95ff569673fcf6e87c7b4bcdfcf99a744cca6d5463eef01779df5b746c8a98f5205a7ca49a7896f485681c87aaf89bc2074fffd8e07819082214f54f","ssdeep":"6144:8DEzbZkJuF97wYDg5LNEP+GeEexJxvwL6GhES5k2eMRePolsEq:8DEz9vx05LNEP+JGhn5yPKsEq","tlshash":"8a74de7e2b72a92fd0df5d00a83867e3633707a0c18fa565b515eac3137736926a1d0d","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.560329Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":1383,"dns":0,"connect":0,"send":0,"wait":114,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/clientes/grovelab.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.311Z","timestamp":1790071462311,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/clientes/grovelab.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 9717\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 14 Nov 2018 20:19:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9717,"size_decoded":9980,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"a3db59334e24a92fe6540d3f927c61b5","sha1":"4ab091327d25852c870778695d3599f18d6414b4","sha256":"6cc925b3d49cc923bc2777d950f07bb6a10f2d8e425fb1037fd3f300ee575ba0","sha512":"41aba5561c5cb3fa88df5ab469cf5dacf84eccd5b78437b8c8ddde5f7b97f8bb2e5955aedd6601283e095cf1fc34029d06f900938ee10a7b435af074a7a05865","ssdeep":"192:/zyfQ+xughJ6rlwPm3nzhASf1SdkP6sx3y/NgH6NR9K7Jj/p4v:ry4+xD/6aujhD1Sdke/PR9y/pC","tlshash":"b012be2c9ca28a84c564f64035f9111dc69bc040a397fbb96f8b6a920df6bd0774c0df","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.560884Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2172,"timings":{"blocked":2058,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Pacifico","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.224Z","timestamp":1790071463224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Pacifico HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:04:23 GMT\r\ndate: Tue, 22 Sep 2026 10:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1746,"size_decoded":1219,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1de0858b704abe2634ef61be5a6fc565","sha1":"05d92670a01a38930d6dd165d540772836cab8a6","sha256":"e4fbfa27f2244dd2d0b53a699c82c3c953dab04adcb1205e7af461057e68d4a5","sha512":"82b7a440508fd6f91bd5dabaa5ebc4e466996689138a19eb423ce96a86bae77da261ab2de2934bb7e10a4ea3cca99dbb75a3b630ee7b952205dcf58ad5240f4d","ssdeep":"","tlshash":"6531add1012be800a7931cc263cfbe329e4ea29534409576abfe1cd99da6d72a251b4d","first_seen":"2025-09-17T08:11:16.853849Z","last_seen":"2026-09-22T10:05:18.561506Z","times_seen":837,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/web-design.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.630Z","timestamp":1790071463630,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/web-design.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 171764\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 04 May 2022 18:55:44 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171764,"size_decoded":172029,"mime_type":"image/png","magic":"PNG image data, 354 x 400, 8-bit/color RGBA, non-interlaced","md5":"33c59e47b9cf413d1e1fd81639392ce9","sha1":"4dc3886f9f5296f0b189659ea89d008b55506253","sha256":"064aa6d33ac2240b5c8907584a8fd58b4e29e48fca764257747dd89e311ff1d8","sha512":"4ae1549d3a7fe1f17c2ece9c13d06f5850a727c0e310e75b2b7cd86df185c729b02d94a3b74785a7c6dc553f34ac94b7261b47e2626261fd0db3b4f76eb0335c","ssdeep":"3072:PzqZpKcvd4v7cGnlHTlkctiPBcTfLSOr5dETu9vV9CbrD6yB/0t5DGkv:PeZpKcW77n9TnwvOXD9vVEX6yCDG2","tlshash":"4cf31281f40ce66866071839b667cf51b6bf26a1b0d945aead4f0183fc78ed8c440fb6","first_seen":"2024-02-25T07:50:11Z","last_seen":"2026-09-22T10:05:18.57025Z","times_seen":7,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":108,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/tiendas-virtuales.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.288Z","timestamp":1790071462288,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/tiendas-virtuales.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19426\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 20:53:46 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19426,"size_decoded":19691,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 370x208, components 3","md5":"cecfba465edc4671f07c70c971589155","sha1":"1caa2c9dad1d9844f6dccf895cc60ffc2c720401","sha256":"474fbc11986e61c4d46e55a80a29a49fceb7239998e5bbd4840ffde991942a44","sha512":"fa4aced90c9c1d18cbecd9f8716323c58d8f95079b24beaa35a75277089d31baa2f598ebe975799eb995ddc4fde27ab656f5157f526f046b59c2900ebe3267fc","ssdeep":"384:ehqNS/YtrfsIyA5Aq156FpRb1XecZyBJXLaw+ugyAfEbbTwr2DCw:eYA/YtLNOqqHHX0JXmw+ugYRCw","tlshash":"e392d1f28a5df3625e841b216eb4cc65881c05f087e9ecfa902b78205d91873d5bf35a","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.571134Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1956,"timings":{"blocked":1847,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/lya-servicios-financieros.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.302Z","timestamp":1790071462302,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/lya-servicios-financieros.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 42098\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 17 May 2025 17:54:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42098,"size_decoded":42362,"mime_type":"image/png","magic":"PNG image data, 270 x 200, 8-bit/color RGB, non-interlaced","md5":"c082e9abe500d60e272f6adf55ddae31","sha1":"e1a834d0f67fec2bad47a0b60b0e8e872b46a881","sha256":"6492e5f2a30375486cf9cab26955d41a03c3607589b2b8615844d6aec7a52063","sha512":"ead7ad01f5f872353758ebc8ba58685e8fa705633fbafa6bae174d9025c5f631fd2077ce9bbd0c93b7d1ad59a82089ef89414002b01c4446df7ea757a25e22f0","ssdeep":"768:t+9eQHO2qkIBKojB1TSJ4RqlTiaZisysCMu+E8f5GlccVWdOx:84OWkIBvVkJeITLZTpCF+Eu54ccViOx","tlshash":"ca13f2bb1859c243900f7df78d9296ee11645f38adcd0b7c9217c806e26b9dc449f2e1","first_seen":"2025-08-26T07:51:13.382879Z","last_seen":"2026-09-22T10:05:18.572085Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2343,"timings":{"blocked":2239,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/jquery.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.317Z","timestamp":1790071462317,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/jquery.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3901\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:30:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3901,"size_decoded":4165,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"56f74b9792a83d4d178ba876c1816e54","sha1":"60a232fd401e1d5a1619045d7dceb623f946df46","sha256":"854d6bc4dda8687d45bb0dabb320c2a2f3e667c66a39060cc872688ec81814f1","sha512":"621176f48ed08722843225af84078fb9af96bda69d8b8865026df5f3869c5d64c53f1fe693b868e7f17dc6dc5446fa226ce9ea9542aff863904d1ee1284d5eba","ssdeep":"","tlshash":"06816c98a451bb32e19872361cbf50eb0e0564410af4de90f9fa8c9824916f72a2e5df","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.573004Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1924,"timings":{"blocked":1821,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/css/style.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.246Z","timestamp":1790071462246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 103924\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 04 May 2022 20:20:58 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103924,"size_decoded":104222,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3b26b1e9b9fe4be2e4cdfddea3900a6d","sha1":"33882033f9e3578a683cf6a0fc8ebc1a7a69c787","sha256":"a1ee0ad338c0a1363a0ec7c25136fb949496deac4a3b20f9a3efea98989f247a","sha512":"474fd203aaad16ddf043f3f7a1000ca961e1d73e6dbaaa0454cb94ae7e5f7aff4489d5eacb4dce59155cdca4f48d990bdf9f788053b4b84aaa2778c0aa65d2f9","ssdeep":"768:H/xcvTiNlqvtVrWNukwBSzxBJeuN13timkLbo:HSriNl4tVrhkwBSD6o","tlshash":"24a32498f65515146636dab5b7826ab1bb1c50f29b0342b8bff47005f28dbec0262fcd","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.573807Z","times_seen":7,"resource_available":true,"data":null}},"time_used":734,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":113,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/app-android-ios.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.289Z","timestamp":1790071462289,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/app-android-ios.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 26827\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 21:02:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26827,"size_decoded":27092,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 370x208, components 3","md5":"cb6b0a56d1fa6ca2278322271905af80","sha1":"ec949ab231a876b39e149c8b09321a049fe8c102","sha256":"7a519dada75dd034da0f7d0a52bdd47ebf5bcd85556a672c3dffc7521d4b1cc0","sha512":"eeeeae6df76d541377f49053f7082e7523c1cd4c0b44e6ede2b7ba445fb2d9301092655f8501bffa42e0aaf829c17db0150b5fc9d65c30a10459a28913222529","ssdeep":"384:5UGrwo9yLxuYjmNHmMb7Cg0yuUPnq3yOj14QaUvwe1RUW1+TLaBorcDv:GGr/9yLRmRfKyuUPxQNvd1Rqwomv","tlshash":"56c2e1475ad3bfc3d4cdb8a614318261da266445b378f48b8dfe8102341b17a06fea77","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.574623Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2018,"timings":{"blocked":1915,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/firefox.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.323Z","timestamp":1790071462323,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/firefox.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4132\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:44:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4132,"size_decoded":4396,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"74181093a7139c72b350932d6d59a99f","sha1":"096a9b1a2653f8181b4690a67975d128f4fd0cf2","sha256":"ef7fae6e88e983898d2a41db3ab21f34a647d76c0c5783073722f3da92f767fb","sha512":"a8c1f98754bf08e16f40d633570a0812a14916fc952dbb8946da9b9690b6f10a300d50cfa77e0b7dc59a502475528103fda408cc3cfc10e9abd6a21c497e2c22","ssdeep":"96:G2GpvfBSRXKXAa+MHLsisjSHQIja/xP3Mn2bzmPKKp:dKXWqLsFjRI8xP3MizHKp","tlshash":"43811942b580efd1a8cc6b3a09f357539a67446698c39c5194f244a2f2e11fe35473a3","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.57546Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":1159,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/seo.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.294Z","timestamp":1790071462294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/seo.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18238\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 21:22:50 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18238,"size_decoded":18503,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 370x208, components 3","md5":"97fe9a419c634e1f956ab2b62747c002","sha1":"e04277e5fc98a9cccba2bdf8c5250a2750c76231","sha256":"56a4dbd44930483747fead4b8f04f39fbe81ed42f316b27063483a77e14f9968","sha512":"17a946f00e0cf08ac5ad9c759ad05fef8dd48fa1b425f8a472e20c637e74f2474efc7d559fbcb04a801f9509af612693c2632e58476f3904ba3b82624885ad71","ssdeep":"384:hjgu/ZKuebVWODnfHMUp1lEN77H/q6+glbXdKaVm3cC8B1+TplNkR:tgwZUbfDnvMc96+glzdVmMCs1OSR","tlshash":"6682d0dedcc25b404497aca8a4fb187088076d00ede3aef096b49c6d7f741b4191ba91","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.576294Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2066,"timings":{"blocked":1956,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/promarket.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.298Z","timestamp":1790071462298,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/promarket.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 38696\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 17 May 2025 17:54:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38696,"size_decoded":38960,"mime_type":"image/png","magic":"PNG image data, 270 x 200, 8-bit/color RGB, non-interlaced","md5":"6b3e902c575cff35481f3fd6444e25c1","sha1":"c480a7ab51eb17a3a78d8599f37dba75a5e09be1","sha256":"179c74c2843ad338ff6821338cb1e7e74cce3c71bc293a9aec1887c5aa718357","sha512":"992155b7af67574df3cbcf62b0aa2b72576223a7264d1a2166ee83a2ba3f37fb4434c3ff8e54b8f937a4b8bc387f11d06b1c4351d3b1dfa0b467867022b0c769","ssdeep":"768:FgOWnvcdfl06tYwaA/HfdJpxr1Ej5Cgr0Q2hycTX4t/5bshzMrlIq:FgrncflpPfdJf1g570ocTot/5byAl","tlshash":"5403f26973452ca2807aafc638fd153f688b1d857199ff42f1cb48814b167ca91059df","first_seen":"2025-08-26T07:51:13.346902Z","last_seen":"2026-09-22T10:05:18.577089Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2239,"timings":{"blocked":2133,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/clientes/club-arabe.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.312Z","timestamp":1790071462312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/clientes/club-arabe.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 14640\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 14 Nov 2018 20:22:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14640,"size_decoded":14904,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"dc2d7223ed15a6da1db3274995fcd2ae","sha1":"9abf5b039200e100a61fe92705e1ef79a103f6ea","sha256":"2c5ed2e2a9b26013f9e0041bd8dead8899f50ca5e61745f2371a9361f2380ce4","sha512":"1121b2b0b91989a77556296954d2e0a4c936880b2664b85bd57d54d4d017da35d25282e454434c4c3ee7eb4819b31a3fe7fc671b3eb92e0b643e08f016ab83f5","ssdeep":"192:8V4L8FhVZkfugwgKhu4SihGBWfm02iWnQIaHX+uriuuEAT2UPCuoRCy3VyWYgER9:8GK6f2JgBWfmUWQIaHuzsAT2UIl3VpYj","tlshash":"7662c18496575ca063a997db8d830cd7da54761483d1e3fbff3700a22166638161f9cf","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.577874Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2173,"timings":{"blocked":2058,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/cpanel.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.321Z","timestamp":1790071462321,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/cpanel.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3822\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:38:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3822,"size_decoded":4086,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"bccbaa1d7664369517fe1b6e093ad036","sha1":"739e6f1c05107a35ff66b8c7ce24425b0dcaee5a","sha256":"b0612816fe226d57e425a8d32531ab4b74e1d24ad0cd17cf600a342ee535bc34","sha512":"ada4139f7f84bf40687e0a8aa6d0482900bedf3d4d44d84f551a196a350fe35f22b2b9a81370dc4e0cbce01e73c52804436f42fd5e3461524cc8446bd4036d16","ssdeep":"","tlshash":"46714c65ac44e703f8a473305df2d377191ed883500bc8697ef9005916d41be4d964bf","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.578685Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":1159,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.204Z","timestamp":1790071463204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:04:23 GMT\r\ndate: Tue, 22 Sep 2026 10:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58085,"size_decoded":3017,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"52d638a6553570c3ad986bba186f87a3","sha1":"da89c64b60fbc4f0d5442625759a6773ea59eb33","sha256":"36d64bccd2b2274c66aeb6e420a20c306ee9d350b7c873899fb5e31de0416765","sha512":"43c270c640ddf25de6bd9e9a0154e8c8d37b4c3cc2ebb810f853870910e5aa199c504b38478d0595f5fbf81904a4067863f7c8c0fea612932a24f8fb36f195bf","ssdeep":"384:+eO2pXt2tv/qY49Ynx8bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5e:YbPUiCAgkgHL8OOVosL3JbcI/z","tlshash":"84431c910417244066432dd233de3e30ee0fa2607084c076abfd9bdbeedad6a62b535d","first_seen":"2025-09-17T00:16:45.671638Z","last_seen":"2026-09-23T06:20:41.230875Z","times_seen":23978,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":104,"receive":1,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/footer-top-bg.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.632Z","timestamp":1790071463632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/footer-top-bg.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 404856\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 19:43:14 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":404856,"size_decoded":405121,"mime_type":"image/png","magic":"PNG image data, 896 x 282, 8-bit/color RGBA, non-interlaced","md5":"13e25edae823d9d2ddf202a393c87ae3","sha1":"6ae3ae4de4c995b7ae18dad7005081762c7622e8","sha256":"a937ff6095d7abdc3ff290eda898b9add741519c0100d8c6d511a44662fd4839","sha512":"003ecbdcd8d6ffb508d03583f79d60ac6767c99ee4af930174bcd6fe7089ce5c46e51befd51645b06698afc2b762f542a4f6e5b1ba10aef10fb2af7d98701e2e","ssdeep":"12288:E2I1wqkw6fz5bHSp5ioESMjuDTpk50CIbIen:YwqkwCz1SKoEdjuDhbjn","tlshash":"728423dd79a3b700313084e6e4e0391ef8caae799ca255048bc79ec3e9543db5d41f92","first_seen":"2024-02-25T07:50:11Z","last_seen":"2026-09-22T10:05:18.581017Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":1045,"dns":0,"connect":0,"send":0,"wait":103,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.700Z","timestamp":1790071463700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 65523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-23T05:52:23.17553Z","times_seen":345061,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":50,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/hover.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.244Z","timestamp":1790071462244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/hover.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 130664\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:18:34 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130664,"size_decoded":130962,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"05dafeb93262206fb8a45799158bb814","sha1":"1803ef9239c6db2d05428c30122e7c1ba082a222","sha256":"bdbc00b76007aa9b0d4a20d70d964c5c796f698170295e2f5dd8eece5615dd0e","sha512":"edcb73bd9c68b337300363b76a62d74a56f44c8b97184a6f9958cbc29957ce6875e5444c561fb0c4e8fb8081c8145bc7f65c09e7996e93cdda85410603b9c446","ssdeep":"1536:9IsIFDtYo126oP2NYEY2YMYcHil/vxMR5tj1NgoqY49wuflkrszIiIpE:5o126oP2ML","tlshash":"e9d3d0b96841120416378e09c7ce5f7deb3ce4736a221eedb787590b8b52e5c12c6e27","first_seen":"2023-05-14T09:23:32Z","last_seen":"2026-09-22T10:05:18.581882Z","times_seen":85,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/flaticon/flaticon.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.238Z","timestamp":1790071462238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/flaticon/flaticon.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 564\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:19:28 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":564,"size_decoded":859,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"48f0edd13134043128261feb00131073","sha1":"fcbac940f90522cc8981237cc958cdc595134342","sha256":"d2cba0387d556b2e7616304c9ee85be1b416e909d8688e95615c306370ffe740","sha512":"14243f4ba13e0d26e268ac3d61a3cdc2e64718836e470ef5f295f7dd8ecfa30390befbcbbccfef05aa3bfdd1c9b2861e45c80390731b708b9aa5a6e5eb568827","ssdeep":"","tlshash":"caf0c255842b40269343ae8853fd2f64d90930669ed0cd86b37a6d28feb3d240380b54","first_seen":"2024-02-25T07:50:09Z","last_seen":"2026-09-22T10:05:18.582837Z","times_seen":7,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-ui-1.11.4/jquery-ui.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.257Z","timestamp":1790071462257,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/jquery-ui-1.11.4/jquery-ui.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 487212\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:21:34 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":487212,"size_decoded":487517,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (547), with CRLF line terminators","md5":"43109e12e36805738ddf8deca737c53b","sha1":"cb6bc7d0b27bdf80a672b857bf6db0d41cc55995","sha256":"37fbfc8e36798a479dd09027315d1de63f53d75aa169c97b7991ae9afbd249e4","sha512":"2c906e31629ced4f66d78be9cdcc7e6c33c093530c0e87d2fea4248d427c3b34fbbe2b2607b114c116ee76716d67c56ef55790d2c3e7c3759093bd91773b2df3","ssdeep":"6144:UnA+sJQfWwFjn5nn5ZOlhgpRgqbb8wsucTHl2Ec/GdTieCu5t5Ql8Ry6tWWVIjVv:+bpsucTHv5t568R0O0rJdYq28cez","tlshash":"f6a4b7d5734f266f89ea3359583a9189ea3dc0b5d202807d789d58dc24a8c1843bbffd","first_seen":"2023-03-08T09:13:48Z","last_seen":"2026-09-22T10:05:18.583802Z","times_seen":279,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":573,"dns":0,"connect":0,"send":0,"wait":111,"receive":342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/la-floresta-inmobiliaria.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.300Z","timestamp":1790071462300,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/la-floresta-inmobiliaria.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 43880\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 17 May 2025 17:54:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43880,"size_decoded":44144,"mime_type":"image/png","magic":"PNG image data, 270 x 200, 8-bit/color RGB, non-interlaced","md5":"4bc1c624e83583af4df19cfb0267b8e9","sha1":"fd57e0aaaa67b42f46c2d364a8bb3061a549065f","sha256":"81782deb190f3623b7047afd7f60b6f2fc0af72326bf1b4e238028e52aecec45","sha512":"9af7d17820a9866542a78e8b7329ca0642bab0d84942489ed43ffce35b8afcf25154c7b6a0aad5e104aa1a978a1238235f287598c3e7e12f5c76a8ac47ac5ed1","ssdeep":"768:3/xFD9qSLQrWuzSywAm3pGuCfr/IHCBB6eZA3//7x/aMap4jlT:J/qCIxz1wAmZGxrIGZAvTx/aM6mlT","tlshash":"0713f1bae0294e7d42c6f21668252039cfb41c484c834f86ff2e9edd4261741ba1f83b","first_seen":"2025-08-26T07:51:13.388296Z","last_seen":"2026-09-22T10:05:18.584718Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2284,"timings":{"blocked":2174,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/css/settings.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.234Z","timestamp":1790071462234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/css/settings.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 35726\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:22:26 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35726,"size_decoded":36023,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (352), with CRLF line terminators","md5":"0a3a3ecd7140f1f70b94bc7cc3e17663","sha1":"425ec523b25963d102258afc04006d57c07e5ff4","sha256":"1014bf15f23e54308828901a7551e85009bd6e5b4552e5cae86cbb75518107d3","sha512":"33149033bb930a00f6011d405fd76a76566d725571c07c9bfd48e750c0211d63e9008f9e13b6ba3f8384864337177322ba000856ea253b2a766f1ad64c1b485e","ssdeep":"768:WBnrVY3Woioyr1N2KpCxZtW3QY/yGyJhMzL:53Woi7rUzjY/yGyAP","tlshash":"74f2a77599464c852323db0437ba5fe9aeb850319e020daeb196356cc3cdcf8469a7dc","first_seen":"2023-04-07T06:46:50Z","last_seen":"2026-09-22T10:05:18.58562Z","times_seen":27,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":106,"send":0,"wait":212,"receive":102,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/php.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.318Z","timestamp":1790071462318,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/php.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3819\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:25:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3819,"size_decoded":4083,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"ef89a0880cc2c3656273c3f7fb494a00","sha1":"cd1337238c19b7c9a588f1ead487b9151a177460","sha256":"880e9d661c2854f070224fd5b39321b7223b21c85df60dfbd9fcb11b93abed46","sha512":"ab5a09c12ed21f6a696929331a971a85aace921642332b8655f6e9dd9f7eaed36b95ce8ef2f752dbed198cee2783cffd563bb581f5f1bb5856f3a70e6e4c1eeb","ssdeep":"","tlshash":"d7713a0bda95e781f7c19ab92cb83b06160689d2d6e4c54d75fcc4d333e80eb04813d6","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.586544Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":1837,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/css/layers.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.235Z","timestamp":1790071462235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/css/layers.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 102115\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:22:32 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102115,"size_decoded":102413,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"49bda67bfcd9ccbbbc91fc7f85ab8475","sha1":"3029c75e5165624f8c267e8bd6def6320d14a295","sha256":"0ab16e166be3148e6566d249b7b15b035163508d645de47e86eca26b4df0085c","sha512":"b59613cc2b09a588f5e67555e43f112551a0171a1209f151cba8b6f813475b2b71239a1fbecb37dc2f350341307bb3392c8c1d9cf30865aa1d31d4921bccdb3b","ssdeep":"384:PjgGE7ZJaszFwt62cEGrmvZVRPv3A2qqbJNaNT8KiiOSGO2TK5NTXNCWIP7iuKpN:C7freZVRIzGTT+Izan","tlshash":"eea3c071f91541c770b7e81973329ec8db6902539e078a24fbbd33688f786ada91136c","first_seen":"2023-04-07T00:21:23Z","last_seen":"2026-09-22T10:05:18.587791Z","times_seen":447,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":106,"send":0,"wait":211,"receive":207,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/clientes/novalty.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.310Z","timestamp":1790071462310,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/clientes/novalty.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 8477\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 14 Nov 2018 20:17:06 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8477,"size_decoded":8740,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"4dc875fc4ea8a2a43cb05758df312ea5","sha1":"6b1c189a1339d8640117fb242e388df8c842e80a","sha256":"6d7917139698d00eb6b02c048f245f77321995ca5c92e0bbfc6a217f56a4cc2e","sha512":"5fa0f018adad393493d8ef05fee83e44c8dbead5238788bfdea806fcfc2471c4bf788f2058a36426a3c99a2c3248b57749ffce8770af9556d3ca4955157b4ce5","ssdeep":"192:PqMy6PIYuoyjaAuLAwAeJoJ522j36eC5OkjMIJlJq7905OMJ:CMy6Pduo6abLLAGtq6R5llkSx","tlshash":"2a029ecaea582992730ccdc510e4861d995755e5aa0ac47ef8cf858fe5d6e308cb8bc3","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.588706Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2132,"timings":{"blocked":2029,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/jquery.themepunch.tools.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.263Z","timestamp":1790071462263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 104767\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:24:02 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104767,"size_decoded":105072,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26623), with CRLF line terminators","md5":"02f01e5f656eaec82f39104318a86559","sha1":"12195fd60755d042e2b87a65cefcb31caae088c7","sha256":"7722eb69e500cd417ad68004ff568351d3d47faee948468c311a8dd3cf7a770d","sha512":"09c60ea7c8fcbcf3b59581cee9160b48010627002809faeb5b72b0b5c5e56a7354792b3b687d87090db8f7633ffcd5abce73c89344b05183462016e2b49943ae","ssdeep":"3072:iJc8VnIZ6x8/72S4BhYld0pQOHyLEdayb:iJcinI0x8iS20SNHyLEd7","tlshash":"e9a34aca7251702145d611e5913f0a43733b98aa740e896cf258d9de3d3cdca21bbfb6","first_seen":"2023-03-07T01:40:02Z","last_seen":"2026-09-22T10:05:18.589659Z","times_seen":1561,"resource_available":true,"data":null}},"time_used":958,"timings":{"blocked":752,"dns":0,"connect":0,"send":0,"wait":104,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.actions.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.265Z","timestamp":1790071462265,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.actions.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 6790\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:24:06 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6790,"size_decoded":7093,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6556), with CRLF line terminators","md5":"651b05d9124aeccbf2992fbfbe58e520","sha1":"4fb4d75cb96ca89d6215f46ac3b2843d3733460e","sha256":"4f6296e444d107bfb62fe165b3ea638ee10a603193cfd87e78d80bd3e289f57b","sha512":"c61ce8b633fa4d98c65d8f63bef95c5568f68806df8e4a10f2aad697b6eee18beeadcf5f357aebbbe7cdd7e5c07fd067228dd6de2e8e907f572b329dbf0b6a16","ssdeep":"96:v4/qK81z0/4nNJ/rfA1QU2VOBoRQgPkBVaSM1fxGcMqTSjRDrm:Q/D81HJ7A1h2VOBoRCBVatT7","tlshash":"36e19455f1052dff4463a6aba82702e7b2b1b68c8a05a9b8f057f15c3c7ca5105d36ec","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.590521Z","times_seen":468,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":752,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.navigation.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.270Z","timestamp":1790071462270,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.navigation.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 22958\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:24:00 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22958,"size_decoded":23262,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22717), with CRLF line terminators","md5":"fbfedcf9e6b7372365acc206ea8ff59a","sha1":"8aa2ec6355807bd6d8d3bd7a225d1c5bad3a4433","sha256":"03c970ea4c3f6d574182c00962623dc0f6f09232f52ca327cdaea24e6ebd71fe","sha512":"b5ddee1eb2ec2c61602c5029bd927a921de66e9d6ec5f48e9dd57e98fbf89ad6cab72f4b3ca461e88ea03604b2cd059ff6239bc63b817c5ea3507bcfd824ebdb","ssdeep":"384:Rdu1VJRyVIN72Ni4kUAtJsxwfB+icxIwpX2wgexB:RkDyVIN72N8pvuxB","tlshash":"65a2849576843ca7447362bbc16a50f47272ca34630bea1075efb1f058bccd523a7e99","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.591387Z","times_seen":429,"resource_available":true,"data":null}},"time_used":1019,"timings":{"blocked":906,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/bootstrap.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.316Z","timestamp":1790071462316,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/bootstrap.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4063\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:32:14 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4063,"size_decoded":4327,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"dee9ffab8f5a340410d976a2c21f939c","sha1":"c05f6946bad250686e5773a4e033ba8052bc713d","sha256":"8ba7cbf2ebd7992ae67430f6baea3aded6c8e1bb295c0aa685c321019956b6f9","sha512":"4f24930bfd5e330437ae5f0194c3dfd485055572dbd9e768a7efb01a62ed4ebfdc3c8ad60be976a3b315943ebb260ee6a285fff65764fdef6c33ed6c9b351b5f","ssdeep":"","tlshash":"7e812d05f791b3835fa4662219fb1b0f010688f365f3e5a52dfd9cf29e902fd0406186","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.592234Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1923,"timings":{"blocked":1820,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/apple-touch-icon-114x114.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:24.999Z","timestamp":1790071464999,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/apple-touch-icon-114x114.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 6650\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 14 Nov 2018 05:48:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6650,"size_decoded":6913,"mime_type":"image/png","magic":"PNG image data, 114 x 114, 8-bit/color RGB, non-interlaced","md5":"c004ad0fd3c1389e9e7fa51ad0e015f9","sha1":"3637da2ae8a8efcd6a9a667143fb43487ddaae45","sha256":"09ed327e245e7728ac5f1f499d2b5e547bc440982069970d3521e2e2fd80edf2","sha512":"185b37974a62a389473a30eb7b44e17a6ec223aa716e09fb8e13c9e23264715a5891ee3ba00323961a9679cf22d57544ccc4fc51ce2946eaff64273f5524c35c","ssdeep":"192:i4+2xE/xiHcUa0cLeCNuzHeI0kyTa7t9fFwKqvg:i4+2y4JcL/Se9kyu75h","tlshash":"f9d19fd472dba683f64ec6602dfb2015cd5210c06660a315a5e4f93b46a04f1c3fe7d5","first_seen":"2024-02-25T07:50:11Z","last_seen":"2026-09-22T10:05:18.593058Z","times_seen":7,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/Stroke-Gap-Icons-Webfont/style.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.232Z","timestamp":1790071462232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/Stroke-Gap-Icons-Webfont/style.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 115887\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:24:46 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115887,"size_decoded":116185,"mime_type":"text/css","magic":"ASCII text, with very long lines (60876), with CRLF line terminators","md5":"19bcb80e52563b3bcfa95757959d5b94","sha1":"a9e36d5891e538e9d8ebbb19a138845a82963756","sha256":"661ff73e414a7eee3b58034cff942da4bbe33b90852ff26b400662d39c48ae69","sha512":"cfd05d183e34821c3040cb94e43599dd66c87ffee5d3fefb0ba68b0b505e2b385c16628bd7c5713e214f13266e1d00077a49391150c159945f7bbc2625b64850","ssdeep":"3072:pMhJYlnGlWrkP9VLeRO8f67wwkJaB2iKScB2gOudyjrAAfAh2zF:p1l0WffwB2DSKOudwrArhoF","tlshash":"88b36bb6ce0edce71b41a8d412180ec1ce4c926bcf90a5b9f24e298e41fb7165f2d5d9","first_seen":"2023-04-19T07:59:52Z","last_seen":"2026-09-22T10:05:18.593897Z","times_seen":101,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":105,"send":0,"wait":214,"receive":208,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery/jquery-1.11.3.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.255Z","timestamp":1790071462255,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 95962\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:20:40 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95962,"size_decoded":96266,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038), with CRLF line terminators","md5":"13c0a5055cca7b2463b2f73701960b9e","sha1":"e6082a7b52db82604ac446d2e6a32cb5af263781","sha256":"20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104","sha512":"2fa08436b5f748776d265944595a59581c6b06eb6eb239626de3338e0819b45852ead29d4997dc1f86dfbfb1b5d39dbd4dc9e44e6e38ba9f6006628710546ef9","ssdeep":"1536:zP10iSi65U/dXXeyhzeBuG+HYE0WEeLzFoNqLTW8+S5VRZIVI6xSb8Ch2ZbQnRmL:q+41VqLTW8xRrqSb8dGH77da98HrC","tlshash":"c793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:07:14Z","last_seen":"2026-09-23T00:57:49.861208Z","times_seen":4141,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":541,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/slider/paginas-web-mediacix.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.284Z","timestamp":1790071462284,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/slider/paginas-web-mediacix.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1001997\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 04 May 2022 17:41:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1001997,"size_decoded":1002264,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x700, components 3","md5":"5fba35c2cd8e06c7eba5102ddec5cecc","sha1":"62ab414743cba03c5bb5bfb385d223824cc89c6a","sha256":"713a549e6ecf5f62c0c4ca65e68c46140247eb6e89c875edd5db34c65a757de4","sha512":"28425f7ea5d703c400bff26be70ad4b4a3d236b6a77d590e0f89caea14db3d58622ed2adebbc92e1cdaad2a1c51ae7332177e718a2886e00a17988ccfdd06287","ssdeep":"24576:i/hShmY+k1ck/CT3dhB9a+BGVhPZqwvlBv4:+hSVckE9aMehQwvs","tlshash":"6625226b456d1ddbcb6138da0768dbb68be3634aa0c135c9b70d0b855130fa6db3dca0","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.595611Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1822,"timings":{"blocked":1371,"dns":0,"connect":0,"send":0,"wait":111,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/importadora-valdiviezo.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.304Z","timestamp":1790071462304,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/importadora-valdiviezo.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17082\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 30 Jan 2025 23:24:51 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17082,"size_decoded":17347,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x200, components 3","md5":"1796b8c4bbc9581523299d4c73b88abc","sha1":"f4334cc2bfece5cf050836165b637b7003eb5656","sha256":"117815150cf55f8e5930ef957406970ab0afcc8312d074b1c1fc50d961a47340","sha512":"af39ca61124e087ea93f4fbe5bb29a5c8890f309e0337503218d4cddd3aeddb85d535a787b2f760e1ada4d03a7ff3426a753b3c93b56af4bf1dc5a737842e237","ssdeep":"384:W2MmcWfHvVGFb4LI8DRce1tTXcSdEZAFFakXkYNDkBbwxMn:W1m7HZLIYRce3JOZI7UYNQRwGn","tlshash":"2172d0d88650a711c7c528526fb650e93b46de0dfc904c18d4fe4e9ddc098fe39a8386","first_seen":"2025-02-12T06:25:21.657304Z","last_seen":"2026-09-22T10:05:18.596426Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2391,"timings":{"blocked":2282,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/android.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.325Z","timestamp":1790071462325,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/android.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2778\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:47:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2778,"size_decoded":3042,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"8feec2a204a49fe37cc72c860e12e8a3","sha1":"e9533b731d25486fbab58a676ba15449e8cdbd29","sha256":"c32ae2bcbedc88317f3f9630b2fbdf3c7cc9582ab7023a3ced7c9eca7cc35984","sha512":"b505f5cb06949e918c2ecc32d5c84fec4ce2b0b905663b330acb173479f99e1e4692119a5a0cc15268b670c51afe09a6ad8e72afe9daa40e4b6496d1a7122788","ssdeep":"","tlshash":"bc51d997bee47b92e548d93270f3044b99166542b4c6fcafb2f9802754a10b344494f6","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.597083Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1367,"timings":{"blocked":1264,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Alegreya:400,400italic,700,700italic,900,900italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.211Z","timestamp":1790071463211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Alegreya:400,400italic,700,700italic,900,900italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:04:23 GMT\r\ndate: Tue, 22 Sep 2026 10:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13653,"size_decoded":1522,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0c5f20273e60745685e30060b3ad7c70","sha1":"0971694cd82221108592e2b8ce0cd37784c26b91","sha256":"8d6ebbf7455afcb7b780f10f55ec32d9869b84d8e4ffa688b1d525b2ae22a0a3","sha512":"3e4bd0c8f54161464468e526a88b86a94d2419596edadfd849e6555340bd017320b35da2755e59e3d4af4b45b63bfdd2650735500431c69d58b38e972a3b13b9","ssdeep":"384:Rz9hz7z5zzMz6zCzUe9he7e5ezMe6eCeUY9hY7Y5YzMY6YCYdJ6kp1lbiDJ/tQ1w:RPP5aow7KKgfhJJMM2FD7d8kpzbiDltt","tlshash":"19529d9240169c847b632cc633df7c298d4f21dba486d4ba9bfd2c98bc95d32636079d","first_seen":"2026-07-05T02:06:49.91439Z","last_seen":"2026-09-22T10:05:18.597749Z","times_seen":10,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":114,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=PT+Serif:400,400italic,700,700italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.222Z","timestamp":1790071463222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=PT+Serif:400,400italic,700,700italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:04:23 GMT\r\ndate: Tue, 22 Sep 2026 10:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5518,"size_decoded":1310,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ed7d9676b9ddd7a745a28a91a52788f3","sha1":"ecbb0ecf515f96459bc4f72d54c2ced1787e04e6","sha256":"acca60af8c4624d4b79ec1e567cab32b930018c7e7e4cdeb06e877467b1ff68f","sha512":"b77135d03d3a89af38ca304b34dae74820b29b7833997dd0ab6a65d7ccc18a2755c60bea840d6675d5523fbc6b42b1435f1ad95e7bcb06fe144112f9baac3917","ssdeep":"96:ZYgLe9JYgLhCFZAYgLdJc+uyYgLJNCYgCUzJYgC/FZAYgCxJc+uyYgCzNCOLxJOb:+ke9OkhQkV0kbpUzOphpB0ptxM23OnjV","tlshash":"52b1f0a2042b9940ab472dc223df7d32de0e92053445a97a7bfe1cd4edb2d665370b4d","first_seen":"2025-09-06T09:12:49.503533Z","last_seen":"2026-09-22T12:42:23.147415Z","times_seen":1027,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":108,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/animate.min.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.243Z","timestamp":1790071462243,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/animate.min.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 52799\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:18:30 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52799,"size_decoded":53096,"mime_type":"text/css","magic":"ASCII text, with very long lines (52592), with CRLF line terminators","md5":"cdca0026964a0362ac2161d9d4ced6a1","sha1":"bd19b68cf95bb2af46b65a81184bc76ffbfc7185","sha256":"e91e33855a7203b1828fba1d326c1a629c375d49cdbf0a52aa050e5331fb3125","sha512":"523d822d25596a58eea608687f941b37d4e1688420b7c3585fa5db0d0e1bace980aa27f737cc5640fab6fb53f88779927aeb35b7d0dd0fa6036edffa2efc2c2a","ssdeep":"768:NkZcIOIVjl2eIWInPywe1aAvkqDX3oyq5BrieD0OTbsysV:NkZ8Pywe1aAvkqDX3oyq5BrieD0OTq","tlshash":"4f3305ae5891129950274f67c7cc5ea8872dc7a714621cde33826c4b8b47fde33da607","first_seen":"2023-04-19T07:59:52Z","last_seen":"2026-09-22T10:05:18.599135Z","times_seen":138,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":484,"dns":0,"connect":0,"send":0,"wait":106,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-appear/jquery.appear.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.259Z","timestamp":1790071462259,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/jquery-appear/jquery.appear.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1485\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:20:32 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1485,"size_decoded":1788,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1285), with CRLF line terminators","md5":"72e1d93fddec7a7150ae9de2b334a1cd","sha1":"ca7c8b5a809c99dc298174665a70d743c5f4e6ec","sha256":"4805abc0dad7a370f34e4d5ae2e6bd87fd8ff42f7929febc0477601eab834b26","sha512":"b141fe520b6e08d010e4c87414574feb951122c7e0a2df0f8f55fa5df77e4c19ecad1b3561ea1896f3133d36793896343b66179f378a7f35b40edd1bc76ef6ad","ssdeep":"","tlshash":"9b31d06a34cb3e5647f7702f7a1fb6466121953b15829082d9eadd3c3df6c417813e14","first_seen":"2023-03-07T12:21:08Z","last_seen":"2026-09-22T10:05:18.599797Z","times_seen":471,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":648,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.layeranimation.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.268Z","timestamp":1790071462268,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.layeranimation.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 29941\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:24:02 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29941,"size_decoded":30245,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (29697), with CRLF line terminators","md5":"ae8f93b3fe7396e0a59f64e15ed9bdcd","sha1":"af74fa75fce86945823efa0428a8cca4aa25110f","sha256":"d2373378d19cc2477eeeee4f88cc63ef3f982bd7d92f37d595287a1d6a4ffa3a","sha512":"a3860c04b7d58db04bd3be4d64be8d0663eb2532b1e79c5cd09615e2ec32000a96fcf30e2bc81f32188f4fb4d06edfa5850d9bf5617fcba2d4f483bdec66ec27","ssdeep":"384:6T4Eq0uEBZbl7PgFcp3VuwEDgJHctUFIEssE1SrZyTOKT7:6cA/lKcp3VEDg9IE9+7","tlshash":"8ad2b8c4bd0438e9b25fd192c06f55692360fd7d8602c4f1ba96a8b92b1cd4236e3f5e","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.600455Z","times_seen":398,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":858,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/capital-market-green.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.299Z","timestamp":1790071462299,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/capital-market-green.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 33049\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 17 May 2025 17:54:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33049,"size_decoded":33313,"mime_type":"image/png","magic":"PNG image data, 270 x 200, 8-bit/color RGB, non-interlaced","md5":"e30163c3fb5a469579fefa34ae79e74d","sha1":"60316d650a8248e6a679dbe7f1660bad8de103e9","sha256":"b568b030c231cffa9cee178343579f62eb13e24945015f7be8342f2f9297d18a","sha512":"f4072ea05e959d4a51ec9ea9da25310553f91e4e760961a9236e4b28dba7ae1e2a9d6055b475e884cefeb8d0dad3e47302fa36191c8ae4f0ab8a9cdf56ea44b5","ssdeep":"768:GUT5fE5qVUdYYyAtQdRpUtg/rfA+XBqhL:GC5f0qWdmdSUfA+M","tlshash":"b9e2e179ba3d6181a553de18ef00b5ea474d3a4742f02ae08c8992307de1ef878c1789","first_seen":"2025-08-26T07:51:13.47137Z","last_seen":"2026-09-22T10:05:18.601241Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2282,"timings":{"blocked":2173,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/score-laboratory.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.301Z","timestamp":1790071462301,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/score-laboratory.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12608\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 30 Jan 2025 23:24:44 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12608,"size_decoded":12873,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x200, components 3","md5":"a6731d715f8158b2a5b6056ae52ce12b","sha1":"1f64e61f0ded326a1ca7e2057ddb41d20b514b64","sha256":"8fd1bc368a6f1e432bac61e8882da332d901b4c148380b0e6694333ff95b2ffa","sha512":"2ee73feef1e66c7b44eac0530e6a40315d329ea64cb737f8b7f97df7e23b443cbe0c6ca8d253616939f76a9f812592ae5a12d379b58b1e2628233c4c23b8488c","ssdeep":"384:MEIm5tAh0BvazayFshs/+O6l6xk3uV0G4wfia4:MMXczshs/+Hz3uVRCa4","tlshash":"9c42bfa4fa805f43b4d0677c10f3205e354f8496943e6486d27e399a07e70e935e80f7","first_seen":"2025-02-12T06:25:21.653097Z","last_seen":"2026-09-22T10:05:18.601883Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2284,"timings":{"blocked":2175,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/javascript.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.315Z","timestamp":1790071462315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/javascript.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4079\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:20:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4079,"size_decoded":4343,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"95ea7f2912d81878da3018a677b1a7d9","sha1":"c99453a08f21207f6a8da7eaa5e863810e86d047","sha256":"0bdfe5a4e1934467d72f86de146492cb27b863d1da0c9f237950854614e4ff74","sha512":"992d0c56a2b8359100af66c373ed3956a62956f841ee596021c20560b4677878cd8f2a71caa1996d0ff0b0edf81d355b6e5c0fef644a83a7824c6a0cbc6ad61f","ssdeep":"","tlshash":"1b81490db641af86d48ceff424fba00a2249b85458938dea74fd9c6982816b1132f5f2","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.602528Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1844,"timings":{"blocked":1735,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/header-bg.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.627Z","timestamp":1790071463627,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/header-bg.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 1661\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Tue, 05 Oct 2021 19:55:18 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1661,"size_decoded":1924,"mime_type":"image/png","magic":"PNG image data, 1226 x 75, 8-bit/color RGBA, non-interlaced","md5":"e999e60c4cf0014ce7c65c0c1cefd0b0","sha1":"3769a50d5745011de77cab62520abcb7d662f87b","sha256":"05d4935ebf2d42f3b063c50cae133c743803d9ad89000546391ad8668377cb55","sha512":"994629736d3ff89915b0c4b8838e6469391e4e594114db5525db07a2e020e687e9ee0b532e6446ab45201fe78685a6f2e7eb314dad30cc11c1d9acfe966a7bdb","ssdeep":"","tlshash":"bc313e4dff44ec3ace18987114db242f1e0e4e2091d1a1b1bc9ad819ced15b927a67fb","first_seen":"2024-02-25T07:50:11Z","last_seen":"2026-09-22T10:05:18.603261Z","times_seen":7,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":192,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/fonts/revicons/revicons90c6.woff?5510888","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.825Z","timestamp":1790071463825,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/fonts/revicons/revicons90c6.woff?5510888 HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/plugins/revolution/css/settings.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: font/woff\r\nContent-Length: 7536\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:23:40 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7536,"size_decoded":7833,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-09-23T05:00:00.33717Z","times_seen":33055,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.696Z","timestamp":1790071463696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 65513\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":23852,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-23T05:54:41.557174Z","times_seen":193177,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":93,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/owl.carousel-2/assets/owl.theme.default.min.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.241Z","timestamp":1790071462241,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/owl.carousel-2/assets/owl.theme.default.min.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 1142\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:22:00 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1142,"size_decoded":1438,"mime_type":"text/css","magic":"ASCII text, with very long lines (1142), with no line terminators","md5":"6c0d1bc8737bd8fb4e293e9d7b42205e","sha1":"da7a59c23fda1cce4bd4c2277e9529a0dbc9b22d","sha256":"e6e40fa26713134203caed2e8d9362a8c75f5c337f02e25e00723a258eef66ea","sha512":"902beccbe1104d6e70fe22a823a2ee3c87da0ef5ed32fdab924218759afaba7e7e9c64e9dbcc38c6fcaf8dd530ade5286e047644579ea5de6d01865d49b38c45","ssdeep":"","tlshash":"7121b1d5b20d321d7023c68017c445cb5b5db5bb922916adf8cca520c75ee04293f7ee","first_seen":"2023-04-08T01:47:03Z","last_seen":"2026-09-23T01:27:31.764323Z","times_seen":1945,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":400,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/fg-dent-chiclayo.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.305Z","timestamp":1790071462305,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/fg-dent-chiclayo.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14712\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 30 Jan 2025 23:24:54 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14712,"size_decoded":14977,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x200, components 3","md5":"b0a60d30b5d0ed6343163b884b296c03","sha1":"e429634756e15201b8e1e10590f2e899a937d7f3","sha256":"fe77e8873d542313a9948b7e70e03f89a49a25b381c593e3664c136de0eadd4e","sha512":"c29eb09f91d5103cfe0cd9828dcf022e72699e9511dc68210b80c251cf2017294d5455ee9cc8596f67b0165937476dcb9c860a89029bbdf1feac3828f3b6c63c","ssdeep":"384:El5IMSi8yIrf5ij8AKF7PPlqRGlD201Yo3KmDrCz9Sx3:WIIYrMo17PPNDDnDrCgx3","tlshash":"c662b01bd5a13b37d060df7568fb7b0b9b95d011410ee30d6af9aca218c2279cc2d5da","first_seen":"2025-02-12T06:25:21.659976Z","last_seen":"2026-09-22T10:05:18.606185Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2394,"timings":{"blocked":2284,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/gmail.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.328Z","timestamp":1790071462328,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/gmail.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3291\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:53:44 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3291,"size_decoded":3555,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"55212d3c0fcc1dece4a5c467c2590bab","sha1":"31b70984f56f85b407f9ad5a051e6413e3f18508","sha256":"e1206453aebcc16b98fdbaeed33dcc27a96c31e889042682e6e6fc9829677575","sha512":"3da914940bf2c3c1b1ce7b82c5795956e50aad35203027b3378b6ec2d8d76d4a0baf84a29c406eac87bd7adc52d4a598e7fff96f104b7bb8e387584363bd60c2","ssdeep":"","tlshash":"94613c8efb646f01e1ddd9b0a9f25d232c3a24c164a150aea8fd8286d0a10fc14264ee","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.60686Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1379,"timings":{"blocked":1270,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.208Z","timestamp":1790071463208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:04:23 GMT\r\ndate: Tue, 22 Sep 2026 10:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64800,"size_decoded":3062,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2b0492055bb5b23c5ed11d557a9c290f","sha1":"26e59353da26632e9cdbddd804cb0f526f53fc00","sha256":"b56d6d4c80db94680717f75c471851d4ec67f81078099e54553046772b0f90a8","sha512":"d86e4e14d6f2cb643dbf842996ab4d78eee181f4fe7d3f0ef292798252541396c6806f76992a772a18258527a5c94e10eb7d802ec3bde489a72bcf50e5ee65c9","ssdeep":"768:yFdF9FAFNFgBFUKF7FnFwJpK5g9UEf7h4YXogEU9SWWjD8TgfUS9hMNtG9g5UoTV:wE9YIWHHIHTxj","tlshash":"83531da1041b5440ab834ce223ce7e35fe0f92547141d075ebfc9b6baedbda6526836c","first_seen":"2026-02-19T22:23:13.630851Z","last_seen":"2026-09-23T04:57:55.552413Z","times_seen":7565,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":42,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/footer-mediacix.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.633Z","timestamp":1790071463633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/footer-mediacix.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 31903\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 02:48:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31903,"size_decoded":32168,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1920x421, components 3","md5":"f29e1aba929a29fdaa07fdf88124244d","sha1":"0a861128dd6b562559a96eb0871249c51a1f95ec","sha256":"5b8e3492a365f949005a44f1e3da9458e0b9d1f22c87d7c65260b9e39849480d","sha512":"1a68a650db8a88d8f3cf395f22aaa6d6e56a7730f3a9dbf77b7a37fd7911899f5c243dc021f3f04050724a532142e2e47250dd63b196be56c1b32a29bb5519f7","ssdeep":"768:lmCmTqI7VyNSE1rgRvs/VS+idnbp76HIn:DIhyNSE1rgRE/Vad4HIn","tlshash":"c3e2bebe9bb93b33d06cd3f529b79a83bd1f42b1e2a098c6a559c16670987443d0f5c0","first_seen":"2024-02-25T07:50:11Z","last_seen":"2026-09-22T10:05:18.608285Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1150,"timings":{"blocked":1045,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/html.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.313Z","timestamp":1790071462313,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/html.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4118\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:20:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4118,"size_decoded":4382,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"3f07b84c804d07fb6f88b17f1b8fa100","sha1":"c774dfe5cb884eab8411f5e0362eb6fec99ab654","sha256":"126887cae1c09dff171a5857bbde290838de30e91cb32f4dea8f6db012db4b5a","sha512":"0dfc6ecd3d04b2168bb50901c36d44846d5388b9436ae88be87e8610de8a415f5aa5246847ed24a4e2ec2b98b6caa4f8fd348cec1f453b4f4c2091b7e20c8618","ssdeep":"96:G215si+w0JVQ8fVQQwhGrGyKUGrZCWMO/:D5sih0LQ8uh65KUGrZrN/","tlshash":"c0811cf9f5a5b341c191b07018ffe17faa1688421db4fa0a78fc9c9168552db80ad19d","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.608996Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1837,"timings":{"blocked":1727,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/safari.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.324Z","timestamp":1790071462324,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/safari.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4890\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:45:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4890,"size_decoded":5154,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"3a4f3ed78e62c1ad01dc761726cbb899","sha1":"acacb7e88da421d51d5eccf4cdccade2663942a7","sha256":"699d6a2a38f2b6c842c96d8d38308fb51b0f1b1036ebd184e3d17fb93768424a","sha512":"5b4c4002c4f383ff7320ee4eee351f580ba86826f1b5fbdd6756497f4e53ab984df94c5e7a9f134bac0357b36c2207a9a3445e428e6286fa4724b445f203b0ff","ssdeep":"96:G2wqWmWBQNO/Shewa7o3B3Jv/gxMlhstHJ4IVQlUDhb+J5FD7VPGO:pRO6wezwahQ8W+VlGO","tlshash":"5aa14a488b04cfa224dddb76d0f32603a723c0062846a2a468fbd6965cf357ce5a35f6","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.610042Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1367,"timings":{"blocked":1264,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-countTo/jquery.countTo.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.260Z","timestamp":1790071462260,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/jquery-countTo/jquery.countTo.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3891\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:20:40 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3891,"size_decoded":4194,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"850f48ccd49f23ba43b2d0d557fd9895","sha1":"28a477867fa519fdc4546c25c5b7a23f096156b5","sha256":"0a4823631ea7d539ef8d8ecb2e9e8171d5d055ab69c42ab6cf27d612c914cdf3","sha512":"2c6a3982f3b5e40a872b3fb918169b9797adbbb1fddd728dd676adff13c54df5f6758f30b27077224b1cfb9e540b38acff7a6bb733f1fd09a1c2b1603e43be4d","ssdeep":"","tlshash":"ed813749b75e2211a97b22e99f5b114cf778933b1443024879ad93c04f72839e6dafbc","first_seen":"2023-03-07T12:57:13Z","last_seen":"2026-09-22T10:05:18.610791Z","times_seen":526,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":649,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/jquery.themepunch.revolution.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.265Z","timestamp":1790071462265,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 47204\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:23:50 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47204,"size_decoded":47508,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033), with CRLF line terminators","md5":"fd029b99cca4738916afc2d4c8626281","sha1":"461ddb43330f331d5e10b9a59e7dc0875775ea91","sha256":"1d638248f0b343ca46bba0aadd5dae169bbae6ba52e2054ff24d2404d7146d3b","sha512":"99a17ad159a406c45c1648d04c515ad9d36497397ce02d3fe30edf8da5432766518d6d41aa04c0b5dca6f5561cbf5301b73de49a06cb4e5885bce3493a39fca3","ssdeep":"768:0s8axPmdvO+/Poyp+KqbwgdJncRwrbnwRiSGm9Qd5OzvHkPKBXx8:0s8a9mdvr/wyp+NbwgdJncUbnjSfQbYQ","tlshash":"6d2309647a1074b259bb23a6855e8106b2b27c3dc607c450e6ff54789bbdd8d232afcc","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.611474Z","times_seen":511,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":752,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/clientes/ecoperbras.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.310Z","timestamp":1790071462310,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/clientes/ecoperbras.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 8554\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 14 Nov 2018 20:15:24 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8554,"size_decoded":8817,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"4e1bea2e48745162f6c3858b438562db","sha1":"03b7f387104b9c8f4963f89236bf24f7a268a454","sha256":"0f0374c694643dbca5e7579c2f0f4daa5f0473e127d3f2d2517554f5bd6efebf","sha512":"280e155fc17bbd6d6dc259edb6c5671a4800eaef11226fd410f79decd0f5b3d6bb103857974dd594e2db722df8de6c95ef88b8cc56c604d6553af57e360f8fc9","ssdeep":"96:T2xJhN0vYlYIU6sfJUiwF6alXVoUcqPOUne0I2ZbGVA7Y1C+JnRZCvX8e8mM6fnF:g0YlTU6piwnAqlZbeAUC4SvvfF","tlshash":"3e02afceab747e62299ed76cd596e8338c8f0044aa54c65735dec8008cb5cf423d6753","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.612064Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2131,"timings":{"blocked":2028,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/w3c.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.316Z","timestamp":1790071462316,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/w3c.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4263\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:21:38 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4263,"size_decoded":4527,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"c5c8591257440a4ec68ca5f7f251db02","sha1":"a3965bb3a863b231d8bc2e3a82509ce97ee1aaca","sha256":"c4e231413c25c6e8ce66b49b2992e578048d3da2ab87c98d424f48ac685cf26f","sha512":"af6a3fe7257238b917273a334be3594a72f92f8ea564d951725e3547d2108355985d58d0f441bd95811d5832ebbd9ca43abd7a342b6149b4e9fdf2c7a84f96ec","ssdeep":"48:litNn2VRa7J3RZPe2HTairlebR9INUuUWtKDAMQb9j9fZYQi0v8YNfDwZPWuwJni:G2DaLZPeqeiRS8olIxCa8oseb9qBOJgX","tlshash":"4b915c3278f09712da6442a63dfa012b4b27d0f1d2308a4b58fbc45395650fa830e5f9","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.612624Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1913,"timings":{"blocked":1810,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/postgresql.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.320Z","timestamp":1790071462320,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/postgresql.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4359\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:36:04 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4359,"size_decoded":4623,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"93338548525c57dbdcade25215076f49","sha1":"e0e5b40df63e775e65fcf979a6e64c22c59ee55b","sha256":"9a803455f3fc32eadc96829f6539f9a12d4f36ef8092015ef96ac6119a363025","sha512":"55c867b926fa71225d2e503336cf0593edcb5c7930bb536f82c3c63a13f888f18d3fe33739f3807a93065d1998727cef72f21cbaa90d3de0e0133cdf2b7e70bc","ssdeep":"96:G2gpLU2w06Evjou2AFPY8OWFvSomdrMPlyV8Pqxpwyjn:wI+zvjoVlqhSo4rMPlvqxCyjn","tlshash":"6e912908ab947742cec189a068be15bb1f2bc680a870c8596ffc9531c95e5719d0b2cb","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.613179Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1271,"timings":{"blocked":1159,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/webmail.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.322Z","timestamp":1790071462322,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/webmail.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3892\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:52:26 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3892,"size_decoded":4156,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"1a8bbe89d13f61edf9c5c5f4b338eac8","sha1":"3b12586e8578c8f26f2b3975b494581f606f7943","sha256":"bdc3407ac64a30419aa3a81c44e0673f07d8d472bac644be6193242900a1e2be","sha512":"9b1cf684dfb7d40e377fe5cc3fb0a5f7cc1f69fff1919a0cca79f7d283685b835a2b7c345d0ea6637dd94fd527b5b420e7d9873deaa58fcb3b84ef293e84f2a1","ssdeep":"","tlshash":"ae81e61d6610afd0d2ce97a938f7410b7a53c0b55482b88816f76923a8371fe5a1b1da","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.613736Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":1159,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.695Z","timestamp":1790071463695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 65523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-23T05:52:23.17553Z","times_seen":345061,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":4,"connect":36,"send":0,"wait":26,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/favicon.ico","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:25.000Z","timestamp":1790071465000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:25 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 13581\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 17 Nov 2018 02:18:16 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13581,"size_decoded":13882,"mime_type":"image/x-icon","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"26475e96700ccb6a8aaaaec00079d408","sha1":"c8a29162f8aec2cd7d9a16dcb2e25c1da60dbd77","sha256":"488a4d6e7f311f69dae21d4f0e113933d52bc3b378aa45e1f58e4e2d304563a3","sha512":"2c0ec10c17854bdf0a163f737206b88af2fd2310e5d532de16dcfcc80fbe2ee69b3ecc559d649e1296dbd47bc908a98f98dfe4745a8d80ba64b3cf3d82ae707b","ssdeep":"384:qhKX5mCvwr+MWSUAAxPWimFzAsbhteAFRzBs:qahfSU8As1dk","tlshash":"8f52bfebdb85d4a382cd1ccab721103056b7217bceade854237e471f1d0ea06a1d365a","first_seen":"2024-02-25T07:50:11Z","last_seen":"2026-09-22T10:05:18.614345Z","times_seen":7,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/odec-jaen.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.303Z","timestamp":1790071462303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/odec-jaen.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18417\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 30 Jan 2025 23:24:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18417,"size_decoded":18682,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x200, components 3","md5":"85187051f518732f4c9d2c0b2149bd9f","sha1":"88340aa0006b51142a315e3de2519ad1644473b2","sha256":"32ef7830b5cdf2a7a11c8bb5824253caf02f4b33abbbeaea7b70303b921cd313","sha512":"2e51ff80d2513b786655941bf483b7acdf871be53f0886cdfd9858f9465852729725f1486be918b614182bfe38f74b812603a2ffdd2e6bb73a048c95596a3738","ssdeep":"384:4sZQKQVtR/qQpivRPuzGETwg1FuCt3YV1IkpMa1:h4fRpENRi19YV1/J","tlshash":"c182d0bc654367f6d0d080a44971f60b81462c0f81cabda658ba753fca3e06f6508aed","first_seen":"2025-02-12T06:25:21.656262Z","last_seen":"2026-09-22T10:05:18.614957Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2343,"timings":{"blocked":2239,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/mysql.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.319Z","timestamp":1790071462319,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/mysql.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3787\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:34:02 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3787,"size_decoded":4051,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"84799a80b5a4bd339a025993d67a2ba7","sha1":"5c25e65a361644f938a59fcc9f6c4a85fdff97e3","sha256":"33f724a1d32064c2e6b9c4a0ca85f5bbe8266fd3a84c71807f8e44dfe8dab1e3","sha512":"2bd267e79af650c961ed0ae255b66528588ac33a756c021c1292a917c27e0615a1864ebe46f3ff26187822f053cdc079d8a8fd810cf1bba434ff3155b679cd7f","ssdeep":"","tlshash":"a6712a14d500bf81f28c4b5138f6670ba51bc5639183d9bf61fed44225f70bc11579b9","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.615547Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1271,"timings":{"blocked":1159,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/whatsapp.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.333Z","timestamp":1790071462333,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/whatsapp.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 77514\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 16 Jul 2022 19:27:38 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77514,"size_decoded":77778,"mime_type":"image/png","magic":"PNG image data, 515 x 525, 8-bit/color RGBA, non-interlaced","md5":"37844944cf2b131798f1164dead16302","sha1":"555add7b2801301a5d779b897366b3f1cdb8fce0","sha256":"1794d65d4733e8d9c4b851fef3670e5d9bd2eed707cd1f335920a88e9e654152","sha512":"fa208a22756ef277cee707ebabedb68f8964360cf5b9cbf7e8a08da54e57b7949ad423e9df8b06ab8d1a3c1efe5e30db6b057a4d4723b36ba5bee4ff6cc3a186","ssdeep":"1536:HmTfnn2es8BGlJzcIZI2ReJbeO0c4IXzbPjWPRseXPCYdatup7SsMWbOOXlz:Afn2es8BGs+zLzcPzbPjWPTXP10QJSYx","tlshash":"11730253517fbcac9117caa70391ceb70d72104a67f320a037a7606f1de65adee82936","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.61611Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1820,"timings":{"blocked":1711,"dns":0,"connect":0,"send":0,"wait":106,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T10:04:21.455Z","timestamp":1790071461455,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 48011\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 22 Nov 2025 02:02:32 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Typed.js","description":"Typed.js is a library that types. It is designed to create typewriter-style animations with ease.","website":"https://mattboldt.com/demos/typed-js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery UI:1.11.4","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":48011,"size_decoded":48309,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (647), with CRLF line terminators","md5":"9018c9195128c47647bad18828becb67","sha1":"22d274e410ea8b238e2c04a3862eead5f26475e9","sha256":"d31fa365e8343d4080dd5a271e6bf44a2ac3d1285cf08b83c4581eb3e762aef4","sha512":"5f473323b0d26db50548b4170cba3cc8f3c1388233ea3b8d338e6f77ccb1bda4adee2975849cca888e74774d3ed5b7c78807c46bde96003b4be253a98767361b","ssdeep":"384:4FL9fhGC8cDYREfNnom1hfS2ty91IItm7ISevOqfqfqOPqLn5qL3qLekqLdqLGq7:abMf3udJb5z4rr4Cjf1sSqOpUi","tlshash":"8223ed2576cc563b012342cb81357796b2afce71da239456f2fd63b727c6e48e80b126","first_seen":"2025-08-26T07:51:13.438454Z","last_seen":"2026-09-22T10:05:18.616708Z","times_seen":4,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":29,"connect":110,"send":0,"wait":219,"receive":109,"ssl":217},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/jquery-ui-1.11.4/jquery-ui.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.239Z","timestamp":1790071462239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/jquery-ui-1.11.4/jquery-ui.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 36573\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:21:32 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36573,"size_decoded":36870,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363), with CRLF line terminators","md5":"6d29c4ebba8ad27ed0bbe87feb822478","sha1":"eba86b37bd698b335d3e4fef06134dd6be2f20f9","sha256":"49e60506cdb5267e48f74635cdbfb0cf4493d4a7fadc9d8395974a91f4d94747","sha512":"c2c601db89fab7d2a0cf8a7b2df794fb4f4f3f56ed3769e4cf44c5322ed33c622414594baccb7becc0b1773ea341da347451797d404814f1b366bc6e02185f55","ssdeep":"768:6Utw1EEBv79V9PBS2WAVPQ0l5UsFdH4fGEY/fbi:3SBfbi","tlshash":"78f20fb09b43300d7b17d360f2b26bf3da2e1392ee57d96f609a215993d54a1807f6b0","first_seen":"2023-10-18T19:09:36Z","last_seen":"2026-09-22T10:05:18.617208Z","times_seen":24,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":283,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.carousel.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.267Z","timestamp":1790071462267,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.carousel.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 7364\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:24:04 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7364,"size_decoded":7667,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (7127), with CRLF line terminators","md5":"7799c076398bbc16d26a067bf6692e54","sha1":"2c1c698dce1034c62c44c49ea914f7e370385323","sha256":"2f6728e4e86d7e94258096758a335bfc31e1c5f18de79ddc511709a5b17fda2b","sha512":"f2c86b5bebef499c2dc7767f812d3ab502a801a45447892e6190f37e86dda180db53fe28e5dbec84ccf3e93a5d357f3ed81fc7915fdf8ac8431a225a500bb0f4","ssdeep":"192:dTLfrr4FAkzMIrmQgedMzVIBD+L8EvCtRgiezLJZXTmnY:dfrrqzBrmQgedMzVIBDM8VCZjAY","tlshash":"78e1844420053daf46e2f38a959680f993fc190d471bd8647afb7079089c9ad067feee","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-09-22T10:05:18.617771Z","times_seen":792,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":793,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/servicios-web.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.631Z","timestamp":1790071463631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/servicios-web.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 427052\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 01:26:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":427052,"size_decoded":427318,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3","md5":"02492ca5fd79e8c540de004c7e95274e","sha1":"b54ff2a429604b449b51d66ef6005d18cd8a48de","sha256":"e3d38d33c5488c2148af0cbb52a850eae57a90aa3e28d1aa84f45d05802de9ec","sha512":"960d5d8e28d3b5e34137740c01cb5d1b9f9c08da48c022b4941c375421602f9ef755596bba301f3a8723a6ab6db0b72c6762da954a905879dbe2ea65c8135777","ssdeep":"12288:gnZug70eo1coKI2l8X3/mK0UDn9FxB8rK6:gcgNouod3OK0ULxel","tlshash":"bf942390391ded3b8555c8a098fa88532e66cd7870d2d1937db65a83fcb63f076b460c","first_seen":"2024-02-25T07:50:11Z","last_seen":"2026-09-22T10:05:18.618367Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1249,"timings":{"blocked":1038,"dns":0,"connect":0,"send":0,"wait":104,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.701Z","timestamp":1790071463701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 65523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-23T05:52:23.17553Z","times_seen":345061,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":56,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.704Z","timestamp":1790071463704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 65518\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-23T05:47:24.711531Z","times_seen":304833,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":26,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/alegreya/v41/4UaHrEBBsBhlBjvfkSLk96rp5w.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.713Z","timestamp":1790071463713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/alegreya/v41/4UaHrEBBsBhlBjvfkSLk96rp5w.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44456\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:11:07 GMT\r\nexpires: Tue, 21 Sep 2027 16:11:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 30 Jun 2026 16:48:20 GMT\r\ncontent-type: font/woff2\r\nage: 64396\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44456,"size_decoded":45268,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44456, version 1.0","md5":"ad79ee28205c58d4677ccea438810ff3","sha1":"a7ea197994df301ba41f1cbec242a4e45ad01b51","sha256":"1846c307495f922d3fc00ce3c32aaaba8eefc7c348425a8244a7ffc63ddc0993","sha512":"c0975ac844e816c1b91d5621ead1aee0bea0c2dec47e1362fcc9ba6d5a87f0b7a9e70fde9f0588f80ce48a36d50052de919ebddd9da7081ad3a7dff956a46427","ssdeep":"768:D7mUF0684UqhIngsKt2LFChXKPXwAwvan3pKChGp+nbufPVd4O073:uq0fgZELFChEXwAwinhEEn0dda73","tlshash":"941302143de73990d244b676f2ee486d8193bcd2bca511dba2b87c3b76256bb406d310","first_seen":"2026-07-03T19:39:10.105816Z","last_seen":"2026-09-22T10:05:18.619506Z","times_seen":56,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":92,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.migration.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.269Z","timestamp":1790071462269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.migration.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 6080\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:24:02 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6080,"size_decoded":6383,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5662), with CRLF line terminators","md5":"d01dd682b2b1c47e8975c74d5bdd768b","sha1":"8065111689f207d2b4b838a49525080cdf1fc5c1","sha256":"4f811fc19c67d51cc0c0fa6db44f0185d7e646210f18e1586356ceb53fcdcb11","sha512":"dcd1fa06e6aaa65cf4c694b17d92a3424dd3c8fb19fae7a0fc64291d2fb3dd95e91fe40a4a648ddc5e8d30e42a0e44f04e06d720485f71c2ef6701b39d731ef2","ssdeep":"96:FwvQcUKcq8/Ho+iPwSKO0728jiNNnDnJh0sw9qKjH+K8tOfwi8f:uvJUKFmo+iY772jphWr6jO4","tlshash":"12c13344a0a83c0695b352c392ce19e0df55f21e3946a4e5635ebe1d432c88276e7fdd","first_seen":"2023-03-07T12:08:45Z","last_seen":"2026-09-22T10:05:18.620058Z","times_seen":505,"resource_available":true,"data":null}},"time_used":963,"timings":{"blocked":858,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/hosting-alojamiento-web.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.291Z","timestamp":1790071462291,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/hosting-alojamiento-web.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 24335\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 21:12:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24335,"size_decoded":24600,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 370x208, components 3","md5":"c3033aaf10e18e227ac379695593d5a0","sha1":"796505cb5bc29dd879a88db817033b260bd0003e","sha256":"7067c201c5ff906f16bf1a75f43ce498f206cf0ed6d9102ce018fbf0a660d283","sha512":"30767fcc2891b3226d1ac438c1bedb23b17dcda20add938cc8ac15676553dcfc56a68fa1d836761156579ffbadbc59c270ce2aa402bcb30d3769b0d4eca4c84c","ssdeep":"384:gPi1kaSo3j9fNpzO99neKlyGU9FX94YrWyqRPG7xzuZ75zK9ipOIyrz3CT8/XUqy:+iqZoz9jkflyGU3W7R95GUMFiw/Xly","tlshash":"7db2f19c80b1c629e544e1eff4b1dcf4a0930c168dd7ce459cf5872e10bb39e9aa5a61","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.621071Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2030,"timings":{"blocked":1927,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/adobe.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.327Z","timestamp":1790071462327,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/adobe.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3931\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:50:24 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3931,"size_decoded":4195,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"f487923cfd28be7fbde6739cab24071f","sha1":"ea800e139c28b243541bfec1b8493f3d055303ab","sha256":"b959fb8e3223383ec054cdb4f39e543d6f7eb2986a3c07f8b0b9c946209cd7dd","sha512":"4c2d22da30c580d6112da6d3ef9bb8aeee8dcd2161ae9bf1ddd68325aa843251a8af4e2aa3fcda24fc329d56c5ca0c726f19b9ce6c6293a4fceb12448cf31199","ssdeep":"","tlshash":"38813b1cb2857713c4489a3974f7907edaa634f94801c6bcb4ff9901d6451bf419b847","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.621969Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1379,"timings":{"blocked":1270,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:400,100,200,300,500,600,800,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.207Z","timestamp":1790071463207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Raleway:400,100,200,300,500,600,800,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:04:23 GMT\r\ndate: Tue, 22 Sep 2026 10:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15543,"size_decoded":1426,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2905423c3cd0885ac7eeb04efd3d3ee5","sha1":"1465a8784c4926f225f94f3553869c385bcf4749","sha256":"d0624c65d0219a7b2e675dc9e37cb4b5a2ef334f12c5473c3049ca81e2328166","sha512":"6ad518306f9e9da574dfb062da6da32cb165ddc08dfbad34a8710a36e9af765b8c98007fa71fa9323310172d2b88302bb7f8b1e2fbb3a7554f9dd5a6c2c3f6e3","ssdeep":"384:tOdvqzn/b+NMzwNYr2tWXCRg3ExsPKBaF:t2yr/F","tlshash":"09629da10917d400eb476dd663ce3e36ee8e62043047953a9bfd58bcbca6d3613a470d","first_seen":"2025-09-10T17:52:36.088693Z","last_seen":"2026-09-23T05:52:27.506998Z","times_seen":4102,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":114,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.698Z","timestamp":1790071463698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 65518\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-23T05:47:24.711531Z","times_seen":304833,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":39,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/typed.js-master/dist/typed.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.275Z","timestamp":1790071462275,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/typed.js-master/dist/typed.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3851\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:27:42 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":4154,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3851), with no line terminators","md5":"fcfb037f7ff5e3e606e2e619f8067d75","sha1":"ffbc891d4f5edb70e6b4660956ab1f7ed5d8d6f3","sha256":"3bd211e3a9813c20ad216217fadcec95771b0d29c37ecdded1ceb4d547af9e9d","sha512":"c760556a21810e76317e62e15b15e8e3663f05a7313f34b2daf2462f6f9c28fb8208624977c8074dfc691707a8f72242a8f04e4fd2e7d1d21f780100d5eb4100","ssdeep":"","tlshash":"ed81640af183eb6559c251f004e70d0f5033ea382959d0fc75f5eaf299e8a49747ab78","first_seen":"2023-03-09T21:55:07Z","last_seen":"2026-09-22T10:05:18.623327Z","times_seen":119,"resource_available":true,"data":null}},"time_used":1129,"timings":{"blocked":1019,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/webs/mastermatch.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.297Z","timestamp":1790071462297,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/webs/mastermatch.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 47020\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Sat, 17 May 2025 17:54:14 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47020,"size_decoded":47284,"mime_type":"image/png","magic":"PNG image data, 270 x 200, 8-bit/color RGB, non-interlaced","md5":"4282dbd7c68cb12e6adff6e2ed5bb55b","sha1":"56a7d422a4a16ebfa2ae0ed514acd662210b720b","sha256":"d3dad62bfae8840c0289684e56eb44615d6c4538d5790714c11e08f2517d70e1","sha512":"7eccbc30619f33239362f86c3f50cba358b3104187dca3f9f56d4f3069e2463d6479c42adf32399bae91753f01b66e671ef820e11856d1d64ad8457e8575092a","ssdeep":"768:7QCpgT8A/2e3rrzWPibnwOUku47I1BXRbb2mRM0yxq2yU5clbI3C+c:7QCyFz7nWPSnskPoCPxq/UCls3C+c","tlshash":"d323025c870941d0a591af2fa5cf54f8f9666ec70e176d7329283daa0a3e81e09280e2","first_seen":"2025-08-26T07:51:13.410552Z","last_seen":"2026-09-22T10:05:18.623957Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2239,"timings":{"blocked":2133,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/hosting-web.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.308Z","timestamp":1790071462308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/hosting-web.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12084\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 04:10:14 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12084,"size_decoded":12349,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 200x166, components 3","md5":"835210ac4da22f609ba3a78c73692a4a","sha1":"6395b83b14cee0e3407019f5940c52caa845eb51","sha256":"82ace90c098b2b426792f8984bcdecdd0093a64514e6753ca520c26e0c9e8f98","sha512":"9fbeb06490a9c0568c7a2c48498298fb15dea97f5e2b35d7a97d505325c81bc206d82bc93d940b8eece382b54b8578012e1e211611911db9f8c6d94919524189","ssdeep":"192:ZV2f+qdjdaGT0neBhqQBpbhzVmD5Rtl5v/vSXJQiu4ujtOaRYongC:/2f+odaGT0eBkCZ9ITtl5vCXNujtOboV","tlshash":"ac42bf03f6152b4ac935d83930f7a1678408e9477207fe99f8f4403a5693dbbb21a199","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.624563Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1728,"timings":{"blocked":1619,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/assets/loader.gif","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.835Z","timestamp":1790071463835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/assets/loader.gif HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/plugins/revolution/css/settings.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2545\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:22:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2545,"size_decoded":2808,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 24","md5":"4b3afb84b2b71ef56df09997a350bd04","sha1":"accdac8a7abeab0e21c49539aad0a973addb28ef","sha256":"9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645","sha512":"d65078b5d13873adb363472b5c358f6b42c128b530f8feba9776f8e4906cc97f20ee7bf1e823336cda8049147a9c7fa5e4016f07f96ec154f3774fbde1a564b6","ssdeep":"","tlshash":"de51e743e6a9fbe3cd7c013aee3c02c9764543e8ca2c6f38952bb5672509329a056a41","first_seen":"2023-04-05T06:54:01Z","last_seen":"2026-09-23T05:00:00.332651Z","times_seen":25427,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logo_mediacix.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.283Z","timestamp":1790071462283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logo_mediacix.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 21918\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 14 Nov 2018 03:26:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21918,"size_decoded":22182,"mime_type":"image/png","magic":"PNG image data, 314 x 70, 8-bit/color RGBA, non-interlaced","md5":"7cc63dc491cbbae1e48f85691008b32e","sha1":"e7ccd3b2f53837ec48c2a778027252a55da59002","sha256":"2d135852545b3b806be93ac51eeb55744c8c75310da0ef1fa4667f6b8d00b1b4","sha512":"059b537ebdc1024462dd8aed121367cff289ff41a5f946005ac575d0e170dd8006b7e78ec99466df91f0021a38a4f4906c4a72c9e18860c16ed2d70714213906","ssdeep":"384:EslckZYTvd8Rq49JYhpT9Nbm3RlKc9hdK2+Vc4xhvQ+2kH/:EslLYTvlhZ9N6hlf97Kpc4xZJx/","tlshash":"faa2d09651d0cd1ba904bce726ac8f4f45612813c0d4ffe519a69827c7b78dcb48f398","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.625748Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1485,"timings":{"blocked":1371,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/registro-de-dominios.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.290Z","timestamp":1790071462290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/registro-de-dominios.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19023\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 21:09:54 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19023,"size_decoded":19288,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 370x208, components 3","md5":"bdfc88d5ebdb37c9576240b413e7c958","sha1":"141d84fc0738287ecb5c62f37f24081613b06bf5","sha256":"c3a91fd154d371507ab2836e6e6aedb6489a115b0397b924a95bd89efa8e3d1e","sha512":"29cee8d44fdfd734071102b6f6d419800c0c98253b85f63d64f192171e4c1fa117c75daa1a1b232ff03a271a45cdb01de4287180be7128d41455a07c890083c7","ssdeep":"384:qOECfCVYTNA2RSGR1ujHQR1xMJTtcZRH2MhpQzExQOtbhi4eHLLEX:ZECfRBEdJTtQJZM0RZ2K","tlshash":"0982cf41e8358b8b5af945b36ef02aedd25a04f2ddd0854724f8d0d7e88a5f94e018cc","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.626325Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2030,"timings":{"blocked":1926,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans+Condensed:300,300italic,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.225Z","timestamp":1790071463225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Open+Sans+Condensed:300,300italic,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:04:23 GMT\r\ndate: Tue, 22 Sep 2026 10:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7625,"size_decoded":1453,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8d55c75070a0b314d8a8b14a357a1b25","sha1":"ba9dc191ce3f9d01ab2e35166789456979c103be","sha256":"4adc1d2bd80d0e1660e52c443482e793c3df2f80abe33baec293ae0f630b92fb","sha512":"9703522fb1c13f6fb3884ecfb15941bdcf2da655871781251997ac6e6e0c8a96f93bc90f4095cb4653064a8cadf4563683a590439bdd8cbec36c05b85258044a","ssdeep":"192:DlXzlsl3ly3kl4ljRlyCe+z7s3zMzMY2qW/fo33knot:DRzipWkS/1U58h","tlshash":"eaf1bd95093fa410aa877cc26bcf3c318d4f24517089c6b65ff94c88ed65e2b63a974e","first_seen":"2025-09-09T09:16:55.293446Z","last_seen":"2026-09-23T01:55:28.014019Z","times_seen":1084,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/bootstrap/css/bootstrap.min.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.226Z","timestamp":1790071462226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 121272\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Tue, 05 Oct 2021 19:35:00 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121272,"size_decoded":121570,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"e15c8b0cc70bf0519e4e7834ff599b75","sha1":"9cd3eb870f9ecff034b19a49f67c8f0d6376b269","sha256":"2bb97eebc710d3b84773485bff1fc190bdd21c0b2da4c25f2580fbb583090cba","sha512":"88e7cf730bb12d7832bb7851d46a377c893756bf53384a5c6d89d6f0692ce81aa4407ca2547e6427395c29b2a3d265bb8eaee8e4a3fcea5a2cbb81396f5bde86","ssdeep":"768:RykGxw/g4/QWlJxtQ8IuiHlqfmaI4X8BHGuFKbv2ctF2B2FVBP7ecQVvH1Fx:aw/L1BIuiHlqfms8JEbYsPbU","tlshash":"f0c3d7a0f21031ea7333c55a75d0ed872219a153e6664eb7f22f25d84f886cb1673f1a","first_seen":"2024-02-25T07:50:09Z","last_seen":"2026-09-22T10:05:18.627712Z","times_seen":7,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/bootstrap/js/bootstrap.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.255Z","timestamp":1790071462255,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 36874\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:28:16 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36874,"size_decoded":37178,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003), with CRLF line terminators","md5":"fb0e635db142b1b9fce20fe2370ec6cc","sha1":"c5c481ca5a263031d938f6c12abd2fe5fb4b6a83","sha256":"5a4a5359110a773bd154da94c48ffd6a6233a29dfd5a9314555f5ae6c3e47459","sha512":"ddcff973930485feaef0476731caf0d210e4e9be47c6271fe5a9175a885f27509558b1ef1be42e791e0398d7d109bad33c3a912b11653c3290825bc0c7871411","ssdeep":"768:9UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXfl/8Gf3ZTbQ:m/76whqKGvl33ZXQ","tlshash":"9af29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","first_seen":"2023-03-07T01:15:27Z","last_seen":"2026-09-23T01:20:03.790722Z","times_seen":2312,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":572,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.parallax.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.271Z","timestamp":1790071462271,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.parallax.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 8042\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:23:58 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8042,"size_decoded":8345,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7803), with CRLF line terminators","md5":"dd0a21758d2ba7a10b37997d2b39f7b8","sha1":"d28441f9e2225a492f1f1f7924223b1204e0aa97","sha256":"65aa02cae25114e3ee163d509586827435930dba0eabca2dd059c3961a28d189","sha512":"ed26b067a5d3d698dd5d914bbae63a87c6a2fccb4eee0a6d5f24eae5c227b2d4074d5d0a75c8d959c1a1237386605ac4c024d9910c4ed8afab27dc04bf6b0653","ssdeep":"192:h+v9H9q1+1t1XYO1B7Rp6yZUsBpdyZU8f1DG7mpBuy:T1+1t1XYmBVpJxBpY7fgCpBr","tlshash":"e7f1c8625a142cb614b333bdf6ac0bd671318471950e8542b4fa38b92b6ce99077efdc","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.629252Z","times_seen":334,"resource_available":true,"data":null}},"time_used":1024,"timings":{"blocked":908,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/css.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.314Z","timestamp":1790071462314,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/css.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4136\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:19:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4136,"size_decoded":4400,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"35e3b0348f0d5d6d25a646112b5f9085","sha1":"c86623ee3beb235f47af1e75ae685cfa3c232ff1","sha256":"44db89258530a6c7fb9ea8b6e6238d3811754f202406c58daf113a38714d5c8c","sha512":"4c1d90324a31b4ae18e37157de312d7dfd05f587b56ea501b6180118486380c7699fa2988357786f4d50ad8b52f2cab56a1e19629952cd3d7b7e9051f9312f1a","ssdeep":"96:G2UJiju4cj3JY2muRHhitRf5CgKJ0Up76ryae:ZjuFdYTWB8zCPLp76rS","tlshash":"a2815b0aba44ff1ee271ea7820f1d22b7c9d05a318f0c85615f694038fa612728399de","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.629978Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1837,"timings":{"blocked":1728,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/font-awesome/css/font-awesome.min.css","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.228Z","timestamp":1790071462228,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 27508\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Tue, 05 Oct 2021 20:01:02 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27508,"size_decoded":27805,"mime_type":"text/css","magic":"ASCII text, with very long lines (27341), with CRLF line terminators","md5":"a1f002156559345db9c6e91c702f39f0","sha1":"8ed99c2d177f22fae6507cff448328cfede63978","sha256":"b662fd01a5d7adac6db379b26005a689eff9c01d33746b1daca0349c4c383843","sha512":"afb4bbdfc48850945d53e97d52c091d400a2955693975b2fe0f4c07eaf741024338e43fe2a08abd184dd2144e346b235b9579a45d7a71821a300e9a99d8d5841","ssdeep":"384:Si5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8L:Blr+Klk3YlKfwYUf8l8yQ/2","tlshash":"27c230f8e54c01d66731c48bff81b36862b6f73dd5814da9f01f690c29d22a522c5bba","first_seen":"2024-02-25T07:50:09Z","last_seen":"2026-09-22T10:05:18.630739Z","times_seen":7,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":110,"send":0,"wait":225,"receive":1,"ssl":117},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/plugins/revolution/js/extensions/revolution.extension.slideanims.min.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.272Z","timestamp":1790071462272,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /plugins/revolution/js/extensions/revolution.extension.slideanims.min.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 28128\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:23:58 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28128,"size_decoded":28432,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (27876), with CRLF line terminators","md5":"f5e89ee0d380ff74e5747cbf0faf4fd4","sha1":"ab887cc33fc979a8a73844b756e65194f1bc5b70","sha256":"c350fa4a0da7403eccfc32600fe6b3d7beb5b590c53293b8f69bf68df6e43bea","sha512":"e9e93d89fca18d2591e605c47977ea48878f7838b1be7b9324c94f21f836d8e1384c7d21e646930cfae1b42d25caacb619f7817e56338f0a4edeaa4fff46eaf4","ssdeep":"384:F1aX4O+fkNgPwEN8vJ05g4p8QWwwBWCp1SjXUAgQN8yDFpkkmm:3rPwEN8Rj47RjTkBm","tlshash":"cec2faaaee2258a344536283d7f549195214cd33be33aeca33f590f505d305e22eedda","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-09-22T10:05:18.631468Z","times_seen":660,"resource_available":true,"data":null}},"time_used":1062,"timings":{"blocked":958,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/alegreya/v41/4UaBrEBBsBhlBjvfkSLhx6g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:23.708Z","timestamp":1790071463708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/alegreya/v41/4UaBrEBBsBhlBjvfkSLhx6g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mediacix.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43476\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:50 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 30 Jun 2026 16:48:21 GMT\r\ncontent-type: font/woff2\r\nage: 64833\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43476,"size_decoded":44288,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43476, version 1.0","md5":"97a4bfd7b3ce13e852d6246ee6a590cd","sha1":"c01893fd0e74b8826d47c545e47fa578b8fea5bb","sha256":"2431eca3ed8ed66e713cf7093d170d77a083a793a5f19a615506d63770abd973","sha512":"a28f2af5e4c8c3a6774d676a6018e0a79f64cbb2b4f0de0d3e3086999bde70c9251246af85ffb19a0cfb97233da1c92a257acde29a8b08f591cb0f4556b0da4f","ssdeep":"768:2ARwqLQiIvwPKpYt54mHZTCDQCHpy51QsRzt7xb4YKptlD9Zc/:5bl0Y74sTCDAQsRztritNo","tlshash":"de13f1059546bd8e9113ef183b8c9b812c3a6e3df5bd7c04d8551ebf1c18a3d02b9a99","first_seen":"2026-06-30T23:27:25.007428Z","last_seen":"2026-09-22T19:19:22.996043Z","times_seen":204,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":87,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/js/main.js","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.276Z","timestamp":1790071462276,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 13715\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Mon, 30 May 2016 20:18:24 GMT\r\nVary: Accept-Encoding,User-Agent\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13715,"size_decoded":14019,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f4553516ae04ee52ae606bfe579509b7","sha1":"bbc06cdf82e2c18cbb5352288b313f986e2dd1c1","sha256":"94d442a438406b8622431dd959073a5724edb4e0a5b4bd87228382b02550fe37","sha512":"c368ce0487f927c8b1ed2882c97a4b06b1e89fad683f4813742abd321dca9a50e79d26336f407f200baafc5355e19dc4c3f3fa0a2c3afeae404a0e54fbd62bd2","ssdeep":"192:hQdzX4M6OPPdkTnxZbphp6pXT7HNzOPA5Y+LhpVFeJL51S4LZspHt+e9fZ1vuZFj:hQCH0ZNzvFbFWPsdt+Y1v6eC","tlshash":"a052ef14331d1c7e647a3364853ad7ccda7ec42b91415478f8ae70a47fad8ec26aab4c","first_seen":"2024-02-25T07:50:09Z","last_seen":"2026-09-22T10:05:18.632195Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1133,"timings":{"blocked":1024,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/paginas-web-mediacix.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.286Z","timestamp":1790071462286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/paginas-web-mediacix.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 48723\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Wed, 07 Nov 2018 19:53:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48723,"size_decoded":48988,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 386x497, components 3","md5":"04acb4093e13b4842c5b2febd0f55a9f","sha1":"eced6964b73d6e0fe1bb646f4ab40ed16a10d0c7","sha256":"f5c8810607bf1d00dd12f6121631e65d78313d5be5b21970458eeda5a30cba8c","sha512":"c2bbe3eb705351324f6260cb8c60aad782bf7aa2b79ec9a727a152a7e9a7755e11bf4d22caf427185a548d05daafa9766dd8a2e762168334a8804f5659d75ff7","ssdeep":"768:VksJ/QN2c0iAOb3njunBRlqOtL+wEQIaYXSkhLxY1VJIlZkKJYcJ97BQwBXmFpVf:rJ42c00b3CnB7vLHaSsL8VJ+6uY6BQ5p","tlshash":"6223e07b7f7333428e7a9e365181a1e208e5531165a5f8c19efaa368835df8e53073c8","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.632757Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1499,"timings":{"blocked":1383,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/logos/outlook.jpg","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.329Z","timestamp":1790071462329,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/logos/outlook.jpg HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3629\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 00:54:40 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3629,"size_decoded":3893,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 147x111, components 3","md5":"9d75b79f7446edde78bce98167004987","sha1":"7b09cba1dbb23849e3d190530f5fd592e81bb49f","sha256":"dbe63798ad69aef645878d81c80a36538cf5bc3b48d24baf94e7be317ce11c17","sha512":"3786091fb0eb59047e2b372b852736e0bf8e91f2bc4c2b546d9d6d6b888a5ff88eadf162eea8e165dffe8d8b22f8685a351e71966fcbe9623dd33dc1f632450a","ssdeep":"","tlshash":"477128997d406b50c2941e3278fb413a6a2579f29ad1e816fdff80c29e581f3096e2c6","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.633361Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1379,"timings":{"blocked":1270,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mediacix.com/images/oferta-web.png","fqdn":"mediacix.com","domain":"mediacix.com","tld":"com"},"ip":{"addr":"65.181.111.139","port":443,"asn":14670,"as":"WHG Hosting Services Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mediacix.com/","date":"2026-09-22T10:04:22.330Z","timestamp":1790071462330,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.mediacix.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:21:04 GMT","end":"Sun, 29 Nov 2026 10:21:03 GMT"},"fingerprint":{"sha1":"B8:75:11:61:90:DE:A7:26:E3:3E:70:2D:BF:11:44:55:91:A1:5C:84","sha256":"CF:EC:47:68:B3:96:73:BB:02:24:5B:47:BA:1F:D3:18:C9:5C:67:19:C2:82:92:3B:AE:94:73:3C:C4:B9:70:F2"}}},"request":{"raw":"GET /images/oferta-web.png HTTP/1.1\r\nHost: mediacix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mediacix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 22 Sep 2026 10:04:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 98147\r\nConnection: keep-alive\r\nContent-Security-Policy: upgrade-insecure-requests;\r\nLast-Modified: Thu, 08 Nov 2018 02:05:18 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98147,"size_decoded":98411,"mime_type":"image/png","magic":"PNG image data, 268 x 330, 8-bit/color RGBA, non-interlaced","md5":"c135119304a87503fceab7a42410c371","sha1":"971a5ef09a2392646057af20363f73b2867f15ee","sha256":"f3428785c6e97e9a2a3e0ad67528c89c2e93a2c6449df44d33d56806d9f8a3be","sha512":"bc85e4e17df8d72e18f4710f5902dc8df6efd74608852474ee52b9e498629086ee0042ac76e667862bf916095c47516eea0c5a5e3599d51f4c0d3eac6d2aad81","ssdeep":"1536:OAHZMyMVvIQJg6BZfFI7teMK+NawmDpDwNvqUrGvvbmQ9PiebcgCd9f9zmkhEeCl:nHZCSeMHMqvqU8H9aebDCbyl","tlshash":"10a312919d96c38361f228b77e710106bf3f5868621cead2ec79877030578789f381a6","first_seen":"2024-02-25T07:50:10Z","last_seen":"2026-09-22T10:05:18.633931Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1734,"timings":{"blocked":1618,"dns":0,"connect":0,"send":0,"wait":110,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"mediacix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"mediacix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}