{"report_id":"01ff773f-5845-44ba-8e93-ce2cc6b7a824","version":6,"status":"done","tags":[],"date":"2026-03-02T13:29:20Z","url":{"schema":"http","addr":"catwifmaskmigration.xyz","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"172.67.201.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"title":"thecatwifmask.com","dom":{"size":303543,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1f003338631f68e2772f4ab9b33bf261","sha1":"817b56c407ce67e8eb0af3477c708dfd6164ca42","sha256":"d0f9e98f9717e76e2cb0adff9ae748c5c5fd149c7c7c85aeb87d71501e8ef995","sha512":"d3b419e72c57347ed5dfbed7dcf90ee4705f47f68c804a510132ee5987d872ab28e0bb00dfa742b5b0799d80f9072874eea8e99b8d8796f598e333937ef310c5","ssdeep":"3072:HyBFMxtlVWvzqI6IdfkQDMX5f4pSXEaUWJ0YxiY7lVIGvLBUqBYCH2/0iO619x/B:SBxW8fkQDMX5hA","tlshash":"de54e810fb3e113e313f23ded16d7b8c51669353c6092be9b5b481b890d4fa93a93698","dom_hash":"domhash4c6c59c2c9df8f1eaaeca9ced5d78d01","first_seen":"2026-03-02T13:29:34.443022Z","last_seen":"2026-03-02T13:29:34.443022Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"catwifmaskmigration.xyz","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"172.67.201.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T13:29:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":1,"received_data":49367,"sent_data":563,"comment":"","tags":null,"fingerprints":null},{"fqdn":"catwifmaskmigration.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-28","domain_rank":0,"first_seen":"2026-03-02T13:29:25.047952Z","last_seen":"2026-03-02T13:29:25.047952Z","alert_count":109,"request_count":109,"received_data":5660502,"sent_data":54741,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"thecatwifmask.com","ip":{"addr":"162.254.39.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2025-11-20","domain_rank":0,"first_seen":"2026-03-02T13:29:25.032261Z","last_seen":"2026-03-02T13:29:25.032261Z","alert_count":0,"request_count":4,"received_data":34593,"sent_data":2058,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/gt_widget_script_50417928-js-before","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c30b5e2e50495cbf9f3655749162c6cb","sha1":"b74308fcfefd585bf3495f6613f01bf0432c9ecc","sha256":"c473170d193b49b66c0774297d901932637ebdc08f91ba95f5dd09dad069526b","sha512":"4c8b8ae525c037978b457d75103c5c50f0a50b95050dcc5fe283edae301fcff873010b7b9b50e35bf2b5a8700a98164e7209057c43c08d17afa918128c65033d","ssdeep":"12:2otAColtopSYQOfYIxkgIavm4a94Y6Ku0aA9iR/q0:2YgtRGwavm4a94Y6nay/q0","tlshash":"47b18434ea72602702992334efa20b91737040f9c26a3c04a78c095e0adc82b43caf81","size":5466,"data":"","first_seen":"2026-03-02T13:29:34.593457Z","last_seen":"2026-03-02T13:29:34.593457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/elements-handler.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a3aad728d24d9fdf78ecb171434593","sha1":"10b9d6e300fbd335ac6239775e344ccd9362c476","sha256":"81ff4e8ca69c7a61c65a0fe75b5d0c94d0777bd9a5355f0d8b173dfc95c7096f","sha512":"3b9f07c87b7d38b0677f371896f8e58b08d3859fe6b7a1336bd74d760b5efa7aaa2ca2662b37938a813063bf59ce1dd98abeaadc36e86ad1395165f1c0f5b42c","ssdeep":"","tlshash":"8dd0a78e7dd8720c80fe008d0707b22b3309452194945fa073ee00183f31ecba5704c8","size":227,"data":"","first_seen":"2026-03-02T13:29:34.512447Z","last_seen":"2026-03-02T13:29:34.512447Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/essential-addons-elementor/eael-566.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15364d33bd0b3ae96783b6f399b0c2ee","sha1":"82a206208aec2224d4a641f39d85a8b1e6fd1f9d","sha256":"e1ad597f1114480bb718876310844074b09e9f207f88774cb579e118c044f297","sha512":"4993814a5ea585ba788b89f22c0ec0cd89a8d41d5e99b93826351ab64b775eaac19b863a53a08d90df61d55b00ec4bbc734de5d0524063a02b97d7a98fae1075","ssdeep":"3072:++w3w1jqWLPHlongqRf5B9/ylMKbj3ymYG3BeXUTecnIOQNBNzj5RCNVulOyA9:fw3w1jqWLflongqRf5B9/ylMKX3ymYG5","tlshash":"b4d3634937e331359117f12a8e6fcc09b329a89f168add0e7a4c51f45f0893487f9ea9","size":133482,"data":"","first_seen":"2026-03-02T13:29:34.47714Z","last_seen":"2026-03-02T13:29:34.47714Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thecatwifmask.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"thecatwifmask.com","domain":"thecatwifmask.com","tld":"com"},"ip":{"addr":"162.254.39.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-16T12:31:53.163575Z","times_seen":152468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/inc/plugins/elementor/assets/js/elementor.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94561a8982989b4f64316c56f933ca95","sha1":"f03c62b58cbd760667eb1d0cbead6d38e9896e64","sha256":"8db0005a5dbcc380e4f6f3ff419bf566e2cbdd801b4a5b47c7592e52d52d5b2a","sha512":"51a83db3bd5ab98af68e0bceafc57134ab9fced6be0f12b1939f8dff32f8f8dc4c9e7b408abe3df03bca43569805508e5e3fb8d2d77f1dbeede1e09da24d57bf","ssdeep":"96:LUBXqpyalgya2LeYzpKZlDzTg+Ih6f+DvJnqzpNLpYqEgZz5pQD0QvYiOX8iVG:+iyalg0z8ZFPrIh6fCvJnqpZpL1hQD0U","tlshash":"46a100ad78bf2121121f30ad56af500df234449bc555ae847c5cc3989ff482922efba8","size":4765,"data":"","first_seen":"2026-03-02T13:29:34.542043Z","last_seen":"2026-03-02T13:29:34.542043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb022881c4a8de321cd221e66812cb56","sha1":"ea01e9401df3dc9ca8b773ee65236ee6c42c87b1","sha256":"2486bb4836382b2e58534150e252d871c0f01b224b2027261e7449f4ba86841d","sha512":"3663d294f9ff4670f56e17282c00ff18f0b3b6d7fee4e6e518240cc8c189f3cb31a409af61042d9dbde03a1e04440b7119c4db12d2fcc19f6e9eaea0a4ebabb3","ssdeep":"192:0hiRCoizIwaiEwLic56dJdqyQaZyKQqnj+m+yaSWyRoKfmAzM/aJ:ui9","tlshash":"8232ff2de777320601aa74aac17f9d083516d00b8396da127a4c617eefc4876d9f4fd8","size":11098,"data":"","first_seen":"2026-03-02T13:29:34.586146Z","last_seen":"2026-03-02T13:29:34.586146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/imagesloaded.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e0f2f3a3fae9bef13239fb46f8affbb","sha1":"564521bd3a0c0e8c005023d6e64bdec74af4c1fe","sha256":"ec9f09273f1326887d10c0ad05784fadd78293d9d325a097936af97229ca0df1","sha512":"c04562a1495d61c804990e56d4da7aa455848be4c8a406d4c264f9adbd6198f8a2197281a2da4dc5ac9e2f003f03c064c5fa54ba14d4b12581eafff90d5f9eea","ssdeep":"192:TxNTb7wQllxqg0MD9OwuxcCYO3IMTrhdCr:Tx5x7nHweO3Hq","tlshash":"9bd1ce4967f77222812bb0a1bf0fd50ab735809f954a8a0c3d5cd4e49f645394bb2fb8","size":6497,"data":"","first_seen":"2026-03-02T13:29:34.450465Z","last_seen":"2026-03-02T13:29:34.450465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0eca2d8df0c4e4ff67e13d0627133890","sha1":"bf82beba4b5988f4d971dbc0c5788e3def70e523","sha256":"1a955e0a3bfa80659a97b8f63fff10086e22b13a1c5a3877e0cf989849670469","sha512":"20870afd4e23785a4cf54252f1ae06a4fcf1837941e4d422a11943804c120a4a24627972f404a6419247d29cd831f0a7366a99b6efcbbe03b6789bbe90fd1b90","ssdeep":"","tlshash":"95b012d1251e4482ea1d40020e3b1a59fc400655c9e881e4b116442811b9c51611801a","size":94,"data":"","first_seen":"2026-03-02T13:29:34.594686Z","last_seen":"2026-03-02T13:29:34.594686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thecatwifmask.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"thecatwifmask.com","domain":"thecatwifmask.com","tld":"com"},"ip":{"addr":"162.254.39.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-16T12:31:27.432739Z","times_seen":311444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/elementor-frontend-js-before","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c740dc78bd298915d6bccf8f37d9846","sha1":"fed6c24856e427860219b019c1ecc2a6adedbe17","sha256":"557eb6fcc58f532822288cbe8481b2731b502e3c04c073a3979f5adfd576196a","sha512":"a334b93bb547d6c354c4d2ab1a9f2390b453bf432c80775b67dad2375d4fc5e79f45fd16df776d3fe943ce3cb36c9ae2f05482e882a2963818eb865da24e0a7a","ssdeep":"48:LWX+PSvX87qX4uxXbUpiYmA0hEWwSKk+u/tKi7lY/BLbJ2NQD1M4oEznXFslGOwI:LYf4qZLiS9g2OdZzAGObN","tlshash":"6bf1f130fe27547b33e2edb83d66a14396780648c255b87ea09441bd21add357207fee","size":7900,"data":"","first_seen":"2026-03-02T13:29:34.595815Z","last_seen":"2026-03-02T13:29:34.595815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/plugins/fslightbox/fslightbox.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af9047c0db4836870b76c764559d8f75","sha1":"80a5f7f02aff3321797a60b33fa933a7feaca155","sha256":"f4e6530f2d410b9be946f4f7e86535491fd0bc09a471706614f00602c5439068","sha512":"f1afd31cb754f6f0f92e4840220d79d8ff28e84359fbd643a578685da62c080245b5c39a9fb9759f1eba18f397144e3642eff17aa2e4f7e1b71f73d61b2eac19","ssdeep":"768:RIAZdLGFUWtKhr5OB9JRmsLAd9OQrjG3o4ioqYKC53TEay1ER0PHCcHDm/6i+Jrh:iAZdLGFhtKhr5OB9JRmsL4YQratioqYQ","tlshash":"1c03742a7be23438c15b706e865fda493734205ba64ade097e0cc5959f51c381bbafcc","size":39880,"data":"","first_seen":"2026-03-02T13:29:34.55516Z","last_seen":"2026-03-02T13:29:34.55516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f57e1bbc43d2c232aa65279f715044ae","sha1":"7a02699129028dc641838206216bcf08bc7a5b0c","sha256":"b6de87e22a566957899f3c947cf63d4931792a64ad1ecb36606e271cbd043feb","sha512":"655c56de81cbde98dcf7e0325353182b308165411b70ec97f2a7346645cf4af28a58c33302de8e2b8e2908b0c03437f7d246c6433f9767e637c33381c68c8799","ssdeep":"12288:xkfRK+OEn4S0eESeF/5X49X+55YZ+xyXGSLh7qKFBCB8al:WfRK+OEn4SmW9XYXMCyA","tlshash":"9715faddfeb162bdbdd855963cc440c91899d802f4ce8b6872d0e58c6a5cc92f2f2396","size":932487,"data":"","first_seen":"2026-03-02T13:04:15.335793Z","last_seen":"2026-03-03T16:10:09.811915Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thecatwifmask.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"thecatwifmask.com","domain":"thecatwifmask.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf5b4475128e0560cf882b29882a786b","sha1":"38a3ca4cd1f7608ea4a1e3e146298583383ae89b","sha256":"88aca0ec20f37bfa664b4ef38a976a4efef71b97d50a225ea94835ea92f3065b","sha512":"db05d460cfef63a3abe21653a1fb1de1ae76b3d8176bad444a302684047266a9c89aa7ed4ff5bbe54476e18c546eebe0f46ca9777cc791c7734defe2310d0ec2","ssdeep":"96:cCDRLQ3LznVLuoM97Is17F5gRrRnYHMEP1:nQznZuoM97V1XwEN","tlshash":"34029657e3b5296ee0f970b67d2acd47e7b2803ad7c4c07982be52582c7a831d379484","size":8310,"data":"","first_seen":"2026-03-02T13:29:34.597702Z","last_seen":"2026-03-02T13:29:34.597702Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/astra-theme-js-js-extra","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9f98d6e45624ecc3b6e1f7b79f0390a","sha1":"a8f5978cc7a69bf8d6100c4524d76c9d39f544b7","sha256":"0ed136e3965178036ee355c749f4c59f9bd9bf50a7b955b62453b337c51f5ac1","sha512":"34f1e6edeb3c791b5bea99a7b088e1ce2ab9ba07458814b65b7c70953dbe3ca30bcffc45fee4e99808737eb47ab7d528034a938399112a3af1e36c9b35790091","ssdeep":"6:5FTF8yDvMzLNvMRKt1EBgJzKo8dLv/rZHdJn9X:51FnD8x45OkLv/rDJn1","tlshash":"5eb1a740c6c21a0331c41df561a28f5cb1bda095c1d2744d9658960ad2def2bd7d7619","size":5137,"data":"","first_seen":"2026-03-02T13:29:34.599003Z","last_seen":"2026-03-02T13:29:34.599003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/dist/hooks.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8474f0caa9096933eaf614e78f7bce7","sha1":"5832306f8a7829247567576f5a820fffefc6562d","sha256":"0be78e16490e6c097823ce5763955ec7e23d50f64942bb06c46b79487cbb0731","sha512":"d03d03146c5b8a89e20ae29be39f2e7a2b4d5c27ef4c48b904c2a6bdf42b94a9e28d62eb992a810284f40c1236141d94d0d96f0c741ea1dae896bacb98c3dd7e","ssdeep":"192:wPlp9z2+aJf3Ni5k2egIGtmmomH8TuL7RJU3aiKrBznm5IP7SG11Fmw79:wPf1/WwL7RJUAw4Fd","tlshash":"5d02da087be33539a123b06ebbaf985532346a57355ad9043e8d92601f9306cd2f7bdc","size":8324,"data":"","first_seen":"2026-03-02T13:29:34.526554Z","last_seen":"2026-06-08T05:34:26.024039Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fde74876759e27caff36ef25da5a35c1","sha1":"9dbafc34cd23de1834ad5b61dff1498917964a1e","sha256":"65f6a7bafa98329bc9407ca87e4280d4514dba5bb319561a9d1a8b071648976e","sha512":"7707c14fc5280de14447dc72eb2f435148e686249da68e23915a12301ffe61c2f6e788f1549126e0ac7ab9280281f7bd9e889620072a2ebadef206b68705dfff","ssdeep":"","tlshash":"9eb09b7543e041170576055b5497f50464504c2155b7f568811cc72c4472ac01da17cd","size":124,"data":"","first_seen":"2026-02-13T03:12:42.871273Z","last_seen":"2026-03-02T13:29:34.600305Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/jquery.magnific-popup.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c22c012448894243fdc361fedf2cefc6","sha1":"522d51bd48598f2de5d51d3d74ad86b16e36af20","sha256":"4c1f66aaa203f0b3fa453871c36ba944de36d6895fd9ac7f328d467c4371e11d","sha512":"cdff25be2892434726ac23249721acd668fc9e3849dfc58cf3df327b997fa1970637c77a97e01aa9e32014a9547044b57955c2a222c9f6ca935ad19df66e4d26","ssdeep":"384:Y2iTSFSRqkuFPeIwzeWUygtkcmexsAcoqfbyAwmrTD0PCyabri0:rtFkuYZ9YsAcogy3mrXJyR0","tlshash":"74c26328a9f2b2359267f0a94f5f9c083230941b4e4add413e4c52a4dfd897c9bb5f6c","size":28178,"data":"","first_seen":"2026-03-02T13:29:34.460749Z","last_seen":"2026-03-02T13:29:34.460749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/premium-float-effects.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a99aae1df4895126c81786460e9cb187","sha1":"10e3ba774b5a6ebd4ee999ea04712cf56ca7fad4","sha256":"6ae634b397bf4ae42e4bcc6b19977034b3a588896b9b942465cd1f5b509540a4","sha512":"2cd2dbb5276d6477e371dce28cd305fc6552defd9abd0acc18f18195e548bc033b4bf5b787d6513b37f98890405e58f8a45537f6284f3894348f8081ea6b92c6","ssdeep":"192:7o6o3ZYzu3mY1XF7yttXykq1WCN01J6dw3bQhrhKPFyDlKeNjmu5Lw:U6o3aKf5F72tadw","tlshash":"0e32e15f27b11064d4e3925664ee4f0a3e74016fbc792d10fb4f2a802f5c8a98fe7a52","size":11346,"data":"","first_seen":"2026-03-02T13:29:34.549147Z","last_seen":"2026-03-02T13:29:34.549147Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thecatwifmask.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"thecatwifmask.com","domain":"thecatwifmask.com","tld":"com"},"ip":{"addr":"162.254.39.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-08-16T12:32:30.614285Z","times_seen":129611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d982ff21a8f50c9d48a6708f658abae3","sha1":"430595060a8d69c38fc777ec99f633da2a2c73db","sha256":"1a6ea1d1aa094c726c8ad33ab7170035d0d8052bda2be3b6636b709116ffcde3","sha512":"3e9ffe288e63c267a40cb18b58e6561c3ddd26f268bc3c0c93ceeaa00902d0e2470628de37cf7fdfda384844f79814d947e60ab9ebf410d03907d1acd24dcc00","ssdeep":"384:IAxvYa3dDZlZe+sPc/mqrnkzJqQfBUGNx3y:IDa3dDzsP8k9qYBUG3y","tlshash":"f672762ab6f62535947bf1f8e92fcd4a7135045b168dce04788c86655f0c838e2b9ea8","size":16423,"data":"","first_seen":"2025-11-15T12:15:53.961708Z","last_seen":"2026-06-08T05:34:26.009321Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/themes/astra/assets/js/minified/flexibility.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0f40e5e565f61fee319c28244795b39","sha1":"93fe499b5d5bf477fcd780b4515339d47ecefaab","sha256":"e078543619e2f1a019029dd5ced7654ba688065b59e8edd07aae718e7d3e1755","sha512":"f4473beca0ebfb644344f56aeba429d857436f353d02852ef1cd4be8539548297d3dfabcaa3ee905d5e494a688a88595fc8df5602d844a17dfcd229f00198c96","ssdeep":"384:og+IM9IJz+mLrjhHXg8u+XgZMig653fJ8M7g7Mv8caM62E5iM4WvRbrs7lcmdhj9:B+IM9IJz+mLrjhHXg8u+XgZMig653fJh","tlshash":"9492de8275da35305502d85cee9b9a0079910b6f0b5c9a08f54f36301f69c2e6efafed","size":20632,"data":"","first_seen":"2026-03-02T13:29:34.563878Z","last_seen":"2026-03-02T13:29:34.563878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/js/extension-reading-progress-bar.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e27230c601e83024a3c0bcbf53fd07","sha1":"d627181d6901613b35426a52a99b599bc21603b0","sha256":"1ecd2e751da1e105e7dfb5f98245a745adb73c80946ace81836b943bf20dcd6e","sha512":"620176e13a21fa226f29139a5d2557937ca8ceeacfe3d0489cdc18c54e42d9498381a3375e0c2819bde1b14edda1cca9bf546554e349f288853eb0fee5fb4e0d","ssdeep":"","tlshash":"5331f05f97b42cb4b4fb9b3725e4a5091322541b1a7ed6c43d5c01b48f00976099bff1","size":1627,"data":"","first_seen":"2026-03-02T13:29:34.539611Z","last_seen":"2026-03-02T13:29:34.539611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d48fae03ceb7127e1a28954399224688","sha1":"f1c429e2de0edc8038c963262bd44a657df0dae0","sha256":"67cef84f0fd434471db5bfd193e67407d6a7bdcda5ec6a26cfe23ba73519c6b9","sha512":"129bfa0f81863d660d09c5b03106e6ea087de4ee3f856327f0e87e7118fc455c21ef1c4d00865bff7c4c338580836e44c97dc0df7e004a49341b68a5dab7d826","ssdeep":"1536:5c+xHR7GIVLm8645Ru6pRCsjYnLDdbMlF2eheEcPMYUPXmY7xumsoRSgBksn55Bd:5HP3NmEvl","tlshash":"83635f0a7af37475526bf0a9571fdc0ab324045b148dee193e9c46a29f5093893f8fe8","size":72333,"data":"","first_seen":"2026-03-02T13:29:34.540814Z","last_seen":"2026-03-02T13:29:34.540814Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/js/frontend.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45f479a0763e00af5959ae579fb532d8","sha1":"13a763358789dba5a21b0220c45e9e15efc39f52","sha256":"b9dd665daa8be28f37dced2d4b489daa682e949e7eaae257280c4840c462dabc","sha512":"288ceb115d417a318d6b9ad56f67ceaf55d5289b86f58fd9605f53aa896e5485cbfa60e2250ef4c03f7f7e5be193da001c8a70b35a85c476b25d46c8320e228a","ssdeep":"768:1uvO78bBIf4OQ9z2/cawUbxzpApjRF5tOMAQbMjpRuC8mbyLLUms11vhKJzCldg5:1uWQlIf4OQk/9xzpApjRF56QbKRuC8mY","tlshash":"f813810a76f35435002bb07b2b2fd819b734848f248afd493a5c46959f54e78abf0be4","size":45181,"data":"","first_seen":"2025-11-15T12:15:53.928528Z","last_seen":"2026-03-02T13:29:34.501704Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f6917d11c24d85a1baeecaefddab453","sha1":"615c162914cb8b4178b8f42e3597fb6da9057e57","sha256":"a8b25bdd21a8f754eafb90a4e83a89687bc67788d7b776b98c84870fec55e673","sha512":"42544979bd8af1631f83b07837204af325d8ffa6987f5ea0172831113fb54d4e88ec2fcdba60f6a3657502692b49dc23de951ea4fe24decbc353d74447c4b881","ssdeep":"768:8bhtTIBzE6RurtqD3aykCnNnv8n9DexkvEfK9kOefe8Edagqh:W+hG+3ahCnNnv8n9CxkviKyOe0Fqh","tlshash":"c6c2956865e3213701b3f06965abdd49b334811f1349ed4d3a8d8a646f8cc38a2b7f9d","size":28082,"data":"","first_seen":"2026-03-02T13:29:34.516804Z","last_seen":"2026-03-02T13:29:34.516804Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/smooth-back-to-top-button/assets/js/smooth-back-to-top-button.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9990863fc7d4f7e7832f52f80bf4689b","sha1":"b5ca45ecb5f0813f68b326067267deeb2d99bf21","sha256":"4cfaae55fd1e3e88fee23eae9c18ebe70af5599f799607b783bc5adf9904f69a","sha512":"d8b894ccc1bbbc20dc10a7f1ea6dee862080f5f8937595cf16e5de0a4a84fe2e078f0da6c3482b22ee17ed191015a2ac188af0f23d5e1c4b0efb6ad7f96972c6","ssdeep":"","tlshash":"df21849c4a932275913f2629575f93043ba28063210af9017d1caae18fc8f3557b9fde","size":1158,"data":"","first_seen":"2026-03-02T13:29:34.457971Z","last_seen":"2026-03-02T13:29:34.457971Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/jquery.isotope.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c84a56a6aab939e64d6da2f6ab57d4c","sha1":"ea962e1746ece95f06183f3ec3fca2ac73023481","sha256":"3cffd300b2b453da76dc56e68dc7bf0497057cc7e51f36c5062c8f46094878a8","sha512":"205f439cc9a9b16a088cd9d51b906901022c6af814bfc7b7504812c0b42d821c8a93fb47d079c89af9de6f0d9dde6e7e66d140ba53e6f009e05f5ba20868e720","ssdeep":"1536:7Xkh4cxRPwKX6+KBAk3cb3cWn826On80u:4h4YCD3cb3cI826On+","tlshash":"3a730e482ee72524a51770be9f9f60097278801f1119d904be8ce7e46fa583942faffd","size":73806,"data":"","first_seen":"2026-03-02T13:29:34.530386Z","last_seen":"2026-03-02T13:29:34.530386Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/eael-general-js-extra","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"62cc4a51b39045e3809784f80c2b9df2","sha1":"2f148e562b14ad5afb8ce301afd8a790e4d8c4e2","sha256":"9e8bdcdea506398ad47c042d1dd572152d80cca1bf780769058a92ae907550ce","sha512":"f4975bf662fe08b3f4165d0a182332008bbc0454fce4665755b3446b12fff4ab5fb9377e3868f2a0cf764a0a7a33c8a6730debed6a307cbfe15629a7e6a76963","ssdeep":"24:5OdlarYTsA3bXS8JrtMVVY03PKYy8a3Pkwkt3PgTV3PkjRWz3PkFTnWlkBx:g8rYTsqSirtKJiYmA0hEWkx","tlshash":"c7c14d30f1b7546b2592de703db66403a2604508e2457cbed754d5bd28adc349606abe","size":6134,"data":"","first_seen":"2026-03-02T13:29:34.600921Z","last_seen":"2026-03-02T13:29:34.600921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/premium-addons-elementor/pafe-566.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ca4f91d2f44807c2f9753ac21eeb561","sha1":"aace1ad2359d4f09c5dff28ded4ee7421a1a11de","sha256":"19dcd3784bd1427ca2b590eb2f6af91b88acc989589bbd7db4b226a73ba06d13","sha512":"692a474900113d8a8a8302a0b45612f47654d13e940e46e72c3803ffbd522292d1a31c7d7c3945fa72f5646bc83cd4fac7ebe6852f1a4959a755bf8ee76df00b","ssdeep":"","tlshash":"3771322f3af7111981eb60576a6f5204f1246d6f6022cd11b81d43a04f2cdac77a6ff8","size":3684,"data":"","first_seen":"2026-03-02T13:29:34.480811Z","last_seen":"2026-03-02T13:29:34.480811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/dist/i18n.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fea7fe7a24174d1bfad02c1b4f180198","sha1":"92622c6f107068610d590d576597d07566b60af0","sha256":"38356225432ebc9ec1549da10c03bffd6996a269aacd06a234bc674beaea4873","sha512":"c2e31f636a55e4387372ffeee4daa220629a785b97bc2be7fad169d6fc149ce319a1482b37744e197fcd4a05bd6333cfa9895ec4e671c7ee6b177132d8d471f4","ssdeep":"192:XZPpLsOYW2Yiw4DEr7bogfIxNkILGCFfPQJttdZJ+nBSQOSJ4sd:XZRMWJjXJ6VL3FfutdZJ+nBqSd","tlshash":"16f1bf99baf324351113f0785a1fdd09b238289f1adaed063d8c51646f658bca3f1bc9","size":7936,"data":"","first_seen":"2026-03-02T13:29:34.46757Z","last_seen":"2026-06-08T05:34:26.097821Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/gtranslate/js/float.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62a13341ad839d1638e4b77042a8f4c8","sha1":"cba4b91bcfbf8b4b02d74e11dba85763972e5aad","sha256":"a851c5dd043bc8c0e1c3e7df39eef469944ec33a69ad8bd090bced031045fdeb","sha512":"02c329020c849be8f4a0927ebd8dc82ca93ba49bf670ad30be47395ef4b5c1ecc8c1e20dc4997b1f8af54d157d8382a834bca4ed4049eba0eed45f4e8328fc11","ssdeep":"384:qfhB8zZbezuc5EdgFoxqoLlWyZrW3BSslDAIiwUi/RZSLI2f:qffmZKzuc5EdgFoxvlWyZrW3BScio/HS","tlshash":"75a2b529d1a20c3740132162ae9e1654b12943a74d08fc143f9ee9ce9f9d5bf4ab36fd","size":23280,"data":"","first_seen":"2026-03-02T13:29:34.52507Z","last_seen":"2026-03-02T13:29:34.52507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/js/main.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"600d8bcae6b168370aeaa7a7af662931","sha1":"8bed2a42241b02c888ae7dd125c0e79ee3a7d524","sha256":"20a4a375b8c4be22691e19c941029e7c07fcc2cdda0578d52562aed173f4471c","sha512":"a5720e1b1d197e644240cf2d4ed999f1727206562e8c7ff354501701d053aea097af883a8313c064a654d7eb849da279ef0334fe544678932cc2fb23e6a9ae97","ssdeep":"768:Grd1oOaAD2ATQpxuu2CIziGRda1XC/t5Li/FYg1mosJf2miqoDFPca:GJ1oBeZKSCIZRdrt5Li/FYSmi7J","tlshash":"7e83347d25a61221911f70ade95f9a08ba30346b974a9d047d5cc3988f74c7c33beeac","size":81944,"data":"","first_seen":"2026-03-02T13:29:34.577722Z","last_seen":"2026-03-02T13:29:34.577722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/astra-flexibility-js-after","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"55b4909a9089b90ee5193a56b2053d19","sha1":"28ac97462e0b086553d3aa949be3da1db1530b1e","sha256":"c11874bae2012f42c0679c1ea75e3e991ac24c0170238a5d3edc6671091eab43","sha512":"f6d60f393defccd329c8a7913d42482328416dcb5026505b723c338385ea256c081488067540276b25183107bb728cb731b68027e2d7289417ea380c67bd833a","ssdeep":"","tlshash":"9e719b75c3e041170576057b54d7f50464604c22d5b7f568811cc72c4472ac01ea17cd","size":3598,"data":"","first_seen":"2026-03-02T13:29:34.602093Z","last_seen":"2026-03-02T13:29:34.602093Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/jquery/jquery.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14f434dc45cced60d8690b9ce85f90c8","sha1":"0af5a5b0dc17465869a9d8aba2bdb2f2f8bf0d19","sha256":"6f96c0a5fbd65c6b778a3314ef2c8e3d6ac58a09ee9ce5b9862326c640cca5aa","sha512":"1c1899dfd83fe517ebc02b7466bb28c9f5f6557b234a607c62a53adf84d2869c85bdc46effc543b43574a43167f2d9664bac1e948cc491c531e32a097a386201","ssdeep":"3072:JZtoN7ML/MUIwLHGJPZ/erc5FJgFbSUhMB9zWfI9:JZtOML/MUIwLmJPZ/erc5F0bSBzWw","tlshash":"33c3309a7aeb21319117f0b98a6fcc08b135544f168dde057d4c82a59f1483897fafec","size":123555,"data":"","first_seen":"2025-11-15T12:15:53.931507Z","last_seen":"2026-06-08T05:34:26.191288Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-i18n-js-after","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"76a9b19da0ea8a13a8e63fdeb984b887","sha1":"878ba77278b7da345aece96ef66dc69d3469efe8","sha256":"f6107e70702f806f1a6bc0ecd2727389a0b2eda87f493fab975779d366c89be0","sha512":"a3b810660718787e66461187c85c1ddcdc61005f6626fc51409d11bb4534cf4f79c4964efee38126d655c73d21409e55e99d931088dbdf982239ae04486f20eb","ssdeep":"3:HYBLxkFAhEu4MQGmVaBI07LVSJFx:2LxT7WGmVaBI6LMJL","tlshash":"c8a11293f4ab2d048a1787fc0927fd0044200447c0afcd0418e29d349b314d576c3a7f","size":5052,"data":"","first_seen":"2026-03-02T13:29:34.603156Z","last_seen":"2026-03-02T13:29:34.603156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5fbf77caa9ac610bff99ff177c7e863","sha1":"a9ef29d4a2bb8bd28cc5bc5bc300584600f91094","sha256":"4874e1fb53d23474a18ec42e071907a67a8844d722346202ad91d3584fc614d4","sha512":"06a300001b444238e988e20fd77c3c54dd262c6b31c62b137cb6b469cea62e607150c1395c6a256c91b4f861805420fc78c4a1b742f4996a4e73bb993033902f","ssdeep":"192:gqNaIQQaN6OiNcPDm/efS5yDZbbUFXC3iaWS+Ei54iiBKXvWPbxQU:9QfSW65EHGGCP54isKXuzxR","tlshash":"a8f1528806e95e3f259274b4b6979f20263ecd273804dd91f55c9ed80fe4d61c3ba9a0","size":7673,"data":"","first_seen":"2026-03-02T13:29:34.503302Z","last_seen":"2026-03-02T13:29:34.503302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0646f0e42341f552197cc5ab07d1c91","sha1":"b9932dce8aa2f9462e2befbf8e896cee5213904f","sha256":"7d23d646f72b006fe800948d7971d2adfe99309b71ddf8222aa4f2f53ab3f5cb","sha512":"6f62a5f99bdeba15cf02ca365db0090cce1c527cfa973b3f3881c0a288a328ea0174d2e0b3bd492843d9ae8be5dadedc7edb9f994d23527d663f3285ef86b1a6","ssdeep":"","tlshash":"3a119cd6eb8c217342b9a12a451fa7ca353c10ea10017c6f3d54deda1dc0ca91779897","size":916,"data":"","first_seen":"2026-03-02T13:29:34.604345Z","last_seen":"2026-03-02T13:29:34.604345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/themes/astra/assets/js/minified/frontend.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06942cf973faa6fd90d36322d7261b77","sha1":"98599770d69f71ba47dd73aaacd86c4d641b5f22","sha256":"58d502f20f5264492910665eaa20d75326d059c361c07096be24792316e38a1e","sha512":"74d79a0f333ceb21944f13a40245d80c63c1f8f5cd814d222cd1ca88d21c014f53a00f36c37fa3ab028dc7404ef3a3ac644c163710545d4332c832b42ca3f5c6","ssdeep":"768:SOp7wI0ICvoHitf7xFBzO/MKoGo5oC+8msTk5sKKNG8U2xVvFWzuSErkL9yfzIWU:jp7wI0IC/xHO/MxmsTGsKuG8BdWzZEPU","tlshash":"19d2866b63a1153504bf62aaf7deeac47671105fa649c8013c2cca490f54fa216f8ff9","size":30988,"data":"","first_seen":"2026-03-02T13:29:34.571493Z","last_seen":"2026-03-02T13:29:34.571493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/jquery/ui/core.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3254d68e97168eccfe0f124081cc0e85","sha1":"ae5236d6e4b9a8f6804c2b66777625b9e803ad23","sha256":"c2635deb201de520735fc9e711e683118c577bc30821c61eefe9106051e3282b","sha512":"af58b8ab837d6f127aca74bf4adaeaddddd03b1e76a54d22367d2e33f66e03c0e7cdf63401b9dc019c897c2bee6bcba754d581a41b3be4ec4e5cfd836fe49465","ssdeep":"384:ExdvZ1D3hp5nM+hql5OZYQV2VYB5E0joZHGZV+UMfDBL:I93fJ0QVyUoZmWUMfDR","tlshash":"f0b2210967e32524e5abf0a9591f8909b331a49f1b89ec0c7e5c86d48f1583843f6fbd","size":24470,"data":"","first_seen":"2025-11-15T12:15:53.944624Z","last_seen":"2026-06-08T05:34:26.167118Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/elementskit-elementor-js-extra","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1ec729801694514aec75ba02c0eccb3","sha1":"8cc7544a2670e48ef3f63bbea996753ec464efe5","sha256":"7ca7ed2cf6209471ee8196d8ecf373f04f2fb2ef20e7e6632753f4a02a591cc6","sha512":"a73b3b000024bf8067f1ee4b37b381041ac30522588f9a6be7d09b3650fb786e727384f2101168255bc326ba8b19d80f7de5fbbf59dfbcaa3675039a802d658c","ssdeep":"3:H58NDiFakMQ5tHNkAGry3mgrTHnJFH+T/WBWNe0rHZOIJOQI4XyWI4N:ZmDrkRzmrXgrTqT+BWMgHZnJOG1/N","tlshash":"09b18056fd660e8b5495cdf005131537d5512a59d0e144004f16c0400175c52bf40036","size":5124,"data":"","first_seen":"2026-03-02T13:29:34.605437Z","last_seen":"2026-03-02T13:29:34.605437Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/elementor-pro-frontend-js-before","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a984338a9424ae7eba654d488c8baf35","sha1":"2e7e2dbb12bdf0a1447ff5a293618f533325cd60","sha256":"377bdd3f89f007a075ba7d441ce8acf6e7ad97ac842682d97d142b8be1cfdb20","sha512":"68df0ef24366c881dc861bd0f4e1485d46b6be64581a86ddc2eb7a28a5b86e2b91051f59e136bc05f3fd65d9f5cfce42ac8d91969d08b74f48a9068768b59fcf","ssdeep":"24:JSReo2sAYoiSHjLdRcSVqeCpW7K7fjpSnfR3KcSD2AUaDYWMhC0:u2sAY3SHjZuSVcpiAfjwnfOCAlYWoN","tlshash":"e5d12825dd33246f33f1fcb4a0a825deb5104798d39868ad8254d06c02ded99d0957ff","size":6463,"data":"","first_seen":"2026-03-02T13:29:34.606568Z","last_seen":"2026-03-02T13:29:34.606568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/plugins/swiper/8.4.5/swiper.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f92fcab37192c26904d973c00a045a4d","sha1":"25163d56f0a19d0988edcc64df2b18a6dd280e3d","sha256":"0a9abde2502403ff32191fe11dc0dac43e937bf5e121cc1809f2153f64f91125","sha512":"f5897396bef83b76c9a35dedff78f9e08877d72bb5c7804ba0e6689d1cf97f98457aecb47175f23f91cbb3c72b16e8bad98b8f413ae724582b8b616e9f4ab1d9","ssdeep":"3072:gScpyX+bVbwePZ7yT9crfsIq79XmQ1r2Ixog+muKedJMx8EBu+O9lWsBPczajE:7ei+bVbDlyT9cr29XvrXxog+muKedJMt","tlshash":"0314620a53f235385197e06e4b5fc810b376940b7a49dda83a5c0a549f2d83c87fafe9","size":193196,"data":"","first_seen":"2025-11-18T04:00:17.493437Z","last_seen":"2026-06-08T05:34:26.020781Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/qi-addons-for-elementor-script-js-extra","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4980516fde54f768fa40fdf2ab997d21","sha1":"d9a098c1e39d2d8476098b1e77ed96da5a31c536","sha256":"f94365c7f4f9cf3f36c349b635b6430b13f8507cea495c3beea0d4bc507ed83b","sha512":"82bcefd26c3baf49fee0dcb19b991e0b6df273ab88925e82a361ae0dc935b11549f59d13205803621cb22932bad141ba563dd97dcdb550256dc37b03ea717b2f","ssdeep":"24:x5MVTw1SL2KiWXiQMVTR1DZMZmKNMVDksebTB2:UVTw1e2zkiZVTR1GqVDksKTY","tlshash":"bcc16e4ad50dd939da97a430fe79d8ff1e3470a4d45ea0b49ebe0830d0188e065d16ec","size":6062,"data":"","first_seen":"2026-03-02T13:29:34.607564Z","last_seen":"2026-03-02T13:29:34.607564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/elementor-frontend-js-extra","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eacaca362ef050c1a9bd39fc563bbe38","sha1":"89cb97148a228614ad11f319e4216e81b07fb9b3","sha256":"25c13509dcc82dc4416fe43fbed42ed58e15c5e4b7187f667beaee8e8e43d376","sha512":"5fe06ca33544ed50c6df2255b97fac02e7a6cdd09431fd76c5c540dc63ea0c2bda4a9549cfb863fd1a73ab70608fbc91a7fc1e144b2927268bb887f25dfe07dc","ssdeep":"12:JSxCarQrTqTMSKrCYr9QGUe1+CAuV5P4N:JRarYTsMSKrCYrWW9AsQN","tlshash":"adb1c05ae89f04976c704cf498152905d040a313e0e5d8a8867ac00823ecc717b50038","size":5260,"data":"","first_seen":"2026-03-02T13:29:34.608798Z","last_seen":"2026-03-02T13:29:34.608798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3575f037d762ae63e3669f0b69c49c64","sha1":"3b3efc7a95f70c8077b97b107147076d67a67631","sha256":"49b8d6f9ba3391f7dd7fea6e3e91c1281798e381ca9a9a36536aa2fdce71499c","sha512":"79f46cc52f1ad4bd62aa22adc0df152412093c534a152a4645f8ce3b0adfda0db05706d71659aae040514c98053f7328df940a3fa5348ea5ab96e80576bc86e2","ssdeep":"1536:gYRNCD7SQa9xoyVQn2k8B/sb3OVkSimyTwddXgGN+TGAAlTz0AhV7O:gYRNCD2foy+8BC39","tlshash":"6483110e3bf22525916bf0698b6f89097235a15f5a4add083d4c81e45f2883c57baffc","size":84904,"data":"","first_seen":"2026-03-02T13:29:34.492862Z","last_seen":"2026-03-02T13:29:34.492862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/gtranslate/js/float.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62a13341ad839d1638e4b77042a8f4c8","sha1":"cba4b91bcfbf8b4b02d74e11dba85763972e5aad","sha256":"a851c5dd043bc8c0e1c3e7df39eef469944ec33a69ad8bd090bced031045fdeb","sha512":"02c329020c849be8f4a0927ebd8dc82ca93ba49bf670ad30be47395ef4b5c1ecc8c1e20dc4997b1f8af54d157d8382a834bca4ed4049eba0eed45f4e8328fc11","ssdeep":"384:qfhB8zZbezuc5EdgFoxqoLlWyZrW3BSslDAIiwUi/RZSLI2f:qffmZKzuc5EdgFoxvlWyZrW3BScio/HS","tlshash":"75a2b529d1a20c3740132162ae9e1654b12943a74d08fc143f9ee9ce9f9d5bf4ab36fd","size":23280,"data":"","first_seen":"2026-03-02T13:29:34.52507Z","last_seen":"2026-03-02T13:29:34.52507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/essential-addons-elementor/eael-506.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15364d33bd0b3ae96783b6f399b0c2ee","sha1":"82a206208aec2224d4a641f39d85a8b1e6fd1f9d","sha256":"e1ad597f1114480bb718876310844074b09e9f207f88774cb579e118c044f297","sha512":"4993814a5ea585ba788b89f22c0ec0cd89a8d41d5e99b93826351ab64b775eaac19b863a53a08d90df61d55b00ec4bbc734de5d0524063a02b97d7a98fae1075","ssdeep":"3072:++w3w1jqWLPHlongqRf5B9/ylMKbj3ymYG3BeXUTecnIOQNBNzj5RCNVulOyA9:fw3w1jqWLflongqRf5B9/ylMKX3ymYG5","tlshash":"b4d3634937e331359117f12a8e6fcc09b329a89f168add0e7a4c51f45f0893487f9ea9","size":133482,"data":"","first_seen":"2026-03-02T13:29:34.47714Z","last_seen":"2026-03-02T13:29:34.47714Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2232044e0caac75147c8187d8078f08","sha1":"ee78a1e7fb73c2100d25fdb05054434ff9466f7a","sha256":"93aea08d91c65aac047747499c8f911ded56fb2007e6b95eb20a5802fda6892e","sha512":"2ae538450f7de0990710475f7e4a3aba964ba23add6a625580e342b0fe7d7818e41e1a91de14ae722b798b21994aff7702d90e7955d205595358b1054fb14e67","ssdeep":"384:1olX4IjBh+U+CC4bXG5FKA7rMxXqVtTRBQ98f0I4fGV:1OoIjkCO7rWqPRy9A","tlshash":"7c6240496be331b55137b0794f7fed10727165172189de003d0c92a0af2593996fafac","size":15720,"data":"","first_seen":"2026-03-02T13:29:34.454419Z","last_seen":"2026-03-02T13:29:34.454419Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/anime.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2346cdae43abeffd7b65c5072db4529f","sha1":"abbf8ef77977be79a21b6da94feafc9b0dc7a0b6","sha256":"ea9cfc6f9ef439443fcfb1222969d7b59bd52d31f4f3681c3a431c059f7cfa40","sha512":"d7472ce7bebca0a6fd7c1930c1c9c93ec913ed492d93eab0e2d156cd806940677a6bca4536d453840b264e09095c2c2a6252b6d2cc13cfaf91a405b1e2b6ec6a","ssdeep":"384:4NruFu8NdtMQ66Z6yLLANk3CDBIZeiLGyqxchMbxUR:fuYKQ6lkchd1xe","tlshash":"dab2ff493ae33125a257f179cf0fc8447279691b058cde4a7d4ca260af1093d8bbaedd","size":25046,"data":"","first_seen":"2026-03-02T13:29:34.547816Z","last_seen":"2026-03-02T13:29:34.547816Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35198f0da2033a0193632b5b6b6fe668","sha1":"912a8cb287b278034b25314593bf18aa2d887614","sha256":"e436c117f2e051d90933eb1d0a76f847767b7c8a152db1fc3ba542be212de523","sha512":"a9332aa2a8b4b463e341308885d5ad905c0203c367af4d23384b90ed2af461a6279c044df2defca2485a04dce320822e12073826906b51b23558fd9483761b87","ssdeep":"","tlshash":"c5017081fb5db5c39539203114feb1ef911cd4f249928c7abd20642c084886d66cabaf","size":767,"data":"","first_seen":"2026-03-02T13:29:34.610212Z","last_seen":"2026-04-19T01:05:26.996137Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/happy-elementor-addons-js-extra","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6b1760365eb1144d12fcb16f0363f66","sha1":"1aba34086800d94dd09e42c1eb92102527a4bb81","sha256":"00f7f1a307de9cf90a82d50b81af137c74b213beb039452a0b2ec8253616e5b1","sha512":"6f2047a1dfa71486af0727e8d59f126f94b4c87c8247248d0d0450cec3eb98956edb18b7ddf2b5b51617b9e9406a973dc39d6ca3d80ada2268b95676384fd4ca","ssdeep":"6:BhqT7CqrXgrTqTHafHvv1GrXOlAsc4ipG5WNegHmvpEP4:BhqKqrQrTqT4H31Gr9uipSHNpEQ","tlshash":"deb12be6d94f05873ab45ef58029a30781c4a276e5d2844cda29d20802acd87e75013f","size":5176,"data":"","first_seen":"2026-03-02T13:29:34.611328Z","last_seen":"2026-03-02T13:29:34.611328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10cb1d626d6c8325e9f3185a5cd103ff","sha1":"c03ee861162b7d1e6a94b0cf06a2c2032367e41a","sha256":"109d35252d1d14955e9221888a42216a1285ec14e3b30f94ec645bada0cbf769","sha512":"da68878d4cb51cba42525550c005f39ee687d51c48ef85ef70152edba87aa02fc79cc309393b7ed9079ae6e2908b8f12b6f2efb05c60198d8ce6212d3979c739","ssdeep":"192:TYhOUlUgljxaNy8XdIh3ngzHlhrq/gBX+Tavy2VuWiQaj+fQU:nqZljXZgzbW4BX+ofuWr/fR","tlshash":"6ee113541be26d3b2093a4f9a65a9f34622ec8272549ec81f96c9da45fd0d70c3f89b0","size":7274,"data":"","first_seen":"2026-03-02T13:29:34.592188Z","last_seen":"2026-03-02T13:29:34.592188Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/pa-feffects-js-extra","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0ce318005a79411d4b67bd396f6c7d4","sha1":"468a59c853e34367a20a62a3e8c974dc52b78c3b","sha256":"4e174a5f8beb68b09f6f674ec14cbaf0d9c1c4b2414effee8c62507376ae37d5","sha512":"fc2060cbf6f467aac79dbebdcf1ab64030f875a442f970d272abd1287af094ad47facfe373b279b41d645f4f3fc980a098c7b42009983f911ac9c3eed46aa174","ssdeep":"3:HxqAA3opF1EonXJOBHkHMEI0Hw:R23orOMZOBHkHy0Hw","tlshash":"aba1121dc1c908a518c19930203a462231110894d09344188b4a4446006dc9153d0827","size":5037,"data":"","first_seen":"2026-03-02T13:29:34.612951Z","last_seen":"2026-03-02T13:29:34.612951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/gt_widget_script_26558551-js-before","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e349cf7fb4eac396d2db112b102cbc4e","sha1":"6beeb40e200d1e044e3d48c26395eddab6878478","sha256":"0606ea25dca183aed72822dffa7ff77988a9160b080093c186cf45fcad0c3f7c","sha512":"136220de56db2f49ddf4ccaf60056da9664fe6cde8c705d32506dfe2c7f7b12b3d8aadd164c942bd47aebb7115c49117d05be607553a1d56244aebd7987b4e2a","ssdeep":"12:uotAColtoVHYQOfYIxkgI/U4a94Y6Ku0aA9iRhx0:uYgtCGw/U4a94Y6nayhx0","tlshash":"7bb12b24e972603702992334de951f81a63540f9d2553c14e74c1d1e1aed86b47c6f91","size":5471,"data":"","first_seen":"2026-03-02T13:29:34.614073Z","last_seen":"2026-03-02T13:29:34.614073Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6de250dd1d659d2b77146e8af9538251","sha1":"16630327f92fe0ccbc614e127a3031a2aa2676c4","sha256":"531c44a6181f8cce50cd1444a03b424ce0db3b306557477a552b1616969121be","sha512":"2929381ae1e154490cc0180e00b9950c381d80b475aedd9747ab835347eda5477cc59453733820b1a0fc69926bc1665e3cad49313392f9b0d41bba0c343c8e67","ssdeep":"","tlshash":"710149e2f3add06ffa6f8d660638028e1a1da073ac100e6fbdec3536ccc15293461950","size":844,"data":"","first_seen":"2024-12-22T13:51:11.614827Z","last_seen":"2026-06-06T05:23:35.302745Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ca5eaf28ebf892f63aa4e73bb411d42","sha1":"f41f6cc44bbeebe1f7dcb8627397f9cabba83441","sha256":"8fafe74d80ff2f154da132778a5464e2c0e4898a12f7dbfa259e29cc26d501c2","sha512":"ddd7b2c36ed04dc4af08386d7fe0c748dc40d71d247df9ba104f9906d0ec136cd7e071b02f2105e7f88eca25a4b4c39d32750927a0763c6cbd670742487ddd3f","ssdeep":"768:PY4bL4DOqNei1jE4oHBl6zdRn6ld5dV7IGJxjF1th7J4JvlULiuvjwPdO+RauATZ:BbLAJ1jE4KBl6hRn6l7dNJxjvSJvlULF","tlshash":"b313670a75e5247140bf706a965f8a087230586f4e4aee553e4c42b44f3dcbc3bb6fa9","size":42728,"data":"","first_seen":"2026-03-02T13:29:34.580709Z","last_seen":"2026-03-02T13:29:34.580709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/_nuxt/assets/index.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b60745c26bc97e8c858b1b91c6e4f10","sha1":"0d4e1e988b50ab0cfc465db87d8ffdb75fcca2d1","sha256":"5b07685fea29f847e7d91342a620bb760c885c5ad3926545c12b003b31d0955b","sha512":"dca6c2e71b8cef6119c08e0b6b34439f6e05b24b9cec59d3d309e8f71bc0434574ab740ca8aca76952b9200733d56c6292758c127469fe609a431abcc7dab66c","ssdeep":"12288:wLVOCUuiw7MSIEF5bvYiry/pnV/yF7g1fKcCxckTRR02pRSlD+lKYXmJ4nF7lGdm:wLVOCPiw7MSGsF7C58SkX","tlshash":"3425f9dfe971a2ad7dd47d862cd05cb51cd9e841f84e472872c2ec8c565c8a2f3a2782","size":966258,"data":"","first_seen":"2026-03-02T13:04:15.337723Z","last_seen":"2026-03-03T16:10:09.808731Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/imagesloaded.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1961\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qA9irMlCQEFnaJJDltEYkXfoRGVtppjToY8kFTHYTua3TigmBJSUTSn4LcxR0idvt4ghZqTYNWe8%2FmfBqYPnmMVO1wOEj5JNY9gIaJkp%2B8zoesCwaFDJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d2949c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6497,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (446)","md5":"2e0f2f3a3fae9bef13239fb46f8affbb","sha1":"564521bd3a0c0e8c005023d6e64bdec74af4c1fe","sha256":"ec9f09273f1326887d10c0ad05784fadd78293d9d325a097936af97229ca0df1","sha512":"c04562a1495d61c804990e56d4da7aa455848be4c8a406d4c264f9adbd6198f8a2197281a2da4dc5ac9e2f003f03c064c5fa54ba14d4b12581eafff90d5f9eea","ssdeep":"192:TxNTb7wQllxqg0MD9OwuxcCYO3IMTrhdCr:Tx5x7nHweO3Hq","tlshash":"9bd1ce4967f77222812bb0a1bf0fd50ab735809f954a8a0c3d5cd4e49f645394bb2fb8","first_seen":"2026-03-02T13:29:34.450465Z","last_seen":"2026-03-02T13:29:34.450465Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-3d68\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqxLbl5Pa4fBXus9m6xAh56Ilu%2BxAPjqTnrc4JrjWYu2Rpa0N0rNOAhBYeajxr%2BOkc2FVB6n32ZU7d6sfIjsbTXDfzSFUSNVEFM9jusE7WwKPQmEbDto\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5ce897c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (787)","md5":"a2232044e0caac75147c8187d8078f08","sha1":"ee78a1e7fb73c2100d25fdb05054434ff9466f7a","sha256":"93aea08d91c65aac047747499c8f911ded56fb2007e6b95eb20a5802fda6892e","sha512":"2ae538450f7de0990710475f7e4a3aba964ba23add6a625580e342b0fe7d7818e41e1a91de14ae722b798b21994aff7702d90e7955d205595358b1054fb14e67","ssdeep":"384:1olX4IjBh+U+CC4bXG5FKA7rMxXqVtTRBQ98f0I4fGV:1OoIjkCO7rWqPRy9A","tlshash":"7c6240496be331b55137b0794f7fed10727165172189de003d0c92a0af2593996fafac","first_seen":"2026-03-02T13:29:34.454419Z","last_seen":"2026-03-02T13:29:34.454419Z","times_seen":1,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/smooth-back-to-top-button/assets/js/smooth-back-to-top-button.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/smooth-back-to-top-button/assets/js/smooth-back-to-top-button.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTrEdsiQNQOScjpwXy%2Fx2OC6mnG0LcXqQaQd0MBcybtCnhfe7GxcjXxMsAzKF3qF53R0uHjEDkYZ1bFEDcQKnzrfsu8gMHXdLHgcTpsPdi093Ae6OpJH\"}]}\r\netag: W/\"69a4a1ea-486\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cf8cdc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1158,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"9990863fc7d4f7e7832f52f80bf4689b","sha1":"b5ca45ecb5f0813f68b326067267deeb2d99bf21","sha256":"4cfaae55fd1e3e88fee23eae9c18ebe70af5599f799607b783bc5adf9904f69a","sha512":"d8b894ccc1bbbc20dc10a7f1ea6dee862080f5f8937595cf16e5de0a4a84fe2e078f0da6c3482b22ee17ed191015a2ac188af0f23d5e1c4b0efb6ad7f96972c6","ssdeep":"","tlshash":"df21849c4a932275913f2629575f93043ba28063210af9017d1caae18fc8f3557b9fde","first_seen":"2026-03-02T13:29:34.457971Z","last_seen":"2026-03-02T13:29:34.457971Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/jquery.magnific-popup.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-6e12\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrEkw3UjVQl%2FEogy3eYp6UHtDs6FWlFDAWR7ppo9J9nCLkxuAa90qVpzOaTtVNoHepu%2FdDMTyvXsV9NnVBD%2BciDwFyKEh%2BRNt65wS5fMXNg0RPIfo2BR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d2945c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28178,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (598)","md5":"c22c012448894243fdc361fedf2cefc6","sha1":"522d51bd48598f2de5d51d3d74ad86b16e36af20","sha256":"4c1f66aaa203f0b3fa453871c36ba944de36d6895fd9ac7f328d467c4371e11d","sha512":"cdff25be2892434726ac23249721acd668fc9e3849dfc58cf3df327b997fa1970637c77a97e01aa9e32014a9547044b57955c2a222c9f6ca935ad19df66e4d26","ssdeep":"384:Y2iTSFSRqkuFPeIwzeWUygtkcmexsAcoqfbyAwmrTD0PCyabri0:rtFkuYZ9YsAcogy3mrXJyR0","tlshash":"74c26328a9f2b2359267f0a94f5f9c083230941b4e4add413e4c52a4dfd897c9bb5f6c","first_seen":"2026-03-02T13:29:34.460749Z","last_seen":"2026-03-02T13:29:34.460749Z","times_seen":1,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.51_70ae284b-200x300.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.51_70ae284b-200x300.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13023\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-32df\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2189rNQL6XGcOsmPMgYpRhy6ehlEpl0iBcK5lMehO9gzySGlVAu7hpDvHlS1dGo4CaAp0PXa5T9N663fTnwB685l0X6nbO4pEjiLdsSwyo9pAe79HuwS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c4a85c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 200x300, components 3","md5":"892d3ae1365a34699a7833ff70007d20","sha1":"fba9a7e27869c66a148d02ed6b696e7db2f5cda9","sha256":"a965bbd09e1a4dc6cb06eee271b07c03b226038b2fd28d7597e01beb180c3d1f","sha512":"9ad05f673b026edf1fc7d05280a1275b1841f893fcd27bb2301df227e35cd66043736b49410d03a8e474dbf9fcb2ca81607aa785e28728e2565926b8f47eb516","ssdeep":"384:Olamfu0XhAQKn34qWJXL9NDc7utO8W2DDLe3L4C1s:OlU0hIn3fWJWutO8FDDLOC","tlshash":"c342d06cf924c48ed4195cf9ab930f28f981573439c9f75c557ee8078cabee40292b11","first_seen":"2026-03-02T13:29:34.463535Z","last_seen":"2026-03-02T13:29:34.463535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-12-13-at-22.08.10_9a54c322-683x1024.png","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-12-13-at-22.08.10_9a54c322-683x1024.png HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 322668\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-4ec6c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ic11zm%2BLFZHlFcNkJkVemGOdBMZaye0vcDgws5pu9pAN0L259tAsePzl6snYR8jpNt7VaalI2zCDo%2B9dbjD2rCeNIDVh6nAIyhxR6RICuw0UDj2YPLcV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5ce871c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 683 x 1024, 8-bit/color RGBA, non-interlaced","md5":"a83d61f6f49cee06300656ef5a3e8b91","sha1":"1ad116770e25c7971d857144d0b42cf89301e3c0","sha256":"62c371dd9d33caa93ac5518497518f7657e0d9eb9add3556efec13a66c83d622","sha512":"403cf2837dc071db72e001166ce3f929801a092c7f8e1ac04ab7a322b20eb5501d8337d6cd094cf98b777f9392b29718dd1202ccf7677c08f6d2ae55be2fede3","ssdeep":"6144:gQ4F8CSjzqdJ4lHP0EGJEG8IyeFGwE2N53a9teTNKtyJSE4kide+qgPf:D4F8yJ4tPRfHeMf2NRSeTNKt4vAeDgn","tlshash":"7464238f167ddc15fd9b223dbb3c8faba156267017c8a2b983698ddd4fa2f1d0881045","first_seen":"2026-03-02T13:29:34.465695Z","last_seen":"2026-03-02T13:29:34.465695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/dist/i18n.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1f00\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buobeTmD2xIGsB64DJJ3ifwHji5g15ildPGSPcCIeQ%2Fni86M0wtZwvfLbLGgMtfy%2BVl%2Bk1OymoWSE739S3YEbu2F0ofhIcwQ8KLM9oOPoD3D7bP3z1yn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d296dc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7936,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (456)","md5":"fea7fe7a24174d1bfad02c1b4f180198","sha1":"92622c6f107068610d590d576597d07566b60af0","sha256":"38356225432ebc9ec1549da10c03bffd6996a269aacd06a234bc674beaea4873","sha512":"c2e31f636a55e4387372ffeee4daa220629a785b97bc2be7fad169d6fc149ce319a1482b37744e197fcd4a05bd6333cfa9895ec4e671c7ee6b177132d8d471f4","ssdeep":"192:XZPpLsOYW2Yiw4DEr7bogfIxNkILGCFfPQJttdZJ+nBSQOSJ4sd:XZRMWJjXJ6VL3FfutdZJ+nBqSd","tlshash":"16f1bf99baf324351113f0785a1fdd09b238289f1adaed063d8c51646f658bca3f1bc9","first_seen":"2026-03-02T13:29:34.46757Z","last_seen":"2026-06-08T05:34:26.097821Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/pro-elements/assets/js/frontend.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/frontend.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqACYNyFEXfHug2pYpRd61kpn%2B6G7UdJ7DKdHDrTJ%2ByWpTpZ2rtpYOKb3zuxrKm6PdK27wvoNHjtvl5k180LVzS2UDAJDRU%2FJeHP5tbMHoR3KhOpulX1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf618d7fc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/essential-addons-elementor/eael-506.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-506.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-2096a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dToJuBXmHocAL7aXK4LDUzkwUMNGku5AOl1gnwGaY8DS0UbFAQ%2FxGpuuF9HNPnigJkAA3j3Q09XmVBxdpilUdUOPku1weWgi%2FgB4f8IvS50eHmMarolS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5ce89ac3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133482,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (614)","md5":"15364d33bd0b3ae96783b6f399b0c2ee","sha1":"82a206208aec2224d4a641f39d85a8b1e6fd1f9d","sha256":"e1ad597f1114480bb718876310844074b09e9f207f88774cb579e118c044f297","sha512":"4993814a5ea585ba788b89f22c0ec0cd89a8d41d5e99b93826351ab64b775eaac19b863a53a08d90df61d55b00ec4bbc734de5d0524063a02b97d7a98fae1075","ssdeep":"3072:++w3w1jqWLPHlongqRf5B9/ylMKbj3ymYG3BeXUTecnIOQNBNzj5RCNVulOyA9:fw3w1jqWLflongqRf5B9/ylMKX3ymYG5","tlshash":"b4d3634937e331359117f12a8e6fcc09b329a89f168add0e7a4c51f45f0893487f9ea9","first_seen":"2026-03-02T13:29:34.47714Z","last_seen":"2026-03-02T13:29:34.47714Z","times_seen":1,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/premium-addons-elementor/pafe-566.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/premium-addons-elementor/pafe-566.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0sLR87KYA6SBeP6rczxb0Ut69toE221lQ3cZV8Qx5njWml2UoeQKEtkK994AbhlI7pPKS3O9zZT9PPuo7d%2FWl5O%2BgDSy59%2Fs5SwYVeRm1exojG2b2r%2F\"}]}\r\netag: W/\"69a4a1ea-e64\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cf8abc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (388)","md5":"7ca4f91d2f44807c2f9753ac21eeb561","sha1":"aace1ad2359d4f09c5dff28ded4ee7421a1a11de","sha256":"19dcd3784bd1427ca2b590eb2f6af91b88acc989589bbd7db4b226a73ba06d13","sha512":"692a474900113d8a8a8302a0b45612f47654d13e940e46e72c3803ffbd522292d1a31c7d7c3945fa72f5646bc83cd4fac7ebe6852f1a4959a755bf8ee76df00b","ssdeep":"","tlshash":"3771322f3af7111981eb60576a6f5204f1246d6f6022cd11b81d43a04f2cdac77a6ff8","first_seen":"2026-03-02T13:29:34.480811Z","last_seen":"2026-03-02T13:29:34.480811Z","times_seen":1,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1-150x150.png","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1-150x150.png HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 28959\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-711f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJPZAGoIlPcE5CjnN3NHz%2FIpq1JfUJhjtJ8ImSObgh14rYL%2BPkXp%2BhZmhpBUnYewtdZmHpLzX5yOHUJfCJ%2FxtaNEXRRfRx1b4lx8LVubF8phEKVOGqMC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf674d7ac3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"a4d2d312c75468d62c8786c7b2f1078e","sha1":"207c7b26e9437e8c8a0c4416092152ee834d955b","sha256":"3f3f9b310912760aacbb95fcda7d5ab3d946d0e9e933fa564b1abc8cb998c011","sha512":"fcfd2c197d31b97a8acb777d1fae9f8b549ff0c8cec54b9774370cabea1a86a9980c10eded4a7eb581e4136b125fbc0a33eb7e1a586a892e44bf6fc06f57a4b7","ssdeep":"768:ZqnEPDiF2XUludSG1ebGwSGUWsDFqSg9suZ:knEPDiFwU0SfbNjUU9suZ","tlshash":"e6d2e0e2f2373fea58a52747191f863ce8486ac618e3d54cc754f9a5c6a6a91c73e300","first_seen":"2026-03-02T13:29:34.483585Z","last_seen":"2026-03-02T13:29:34.483585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/css/frontend.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-d58a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwj%2FXvu9syflwhhp84X7Hr3cePcbnE%2BJuK5ao7BvtVVgj%2BEvkMV2xyAlgRlH%2F3b59Q%2FH6TZd%2BCh80%2BSf01rcm9g7KsFsEwPeTnzkbPsJxwpEPSlPvDH2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5c8f60c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-08-16T12:30:26.377643Z","times_seen":72745,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/_nuxt/assets/index.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 22:51:44 GMT\r\netag: W/\"69a4c300-ec3e2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOPAMfN9IPDXqS6eB4rdb5B5D8%2ByjxsxZRJpKzLAacI52aRcpudkO618yMoZFmmmtbuZ8VquAkwlF5JSUX4nPgY7RajPOcRMXMLlmLfkswoX8R2WbsnE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd85bc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":967650,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63164), with no line terminators","md5":"7b60745c26bc97e8c858b1b91c6e4f10","sha1":"0d4e1e988b50ab0cfc465db87d8ffdb75fcca2d1","sha256":"5b07685fea29f847e7d91342a620bb760c885c5ad3926545c12b003b31d0955b","sha512":"dca6c2e71b8cef6119c08e0b6b34439f6e05b24b9cec59d3d309e8f71bc0434574ab740ca8aca76952b9200733d56c6292758c127469fe609a431abcc7dab66c","ssdeep":"12288:wLVOCUuiw7MSIEF5bvYiry/pnV/yF7g1fKcCxckTRR02pRSlD+lKYXmJ4nF7lGdm:wLVOCPiw7MSGsF7C58SkX","tlshash":"3425f9dfe971a2ad7dd47d862cd05cb51cd9e841f84e472872c2ec8c565c8a2f3a2782","first_seen":"2026-03-02T13:04:15.337723Z","last_seen":"2026-03-03T16:10:09.808731Z","times_seen":56,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1.png","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1.png HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpmnWFGy5MIJ5A5XwJkCKbZTFN39ZDo7wCJ97fCoEq4lOe%2BsKJPb6XHIYyyObaYFzFnEIE72z%2BF56KPkm%2BWQblQ%2BwGZr%2Bz22zkjEytGUyrTWE92vcHY8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5ce869c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/essential-addons-elementor/eael-566.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-566.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-2096a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEC5ZSiu8WN2mYUpsJQeeFptiDYUI2ZytUJbAL89L9WVtvpdu9Jn%2BK6x0%2Fs97dWhLKFmypkUmsLgxhNHLP6L0m3IEVd%2BKV6jJJ%2B24Po6kMyS8EFdGak%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cf8a8c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133482,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (614)","md5":"15364d33bd0b3ae96783b6f399b0c2ee","sha1":"82a206208aec2224d4a641f39d85a8b1e6fd1f9d","sha256":"e1ad597f1114480bb718876310844074b09e9f207f88774cb579e118c044f297","sha512":"4993814a5ea585ba788b89f22c0ec0cd89a8d41d5e99b93826351ab64b775eaac19b863a53a08d90df61d55b00ec4bbc734de5d0524063a02b97d7a98fae1075","ssdeep":"3072:++w3w1jqWLPHlongqRf5B9/ylMKbj3ymYG3BeXUTecnIOQNBNzj5RCNVulOyA9:fw3w1jqWLflongqRf5B9/ylMKX3ymYG5","tlshash":"b4d3634937e331359117f12a8e6fcc09b329a89f168add0e7a4c51f45f0893487f9ea9","first_seen":"2026-03-02T13:29:34.47714Z","last_seen":"2026-03-02T13:29:34.47714Z","times_seen":1,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1276\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXkfXGuOApHfZQS0mxKC2eXJmiGi8o104D%2FHeYH2xkeuqILJJoZYlHNfu%2BLASRjY4wA%2FBCsKoaFSEzJw61FXJlTMjCDtPtfG9RHONnssojnMj8IpSxjT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd817c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4726), with no line terminators","md5":"c5fd583e176fa5c734da0599bfa3dab0","sha1":"cb5471dfa3e203d47469046bc1533a7269c5e000","sha256":"398e2425ac154b75384c55af3fcb40cf68ef50e15714b9dda11bf54ee0b9fc35","sha512":"666a401784702b993c79d2868133b6a2541e283054f82c01ba510aa21070135259a6842ae45eb7d0a8502d2910a30ecc52f12104fd32afa83913e6ea916c4240","ssdeep":"96:jm1PrPhP7VSPdiDPvmRpwPRAE3wBfPJLFZkPhO:jm1PrPhP7VSPdiDPvUmPV3wBfPJLFZkE","tlshash":"53a1910238d32002192f951f0a53291c557588d8dcdbb9a6f862e7169bffdca376287d","first_seen":"2026-01-07T23:29:45.243297Z","last_seen":"2026-08-16T12:03:20.033667Z","times_seen":18983,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/elementor/css/post-32.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-32.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-17be3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=my%2BYzpq%2Btn3VbUVk5VnkR6f9L39ao5373UT9XuncjJ1MD%2BCFMY81UjdVAbA2M9Xkng073KhUMbJK5ylNfW3CKwCTCweUKk4WWUparXsxS3wMvPIUF4kn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd825c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97251,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36324)","md5":"bbacfe162e0dc460a313805cf55aa996","sha1":"88fd9edb9632dae8bc52c49f0868c0806aa9b0e4","sha256":"e55f663cf7f9b699bc5255a7055a4405b5e02392a0462339c0bc8fd01035d5d1","sha512":"ab105e294426dc337cad87be17a08b7cdc312d291af670b8d38ce96544b882409a2a8d5899a924ba5caa905b8fe1c485d5f0c7b510ca342b076292b336a4570d","ssdeep":"768:IvZVp/u0tmU42IRkc4NWGRKEDBQLQdzQ3fZzsDpLZSD/oR4aZAEkVhCcddWHyaqK:qd/ughDBQLQdzQ3fZzsDVrkVBnzFze","tlshash":"969369a07c139369b23f256f2047a59c39298ccad57e7ad6fc605113f4feda23390a16","first_seen":"2026-03-02T13:29:34.489769Z","last_seen":"2026-03-02T13:29:34.489769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/huge-icons.woff","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /huge-icons.woff HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/fonts/huge-icons/huge-icons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RgEOkN0fxWI7zulchRgytW6W9yCOwA2drUQLXwp0i1NWcbwiyAkwSGH8b04%2FlY9LYTlgJnnJKx%2FTgx3aH8MELSi47%2FZNHKH831ORh%2FVKfxl%2Fx%2F9K8GE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf61ce4ac3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/fonts/wpxpress.woff","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /fonts/wpxpress.woff HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/wp-content/plugins/smooth-back-to-top-button/assets/css/sbttb-fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=28TZPy3qQ4LV5I%2BBzdo5vP57sT4yTDykUFEOHeHh%2BxB7OJlltYqNFSJ%2BzJNo7A%2BPqxu%2BYuud5mX5gNt6%2BnWhDCXlkG%2B1TIusadubyapP3nlyA3dJ0lVX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf620ee5c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PizO04A5Kw1UuHIBVbFmiBjrWP1WOzk5Z9g7xGn258iQXOmoKXVLKfPAaecP6oWdD%2BZ3Ji%2BOLB7jv2vl%2BfokNchf4LAT53YPhCZX02yH%2BX21uFoANEnI\"}]}\r\netag: W/\"69a4a1ea-c6\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cd81cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"97db8103f62ef845cbe078e37073b483","sha1":"3c9d293b60aff72e6ae2c13fd5848565c0964d0c","sha256":"dad3795cefb3d9f5dc2cb4a6e621043322cc94cd90170f28f25b8a0c3eda7633","sha512":"873a257478fdb7ae3b1fa586e1ef97245f9381eadcc08811f95dc25f0fff20fa5f8137de00b18a1e27aa119fd6e622ef09c8c97e80dc425ac758555b430a0aad","ssdeep":"","tlshash":"2ad012f5ff0350080297032340ca2a5ac97cbec225111c7eb324100f00a384a778ba33","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-08-16T12:03:20.031752Z","times_seen":32824,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-14ba8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvGH2r%2BVuuO4c5Id8l7cgOe4KWgdRfLzVRwFN0lZv2iL321FgbQvGWiB4Z482OLMjl4CRfAVpRKu7I6RfVmFjvRwAcPg6FZ%2BiQbBn8G14qPXdGoA1MlF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cf8bfc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84904,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1377)","md5":"3575f037d762ae63e3669f0b69c49c64","sha1":"3b3efc7a95f70c8077b97b107147076d67a67631","sha256":"49b8d6f9ba3391f7dd7fea6e3e91c1281798e381ca9a9a36536aa2fdce71499c","sha512":"79f46cc52f1ad4bd62aa22adc0df152412093c534a152a4645f8ce3b0adfda0db05706d71659aae040514c98053f7328df940a3fa5348ea5ab96e80576bc86e2","ssdeep":"1536:gYRNCD7SQa9xoyVQn2k8B/sb3OVkSimyTwddXgGN+TGAAlTz0AhV7O:gYRNCD2foy+8BC39","tlshash":"6483110e3bf22525916bf0698b6f89097235a15f5a4add083d4c81e45f2883c57baffc","first_seen":"2026-03-02T13:29:34.492862Z","last_seen":"2026-03-02T13:29:34.492862Z","times_seen":1,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9G9%2BkY6fsjcFFzcBbk5LBrQl0OM9BjLXxfzdCe5kPseFSrSzSM1hLKLID8uKhk7390%2F9BKHgMSmMfsgrv5sQF%2BsEPhfCMTKCHGZudB7I0Ol24udhkLW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5d3995c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1-650x650.png","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1-650x650.png HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 355245\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-56bad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJNJlSAFUqG%2B0V7Tb9b%2F2SN%2FDJD7KwTrjzW5RsiOFu%2FS%2Br3TSXocy2%2B9d0EJjVSFVDGCvAXLVSMEUw%2BevO%2FYNkZUu2KuPqKHtVu03yKa6axhZZ8MTBt5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf674d77c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 650 x 650, 8-bit/color RGBA, non-interlaced","md5":"0f325d2f06229b3f7d3e0aefaa800d1a","sha1":"9756e397a02123abb1722896e94d0eb6195b0ed6","sha256":"ff43f367d6f2d085c019888beba39a9f6acd794cd3631fa40053b4df7912678b","sha512":"69fe1ba2a4a668e5030ab1fdcb0767e5809585da3988437a875a5ce13d296e70c2791124cfd7d83cd503401d5480f1efdb591662f678df0b731aee8dcadd6ff3","ssdeep":"6144:lzOHgLTOCUBUTWVz28wX7x43i+hJXVb/6B3HEy1saMTbGrndVfH4JQ7ctnzXL2Bv:lLFUBtz28wXdHuR/GUnaMTbGrvgJQ6X0","tlshash":"bc742327d009dfe1b093cd48be090b9b76b2402a13890775e451691ab5febb07fed6c9","first_seen":"2026-03-02T13:29:34.494457Z","last_seen":"2026-03-02T13:29:34.494457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.41_bdba0118-200x300.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.41_bdba0118-200x300.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10068\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-2754\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQMr9Wr8dX%2FY5ujVQZwbHsvV6y4k93oFMss%2BZtMLQi6CORxCFg6fQonZzYu%2FpmN26WQWXDAmpyn%2FWxLv1zQbNjjmXP6Jx7erRKnpvKijhL7Us%2F272ody\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c4a76c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10068,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 200x300, components 3","md5":"0310b2df04f3e27262fc9d1d9200f7c8","sha1":"7efc2fe4756c34bb88778239d71767dc1b1919c2","sha256":"3357dcf87da474a8b1166afb571d711ef110caa30c03187acf19eee76ca99272","sha512":"4998f0089c37c60cf38fb385694f5ec9b7e4fd6b2cb5b2847ca1219224af1c807d6a613b66438c01f0a8c54ef2cceb879fed6f9dda9b61e66ccb53d8101cc54f","ssdeep":"192:UYDdwFWRkJOLBu+yT8ZFdFy1DC/l7vH7tbyZzn+6eonB+7HObLe95a:FdwFWRkJEx68ZFdFy1DU1btb+nLeyeuF","tlshash":"eb22bfa58289409fdd6a1f3f820d618c4b82ade9c50ed2b140f8d847985ccf8df22675","first_seen":"2026-03-02T13:29:34.495876Z","last_seen":"2026-03-02T13:29:34.495876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qnRAfxUMHf8O5nSdMGUittaI68618phXo%2BuRpk4AQSXM3CKEAsZf6%2BPRcRSThm2%2F28QIVt9h33gXAL3v4AQei4ZIGHT5gT3VC01i8QDjFbVg44T6Mzb\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5caf8dc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":254643,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0482e7c2882468635165906aa2fd38d4","sha1":"5150c1d42f265f678e8f418e8afd001bbb4ada00","sha256":"6fdfe2612d57bb3dd503ff584d3383da29ac3682ac8643f014ebaabe406c7cbb","sha512":"057c881346a6fb32cd1892c9f7041031a9f1d39b6984f0a17933795fdfa6afe8da8e6c6df142db3cda502ce29af91f65e01577fdbdee56900aebe1f0b98ec223","ssdeep":"3072:SMBCqxtlVWRqIdFLJMjV504TQXC7UnJ0YxiY7lVIGvLBUqBYCH2B20iO619x/6dd:ZBOFLJMjV5es","tlshash":"6f44d851bf1e112a316f03dfd12f7a4c51689663c60c59eaf9b0927c94e8fa833d1b68","first_seen":"2026-03-02T13:29:34.498394Z","last_seen":"2026-03-02T13:29:34.498394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/css/widget-image.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5F2Hq3xlOy7dOAnMVRXVzVkQd0JXEIiTfmHKVX7%2FN5GXU0W6k9jgQ8nnOLuSXVcDGQ4rS3CwRPSLUhqdPJqYqdrcfFNxcv5bO6ER6oo2nJtpQTx3ASBJ\"}]}\r\netag: W/\"69a4a1ea-d6\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5ccfecc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-08-16T12:31:53.140102Z","times_seen":120241,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/js/frontend.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-b07d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BMV0DPCaMp8COOOkMdnmVsYanUA4Jnr4IlxEMTZwDoo994xUqbEHX5lHZXPP%2BXu8sRmXoXeVqEVE4QYNUQTxEr8Lex%2FMqgiTiLqyB%2Bh8mJgKZA3%2BJoYe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d192cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45181,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (676)","md5":"45f479a0763e00af5959ae579fb532d8","sha1":"13a763358789dba5a21b0220c45e9e15efc39f52","sha256":"b9dd665daa8be28f37dced2d4b489daa682e949e7eaae257280c4840c462dabc","sha512":"288ceb115d417a318d6b9ad56f67ceaf55d5289b86f58fd9605f53aa896e5485cbfa60e2250ef4c03f7f7e5be193da001c8a70b35a85c476b25d46c8320e228a","ssdeep":"768:1uvO78bBIf4OQ9z2/cawUbxzpApjRF5tOMAQbMjpRuC8mbyLLUms11vhKJzCldg5:1uWQlIf4OQk/9xzpApjRF56QbKRuC8mY","tlshash":"f813810a76f35435002bb07b2b2fd819b734848f248afd493a5c46959f54e78abf0be4","first_seen":"2025-11-15T12:15:53.928528Z","last_seen":"2026-03-02T13:29:34.501704Z","times_seen":2,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1df9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzKJydJxA3U302xemJ%2FMHbXwNUB%2FIFlgFLbkyHaX%2B%2BF5aB67mIk%2BXnkZ1J6EH6ggypHQN%2FjTei1oep6pmEHYXNc6kq8f0r4wvWBomOZscud7q8TWQQER\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d397bc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7673,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3233)","md5":"e5fbf77caa9ac610bff99ff177c7e863","sha1":"a9ef29d4a2bb8bd28cc5bc5bc300584600f91094","sha256":"4874e1fb53d23474a18ec42e071907a67a8844d722346202ad91d3584fc614d4","sha512":"06a300001b444238e988e20fd77c3c54dd262c6b31c62b137cb6b469cea62e607150c1395c6a256c91b4f861805420fc78c4a1b742f4996a4e73bb993033902f","ssdeep":"192:gqNaIQQaN6OiNcPDm/efS5yDZbbUFXC3iaWS+Ei54iiBKXvWPbxQU:9QfSW65EHGGCP54isKXuzxR","tlshash":"a8f1528806e95e3f259274b4b6979f20263ecd273804dd91f55c9ed80fe4d61c3ba9a0","first_seen":"2026-03-02T13:29:34.503302Z","last_seen":"2026-03-02T13:29:34.503302Z","times_seen":1,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-71bf3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5rvWHtps9BilszFb%2BO4sZffTnz7%2FRj8ZYLcIQUVlLjehsUzTqarI7mRjQvtj2ePP18p3Pvpq4flSE0hW1RIjMXwBDdMggI3VwcH0uFCFfA1P0KX%2BlTf3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cbfdcc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465907,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"538016d44935417717c64557df78169c","sha1":"d4c7a81e68f28419f39f743d94387812045fe6e9","sha256":"1d32c17fba9c8b0bfb06ef1ce79a977c5e88a9d5d1354a97cda018756d70f503","sha512":"b0e558ecd06701003695a6663ab2904a9f401c0e93b9a465cc255de34d9a52f9c78f86fe0432de76fd0f55b7f58ac4b342ba256d2731b07bbaa40e0506682ba1","ssdeep":"3072:ALq+M+EtwW0aNLfOVfjhWpGphoGVuTfefP:ALq+0twW0aJfOVfjhWpGphoGVyfefP","tlshash":"56a463565c523348913f8e1f93d99a5c1728c193e0a30ddeb2c26c1bc75aebd72ea607","first_seen":"2026-03-02T13:29:34.504604Z","last_seen":"2026-03-02T13:29:34.504604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/happyaddons/css/ha-32.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/happyaddons/css/ha-32.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6JJUNsELVErfEoXZ2saqqZ2q2AvUTEDTHDz6rBZt%2FgH0trt%2FS51BW0AO7jlb9fycrAPFi%2BL4u%2BTLr4wZ2NHrMegk4%2BmkXUBwaW56HOFxj7ZfPffpkC2\"}]}\r\netag: W/\"69a4a1ea-a79\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cd82ec3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2681,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2681), with no line terminators","md5":"ab9d392b83bcdfe33a31bfc041006e9b","sha1":"705e37c82d38dcc5a6721890a5fcc75ae4ce3215","sha256":"08d27ae42e1f29ba278f08ea26f674ce46ab47f54bf5843f938edfed8f6ab8bc","sha512":"4fadb74ee38731238b798053efebed8c0b173f39071be180507e81819147541eef057ad36ce9cedb0ef11daa03d0d4bfeab3d5301f7262e30f07e01a594db5cb","ssdeep":"","tlshash":"475142226f6e3917e12bda26f589f24a6164c122da564f64b542310cc23f6f53d33be3","first_seen":"2026-03-02T13:29:34.505989Z","last_seen":"2026-03-02T13:29:34.505989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/jquery/jquery.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1e2a3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2B2HFD92pyAzvKTHi%2F%2Bn0eoxYIzfOr2L%2FPRj5L2aYqbrsyJ%2BG5%2FKHFm%2FH8XcUUV0MORwkKd601r0%2FaKA5vP8WhuzSLW%2FzfQm7BAT1V2vtc7DYaZPAgkx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd837c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123555,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (857)","md5":"14f434dc45cced60d8690b9ce85f90c8","sha1":"0af5a5b0dc17465869a9d8aba2bdb2f2f8bf0d19","sha256":"6f96c0a5fbd65c6b778a3314ef2c8e3d6ac58a09ee9ce5b9862326c640cca5aa","sha512":"1c1899dfd83fe517ebc02b7466bb28c9f5f6557b234a607c62a53adf84d2869c85bdc46effc543b43574a43167f2d9664bac1e948cc491c531e32a097a386201","ssdeep":"3072:JZtoN7ML/MUIwLHGJPZ/erc5FJgFbSUhMB9zWfI9:JZtOML/MUIwLmJPZ/erc5F0bSBzWw","tlshash":"33c3309a7aeb21319117f0b98a6fcc08b135544f168dde057d4c82a59f1483897fafec","first_seen":"2025-11-15T12:15:53.931507Z","last_seen":"2026-06-08T05:34:26.191288Z","times_seen":4,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDdeKSwfeypsB8zUuxgQ2Cr%2FScvnKPG6G%2BkwSyG59Pf%2F5YjuaBisX4NKz52Lr62z5CZLeH9t7KGQWJoR%2BVi%2FQaLHINUiF3fXcbNpjCW0SakdQUYB2aam\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf621f02c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Mar 2026 13:28:58 GMT\r\ndate: Mon, 02 Mar 2026 13:28:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-16T12:09:58.890345Z","times_seen":40699,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":64,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/css/helper-parts.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/qi-addons-for-elementor/assets/css/helper-parts.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-79eb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CsUgVxdAeBOGzKMdfNkjyjL0fr5F%2Fy5qvq3gj%2BbYaKmdckKrhpUWi1MLVU2b0KIfjaX2mlRGAPV7%2ByMT6oRo93LNvwNO5zV1CdkRjwuDCjeSREeeZyXt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cbfbfc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31211,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31211), with no line terminators","md5":"27d90ccde5c6d66439b65cd717c84664","sha1":"3319fe1540ee148fd12606a299f7987ccb79b7ea","sha256":"1a0a8134b3abb640bf943b3e72c11b1c45fdb33548073b9746b38983b44aa048","sha512":"034d17c3571c3a1135e09f6471c180c57caa24f74a86a890e229a41e50cd8ab5ff85bbf40229d33147c25d2c04756f5e66c69633f7ce92a09cf6a06b046fd672","ssdeep":"768:Q0wvxOH6Z6gGNeBuQc+eSzmANlQdgWzLVTGY1JvIflmChux9ACEM+/bKtrWU:twvxOH6Z6gGNeBuQc+eSzmANlQdgWzLh","tlshash":"97e224b207806b35d3a20e2ed1e152705f2589c2daf369d8f1919f8dc0fa8b5631edd9","first_seen":"2025-05-31T12:17:19.737566Z","last_seen":"2026-08-16T12:53:04.201114Z","times_seen":3524,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/jquery/ui/core.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-5f96\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r0PyUBpV%2FPZtXka02YVpYOfXJXVXPXQPgExKtg6Gw339O4QMY5eAnjH3X0z3cIcAa4HfRJIaVuusFGHa%2B%2F4T4r9kL3g0Sd7xmG0RatnENyp0XlggBoA%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d08dfc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24470,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (396)","md5":"3254d68e97168eccfe0f124081cc0e85","sha1":"ae5236d6e4b9a8f6804c2b66777625b9e803ad23","sha256":"c2635deb201de520735fc9e711e683118c577bc30821c61eefe9106051e3282b","sha512":"af58b8ab837d6f127aca74bf4adaeaddddd03b1e76a54d22367d2e33f66e03c0e7cdf63401b9dc019c897c2bee6bcba754d581a41b3be4ec4e5cfd836fe49465","ssdeep":"384:ExdvZ1D3hp5nM+hql5OZYQV2VYB5E0joZHGZV+UMfDBL:I93fJ0QVyUoZmWUMfDR","tlshash":"f0b2210967e32524e5abf0a9591f8909b331a49f1b89ec0c7e5c86d48f1583843f6fbd","first_seen":"2025-11-15T12:15:53.944624Z","last_seen":"2026-06-08T05:34:26.167118Z","times_seen":4,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/elements-handler.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/elements-handler.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXNa%2FmSo1Cai18SkKsSKtEKBtt%2FyBd4o1sRdL4P%2Bf6jI%2FPYqzZ%2FIzFKWyNoOD8PC8S2%2F%2Fgt%2BurCYFJ6XyxuLuDP6y8crRvCA%2BkUoMLedUX%2FNMVohDeVi\"}]}\r\netag: W/\"69a4a1ea-e3\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5d294dc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e4a3aad728d24d9fdf78ecb171434593","sha1":"10b9d6e300fbd335ac6239775e344ccd9362c476","sha256":"81ff4e8ca69c7a61c65a0fe75b5d0c94d0777bd9a5355f0d8b173dfc95c7096f","sha512":"3b9f07c87b7d38b0677f371896f8e58b08d3859fe6b7a1336bd74d760b5efa7aaa2ca2662b37938a813063bf59ce1dd98abeaadc36e86ad1395165f1c0f5b42c","ssdeep":"","tlshash":"8dd0a78e7dd8720c80fe008d0707b22b3309452194945fa073ee00183f31ecba5704c8","first_seen":"2026-03-02T13:29:34.512447Z","last_seen":"2026-03-02T13:29:34.512447Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1.png","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1.png HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IR3wtaTZb2t5RWUZw554G%2FGPoXAcEkSRIcb6ijU6P5HZ%2FtahFxYJo9phFO561%2B%2BzQzPj58kn3q8w9CMsiZVXhkONOWOy1z%2BLeCFuhSkbJcL63EpvGTtb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf6069e9c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/essential-addons-elementor/eael-566.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-566.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1e42\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIxaS%2FGcrDVCQv%2BbP3%2FRCPpxnHAZLqN8%2FWMFjOKgcrVeFeS7rRT64jxumREJAGpxNNHLlZWPsd71UrA18IAhj4BEY3NOzeBoL5MUY8Kntav0NhLV3qyV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5c9f7bc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7746,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7745)","md5":"84e9faf79071506b26972607fba4a77b","sha1":"ed2f91660e67dd1f5abe015bebede7605e8989cf","sha256":"96102022182a1acb5f4755104dd3f246c5826140767d6da628271ba0e2b0068e","sha512":"198dceda6384eb0b6f2f853252d4aa1c2e874555bc51aacff67f4158cb95a1da7c04bd3de7d460838975824d9a177312d48e8ae78f6a3e12412794449bfdd54f","ssdeep":"192:8USu7icfgjw1aGbXIOjS5MLE88slOhyga5wX2cd:Z/Dzp5wX2cd","tlshash":"b0f1dd237b37b3481567e53ea2ce2bb87275c2a5d2030dd9e4f1a218d3de9d4172258c","first_seen":"2025-09-18T15:25:21.725716Z","last_seen":"2026-08-16T12:18:52.57752Z","times_seen":29652,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/essential-addons-elementor/eael-32.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-32.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-2e30\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTzu3VYMTqbtJjsBAvB0kJso0eC7ug0fiaPURHMnUfQIl0Kxd9VLpIahd70jIJeipZK%2FTSZubAhHjhQoj7bA%2Fgk7PUbw%2FLPvJQTRxYWz%2FlltW5x1wuID\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cbfcfc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11824,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7745)","md5":"eb31a296acc287b5a5a5d62d12cffede","sha1":"e75ff7d5f33c34b2746b9118a1d9524772df73ad","sha256":"2678399ffec62244db2ceeaa4f0c0db56501d1234ab6d7b3dea9c3ed706fec86","sha512":"aa3d22ef4f4a4e42b6898718fee7cac275975d09cab54d407b71390765e6eb66669f04d0dd3935dbc5f74305ae2bb4ab7e557c2ed0c9e0371d4e7bb01eea1220","ssdeep":"192:8USu7icfgjw1aGbXIOjS5MLE88slOhyga5wX2cxUMwo6pncsuaoB6pncsuao/5Vp:Z/Dzp5wX2cxUM76pncsuaY6pncsuai5L","tlshash":"bb325263bb3363082863e53ea7df6b9c73b591a2d2030dd8e4b2511897ee9f8476414d","first_seen":"2025-11-20T04:23:52.187996Z","last_seen":"2026-07-25T03:37:05.737273Z","times_seen":20,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLXdtY1nh928sRdHYs6m0UWYD4syRu0cdZdVFBGZ5I80k62g0%2F8bEVgUGiyhBIum%2FP33BnzQo58PoMli3pY3Wut%2BydcBeGD8p8QB4H9kKf3sOw22UZAr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5d398cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-skew.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-skew.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xxdADncdn5FUcYxLqdwN4xcn1s1ewTXpFseVOHEtMEWSSP7j%2F%2F7sR0ExTzPVBm%2BVrDmt9dnUAKyOE%2FF8D0a%2FqSeep7eg8CppGTIENRGYMMxxoRpTaH6l\"}]}\r\netag: W/\"69a4a1ea-c8\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cc80dc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"f1a6830c68a7cb4c780dd9344e732779","sha1":"e42e47575da5d3b6d0717084897b232dc49a4bb4","sha256":"659bc141bc7242592ad111a4bbd80dcc978802ce58d580dda1ffc4e628dfb8b7","sha512":"3398094e530810d844ff6248562ce929ecca7fa85bb7729510d9b1b110498b02ecdb437d064fa5f0eb20961b46d26e4ca86807e0bf8828a0974977f7ed8fa392","ssdeep":"","tlshash":"59d012d1fe0350d8019b422348cb0628e9759ec516b21c7eb328100f052084a6343f33","first_seen":"2025-02-18T04:26:12.462608Z","last_seen":"2026-08-15T19:49:25.460509Z","times_seen":250,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-6db2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfhtr0oOHLMtiwB0w%2BJtBMArr49IAbgr9fxOv49A2yhgoNYKVBfPZzuSoN4bQisQTDv%2Bc4izpsLy7hwx6IMmatvZcAIWgPNjREkjrJQtTcDZ5CDOwbUn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd850c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28082,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7433)","md5":"0f6917d11c24d85a1baeecaefddab453","sha1":"615c162914cb8b4178b8f42e3597fb6da9057e57","sha256":"a8b25bdd21a8f754eafb90a4e83a89687bc67788d7b776b98c84870fec55e673","sha512":"42544979bd8af1631f83b07837204af325d8ffa6987f5ea0172831113fb54d4e88ec2fcdba60f6a3657502692b49dc23de951ea4fe24decbc353d74447c4b881","ssdeep":"768:8bhtTIBzE6RurtqD3aykCnNnv8n9DexkvEfK9kOefe8Edagqh:W+hG+3ahCnNnv8n9CxkviKyOe0Fqh","tlshash":"c6c2956865e3213701b3f06965abdd49b334811f1349ed4d3a8d8a646f8cc38a2b7f9d","first_seen":"2026-03-02T13:29:34.516804Z","last_seen":"2026-03-02T13:29:34.516804Z","times_seen":1,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/essential-addons-elementor/eael-32.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-32.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jMVRAmlXVjmjLkSXA6t60GafHrXnX4vnL0GiblZkC%2B9JR9u51tVNDMxtNLIalgOUwopp0dQ0noBeXWsevaxATdg7SeOEFYJlkw9aeg2WOqZ60zYaW1j\"}]}\r\netag: W/\"69a4a1ea-0\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5d08ffc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T12:31:28.718761Z","times_seen":17918613,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-12-06-at-13.32.00_f9457829-1-200x300.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-12-06-at-13.32.00_f9457829-1-200x300.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11386\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-2c7a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h0TNGfCcSI5Dmj0ujx5dcl4sn34m3qbLnr0hfTcy5z2YZTuDmJSTnq3rucFmMYbi0moWDxmHd1ypAAUD7W4DXQI91azVN5j4MGw1srXRIyv9Grkf0Ih9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c5aa1c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11386,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x300, components 1","md5":"83c6b4fa4ab04b827018df7bdc6eb287","sha1":"4ff8a86d2b8eaa33af056ccb88762c47bc4606bb","sha256":"84c5688f40d8f152fdaa560480f77e4b2be546ca827d8fbfa8ee586abfe2e9da","sha512":"651a454f9a3d698dd4ba118f581d637061949621c3edb4e50b2930e3f5c230bd7cdb22be78de0d1c2370c4d292eb06052df22abac50897aa49651e387de5b154","ssdeep":"192:of6h9BZbGePMfYB9zKvQGtqpx6PiZBolPvDy/W9VxZmIfBiPwHljgMQJdouYKsO:oihPlzzKvQLx6Pq2PYW9Ui48lxE+fO","tlshash":"a632c086daeec01f816e3298f1c4ae301e93c68f13f39a5e0c58d47782666066e37c60","first_seen":"2026-03-02T13:29:34.518525Z","last_seen":"2026-03-02T13:29:34.518525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/css/grid.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/qi-addons-for-elementor/assets/css/grid.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-af6b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASk2ab8%2FKbUrI3Ok7My0NK%2FulDrZ%2Fh2TT1VFyxNMvHhid%2FAOWatN4QVkmo3ALXGlHo52NTquj9NZc3YFwOlx5gjHD09a2Ho0Vo1XrWaoKzL7UbcL7WO%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cbfb5c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44907,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (44907), with no line terminators","md5":"ceaca2a20b2976e65851aeefd7e6ed7d","sha1":"b9d5bc2d63b89aad22a3c60a0e07a121aa76136f","sha256":"1914de5e11239bfbb5a5327a3f88d8c790979edc55f98868fcb1d4677df5ded0","sha512":"956b40d626b0560c24cf7a386a5b7da9a47d6cc07f0a89763e48082a43dc52b2696bf8878c32146aa16a16732091b87340e58f67db5ec4d76a0d3e523917f1eb","ssdeep":"384:7Z4zW98jWyNU05B12CypHpzpfpjZG9SR15zRBhzBFR7xJtsV+iYjQmQGcG4Gsx1a:9","tlshash":"da13a1b79cba373d81ee341dd4d63c1927645922ff4820d4f041972e64e4686a43eeaf","first_seen":"2025-05-31T12:17:19.84242Z","last_seen":"2026-08-16T12:53:04.176769Z","times_seen":3554,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/plugins/swiper/8.4.5/swiper.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/qi-addons-for-elementor/assets/plugins/swiper/8.4.5/swiper.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-4056\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0OLUwrCgU8h8jA%2FWofXsdCvRm0%2B9KBHkvL6DKza33tWluQAxWegOu1Ls0d0XmwchAQqh4ft7fyxQzOnoKbE2Lu%2FoAu1rXZNoWMiTdui55vz6PsBguvLZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cbfc5c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16470,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16213)","md5":"fe4bcfbf64bd974c68c70c65013c3382","sha1":"9274052cf85deea4c54bc8a0006a848b8e46d548","sha256":"82ef200ece01e84b0387a394dd784b93e1a677f8b2efed9d6b79f61d3084121a","sha512":"a2490b701244f94d7d0e977441d1c0d709f8618eab5b70b06b178b253dc99a3f5970d49b967fd5630f1476a5d12302d7ec9f0f9ad1ecd08fc53c0868cc5bd72a","ssdeep":"192:IbWmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IHUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"b37223681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-06T16:52:24Z","last_seen":"2026-08-16T12:53:04.215544Z","times_seen":4942,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uizygX0hyeMp11rZfFr40fCdtulCokyHlDOKaFfOCLfqrNmTLxeffGfl%2FNXbqJGQOtmYxIzsegG%2FedZpDpoxtf8fMcwv1mglEsrkPqMJ233y6LcH%2BGJi\"}]}\r\netag: W/\"69a4a1ea-c8d\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cbfd8c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3213,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"501a5efa5fe6f6678588b6c9e0c318d1","sha1":"a73bf6fa185d16b4048a258bf33162a3dc74e0de","sha256":"d45601b3c0ae654ffc870d9f72e810d4313b32af5ff3f5f29f2e2d5df8b57b19","sha512":"f98e00f388f0f98eb5a824bc900d0d4b0c49fc5b1143b92bee020c28a5687b6ade4be5ecb467e0907aaf2eb9678e5e0c6484aa329a573da9cce622cd89b97996","ssdeep":"","tlshash":"72617cc17da72a086337c19ce1d73738fa7c9942d3500c6ef24e196f0ba2ac9516d662","first_seen":"2025-06-27T19:06:20.235245Z","last_seen":"2026-08-16T05:28:56.213167Z","times_seen":4164,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1-150x150.png","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-12-10-at-23.56.11_0deaa4e3-1-150x150.png HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 28959\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-711f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZMHroi3%2B8oD29asER9AcnLysaDjYnRvUDo4iM7FBjKRjaRZ8vo1G4Pgh%2BbxcHpZ3KfUzaMdUsMdFz%2FBIaeUU8anNvFb2oEd2FKaEnl5thxivlimOvJe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5ce886c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"a4d2d312c75468d62c8786c7b2f1078e","sha1":"207c7b26e9437e8c8a0c4416092152ee834d955b","sha256":"3f3f9b310912760aacbb95fcda7d5ab3d946d0e9e933fa564b1abc8cb998c011","sha512":"fcfd2c197d31b97a8acb777d1fae9f8b549ff0c8cec54b9774370cabea1a86a9980c10eded4a7eb581e4136b125fbc0a33eb7e1a586a892e44bf6fc06f57a4b7","ssdeep":"768:ZqnEPDiF2XUludSG1ebGwSGUWsDFqSg9suZ:knEPDiFwU0SfbNjUU9suZ","tlshash":"e6d2e0e2f2373fea58a52747191f863ce8486ac618e3d54cc754f9a5c6a6a91c73e300","first_seen":"2026-03-02T13:29:34.483585Z","last_seen":"2026-03-02T13:29:34.483585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thecatwifmask.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"thecatwifmask.com","domain":"thecatwifmask.com","tld":"com"},"ip":{"addr":"162.254.39.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thecatwifmask.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:4A:9C:67:45:53:7D:54:BE:79:BC:7B:73:0D:3D:D1:10:43:F7:2E","sha256":"03:B3:E8:A5:C6:85:B4:FF:3D:A6:B9:96:62:C1:02:59:F4:85:79:6B:D0:FE:10:02:47:8E:5E:D0:45:33:3D:08"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: thecatwifmask.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 592\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-08-16T12:32:30.614285Z","times_seen":129611,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.50_f1b69e76-300x295.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.50_f1b69e76-300x295.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23925\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-5d75\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESdqoEc7Mp5NZdqTKFQc%2Fpr4p0On0pihu40GIMek4EpiTx5utiwb2jzG3AWipl5bXSsDn2TSaJf%2FV%2FuzCcDyVqxYhdGcjQ7ANvVdwLHJ4T%2By3dzsUy1Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c4a89c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x295, components 3","md5":"31fb5cf0c8c5758781121325965d2e94","sha1":"247cad3145e3994fa27bd0fd2c8992c6dcce0bc0","sha256":"bdacbc0183de5252cc1335fd7d7b165920ea3477fa4c5a9f69ab5f7f68403f9e","sha512":"166c61a8fe7b8bbb0f126e00736be878f982b12912d6ea177af361f9af84af09d7a11de4702b1a344981d0c0fc2aa3d3eec2ebd0c437ba73770e38496fdcaffc","ssdeep":"384:SkIqyJJBGYe4lDF7CNwrVVxLSHf8KM5vgB7wc8j2afffGJ3qbJUTt:SkPy917wwhVxLSHf6Jg+2WHGVqbJ4t","tlshash":"0bb2d0dbee10a21aea7d8ebb4f91838d41b1c887d22dde05c172c3968d498c274f1b57","first_seen":"2026-03-02T13:29:34.52217Z","last_seen":"2026-03-02T13:29:34.52217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-skew-forward.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-skew-forward.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLKkZog1VxMsrPYryJUpWlXYsjg2OMt8PmPh9CFmkOm9xyATOaUAuYPnN8RJrAPK7cWF%2FgXvxuU233w3Lu%2BfjbMjunFYx%2Bif3R0T%2BcaPNWV2z81lOVDy\"}]}\r\netag: W/\"69a4a1ea-100\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cd81fc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"07de771819c8267cf5178d0cd18f7362","sha1":"c6dd2b6588e903848aea0d9198456b488080c92e","sha256":"e11c2bed5f4a07f9617f91442b7e423bbe6af02040967e8ffa47ddbd22fba8db","sha512":"3aa22728ea3bcfe7e927f37a2660efbbe946c27b0590bcf0d0e88629fa762a8b1298fc321765f5728e5d0f6a511743e388a17aeae2af90f19b6e2dedb52fd93b","ssdeep":"","tlshash":"38d09ed5fe0350d8025f42a344ce1b29d9398fc716725aaef724214f0212c49e393fa3","first_seen":"2025-03-05T18:49:00.158908Z","last_seen":"2026-08-02T15:18:19.158901Z","times_seen":208,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/gtranslate/js/float.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/js/float.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-5af0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19HCfjuysolImboNHzyK2j3y8PKw7yhBuVUdbJYF2Aq2P%2FC773HKF%2F3IODMKmXWs2uTiLLs8wfi1jCeBe5F%2FqJkQnccGpevou1CdE7jhmeBQiKI9qscz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d2957c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23280,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (671)","md5":"62a13341ad839d1638e4b77042a8f4c8","sha1":"cba4b91bcfbf8b4b02d74e11dba85763972e5aad","sha256":"a851c5dd043bc8c0e1c3e7df39eef469944ec33a69ad8bd090bced031045fdeb","sha512":"02c329020c849be8f4a0927ebd8dc82ca93ba49bf670ad30be47395ef4b5c1ecc8c1e20dc4997b1f8af54d157d8382a834bca4ed4049eba0eed45f4e8328fc11","ssdeep":"384:qfhB8zZbezuc5EdgFoxqoLlWyZrW3BSslDAIiwUi/RZSLI2f:qffmZKzuc5EdgFoxvlWyZrW3BScio/HS","tlshash":"75a2b529d1a20c3740132162ae9e1654b12943a74d08fc143f9ee9ce9f9d5bf4ab36fd","first_seen":"2026-03-02T13:29:34.52507Z","last_seen":"2026-03-02T13:29:34.52507Z","times_seen":1,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/dist/hooks.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-2084\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNT7tTgAgicLANy0u9lfEXtcEZ5rCZvEJhnLQW118TMmlSBpqUcEn7C3BX4QAsJNek6GyiVSDSxZT9bfQPJJ2vOnXwNjxjTgB1JsAkTjEenbVDBWexvw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d2969c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8324,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (907)","md5":"b8474f0caa9096933eaf614e78f7bce7","sha1":"5832306f8a7829247567576f5a820fffefc6562d","sha256":"0be78e16490e6c097823ce5763955ec7e23d50f64942bb06c46b79487cbb0731","sha512":"d03d03146c5b8a89e20ae29be39f2e7a2b4d5c27ef4c48b904c2a6bdf42b94a9e28d62eb992a810284f40c1236141d94d0d96f0c741ea1dae896bacb98c3dd7e","ssdeep":"192:wPlp9z2+aJf3Ni5k2egIGtmmomH8TuL7RJU3aiKrBznm5IP7SG11Fmw79:wPf1/WwL7RJUAw4Fd","tlshash":"5d02da087be33539a123b06ebbaf985532346a57355ad9043e8d92601f9306cd2f7bdc","first_seen":"2026-03-02T13:29:34.526554Z","last_seen":"2026-06-08T05:34:26.024039Z","times_seen":2,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.00_b5409d50-300x295.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.00_b5409d50-300x295.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21031\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-5227\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rj9w3zDKk3sknlO%2BcThpFNXf0UwnF%2BTIAOtQc7EpcG%2FfzZYjjPw%2FapN6bEGLrpttQ%2BL9iJQ9E51uD9dD0b0H43bIPaoGaGUjmiM7SAhts64BBaM939rM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf686881c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x295, components 3","md5":"0988147b880b123a1452940b9839b306","sha1":"a40c58fd05e623d6691abb39b94e6035a5151d1c","sha256":"e04ada12c7fa8a1a5845c1efa0c4d988ed7fe85c0cb865f23c24de7b09012294","sha512":"446f4ea72e9c83a2c248b3317d3a9274d8b1863951f4ae2222a7f7f348ad3c6a117992629f59322964409f4b6fc32479924c5f3e80720b424eb6420a3e0b608c","ssdeep":"384:xODJwzIRADPNAcTnple3ZsaitYdKBQjSZ6G7UqZ46laElV6d+il/G3kb67QwBdu/:xOezIRAycT7raiR6G14IaEr4leUbep2/","tlshash":"6592e1b858452d2d2638fee90e225c50bb11be3dd10e8dad74f4d1b19b950e53cae82b","first_seen":"2026-03-02T13:29:34.527884Z","last_seen":"2026-03-02T13:29:34.527884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/pro-elements/assets/css/modules/motion-fx.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/css/modules/motion-fx.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TeRAbaLVh%2B2d0BnTjvu9sKd37eBhemveBRo0C9naSvloTpc1wLlV%2FW2saRCclRvJOdJ3rEvKbV3gBYVK25kR85TwLeN3LNU7ktxXXfZggUGAgc%2Bd3vtN\"}]}\r\netag: W/\"69a4a1ea-27f\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cc80fc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (639), with no line terminators","md5":"6d180d78e8bd987bf69cb955f57f329a","sha1":"25e551c7acb0a4cbae1c94ed9fd7fbb46554d513","sha256":"f16c3ea44afc678d334551e6d587690abe2c70306c21cbd41bf675cefe9efe6c","sha512":"a8d126f26f645b4aa275d14518016bf6f9680a3ad4233ccd4dd6cb5067e157cea173f62683a481ea12c60991677d665888a851aa10e063d8ef16445ae59d4a12","ssdeep":"","tlshash":"73f0ac5b3e076138545f530582e5ed0c9239cecba507a59efb15809b41df9a82193947","first_seen":"2024-10-30T12:19:50.324239Z","last_seen":"2026-08-16T08:56:34.17687Z","times_seen":8621,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/jquery.isotope.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/jquery.isotope.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1204e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1z3kyiks1uZa%2FoxwTQtTfuH47KITwPKuqy%2FtnAdPTHTCSsi5PqhfBNXMt3OVdqd%2BjLjDY8S1L28IbCBo6bnBCPlq6g1xpgj5HxX%2FhZ%2F1KD214O6dZOnR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d193cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73806,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (340)","md5":"9c84a56a6aab939e64d6da2f6ab57d4c","sha1":"ea962e1746ece95f06183f3ec3fca2ac73023481","sha256":"3cffd300b2b453da76dc56e68dc7bf0497057cc7e51f36c5062c8f46094878a8","sha512":"205f439cc9a9b16a088cd9d51b906901022c6af814bfc7b7504812c0b42d821c8a93fb47d079c89af9de6f0d9dde6e7e66d140ba53e6f009e05f5ba20868e720","ssdeep":"1536:7Xkh4cxRPwKX6+KBAk3cb3cWn826On80u:4h4YCD3cb3cI826On+","tlshash":"3a730e482ee72524a51770be9f9f60097278801f1119d904be8ce7e46fa583942faffd","first_seen":"2026-03-02T13:29:34.530386Z","last_seen":"2026-03-02T13:29:34.530386Z","times_seen":1,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/api/is-banned","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://catwifmaskmigration.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:58 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7iDyFxZOztFfrBZO4XotJFb2qZ14tr8gKHoJuqdJIbfqCyV80qs1Qp1zaGtnF1EpMcbwIselM9AUPRl8cvcM72QIIWphceywjGHbL%2FY09zL%2BNckZqOF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf657ff1c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-08-16T12:08:33.835641Z","times_seen":119620,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/api/config","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://catwifmaskmigration.xyz/\r\ncontent-language: en-US,q=0.8;en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:58 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVCxTYiFj9tC1Pd8IQ0KSUaB%2BQolh6IqWpA5pabGGvQDjl0aaXQokH1a9i1nZVqHtRTsTNNfVmIHNr3MPSZm5kddRNfPnpwQ%2BLPho38bmIDjFQ651dnQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf658ff6c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"5a38163c7f2f4950907a0c1b560870dc","sha1":"54dfb2c3e4fb259a643bd12589341f9b90b9b9c2","sha256":"36d163d1d34d3c2070d2aa97dc4e1a9cb82f89defc2ebb44db61e747b96138ae","sha512":"a060936ad6656fb8bad80f767af8087f98935cd30b2413ead4f1ca8942e172d22d2dc61b78964d1001681b9d03f3ef51d4bc5488719186273384916ca035a09b","ssdeep":"","tlshash":"d5e0e7d0b1908b3f2580116419df65c4d08707045c1c0035c0d1adf0d23354e99d587c","first_seen":"2026-03-02T13:29:34.532327Z","last_seen":"2026-03-02T13:29:34.532327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.46_b3eec982-200x300.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.46_b3eec982-200x300.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15016\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-3aa8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUNG42xctmnyxqRyPjwEM7u%2F8GCjmwLrLjqvSLofgkaxQtp1ij5jwNe553hQDlSPge7kZ7j1kbIKANwKZT1wJFpztuSXr6QSvURxWc4ZIlBW%2FaqNSbQZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c5a9bc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15016,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x300, components 3","md5":"2acdf339b9bf773b8571448a8a11bf6e","sha1":"272287c120db17bbbff6d1184a7551a965f17cd9","sha256":"db498a83f0c6e02015d2975ea5a9e860303983827c48829a103ad0915b3ae7cc","sha512":"0ab7c1ca7569aab5d1c182c9d0dd42808b6bf1f598b51894380dbea7257cb7715d5229a36ecb7b18c16af38a1aa2defb5cef1dfa98e4e2429204039a3ee0d0c4","ssdeep":"384:SdKj0ZSxzq03SRkk+wn0Kat7kLoXnt2hP0Qx41P45Ud:iKNzxSmk+wn07wo36XxKd","tlshash":"ed62cf83991e4192d4ac1ddcde0666366df1abfa24a10babae3dd978223d9f89041131","first_seen":"2026-03-02T13:29:34.533914Z","last_seen":"2026-03-02T13:29:34.533914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/themes/astra/assets/css/minified/main.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-b2b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPNf3tS9yJ7XSgtb4APsyYZ80DwlVQxWzU1kHxX4Y%2BL8OUGQf%2Fd54hxzMQaKXW9CnnZLWWx3e4V2cxv%2Fn6%2Fqnr1QpJOcTS0KGdUnvcZCjRghsJQDovEb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5c8f5cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43567)","md5":"42496634dc1c555e846841a0080ada59","sha1":"9e2de8d81b0caa2745f374746c60a223c1ba27d7","sha256":"a8ff2f0b3249b1dbadfe779835a4b29346af2941144d12d2f95c2a6e505f4088","sha512":"68529399c5c478f9d4a9ce838ee0bc39e4a36e0f89e88633e4840795957f3146da15d8b6bc81e308f464dffb6bfe080bc42797fd4c3939f05259a99a562dbf8f","ssdeep":"768:mPcOrP1rhDYollnk+FHk3YCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:AnYY+tHQtBU5PTwDuaP","tlshash":"6823f96043d035391233873efad6b9082b694313d74f26e6f8ab8668c9c57d71a72e4c","first_seen":"2026-01-21T20:47:01.725402Z","last_seen":"2026-08-15T08:12:40.777227Z","times_seen":6425,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2026/01/WhatsApp-Image-2026-01-02-at-10.33.10-PM-1-300x300.jpeg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/WhatsApp-Image-2026-01-02-at-10.33.10-PM-1-300x300.jpeg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9725\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-25fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2ImQzsyjurT2h4rhBUOgRJYPdkKi6g0AvoH%2Fm9dSuBS1D5aPSgGfiEhSoeXPjhQgkk%2BnR45rNKeBxu%2BbgvWeuC0fwlCGMJP3VkacswIV%2FiwE7oDIISj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf686893c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9725,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"9a1c8ac909b49ff91552e8a285e36b62","sha1":"7afa1517aa1a81843277846e18c907d77fd09352","sha256":"23a94fbc127e3d85250013606b9189208165967abacdd8991f5fb49449f711a6","sha512":"5aee3f9e0a5cd358f785b6f3b05f2a9a606c2cc73ee64d70df5bd21460708912e90cc0022331678806f354beacca920c4731922e671d55a2487fdffcaf594a39","ssdeep":"192:MUGWpo5hSioc7v22gEtvfki6DFHrPBrvlWM39tmPGwECxgzu7J6trG1:9e5hSI5kiUFHNrx9S5jK06trI","tlshash":"f912bf0f68a9a13bd155bc3b19e205697b204c5fb412d95d0fb9d9ce032b4c62e13d66","first_seen":"2026-03-02T13:29:34.536232Z","last_seen":"2026-03-02T13:29:34.536232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-12-06-at-13.32.18_4660096d-1-293x300.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-12-06-at-13.32.18_4660096d-1-293x300.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3653\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-e45\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNgoUH1H3kOa%2B%2FF7598WGu%2FN8rOeYD2iAbEr805bpAo8%2BFuQJZPNqFydW9mz0yaXtKpAdALnsbVizsUHjOLrzcBpHF%2BzVqvYqrSCalHpqAiNe1gJiLEK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c5aaac3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 293x300, components 3","md5":"527ddabcd93c706a00d0044879754f89","sha1":"b4803f6afb458c5a94f52713e86ea8fcbbb0d729","sha256":"7e47a02eeba89f51d4287123d05a9a5858a63aa8d9862f3c4f234d70289513c5","sha512":"d5c1a6dc577f2047a856fe65401cfe48c251fd56079fc2d7930f45eb5b3c999c8cc4025c888c71e66f3f298b9e7739d4f30fab2761831fc7916db899bbce1b5f","ssdeep":"","tlshash":"d0713b039481ab0bd1156fb4dfb156ba9712fa28b6a3f10bab73d66508953d48f1a500","first_seen":"2026-03-02T13:29:34.537502Z","last_seen":"2026-03-02T13:29:34.537502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/css/widget-heading.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H1OqIwyTBa80%2BU%2FvUfQzkuTNuq8Fgs08pNNghD8jfGB%2B4YlaCMwIsmwluCp8YgAvLkCiYfkYtH1lMEgmMHNhP%2B3D4lnSUz8t6WoiSxGsEJ3Yxu5Ilpfe\"}]}\r\netag: W/\"69a4a1ea-230\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5ccfeec3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-08-16T12:31:53.129532Z","times_seen":123927,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/js/extension-reading-progress-bar.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/js/extension-reading-progress-bar.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3kW1Wb5opRg0qRjFkjesl3GMCUDGZbICwwqslx6LfDK2Chx%2Bo8fXJowMTt5G9licgaNs7Y3IQdSbCXpltPUvQngEJmoQqGa7LD5eTdUjxHIzz5LLERw\"}]}\r\netag: W/\"69a4a1ea-65b\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5d08eac3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1627,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (373)","md5":"12e27230c601e83024a3c0bcbf53fd07","sha1":"d627181d6901613b35426a52a99b599bc21603b0","sha256":"1ecd2e751da1e105e7dfb5f98245a745adb73c80946ace81836b943bf20dcd6e","sha512":"620176e13a21fa226f29139a5d2557937ca8ceeacfe3d0489cdc18c54e42d9498381a3375e0c2819bde1b14edda1cca9bf546554e349f288853eb0fee5fb4e0d","ssdeep":"","tlshash":"5331f05f97b42cb4b4fb9b3725e4a5091322541b1a7ed6c43d5c01b48f00976099bff1","first_seen":"2026-03-02T13:29:34.539611Z","last_seen":"2026-03-02T13:29:34.539611Z","times_seen":1,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-11a8d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sJ8bf40izqsLvhqSYRLtGu5%2BmvHAjCuoIPYek7KTajqU6awy8AtqRgFqIgXICYwtED%2FwP3rIXYH3E%2BtLPTRMnCHqxMRvZUMU7XZ60xneLyM48yrRGaq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d192bc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72333,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (468)","md5":"d48fae03ceb7127e1a28954399224688","sha1":"f1c429e2de0edc8038c963262bd44a657df0dae0","sha256":"67cef84f0fd434471db5bfd193e67407d6a7bdcda5ec6a26cfe23ba73519c6b9","sha512":"129bfa0f81863d660d09c5b03106e6ea087de4ee3f856327f0e87e7118fc455c21ef1c4d00865bff7c4c338580836e44c97dc0df7e004a49341b68a5dab7d826","ssdeep":"1536:5c+xHR7GIVLm8645Ru6pRCsjYnLDdbMlF2eheEcPMYUPXmY7xumsoRSgBksn55Bd:5HP3NmEvl","tlshash":"83635f0a7af37475526bf0a9571fdc0ab324045b148dee193e9c46a29f5093893f8fe8","first_seen":"2026-03-02T13:29:34.540814Z","last_seen":"2026-03-02T13:29:34.540814Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/inc/plugins/elementor/assets/js/elementor.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/qi-addons-for-elementor/inc/plugins/elementor/assets/js/elementor.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-129d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yALquzQO6PRxV9zVDUoLsV8pUbA5DYtw1LZFWBSb9x9I5vS4uheNrFS1SU6duCew8hnLBtafgsbv33PpnYiIEY6oC3HkJLHl5yRxD6lRHnW5BYtVtVSS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d3976c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4765,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (356)","md5":"94561a8982989b4f64316c56f933ca95","sha1":"f03c62b58cbd760667eb1d0cbead6d38e9896e64","sha256":"8db0005a5dbcc380e4f6f3ff419bf566e2cbdd801b4a5b47c7592e52d52d5b2a","sha512":"51a83db3bd5ab98af68e0bceafc57134ab9fced6be0f12b1939f8dff32f8f8dc4c9e7b408abe3df03bca43569805508e5e3fb8d2d77f1dbeede1e09da24d57bf","ssdeep":"96:LUBXqpyalgya2LeYzpKZlDzTg+Ih6f+DvJnqzpNLpYqEgZz5pQD0QvYiOX8iVG:+iyalg0z8ZFPrIh6fCvJnqpZpL1hQD0U","tlshash":"46a100ad78bf2121121f30ad56af500df234449bc555ae847c5cc3989ff482922efba8","first_seen":"2026-03-02T13:29:34.542043Z","last_seen":"2026-03-02T13:29:34.542043Z","times_seen":1,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thecatwifmask.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"thecatwifmask.com","domain":"thecatwifmask.com","tld":"com"},"ip":{"addr":"162.254.39.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thecatwifmask.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:4A:9C:67:45:53:7D:54:BE:79:BC:7B:73:0D:3D:D1:10:43:F7:2E","sha256":"03:B3:E8:A5:C6:85:B4:FF:3D:A6:B9:96:62:C1:02:59:F4:85:79:6B:D0:FE:10:02:47:8E:5E:D0:45:33:3D:08"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: thecatwifmask.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2511\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-16T12:31:53.163575Z","times_seen":152468,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.42_a95182f0-208x300.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.42_a95182f0-208x300.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16129\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-3f01\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9o9SoX6ADSsM2%2Br2WeWrpxLg1J8cNrqzv1OrgBXmIdL8aUp14w%2F3sUnIl7DA9nSHO6%2FnH7tuq7JqdF639yW645uzLzAxEgqQU5CielTrqqu6CFduExjO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c4a72c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 208x300, components 3","md5":"5f0dd456cdda137d717061b1b3a8d992","sha1":"0912bf949e869a3e9b68d1d9b76682ea3523152a","sha256":"be50be9d300aa33c35bd9a52557beb50207cbe5fceedd82832c15b50fdbd9bfe","sha512":"d4c48af02b491a7c071d92273be9a817f9860143ff6a6c038e4cb83a960ff722842565969477e1c4c7e926f6467674b3e21f80fa711010ee471bf276db8cd863","ssdeep":"384:M/HxTwht0fOLgEHEh/6LqW4SZAmffSHc41feEDIileDI+myC10yox:YxTWfLg0EhbW4SZs841f5jle8+A10lx","tlshash":"8772cf18d869dbc8c9b5dc3f467779c2d01159c02a3a5a6fc370ceb4a29ecd90ad4b85","first_seen":"2026-03-02T13:29:34.544257Z","last_seen":"2026-03-02T13:29:34.544257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/essential-addons-elementor/eael-506.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-506.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1e42\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnulYyijrBNa5mKahnCmiIY1a7S4V5h6dWO5dakCPjO0cfxpNcvRx3ez5sxnSmgNVcovEbeA2WCQdzhnsvUImmj2K%2Fr7l%2BkPUEMNqUTAD%2FhcmJuaIjI0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5c9f70c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7746,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7745)","md5":"84e9faf79071506b26972607fba4a77b","sha1":"ed2f91660e67dd1f5abe015bebede7605e8989cf","sha256":"96102022182a1acb5f4755104dd3f246c5826140767d6da628271ba0e2b0068e","sha512":"198dceda6384eb0b6f2f853252d4aa1c2e874555bc51aacff67f4158cb95a1da7c04bd3de7d460838975824d9a177312d48e8ae78f6a3e12412794449bfdd54f","ssdeep":"192:8USu7icfgjw1aGbXIOjS5MLE88slOhyga5wX2cd:Z/Dzp5wX2cd","tlshash":"b0f1dd237b37b3481567e53ea2ce2bb87275c2a5d2030dd9e4f1a218d3de9d4172258c","first_seen":"2025-09-18T15:25:21.725716Z","last_seen":"2026-08-16T12:18:52.57752Z","times_seen":29652,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/elementor/css/post-566.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-566.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-7f5b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yw5Em8AXPOCCoHuyFSu13vYn7HHJnCirgvzt7QYhpjP8U716Q0OihtJkrvpKkflQmT8AD3L%2Fz9gh4AF%2BgXmeyjrNbigdfmGjOaUbiYW2o1OfHx1%2FuVn%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5c9f88c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32603,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32603), with no line terminators","md5":"44a6e6e2ed133920a0766a236608a0d6","sha1":"ca82511e76887cbf551c80152f1492d49ee5d965","sha256":"87c5a90ecd3d45acd6f298b52efa5be1e8d2d913c27e721d7d375db4b769a82e","sha512":"30c9afb218d193423ed953a73a04b93c0e3b8e70296a887e5af94fa56a686a2209408294e8bbc111d954d4b569dcb561b69c81bd190ef449a0038bce073d6330","ssdeep":"192:W0MVolDdnJWuVVdLffWCfEhNrWCFCTDN28JwDxyKlup9nvnglh1W7BHvv2BxCmr6:ranLwi4Hga","tlshash":"66e2472a7d337218f9df212f255fb0ec9428dcc9e67936e6e5620b23b87ad917780504","first_seen":"2026-03-02T13:29:34.545689Z","last_seen":"2026-03-02T13:29:34.545689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/hover-css/hover-css.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/hover-css/hover-css.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-17432\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JmVsGeq5%2BfL9SC99k3TaPatgLsWqYQZiMnM%2BpRDICni%2Fo7MMH8ZoCSBeT5mPNzcY%2FXQu9Tl3NxwV1tO2qhCFvM4k1clknewQ0dTdblH1RG%2F9hs%2FsAKkf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd829c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95282,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65297)","md5":"766244a6ea3ecb9c1d502e2c03e088cb","sha1":"f4b638b73f95ea6e1937b5ce5792918f9ebd39c4","sha256":"73e0bcee3ba93b5a2d0f5239bb2c55ebc5a648b0aab48a0d95c1cb5edccb093d","sha512":"72cc3431ae285c202077f7789d3729a04a33e2762fbe7936d5af1503687677384f02f8db5082ba577b22eff83f1de87076e9eaa96d7c4700892a90fbacbebb5e","ssdeep":"1536:aBCBMi2fLf+Ef7BTDUMREkJZlCRvC1/+mxUqBiBN:OfLf+9","tlshash":"bd9338f58592239591238e05c7cc9fa5cb7dc593a6611cde7316290bcb02b9e338bb27","first_seen":"2023-04-15T04:49:37Z","last_seen":"2026-08-16T06:23:31.650941Z","times_seen":417,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/anime.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/anime.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-61d6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9AoEDjPfcPI7wPPRFWVGT931oDja7GxCv%2BlSnJ33mPieFklisb2u2xG5fESATWtnKHhdJjT2eLNajTo%2FOzX5BEeWNy7an9AlVAkJSv8rnX1%2B2xHayeF0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d295bc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25046,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (793)","md5":"2346cdae43abeffd7b65c5072db4529f","sha1":"abbf8ef77977be79a21b6da94feafc9b0dc7a0b6","sha256":"ea9cfc6f9ef439443fcfb1222969d7b59bd52d31f4f3681c3a431c059f7cfa40","sha512":"d7472ce7bebca0a6fd7c1930c1c9c93ec913ed492d93eab0e2d156cd806940677a6bca4536d453840b264e09095c2c2a6252b6d2cc13cfaf91a405b1e2b6ec6a","ssdeep":"384:4NruFu8NdtMQ66Z6yLLANk3CDBIZeiLGyqxchMbxUR:fuYKQ6lkchd1xe","tlshash":"dab2ff493ae33125a257f179cf0fc8447279691b058cde4a7d4ca260af1093d8bbaedd","first_seen":"2026-03-02T13:29:34.547816Z","last_seen":"2026-03-02T13:29:34.547816Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/premium-float-effects.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/premium-float-effects.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-2c52\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDcfkCIvf8oyvUSPyrmr3sWNBa%2FpLk%2BjtQ2TVr%2FeRQrIjT91ifcIHB1eyTcWNVLDk%2B2xf%2Bw5aDO7Jfl1kIQT2NT4vSPt273BniJQ%2BGF3o38ie9vfPQgC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d295dc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11346,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (636)","md5":"a99aae1df4895126c81786460e9cb187","sha1":"10e3ba774b5a6ebd4ee999ea04712cf56ca7fad4","sha256":"6ae634b397bf4ae42e4bcc6b19977034b3a588896b9b942465cd1f5b509540a4","sha512":"2cd2dbb5276d6477e371dce28cd305fc6552defd9abd0acc18f18195e548bc033b4bf5b787d6513b37f98890405e58f8a45537f6284f3894348f8081ea6b92c6","ssdeep":"192:7o6o3ZYzu3mY1XF7yttXykq1WCN01J6dw3bQhrhKPFyDlKeNjmu5Lw:U6o3aKf5F72tadw","tlshash":"0e32e15f27b11064d4e3925664ee4f0a3e74016fbc792d10fb4f2a802f5c8a98fe7a52","first_seen":"2026-03-02T13:29:34.549147Z","last_seen":"2026-03-02T13:29:34.549147Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/api/visit","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://catwifmaskmigration.xyz/\r\nOrigin: https://catwifmaskmigration.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:29:00 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FlKgROg6VeCOSkt3sKaHlDZKIpKyx9ZV%2F4o2%2FkVm3sBukIV8c7wUSFcTBsQkM%2FHRrcY98DSrHrGZWHv5OeTYFXSk4w3XTqXvHHDbzzHrujaYOIXXW9C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf6bb918c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-16T12:29:42.771702Z","times_seen":449443,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.00_b5409d50-1-300x295.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.00_b5409d50-1-300x295.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21031\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-5227\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ie8wYftsZoaJzSIUYyxxT%2BMs748BScfHJONa1c07V9bjPAydwgsOquR9X2CmGVcg6hvQXWLV0q8pTbc9IptFUBGJTLnsczNUxbzsfvAsoPHXalCqse6D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c4a8bc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x295, components 3","md5":"0988147b880b123a1452940b9839b306","sha1":"a40c58fd05e623d6691abb39b94e6035a5151d1c","sha256":"e04ada12c7fa8a1a5845c1efa0c4d988ed7fe85c0cb865f23c24de7b09012294","sha512":"446f4ea72e9c83a2c248b3317d3a9274d8b1863951f4ae2222a7f7f348ad3c6a117992629f59322964409f4b6fc32479924c5f3e80720b424eb6420a3e0b608c","ssdeep":"384:xODJwzIRADPNAcTnple3ZsaitYdKBQjSZ6G7UqZ46laElV6d+il/G3kb67QwBdu/:xOezIRAycT7raiR6G14IaEr4leUbep2/","tlshash":"6592e1b858452d2d2638fee90e225c50bb11be3dd10e8dad74f4d1b19b950e53cae82b","first_seen":"2026-03-02T13:29:34.527884Z","last_seen":"2026-03-02T13:29:34.527884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1e42\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plCyge09aV9orbccxmvNGT6kb0xpg3YyedhUJC%2F7EjfnsLhnUQpI%2B4Oxcz9RjcQlVHGz3XGxbkE1VdOegUN0JriHsleziFTXkam8FWgLTJSbFeK%2B7dvg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5c9f6cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7746,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7745)","md5":"84e9faf79071506b26972607fba4a77b","sha1":"ed2f91660e67dd1f5abe015bebede7605e8989cf","sha256":"96102022182a1acb5f4755104dd3f246c5826140767d6da628271ba0e2b0068e","sha512":"198dceda6384eb0b6f2f853252d4aa1c2e874555bc51aacff67f4158cb95a1da7c04bd3de7d460838975824d9a177312d48e8ae78f6a3e12412794449bfdd54f","ssdeep":"192:8USu7icfgjw1aGbXIOjS5MLE88slOhyga5wX2cd:Z/Dzp5wX2cd","tlshash":"b0f1dd237b37b3481567e53ea2ce2bb87275c2a5d2030dd9e4f1a218d3de9d4172258c","first_seen":"2025-09-18T15:25:21.725716Z","last_seen":"2026-08-16T12:18:52.57752Z","times_seen":29652,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/smooth-back-to-top-button/assets/css/smooth-back-to-top-button.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/smooth-back-to-top-button/assets/css/smooth-back-to-top-button.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PW3JJBmSSsbpH0SIC%2BGt6%2BZ0MSuDs0vI1D2ZHJHULfUX1Jts9LpmTyR2LMHSWUEeb%2B5E6Et94s6otXv47jLX4V2q9yeuo5yR%2F%2F0fymFYK9aINJdFta7G\"}]}\r\netag: W/\"69a4a1ea-42f\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cafadc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1071,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6fecae860899146a147eec263736896d","sha1":"3fdcbe88b5f9e20fae98c7d4e63aae02a64665ec","sha256":"1cbea940da6933d622dde0162e5984ccb58a02d97b3291a886b1473d86a900f6","sha512":"7a51661d9d349a4940defc631e5ec690580f24a544515125cc64c9644eabb58f58533a7bc664f59e4fec6eeedfcc160ffc7ee31522b333d5450484d510f16540","ssdeep":"","tlshash":"7d113aa6099452049376d3a447d75b08f264b0d3cb070098bbc1539a8ff76686ebdeb6","first_seen":"2026-02-23T01:58:11.603565Z","last_seen":"2026-08-16T13:15:44.111163Z","times_seen":221,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-4027\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvJ0MLmywdcxPUIhnCzQnQXnalfEFmNDybtsf%2BML536c5HNO3gd7SuIbYc%2FNdADxIiK%2FT2UdV%2BMrLqsx%2F6SP14NZ7lwgoFdxJ5N6YwFgaNQM%2FUDUMjif\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd83cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16423,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (514)","md5":"d982ff21a8f50c9d48a6708f658abae3","sha1":"430595060a8d69c38fc777ec99f633da2a2c73db","sha256":"1a6ea1d1aa094c726c8ad33ab7170035d0d8052bda2be3b6636b709116ffcde3","sha512":"3e9ffe288e63c267a40cb18b58e6561c3ddd26f268bc3c0c93ceeaa00902d0e2470628de37cf7fdfda384844f79814d947e60ab9ebf410d03907d1acd24dcc00","ssdeep":"384:IAxvYa3dDZlZe+sPc/mqrnkzJqQfBUGNx3y:IDa3dDzsP8k9qYBUG3y","tlshash":"f672762ab6f62535947bf1f8e92fcd4a7135045b168dce04788c86655f0c838e2b9ea8","first_seen":"2025-11-15T12:15:53.961708Z","last_seen":"2026-06-08T05:34:26.009321Z","times_seen":4,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/plugins/fslightbox/fslightbox.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/qi-addons-for-elementor/assets/plugins/fslightbox/fslightbox.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-9bc8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FpLLTOVg7%2FYWTJy0fepIL1GX0LoFzsqbTzW68CvnPvuHAzLA87Q0KH%2BpaPhUnyHPbprChEqaaSCXRlRICPw2kipgEZC%2BykvI8DBTJmZ7ZFoHHaeaC4t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d192ec3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39880,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4332)","md5":"af9047c0db4836870b76c764559d8f75","sha1":"80a5f7f02aff3321797a60b33fa933a7feaca155","sha256":"f4e6530f2d410b9be946f4f7e86535491fd0bc09a471706614f00602c5439068","sha512":"f1afd31cb754f6f0f92e4840220d79d8ff28e84359fbd643a578685da62c080245b5c39a9fb9759f1eba18f397144e3642eff17aa2e4f7e1b71f73d61b2eac19","ssdeep":"768:RIAZdLGFUWtKhr5OB9JRmsLAd9OQrjG3o4ioqYKC53TEay1ER0PHCcHDm/6i+Jrh:iAZdLGFhtKhr5OB9JRmsL4YQratioqYQ","tlshash":"1c03742a7be23438c15b706e865fda493734205ba64ade097e0cc5959f51c381bbafcc","first_seen":"2026-03-02T13:29:34.55516Z","last_seen":"2026-03-02T13:29:34.55516Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/gtranslate/js/float.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/js/float.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-5af0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rf8T%2BXbtRz0KbVWW5Dwk0QMmf0Klk7%2B3ku10zzLq40o3Rp3R0ysMdlGbh3lTLKavufgcwI7ApsGbpjEVorpnEUDZW%2BL5MBwM6eRnXKc5rPhZ18ZjjEWL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf618d78c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23280,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (671)","md5":"62a13341ad839d1638e4b77042a8f4c8","sha1":"cba4b91bcfbf8b4b02d74e11dba85763972e5aad","sha256":"a851c5dd043bc8c0e1c3e7df39eef469944ec33a69ad8bd090bced031045fdeb","sha512":"02c329020c849be8f4a0927ebd8dc82ca93ba49bf670ad30be47395ef4b5c1ecc8c1e20dc4997b1f8af54d157d8382a834bca4ed4049eba0eed45f4e8328fc11","ssdeep":"384:qfhB8zZbezuc5EdgFoxqoLlWyZrW3BSslDAIiwUi/RZSLI2f:qffmZKzuc5EdgFoxvlWyZrW3BScio/HS","tlshash":"75a2b529d1a20c3740132162ae9e1654b12943a74d08fc143f9ee9ce9f9d5bf4ab36fd","first_seen":"2026-03-02T13:29:34.52507Z","last_seen":"2026-03-02T13:29:34.52507Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.48_c06c1518-300x282.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.48_c06c1518-300x282.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18202\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-471a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPsjfVWh%2BTHu%2FgQlzxc4MPbq4bpgB1xeq9bJjJ1O3gVg4yLiNjbibP4w0EUhpvIpqeFbf94%2Fwe28zm5Y6NQWBbevNE4Vnh9GXQZTDSbgLLmA6UO2CZo0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf68789dc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18202,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 300x282, components 3","md5":"c034fbd861ea54c541fb177bf8ebf76e","sha1":"e56634b804af404e8991c404b42dfc1fce576986","sha256":"6377b7c8a305c3839f4ee8fa0348c0144a3e8952d8bbfb8a9934d44564c724be","sha512":"7283db9dd2777a4208cf8cb927b55f444081159fd948fb17ac86609ffe7728fc3bc4637c023a9b1797bda15f83959e61869ab023728a5a67bc1d65bbb584fcc6","ssdeep":"384:+PJxRVdvpZVmUZKgjmjv0J/ob4cOurOb7ePCcPjVaO2U:+BxRVdBnmA7jacpob4burObK6cRaO2U","tlshash":"2882e0da8d5d6808fb4e9eb305e4824c0271f01dfad9509b8479add204647d4736cae9","first_seen":"2026-03-02T13:29:34.556639Z","last_seen":"2026-03-02T13:29:34.556639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.42_8ef156f2-200x300.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.45.42_8ef156f2-200x300.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11622\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-2d66\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g41RO8kndEiI%2Bx4Kjz68Jwb6tsGE2FNtmWiMOWFE4iPHTJ7h8lXBflRW7mpY3kxRTHQH3aSETvvpCii6gjsPAwduEjL2bpJZHOazv7b%2FZQS%2FgoL%2BVNld\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c4a92c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x300, components 3","md5":"887487ff8bc0bbede64e4f12c9a86fb8","sha1":"d3c33e47c012a86678a227eda090622e350b68e6","sha256":"d0c3a5c92403e2c02f7d6dd5bbb0b87768de5b7d4131d194f56aaeeee346f780","sha512":"7e2d36337d0fd8f81e86f94e084b8fa14d6b7e626eae06d33bc6e028f9514a9540440da3828ac426548acfef883d101cc9296d3f3d7805030c75a8146b0d7a1a","ssdeep":"192:MlgdnsrLsOqHCZ9mYF39CB1FQRvn8LW1ynRdaNruILsZp317WzJfI5/8YLo4LiYM:cxZZ9zkB1+R/y9o54Z11e0/vE4G+Q","tlshash":"7832c053dad85b43da7c7f1a65e27dc4d3a39b736634a0cf2034e519cd46cc872a8918","first_seen":"2026-03-02T13:29:34.558176Z","last_seen":"2026-03-02T13:29:34.558176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/fonts/style.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/fonts/style.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-6add\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8Wwv5gNLElJ5owXzwmr7ZWnSIjrk6MWU3l5BjJ44OAmMGHfNw3GbGZcGftntIE9nw9F5DlTWNQPsRdXFoYHlKrqczoOxbUy8a317Y%2FiUG2fjXdvGhpW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cafb2c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27356)","md5":"d82cd15cdc7532e41227a14795a97cd0","sha1":"6c21c92e5639d1e569058044fa13494545ba99a4","sha256":"8426fceda123bb9c0ef4fc7d44ade260b9c643972c556ce04c12fb3e5f8b612d","sha512":"d4f35d6fe485a350abf4f38503b3b8b7e0e9446635b12de339ec5fae1f2dbf816208f3f464c73b91a6c6fa173487808e82ea2aee25983ab096de47e7a3478ef5","ssdeep":"384:5N31KlD41wyt+bggxDhPipjo0Il0Wy5UtIAgwnax5Sqv+9PKuAS:5Nl4DRNeAgwmoqvENAS","tlshash":"9ec2c7b8e4ae9cd47375cc77c345b29d62b9f5a192490e61f03ba50c2fc16a802c5e7e","first_seen":"2026-03-02T13:29:34.559753Z","last_seen":"2026-03-02T13:29:34.559753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/Gemini_Generated_Image_yet0ecyet0ecyet0-Photoroom-683x1024.png","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Gemini_Generated_Image_yet0ecyet0ecyet0-Photoroom-683x1024.png HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 258353\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-3f131\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMbyio4I9MN99TOBsdPhEsT8j5OQ4NGTnBx8u3FsbRVtstsrKOYy7CUQ9R9Ikpk4VX30jZcjCqjVUmaU4QTfaRUeuzller2WPPsZopEHRSr9MfmMQA%2Fv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5ce87dc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 683 x 1024, 8-bit/color RGBA, non-interlaced","md5":"e7a82eec49d6d225d5e51c54970623c9","sha1":"01dc369798653df4b473f054fbf37f582c929fce","sha256":"336e9a865f44e8fb48c07ea7553d2b332470d9016f34cd4deb82a9ad6738bc3f","sha512":"a4284fcacdefc01d2d303ad24c787f8f5f0afcf9ea4e920fcefa59eb7bd1a35645a854eb51cf99e5b0900e62dbfbb916e0345a9aa81a5e82ef9457b1289e6ded","ssdeep":"6144:ft9S9THFdmQ8GkOP4yjvHK60rkEDAyVQV:190HFkrDM4EyVQV","tlshash":"11442351868a0a37b8ee1e0b363b7472912f5dd0c3b92b97207cb87139669e15f2c49d","first_seen":"2026-03-02T13:29:34.561029Z","last_seen":"2026-03-02T13:29:34.561029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/fonts/huge-icons/huge-icons.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/fonts/huge-icons/huge-icons.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-29923\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bcHk1vypVZAJzrvEV4GOjx9c8CRnJst4Svcd4uaspg9U0ALWvntORiQMYctfHEoc2rPaHKLKUCIF0n%2BYoAfu%2B5Lb9SETJFPwmzi8A5AWmtufEWGqumBU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd835c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170275,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5d3fd97b3283eea16abda3cde7461c2d","sha1":"c690a91cf40dd94ce804669db676c813d58b5e96","sha256":"7eab1ad064b1aa11ff997d73ff2ef6c9693c9aa4974a167e4afe2ec6004647ce","sha512":"1fa64e0875ae7feae2da4739f71d48fc4ecee3777364ffa02dfa154dec7301c50199be5ee29578be8490e48a9eb45216c2caf1cf94e2028fc95f5e55822f6414","ssdeep":"768:qfD47pUCeMd2mR70+0iIYVI/fU8quHMme6rGgatnpue4JHtIb0dNObMWd3KXIt4P:gDmeMd2ZY+/dlMme6rGgo41IQLgMWdKT","tlshash":"2bf309bce36e88e96732ce47ab40be4da2f6b87995410c58f12e581d7fc26540085e7f","first_seen":"2026-03-02T13:29:34.562434Z","last_seen":"2026-03-02T13:29:34.562434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/themes/astra/assets/js/minified/flexibility.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/flexibility.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-5098\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqDm6m%2B7lJ2z1Xr4OvsrSAjfmpgXvzNgDRFLlWXznF0x4zT7aLvP4RkcGCjXEkB0CRbH6d6CKAd4xdHFmFJ2P9OTpvcRaXw4RzdrCdmbxtxts9d8ajxE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd845c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20632,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1341)","md5":"c0f40e5e565f61fee319c28244795b39","sha1":"93fe499b5d5bf477fcd780b4515339d47ecefaab","sha256":"e078543619e2f1a019029dd5ced7654ba688065b59e8edd07aae718e7d3e1755","sha512":"f4473beca0ebfb644344f56aeba429d857436f353d02852ef1cd4be8539548297d3dfabcaa3ee905d5e494a688a88595fc8df5602d844a17dfcd229f00198c96","ssdeep":"384:og+IM9IJz+mLrjhHXg8u+XgZMig653fJ8M7g7Mv8caM62E5iM4WvRbrs7lcmdhj9:B+IM9IJz+mLrjhHXg8u+XgZMig653fJh","tlshash":"9492de8275da35305502d85cee9b9a0079910b6f0b5c9a08f54f36301f69c2e6efafed","first_seen":"2026-03-02T13:29:34.563878Z","last_seen":"2026-03-02T13:29:34.563878Z","times_seen":1,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/pro-elements/assets/js/frontend.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/frontend.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGeKeUY%2Bobz4v05VvCGA97EDBWABSYhKyaN%2F%2Br%2BFpp6pkNJXZ1VJiPousJpSVOPB8liF94l5fBUs9qMgM243RjWYr0EYtuRiUsJvC8zEi03AJT7L%2B7wT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5d3989c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/fonts/wpxpress.ttf","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /fonts/wpxpress.ttf HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/wp-content/plugins/smooth-back-to-top-button/assets/css/sbttb-fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eP0UlhzVb9SIQ%2FBxwXCYaCD6cleirVU3iyFV37qv7BAp5XHPlWa37cDMatHojDeBR28EO40QKDgHFL7JR%2FIObo4U8FR4eQvogc5lJQvN1Iq5ppWNdxVS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf60bad6c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/elementor/css/post-506.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-506.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-4802\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCBwCF8GPtsHm2qwgCJCtEYYVWEiQqWDrHQgM4RxJj10B5efrM5wXhmy6K5zb3maqdwh6AuQiIcZKhkJww6Lzl8tmU1snjnvP5E9c9pc7W2VhF7pHlIy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5c9f74c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18434,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18434), with no line terminators","md5":"2b5338866e560698d4760a1157df0db1","sha1":"ae326036a70bc57f87535340729f00b991dc1b3d","sha256":"c823e89bdf9db2b55798f28740d2379095847d403f68a2aadafb31a82779fd47","sha512":"93442523769ca0753d2dae693fba0cbbd4ead42ecaa0866b4cc32fa11fdb8c3a8e00ce8a10dc13bfb8f08a2a8f2cd60c8ccf72fee922c90c1d1b68ce7f23e786","ssdeep":"384:EuHMRq2LJ1EqcU5zpzrzhzJDCtZkopeptpXp1p9pHhpb0YCcYYoJRmJiJ4J6JAJR:XMQ2LJ1EqcU5zpzrzhzJDCtZkopeptp7","tlshash":"f48257497c575225f4efa41f1183a4cf29600cdcd27a62f2fab259a3fa39c953bd4902","first_seen":"2026-03-02T13:29:34.565223Z","last_seen":"2026-03-02T13:29:34.565223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/premium-addons-elementor/pafe-566.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/premium-addons-elementor/pafe-566.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-3d9a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1GPenVLLhD15UT9QVMS3fTtp6qVYiisuff0%2B6ykac%2FbyhFgJ1cDD5kxI80GrkS6YGsIoD9GrxpU6MDDnMpgdmU2dRX82fu4PGa0tG9tcIk7ivThQ6Qf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5c9f84c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15770,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15770), with no line terminators","md5":"e9215be3abe8d6b18b41198dac74da2a","sha1":"71b581f54d7cf57100cc2d5de689ca148131a46d","sha256":"9d48db70b8d609ef1b2c045055cfb5e5e7ecbea3bef44ad7aca62a615207bc32","sha512":"6d6b8c7d546575477b32993c0e56e207b3e65be9e52d712b697345ace3d007c507243a7b33eac0bc299bfc078054f1583dc5493269ad21d87036404190811a0a","ssdeep":"96:GQ+J7RdsKhO6ynTvbTK105mHXNGoYoQloLLftZ46CD8d3D5jCD8d3D5jCDN8d3DI:y7iM05mHXNGoYo5LLftbC0Z5tg","tlshash":"06626b7f0b71331cd9e28b2f92ec25a8c52cdc93f132169ae2571b655b8ee859392305","first_seen":"2025-12-16T07:33:02.672284Z","last_seen":"2026-07-02T19:50:54.214532Z","times_seen":11,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thecatwifmask.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"thecatwifmask.com","domain":"thecatwifmask.com","tld":"com"},"ip":{"addr":"162.254.39.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thecatwifmask.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:4A:9C:67:45:53:7D:54:BE:79:BC:7B:73:0D:3D:D1:10:43:F7:2E","sha256":"03:B3:E8:A5:C6:85:B4:FF:3D:A6:B9:96:62:C1:02:59:F4:85:79:6B:D0:FE:10:02:47:8E:5E:D0:45:33:3D:08"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: thecatwifmask.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Dec 2025 07:52:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-16T12:31:27.432739Z","times_seen":311444,"resource_available":true,"data":null}},"time_used":867,"timings":{"blocked":349,"dns":1,"connect":166,"send":0,"wait":168,"receive":1,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-7939\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6U%2BzNqrFdoQilT7%2BQ%2BOMB1yjKwrA2yCBrukxMP6xQKs2d5KE1f9DFyz%2B0SA15k6ijEAe%2B5OoA5%2BG%2BNZs4bgC1xe%2Bf48mEU3WWV8BcEXOHsfIW09hcFw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5caf94c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30871)","md5":"7d6c112fa9e689aaeffe911437209f7a","sha1":"71cd9bbe5caafbc5f843479dc8b3e5d4d1f1df50","sha256":"538cdb3bb375234408a7186b40a4f387839c7f37f31ff2a4800c1dc511e79b2d","sha512":"47d34cb5117c8e84982e264feee8758bec53347655642ff2d3285f94ea1e4fc9533375d008f9df39be25bbf5278dac85d5b8cfa238c5b5c0950e23ca67c9bbe2","ssdeep":"384:lu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:+lr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"4ed241f8e50c01d66731c48bff81b36862bafb3dd5854da9f01f291c29d226512c5bb9","first_seen":"2026-03-02T13:29:34.56955Z","last_seen":"2026-03-02T13:29:34.56955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/pro-elements/assets/css/widget-animated-headline.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/css/widget-animated-headline.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-2da8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FQ2uTIl%2B8JNWfoArYXnglEv7Bg%2BozrTU5gIldaufLTG%2BEUQ%2F8ym8aL0igUySS5JP0juau7VfKfu%2FzVNWlfwzbgFCMhYnKg8s%2FGz2LDN4hey9zypVG6t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cc812c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11688,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11645)","md5":"c7e7a84eb20f6a8facaeb518046b7862","sha1":"4ebbbd83f5f18746532e83385c8a6ed051c2724f","sha256":"ec27d60b4950eac0dac4b9678ad0ac8e15b84a22d267c1892e6c59964ec9f2f9","sha512":"71ec3a9a510c76fcf612c49feccd639ada897d61c2feca882b5106bdb1b8606c08c5eb639649d5f0e183f8b987ad23e28ba960f10dd8807cc3a7227283317de5","ssdeep":"96:Ci7wOu+nimUsZzFJvkx0/JWbSLycrQAhqTnLkTRyNK3KMWGtpaK8wRPzVw3P3Ojc:Ci8tgin7OoTnYdt3DWefdPzVw3P3H","tlshash":"c432cd61fd57440cad2b6ef79bce754ce9358dc7372208baf1b15b1a8236c4833592a2","first_seen":"2025-06-19T00:47:06.448487Z","last_seen":"2026-07-23T02:39:35.67366Z","times_seen":51,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/themes/astra/assets/js/minified/frontend.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-790c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Avx64cmRhCV5h8mueyBc4YETIKGC2AnvQANP0o8unoVcIELDJeD2YMiVAG2SbFSR1mHVmKUfTW62s6JDnCS6xi6AWpzytc1W76SiZ%2FOLFgEgtjHKADwF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cf8b6c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30988,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1116)","md5":"06942cf973faa6fd90d36322d7261b77","sha1":"98599770d69f71ba47dd73aaacd86c4d641b5f22","sha256":"58d502f20f5264492910665eaa20d75326d059c361c07096be24792316e38a1e","sha512":"74d79a0f333ceb21944f13a40245d80c63c1f8f5cd814d222cd1ca88d21c014f53a00f36c37fa3ab028dc7404ef3a3ac644c163710545d4332c832b42ca3f5c6","ssdeep":"768:SOp7wI0ICvoHitf7xFBzO/MKoGo5oC+8msTk5sKKNG8U2xVvFWzuSErkL9yfzIWU:jp7wI0IC/xHO/MxmsTGsKuG8BdWzZEPU","tlshash":"19d2866b63a1153504bf62aaf7deeac47671105fa649c8013c2cca490f54fa216f8ff9","first_seen":"2026-03-02T13:29:34.571493Z","last_seen":"2026-03-02T13:29:34.571493Z","times_seen":1,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2026/01/WhatsApp-Image-2026-01-02-at-10.33.10-PM-300x300.jpeg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/WhatsApp-Image-2026-01-02-at-10.33.10-PM-300x300.jpeg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14701\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-396d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDzoDA2Z64emHYS7N%2FDBp5B%2FURgub5HhfI1MdPAWP58yWRTWpWRmOQOX2QgRvBCZQvugpoHsqHi3juL5M2z%2BIkJgEytJlE5g4ge1joQnA8hRm7CFUSya\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf686888c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"91a50b012586870ae066691331c77b92","sha1":"8e2ef4ae553d3eead2d89efa932e6f9570c38b6c","sha256":"898832c7ed7d8282c4a2140bc369a1e7da2027e0bbc2b2bb8fe04e1712a8eba7","sha512":"245297b7d0dab8ed56abb65a87c1e92502ad08094c6ba055596082a47e23ba339f841507116dbab0eba4c9b24ca0077f60ca482cdba7bc1e70d1d7ee41180185","ssdeep":"384:MawuMh9cYv49diBuO7pd1sFL8OYxxmveR:f3G9c1Hi0hh8HLR","tlshash":"1362cf5d6a488a2bd79c0f19ac946a6c6db34d1dde58663c663ce0cbce017f483e11e4","first_seen":"2026-03-02T13:29:34.572727Z","last_seen":"2026-03-02T13:29:34.572727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.45_26d9f060-300x200.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.45_26d9f060-300x200.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11027\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-2b13\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBz9jmqhFz7B0xmGfPtVX7%2FucduriixJPcLPFgdwZDmlP0KQbGtQiX2%2FP2BuOauyyFwOsxy80owQUE348tB43iI5lx%2F8dfhwdg8MNsfslo27UiY0LexC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c3a60c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 300x200, components 3","md5":"1b47f6dcb3e728e2fac71d433d651526","sha1":"3507d450f7cf4aa40689a3823efb4fac70b69cef","sha256":"e7578603b0bb4473ed0f88ce661d6864e0e88ee16181b6b3f90745e6e77e5b78","sha512":"32344776d46d93407802f3a2d7c1d0d0eab47e26840b962d595d09e020a798274cf9b711a4e0f12bbe88c30ffac6a2972e95968abb289d663a3917f75cfa5e1c","ssdeep":"192:UG+4PKhumLJzhunL3OFUXwJRbPx7m5InW/LxPPSayo9TbTXJ89djF51VARzDvizg:3+4PMdhunL3OFBr0kW/1PtnvTXJSdDfW","tlshash":"c3329fd023860dc785679d7922d20a986e49e26b1e704dcf217cf58f6fea2e26428912","first_seen":"2026-03-02T13:29:34.574026Z","last_seen":"2026-03-02T13:29:34.574026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/smooth-back-to-top-button/assets/css/sbttb-fonts.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/smooth-back-to-top-button/assets/css/sbttb-fonts.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKLxmTSFU3j3kVmzu8hU%2BykgTYiZWddhL1zVyLPSxPxNwGivho%2FcDpbsQ2cC9Ds5Hd%2F7jhR4ncz3fNsgGRDvqnGZUmhjINkLvJFG%2BERN5tgG5Tk5HtGS\"}]}\r\netag: W/\"69a4a1ea-4f1\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5caf9cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1265,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"620f01f595d02660cd07249ace6e088e","sha1":"259309359ba5aa19b46317667c10b8e532d65499","sha256":"40bdbfdfc078e1f2d930c488c8b438c07bce5c4e7eb5e76fddcd6178ba45ab5d","sha512":"f6b83af713894d0a6cb47327188a145c79717300c023254e802963fe7b09b2222670b1eb52b8358c6c4b16f1a747a56166de596acedefbde4264eff0084cf2cd","ssdeep":"","tlshash":"402168b8a1793982cb314c8373862e643b0c5826bb001f02b79d187dbbead701245f6e","first_seen":"2026-03-02T13:29:34.575403Z","last_seen":"2026-03-02T13:29:34.575403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thecatwifmask.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/img/image-masking/svg-shapes/polygon.svg","fqdn":"thecatwifmask.com","domain":"thecatwifmask.com","tld":"com"},"ip":{"addr":"162.254.39.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thecatwifmask.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:4A:9C:67:45:53:7D:54:BE:79:BC:7B:73:0D:3D:D1:10:43:F7:2E","sha256":"03:B3:E8:A5:C6:85:B4:FF:3D:A6:B9:96:62:C1:02:59:F4:85:79:6B:D0:FE:10:02:47:8E:5E:D0:45:33:3D:08"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/img/image-masking/svg-shapes/polygon.svg HTTP/1.1\r\nHost: thecatwifmask.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://catwifmaskmigration.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Mar 2026 13:28:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 30 Oct 2025 13:25:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 357\r\ndate: Mon, 02 Mar 2026 13:28:58 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":767,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"358a81be6b7272f165dd9734163c7b8b","sha1":"63362f989e77daa75e6da9a227460b4ccc6a87ae","sha256":"053a9155d29a0a78dd6da23ccfeb8046a62dfd69d122c688cb20f3fe86d2a763","sha512":"e02dfd4ecb221ef2acbc9b473b036e85268830aed36be6ee4bf6aaa7ca6daa2b023ecbcddca4a20cc4e2f5316ec6cdebf7a3a7972ace5f7aaa51fdf0028366f1","ssdeep":"","tlshash":"ab0115fa36d416e12dc412a5f7080474c05e8cf62ad1c696fff8f814204308eec42c91","first_seen":"2026-03-02T13:29:34.576546Z","last_seen":"2026-04-26T07:08:03.907436Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":458,"dns":25,"connect":165,"send":0,"wait":217,"receive":1,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qZNIOI%2BEKLGY8uqxyesE0X18DCImN1qRdRIcMgqPiw4L2hwvGYgjsq2TJ%2FWk8s63jX2sYQ%2BnkbkTibed9AR5bQn3QjpunIrgDDSy7%2F59ZAL2Io0Y7NT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d60bf61de62c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/js/main.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/qi-addons-for-elementor/assets/js/main.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-14018\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAXA0ruRkTr%2Fd0%2FCnhUxbnBw8zOzuh%2FmHKUihShY3f0qBI%2FRdLlAcP%2BQmv46RwyhGgho1NeM9g3Vb3sQLIEpCU65CRwDlaR0U%2BydFTlwIjvY39ICBW6o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d08e5c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81944,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1951)","md5":"600d8bcae6b168370aeaa7a7af662931","sha1":"8bed2a42241b02c888ae7dd125c0e79ee3a7d524","sha256":"20a4a375b8c4be22691e19c941029e7c07fcc2cdda0578d52562aed173f4471c","sha512":"a5720e1b1d197e644240cf2d4ed999f1727206562e8c7ff354501701d053aea097af883a8313c064a654d7eb849da279ef0334fe544678932cc2fb23e6a9ae97","ssdeep":"768:Grd1oOaAD2ATQpxuu2CIziGRda1XC/t5Li/FYg1mosJf2miqoDFPca:GJ1oBeZKSCIZRdrt5Li/FYSmi7J","tlshash":"7e83347d25a61221911f70ade95f9a08ba30346b974a9d047d5cc3988f74c7c33beeac","first_seen":"2026-03-02T13:29:34.577722Z","last_seen":"2026-03-02T13:29:34.577722Z","times_seen":1,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.39_80ad941c-300x300.jpg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:59.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/WhatsApp-Image-2025-11-29-at-10.44.39_80ad941c-300x300.jpg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14207\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-377f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PIejA50EB2yXD8npvNx3z9WevKY2CymRbbYXGwUBkIXMD8AxUvCUbQY%2BH2ky0xkw1LtIzCAyTttr1l%2F4WzBX%2FF3FktEu4hRrE2A7clTNo9ICSoTl4CVz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf6c3a43c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"8a5cd9d299768b5b18d9f5651a54188e","sha1":"1b13bc02c0de04332eeff17351b6f1121373869f","sha256":"ab4a97b14f5341e6b9628049bd4b356fdaefd5f9ee954d417b7ae5a580b27b54","sha512":"b623a91f0ce4b7b2af0d8fc09be332813ea23878eb7ea9f8284887e9acabaa4b17ae09403cc00fecd106133bb38b3fea80f031fa5aeef425a60c5d81ece1bf27","ssdeep":"384:28iF1B/fmRC5bJVzkFaPjN0j+FDN1uhEE7HC7AgLKHM8:61B/fmR+bJV5h0j+FDN1CEBRm","tlshash":"df52c0faf241c961edee8d731d9022181500bc67c8f4e4ea9a39e8695f422f7d5386d1","first_seen":"2026-03-02T13:29:34.578951Z","last_seen":"2026-03-02T13:29:34.578951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/elementor/css/post-9.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-9.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l51agbQcF5xJQFS6SIDuWsaaV2pF0s8zFrdjqwK%2BUkm0JAYGRw3y2mJH9kuxRgtXNblYHrJ6G7XEmEtBxbuAvy6ndco3%2BqZbgy1fx9XlXEJT2gifJegn\"}]}\r\netag: W/\"69a4a1ea-4cd\"\r\ncontent-encoding: br\r\ncf-ray: 9d60bf5cbfd0c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1229), with no line terminators","md5":"4dca29550eccf025a2277caa555b327e","sha1":"d6e843e02aa4306067f6ca25b47ca7f8fac886a6","sha256":"a7aa9aa66bd275ce2291351a861241b0d811dcb5c51f89201f07a19f3097695c","sha512":"d471a4e7ca9e2630f446fca79a881ad9202c8bdb39190bf1c276453182c6bc2815ce3164503958a4a30742ea329906b41c8b11098286c743ef854f4ed8453379","ssdeep":"","tlshash":"6e2124457a23d422e07b092f91c3b02c112cd45fa25f8adff41d9649f9bea4a2229643","first_seen":"2025-08-21T06:25:12.633155Z","last_seen":"2026-08-14T02:17:22.252043Z","times_seen":156,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-a6e8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqRNVXToXLMBozU7lk6%2FmCTbWAvQFM9KPm9YTYLlQ2bjkeXUagYRuXY40FHtQItPQwnBp5Bxw%2F1nwoMp%2FPCbN5a4FRx1g4ibcsbxiNb%2B20VDpsZwQxU9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d08d4c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42728,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1002)","md5":"8ca5eaf28ebf892f63aa4e73bb411d42","sha1":"f41f6cc44bbeebe1f7dcb8627397f9cabba83441","sha256":"8fafe74d80ff2f154da132778a5464e2c0e4898a12f7dbfa259e29cc26d501c2","sha512":"ddd7b2c36ed04dc4af08386d7fe0c748dc40d71d247df9ba104f9906d0ec136cd7e071b02f2105e7f88eca25a4b4c39d32750927a0763c6cbd670742487ddd3f","ssdeep":"768:PY4bL4DOqNei1jE4oHBl6zdRn6ld5dV7IGJxjF1th7J4JvlULiuvjwPdO+RauATZ:BbLAJ1jE4KBl6hRn6l7dNJxjvSJvlULF","tlshash":"b313670a75e5247140bf706a965f8a087230586f4e4aee553e4c42b44f3dcbc3bb6fa9","first_seen":"2026-03-02T13:29:34.580709Z","last_seen":"2026-03-02T13:29:34.580709Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2026/01/WhatsApp-Image-2026-01-02-at-10.33.08-PM-1-300x282.jpeg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/WhatsApp-Image-2026-01-02-at-10.33.08-PM-1-300x282.jpeg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16887\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-41f7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZfcXMa99QWkd9%2B3dSHvWlavpW7MNvvG6L6Bw2rFP8a0X0lAo%2BcTD5qF5O2hSxi%2BWtQyoYYBKlJQ4EMSnJk3qSj%2FnzAxRmvDD6kltUZmL%2FmZx86hNCwxb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf686891c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16887,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x282, components 3","md5":"1ddbf144bd6cbf358cb7c93ba03d699d","sha1":"45a3becc15249332f56b5cf5a40ee2ad64699d2c","sha256":"0c21a9c7bc2cff5b21fd965d212ec1740108d8e461de93c4381a5a31b0147879","sha512":"8457f08be22e6977d71b16d8b68b0cce29ecd413b7d5127296851cc465b68db01239aef57a23860cf000752578a4d97944ff2e5ca4b3887573d28b7726f21405","ssdeep":"384:BywC61SqS8h2+82Td/Xgyu2l9kxFZBC7Hj4D:G58h2+pB/QZBOD6","tlshash":"a872d0eadb8dd3c4f5e6bd3a050960d32a1928b6920e4d3bcdf8d92193273e54f18a51","first_seen":"2026-03-02T13:29:34.582007Z","last_seen":"2026-03-02T13:29:34.582007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/css/main.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/qi-addons-for-elementor/assets/css/main.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-43dca\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPuWVOdOAEP7mI03UtsEHov3xpntYeFJkpMDMle5oR%2Bv%2FAPIArjTwUgd609D4bXb4YDi2UPKmLFbSPpW2xQkDmVqINkHRirZQBp2EaJkuh5Jh2ktkzv0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cbfc2c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277962,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a2f01c2fea70c73f80c5180c82832209","sha1":"6e7187bffdaa0e6938ca6b24e4ee0eeb2ada8ee2","sha256":"cda78fc056a38b291c8b919bb6ae769d680999b4146ad891d586f492ad64a29d","sha512":"980628c36c78d93a41a75c050814d6115aa460703142cdd4ad589be392f039fb7a0669efbd5dff0ea9722ac9e26a24573541de4484e3b82c1807bb77de3d2bc6","ssdeep":"1536:HcvH8WMofyCmBLv/DKuMcD+z4GDd39Qcb5lawHG23mNF20fDnVK3t/AseYWfDMHe:jRPGM","tlshash":"7a4441b246092f34e277521ce2f11669f939c812dee244faf252cb0f48fa65141776ee","first_seen":"2025-07-30T16:25:46.097779Z","last_seen":"2026-08-15T15:01:06.540678Z","times_seen":1991,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/magnific-popup.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/magnific-popup/magnific-popup.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1a7f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQ9bZz50ATDY3my3edZ4DBwd%2BcM7J7o%2FutvMGwW9C4YP5lp4zbYQMgBMltfBGgySycCqCphjF%2BhgWCFRyZBGwrm3DROG47ZWQKz42k9Nw1B3AkDMmYtU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd826c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6783,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b9b07a00233924991768723f8e978815","sha1":"281809d9f1badcd427335881096b42b8d3f0888a","sha256":"7314ec80cf487b6d9bcb6e9be2a62c40986c6e526319e855bddb42b380e5f10a","sha512":"c34fedddaf30d49828932435150d495d1fec68889b259370adbef6884ec01de2e0467e6914e7bd97b3a3ca6c2c4bc5f3a4df2fde793701eafcb4219fa08fbadf","ssdeep":"192:hRQ4fS5fROP8frl3n2s96/LEAvHFykgxe:AO0fx3p6Fh","tlshash":"83e12cd3afb51305e525d5a9a253ab6973120023e70fdc7bafe1244cef8d6c90263b85","first_seen":"2023-04-07T03:19:52Z","last_seen":"2026-08-16T09:53:31.674117Z","times_seen":519,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-2b5a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7I2pJbZUln0rptMm2sX0lPkMRygQ0yt8Kdj6vU%2FcT8%2BUls1KDRCUkvllhy7AqieQzMC1he4PKZgnJoQ%2FvAyQYn%2Fli2hTnuwCifDfY3MgtjhDZuAdoVF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cd848c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11098,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (537)","md5":"bb022881c4a8de321cd221e66812cb56","sha1":"ea01e9401df3dc9ca8b773ee65236ee6c42c87b1","sha256":"2486bb4836382b2e58534150e252d871c0f01b224b2027261e7449f4ba86841d","sha512":"3663d294f9ff4670f56e17282c00ff18f0b3b6d7fee4e6e518240cc8c189f3cb31a409af61042d9dbde03a1e04440b7119c4db12d2fcc19f6e9eaea0a4ebabb3","ssdeep":"192:0hiRCoizIwaiEwLic56dJdqyQaZyKQqnj+m+yaSWyRoKfmAzM/aJ:ui9","tlshash":"8232ff2de777320601aa74aac17f9d083516d00b8396da127a4c617eefc4876d9f4fd8","first_seen":"2026-03-02T13:29:34.586146Z","last_seen":"2026-03-02T13:29:34.586146Z","times_seen":1,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/uploads/2026/01/WhatsApp-Image-2026-01-02-at-10.33.12-PM-1-200x300.jpeg","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/WhatsApp-Image-2026-01-02-at-10.33.12-PM-1-200x300.jpeg HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12925\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: \"69a4a1ea-327d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qn3Oe0J9g9akBJslxaTMw2IdUGdpcJuB4Pj8oHUOWcBXrCcH3TsHXBGh7HdF4J%2BZ%2B6zEwGQcgHyBnLXPq6Zq4NSTlU3xI3G%2FCJ2trUQfBaPM8pI8MfhB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf686885c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 200x300, components 3","md5":"759676427cb5cacabfefb49d82988086","sha1":"b974d98192ce6eba027ca4cd73d6c0b1f9c6d708","sha256":"f9058f26170f98f696299c0df9a1075778ae31e0f2262f623a13385baeab1970","sha512":"1ee52cfc6f0c3ba028d4fa6cb389e289a4d10de8a76547fc4221cac64225c4e0d356f1e24d548381bb0c7cda7c3911adce7b0fcd353d2dd323bdd7126fd5ee14","ssdeep":"384:Tcgb3aT2T47C+EULwUFqGilWFbe/7ahr0f:TVaT64Trkmy7yr0f","tlshash":"ab42b09de714aadc77063cbed3138e2933896450f162cee811fac822d55d6d3729341a","first_seen":"2026-03-02T13:29:34.587518Z","last_seen":"2026-03-02T13:29:34.587518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/qi-addons-for-elementor/assets/plugins/swiper/8.4.5/swiper.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/qi-addons-for-elementor/assets/plugins/swiper/8.4.5/swiper.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-2f2ac\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKtv6lSyHnAvkpC%2FFpwfIKeOPofltc5opuvg3mz8u1%2BgJd20hqTSk5Le56HhmlSRPFYGgQNjPpmWwvBzbQqexSWgAUBWAL6VYlniU%2Bav8Ykv6mGNiPIR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d193ac3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193196,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (830)","md5":"f92fcab37192c26904d973c00a045a4d","sha1":"25163d56f0a19d0988edcc64df2b18a6dd280e3d","sha256":"0a9abde2502403ff32191fe11dc0dac43e937bf5e121cc1809f2153f64f91125","sha512":"f5897396bef83b76c9a35dedff78f9e08877d72bb5c7804ba0e6689d1cf97f98457aecb47175f23f91cbb3c72b16e8bad98b8f413ae724582b8b616e9f4ab1d9","ssdeep":"3072:gScpyX+bVbwePZ7yT9crfsIq79XmQ1r2Ixog+muKedJMx8EBu+O9lWsBPczajE:7ei+bVbDlyT9cr29XvrXxog+muKedJMt","tlshash":"0314620a53f235385197e06e4b5fc810b376940b7a49dda83a5c0a549f2d83c87fafe9","first_seen":"2025-11-18T04:00:17.493437Z","last_seen":"2026-06-08T05:34:26.020781Z","times_seen":3,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/huge-icons.woff2","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /huge-icons.woff2 HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/wp-content/plugins/happy-elementor-addons/assets/fonts/huge-icons/huge-icons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOlWtS3VUYjzShDRyM7yCRjxu%2F%2B%2BKchPjIfQFMczs3Wemc6Qo6TXmTfvpLShEtvucuODSwkaZ%2Bm12HpaSFHeBr9oS0GZ1BdW6TGcZrfENgLPUMoj7bLA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf607a32c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-16T12:25:07.92515Z","times_seen":551330,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:58.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://catwifmaskmigration.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 04:27:56 GMT\r\nexpires: Fri, 26 Feb 2027 04:27:56 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 378062\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T12:30:27.157187Z","times_seen":259933,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":86,"dns":1,"connect":21,"send":0,"wait":27,"receive":29,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T13:28:56.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6htTJcCTjq%2F5J%2BdpXFV%2F3E4EC3wvsLUSQ6j3J%2FyEREs2rT7zolH6XmIiXkjK%2FvuVWpgGI6fZ8lVZviKxoWjfKPVmS%2BP%2BaYZ2iwZHwkQL8JTOTPB5%2B%2Fxe\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d60bf59bccbfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":254643,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0482e7c2882468635165906aa2fd38d4","sha1":"5150c1d42f265f678e8f418e8afd001bbb4ada00","sha256":"6fdfe2612d57bb3dd503ff584d3383da29ac3682ac8643f014ebaabe406c7cbb","sha512":"057c881346a6fb32cd1892c9f7041031a9f1d39b6984f0a17933795fdfa6afe8da8e6c6df142db3cda502ce29af91f65e01577fdbdee56900aebe1f0b98ec223","ssdeep":"3072:SMBCqxtlVWRqIdFLJMjV504TQXC7UnJ0YxiY7lVIGvLBUqBYCH2B20iO619x/6dd:ZBOFLJMjV5es","tlshash":"6f44d851bf1e112a316f03dfd12f7a4c51689663c60c59eaf9b0927c94e8fa833d1b68","first_seen":"2026-03-02T13:29:34.498394Z","last_seen":"2026-03-02T13:29:34.498394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":107,"dns":76,"connect":8,"send":0,"wait":231,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-768c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YU0ZzNVsCB5XvW662BZzzC4cWZj1o3y6B4I10OHS3aw4aOPGoSX33LG6%2BfdeXWb1H1JY5WwaGC5sXmetIRlruCg4yvUqLQrIScvUTTf8gYp3RAXnI2Zx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5cbfe5c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30348,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30348), with no line terminators","md5":"f3d8ff22b7d0ad10a6aeca382d78ddd1","sha1":"9e6598a540367396581c94cc8cf88e25c940543a","sha256":"6ad20c3bdbc5071b927748e82b8ab7ec643d989e137a25e1415c784a3eadc339","sha512":"6cfbe38ce51d8326845d771aba71306986e82fccef5da5a3e607a3d6e15b40f3b69bce1fb1547065518243f6249e59cabe575a577e15b944d49f8aebdd3adbe8","ssdeep":"768:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFSlNBc6vzv2vBe6izi2iBPB5BQzeEnr7vE:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFH","tlshash":"d2d2121ee93b3699127d8c2e13a2588d3b8480dbd1c329f6ac82de16c79dd70797944f","first_seen":"2025-12-21T12:40:30.467113Z","last_seen":"2026-08-16T09:53:31.692503Z","times_seen":12197,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/liquid-glass.min.css","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-css/liquid-glass.min.css HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-20d5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ctnc%2FxmgNAhbde76r845u7xHZpJadt22WWUCZLuoAbAiUuW2lweBNsSZjHgNSJrRK64mLeNxWaeLQ1yOnmbWqGJ4htrYzMJC88ZPUwTT3K4zJgkRd4hB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5ce88dc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8405,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8405), with no line terminators","md5":"fa63c5a83cad8b9c58b45a4ce93e8fe3","sha1":"503ab6e06feb285fab10ab100fd4ea5d2091cf49","sha256":"3a677e22b5d4d53d9f89cf87b8032da513b5ff123ea55093acf7f8e8204e9330","sha512":"d73f00d149478731bf5c3d75fd8ef027ccf2cfc037d839572ca65dc6a4f564c338aba44ae04206a094884e7b941690a8eb0b70a7f8cd40143a583294280c423d","ssdeep":"96:qDc8kFrfLrMr/ler3rlBr89Gy1gHP8iiGU0FxkteOmOIOAb6o5F69ji:qIOlYyCHk0FxkteOmOIOAb1F69ji","tlshash":"39024d7368b02551e9c39ac3e4f81b65763c09c3e67a767ee5b7288cb35ec08c756022","first_seen":"2025-07-23T18:17:06.467101Z","last_seen":"2026-08-16T04:57:54.731642Z","times_seen":2352,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catwifmaskmigration.xyz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js","fqdn":"catwifmaskmigration.xyz","domain":"catwifmaskmigration.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catwifmaskmigration.xyz/","date":"2026-03-02T13:28:57.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catwifmaskmigration.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 13:28:54 GMT","end":"Fri, 29 May 2026 13:28:53 GMT"},"fingerprint":{"sha1":"86:BA:0F:50:CE:EF:62:8F:72:34:60:40:20:ED:70:75:ED:C4:03:8A","sha256":"4E:FC:02:B7:B3:09:7E:C8:42:2D:C6:E6:FE:C8:18:72:87:D3:E0:C9:D7:E5:A7:97:68:A0:38:83:F4:F3:47:28"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1\r\nHost: catwifmaskmigration.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://catwifmaskmigration.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:28:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 01 Mar 2026 20:30:34 GMT\r\netag: W/\"69a4a1ea-1c6a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmVIDgKTBK6XEue7L%2Bc7SvvFduLeXl5Z8lC8bbhAOsv5LeO8Blo7kxhuKHhm8J0LK5QJq4vxHBkRuGeWpw3r%2FpCfVeqz%2BeiQo%2BbumyugCh5f0Do5p950\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60bf5d1928c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7274,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1681)","md5":"10cb1d626d6c8325e9f3185a5cd103ff","sha1":"c03ee861162b7d1e6a94b0cf06a2c2032367e41a","sha256":"109d35252d1d14955e9221888a42216a1285ec14e3b30f94ec645bada0cbf769","sha512":"da68878d4cb51cba42525550c005f39ee687d51c48ef85ef70152edba87aa02fc79cc309393b7ed9079ae6e2908b8f12b6f2efb05c60198d8ce6212d3979c739","ssdeep":"192:TYhOUlUgljxaNy8XdIh3ngzHlhrq/gBX+Tavy2VuWiQaj+fQU:nqZljXZgzbW4BX+ofuWr/fR","tlshash":"6ee113541be26d3b2093a4f9a65a9f34622ec8272549ec81f96c9da45fd0d70c3f89b0","first_seen":"2026-03-02T13:29:34.592188Z","last_seen":"2026-03-02T13:29:34.592188Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"catwifmaskmigration.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}