{"report_id":"0c55fdc0-bec3-4661-abbc-19dae9a734d5","version":0,"status":"done","tags":[],"date":"2026-06-23T16:28:03Z","url":{"schema":"https","addr":"movereward.xyz","fqdn":"movereward.xyz","domain":"movereward.xyz","tld":"xyz"},"ip":{"addr":"104.21.4.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"move-reward.icu/?utm_source=moverewardxyz","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"title":"Create Next App","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"movereward.xyz","fqdn":"movereward.xyz","domain":"movereward.xyz","tld":"xyz"},"ip":{"addr":"104.21.4.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-28T16:28:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"move-reward.icu","ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-14","domain_rank":0,"first_seen":"2025-09-14T00:38:37.422747Z","last_seen":"2026-03-27T21:45:50.984517Z","alert_count":40,"request_count":20,"received_data":657732,"sent_data":10460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":2,"received_data":19057,"sent_data":1056,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ichi-images.s3.us-east-1.amazonaws.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-07-18T04:01:08.815063Z","last_seen":"2026-03-27T21:45:50.933833Z","alert_count":0,"request_count":12,"received_data":0,"sent_data":6929,"comment":"","tags":null,"fingerprints":null},{"fqdn":"movereward.xyz","ip":{"addr":"172.67.132.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":0,"first_seen":"2026-06-23T16:28:04.600801Z","last_seen":"2026-06-23T16:28:04.600801Z","alert_count":0,"request_count":1,"received_data":550,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-21T22:41:40.060069Z","alert_count":0,"request_count":1,"received_data":90487,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"move-reward.icu/?utm_source=moverewardxyz","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-03T21:17:43.990922Z","times_seen":87463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/?utm_source=moverewardxyz","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-03T21:17:43.990922Z","times_seen":87463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-03T21:12:42.96373Z","times_seen":486818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/move_main.php?v=072305","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14baeeee019a5ed70cfc519aad0db29d","sha1":"5d1ef4ed7335cefb8506d4863467f6f8e0233e70","sha256":"1ce2837523f444b1d19136d3577259bc4139efa87d64f29a6e9af0a2c92c449c","sha512":"8cb78955abf06a8fb6f6c2c901121dcbee4ce0864527b4d366db8bb03121a187381b4d86a463317cff6991ffd954d04ec685170fb641081e548c470cabc093ee","ssdeep":"3072:Kb92axtQFemilX6ByKXYP0JMRQmojnfZGYEyzVLEz+5Hq/QpxQDINWwEGthMuqO0:Kb9z4P1dZrRswEGthRtIqNPSD9ln06oG","tlshash":"dae31ec13bd1fc43164b17763316b1e5e52aad9cb5c888daf100bc64f1ada22fad46b1","size":149701,"data":"","first_seen":"2026-03-27T21:45:51.904591Z","last_seen":"2026-06-23T19:04:00.719588Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/?utm_source=moverewardxyz","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-03T21:17:43.990922Z","times_seen":87463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/?utm_source=moverewardxyz","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-03T21:17:43.990922Z","times_seen":87463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/?utm_source=moverewardxyz","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-03T21:17:43.990922Z","times_seen":87463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/?utm_source=moverewardxyz","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-03T21:17:43.990922Z","times_seen":87463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"move-reward.icu/_next/static/chunks/webpack-299236cd7ac8ec72.js","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.737Z","timestamp":1782232046737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/chunks/webpack-299236cd7ac8ec72.js HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:16 GMT\r\netag: \"dd7-63a8311ee3003-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AJM1xJRqtlIf%2FT3yF9mBjh2KkojdXNnbztI%2BbHq5dgqY2BSsBVPSlY%2Bt4Ili1J4OPETJY8LuK8S4NCNNTJtOHQ66Tdp%2BXCBM6YxpJ%2BFSWy44zmmgmolzISF3UQptOeTaNc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1802\r\ncf-ray: a104dc341c250afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3543,"size_decoded":2559,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3543), with no line terminators","md5":"3b8452e60a2617166236eadd82eff9a6","sha1":"b9e63df74248a557d81881d633b90cd7bb4c4b7a","sha256":"cdf22efb8d1727a2c5641fc18e85d8c9a6b6065de3528286a0d052dc2e1570e6","sha512":"3741eb830248150b9bef12f2ab4d363206ab34eb73d624733a5a5895bafb01626049eb7c6f81fe3284dc9a80f40c36b27abb11a0cd65aed7219bdcb5165129c7","ssdeep":"","tlshash":"2c7195a93515f9b156f10885887fc252f119603b051efca0f71be8fab464ae24526ff3","first_seen":"2025-09-14T00:38:40.17373Z","last_seen":"2026-06-23T19:04:00.727603Z","times_seen":9,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/_next/static/chunks/pages/_app-6263d05b85ba8749.js","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.742Z","timestamp":1782232046742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-6263d05b85ba8749.js HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:16 GMT\r\netag: \"1b6-63a8311eed414-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8p%2Fsrx3FX8SKlDh9BuIDPk0kt4sITkqcuV1%2FhIinRJNM%2B96a3RLTp5e0R2WtNy0bH6Ghmd58i2kUjMSvhc6EOvxStCBtyyRI0mwU7EkhSGfNFCSc3idWwcqBE2v4YoF%2BUe4%3D\"}]}\r\ncontent-type: text/javascript\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 312\r\ncf-ray: a104dc342c280afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":438,"size_decoded":1066,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (438), with no line terminators","md5":"99a8597e8fd19ed04a602f533ded5e43","sha1":"38e95e485adfceebab0d77bb10cc0f7798f0d9ce","sha256":"eae21f6d9c6ec582f2a67383803d600d80ae7c28550f09a045c8be451ccc0313","sha512":"a877746fbd63cab4fa8aeba2720bb41fa032f9dd583dbdfa225bb208505b48b92a9dbcf00df8b6bd1f8107f074164b695827ca2640ca85e65bc1f324560c39a1","ssdeep":"","tlshash":"66f05c742062b8eca65b045843ff1cd535582608784ae1f1e9e2d8e629605793234ead","first_seen":"2025-09-14T00:38:40.156696Z","last_seen":"2026-06-23T19:04:00.716988Z","times_seen":9,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/_next/static/chunks/pages/index-acc0b185f22034f0.js","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.744Z","timestamp":1782232046744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-acc0b185f22034f0.js HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:16 GMT\r\netag: \"23c3-63a8311eed414-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqb7fGHHeBeb9rq72o65Co73wU05Qh5ZzslN%2BzBKNrQ6mJupSBnB%2FOqvWA20lWMwuiEqhNKZzB%2FNIQbeTV6sfxIWdKwlJ%2BdFJjLhK019An3qiNA9uqeayoTcOMGycRetyjM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 3256\r\ncf-ray: a104dc342c290afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9155,"size_decoded":4012,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9155), with no line terminators","md5":"c6af9d9f9218def3676e1771fd8e0bff","sha1":"32c050440f64504857e08c31cbecc5f12e6eb091","sha256":"2c2bbc7fcfd19a816caf4b5ae054de04c803caf77c21cd43be2b62b3578cac0e","sha512":"925c8b92e4aec15d4a467c3297fc0b9c4936286107dd882ef816df797276bad8476b6ed05bcbdc39dddf79a49d39ba048e0b1aed22b1294911d6fdc526789909","ssdeep":"96:2xcipfZc3x1qwR9GCtEADbQ0Qe20Nmw0apL05ZqrkdcSbkKc1KUc7M5LPIKystVz:2xJa3vmSbXmw0apA5ZGkdcIUHNz7v86","tlshash":"6f12c5a336d1f89a239e44a4947f440bf3552d2b095b60b877d9cceee6c408970b2f76","first_seen":"2025-09-14T00:38:40.175175Z","last_seen":"2026-06-23T19:04:00.708921Z","times_seen":9,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/move_main.php?v=072305","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.756Z","timestamp":1782232046756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /move_main.php?v=072305 HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 23 Jun 2026 16:27:27 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iq1Wo8T61G5J6QjePedQ3lb7V2whhHOhdq%2BP5EAI1WBZDbAJbeblVXo0E0yn6CURK%2FnVRVl6Lu5cHgd4Itx5yx%2FxgClcBcXMk6LXHa99lfCn3m9C4UYFL8XQGNVz9eygmuE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a104dc343c2e0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149701,"size_decoded":57229,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"14baeeee019a5ed70cfc519aad0db29d","sha1":"5d1ef4ed7335cefb8506d4863467f6f8e0233e70","sha256":"1ce2837523f444b1d19136d3577259bc4139efa87d64f29a6e9af0a2c92c449c","sha512":"8cb78955abf06a8fb6f6c2c901121dcbee4ce0864527b4d366db8bb03121a187381b4d86a463317cff6991ffd954d04ec685170fb641081e548c470cabc093ee","ssdeep":"3072:Kb92axtQFemilX6ByKXYP0JMRQmojnfZGYEyzVLEz+5Hq/QpxQDINWwEGthMuqO0:Kb9z4P1dZrRswEGthRtIqNPSD9ln06oG","tlshash":"dae31ec13bd1fc43164b17763316b1e5e52aad9cb5c888daf100bc64f1ada22fad46b1","first_seen":"2026-03-27T21:45:51.904591Z","last_seen":"2026-06-23T19:04:00.719588Z","times_seen":8,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/static/media/logomark.aeb126e7f9c06ac4fd94c30bf3acf10e.svg","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.764Z","timestamp":1782232046764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /static/media/logomark.aeb126e7f9c06ac4fd94c30bf3acf10e.svg HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:45:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bi%2FrFL%2BfB%2FO9V32XECq0VDMw21YPdoPWkfvs0dna0cxciZY8BNlm%2B%2FyC%2B9v33djMsxTOA0hACpcJYV7%2Bp5JGrpLh%2Fu5vf1FlOMlV81SKhB8c5UlbF9IxBTiDO4VDrxg8qwA%3D\"}]}\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1aff-63a831f899d5c\"\r\ncf-ray: a104dc344c2f0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6911,"size_decoded":3602,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02572d177c906551ba0da386ae396e56","sha1":"1e3026279f5dc36d0e49f33ccc8a41c97fa490df","sha256":"0a8f0d1c62512381414064e488633ee2eaab28fed8019a6405751866ff298fab","sha512":"d9cd22055830a976d73daeaccb1d79ae2898a5d5f5079a8c3bcc10852e553f0ffe4ce40e7024145af57a2029478702f28c79f728a8730aeceffe71fb96734f2b","ssdeep":"192:D81pGVt3uC7pPgPNbudcyQe24M8dbYABlz4SDZX:DcI5uClgPNbu2Be24M8dbTV42R","tlshash":"18e14388a3fba1f8d105f7f4cb25d9763e1b1ce53a22887887de1d13d9a105c86658d3","first_seen":"2025-09-14T00:38:40.165777Z","last_seen":"2026-06-23T19:04:00.720125Z","times_seen":11,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.727Z","timestamp":1782232046727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://move-reward.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 23 Jun 2026 16:27:26 GMT\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-07-03T17:49:29.479068Z","times_seen":8448,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/static/css/main.d008b4c6.css","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.730Z","timestamp":1782232046730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /static/css/main.d008b4c6.css HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:45:05 GMT\r\netag: \"15d01-63a831f931f02-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Goo7lQFDfZgRu1Hp%2BSzpIHMAu%2B3vok5uRCJz9gNNLOoSyJIZl0o2P%2F%2FUJUjMbAMDXy%2F4p7Uwc%2BMsdcwIiLMLImhZuuSaG2Dw4%2FEkvtWtKc7FxL0RP%2Bu4N7YWz6vPlirweQ%3D\"}]}\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 14223\r\ncf-ray: a104dc341c220afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89345,"size_decoded":14982,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"44e77d2e2c5acc6825aa2f9a4b41f897","sha1":"49d5ad723bf8fe78993718cc2a58820773a0e030","sha256":"70614f729c2ce5b2b4534f84aa9cefa78a9b22e548c5b049fbac431580ff80ff","sha512":"fff511434fdf0df4d4239912a79b2c8ff0f74f0b5b0d6a6147ec5ca8cb36014347b078caeb375fee326938b2ff987f9df79594c9cefb8fe418b85379ebbe8a69","ssdeep":"768:C2avbGrdmQ2Pr6F9gcrtu/sRsoVit9WkK+NVKBal70lQUkmE6XH85cs6+jwVM6Qe:IjB97plC385jv45Es20YcdIU7","tlshash":"bb9373ad6720e23dbc7ba066bedc59cd5718b845dd0346fad493b52984cbbf20621b08","first_seen":"2025-09-14T00:38:40.154876Z","last_seen":"2026-06-23T19:04:00.729539Z","times_seen":9,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/static/media/burger.1bb45a0db07df189ffc9d3242d47deab.svg","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.768Z","timestamp":1782232046768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /static/media/burger.1bb45a0db07df189ffc9d3242d47deab.svg HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:45:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PlilT4tjL2HRUjIMEGVyoKeKlQpLZWE5Tcop8uabF3LViQl%2B%2BboPP1WdqwE9MqrAL8oPN624peg%2BQeE7sOyrQoBVF3Wn9%2BOddtLR6Vp7RhqfxHnFOIRHR13nxEBUBno677U%3D\"}]}\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"cb-63a831f880332\"\r\ncf-ray: a104dc344c320afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203,"size_decoded":826,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01299f876cbceaee0583a07c637b97c4","sha1":"4664d4c6d9f8aa49bb8a0acde04400fed421faf5","sha256":"3428d1c4012f687640286ceefc03ebc6975512b9ff9386cbe30a968acb14dec2","sha512":"0e277934d607a898b04d471cb7d7cbe5a410b8ca44a4fc1051e570478f20547b7d59df0ba6846b31f005f8e5180e9f4b9de1fc4f1b1e13940a546aeab0bb967a","ssdeep":"","tlshash":"3fd0c93a7a0dad21eb498161b77c72aa80ae51e2974c819ce580961978298ce643f1a9","first_seen":"2025-09-14T00:38:40.135679Z","last_seen":"2026-06-23T19:04:00.713238Z","times_seen":11,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_move.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.772Z","timestamp":1782232046772,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_move.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_weth_v2.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.776Z","timestamp":1782232046776,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_weth_v2.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"movereward.xyz/","fqdn":"movereward.xyz","domain":"movereward.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T16:27:22.856Z","timestamp":1782232042856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"movereward.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 17:01:12 GMT","end":"Wed, 05 Aug 2026 17:57:33 GMT"},"fingerprint":{"sha1":"3B:9E:20:6B:D2:E4:44:68:5E:2D:92:12:0B:4A:34:F4:33:D2:96:CE","sha256":"BC:4E:1C:DC:A4:36:75:AC:E9:11:B4:BA:6C:38:16:EF:D5:6E:D4:6C:8B:F3:10:C8:5A:F0:80:51:D9:3A:4C:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: movereward.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://move-reward.icu/?utm_source=moverewardxyz\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JYNRjYyQ12M3Y2qdXOgAV9%2F1qCc2qyJHmlZ2f%2FuJ7IdKGZryPZPDaOcFJVFKbpw6iSOEUct9i4duRz%2FdythIoluiShSrS6pPkd905qQcnhoLdHR%2F9OeMOGUPWHIbUF4K5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a104dc2fede61ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":3208,"timings":{"blocked":-1,"dns":57,"connect":1,"send":0,"wait":6,"receive":0,"ssl":3143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/_next/static/LUFOILsCgatpv6ZTZ0Xgj/_buildManifest.js","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.745Z","timestamp":1782232046745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/LUFOILsCgatpv6ZTZ0Xgj/_buildManifest.js HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:13 GMT\r\netag: \"20d-63a8311c118cc-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WtVMbVpwH%2BEdeEpSkz75CuujN%2FRVaiWj69LseV8SS4FYyjsRKnqTczKrx5D7wEB9X0ot3qjqZNPHQaTBrBeSGkiUD%2F%2BTOw%2Ba15YxoUzRmsqzcculDW2rrkdgqeKtCHcal9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 315\r\ncf-ray: a104dc342c2a0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":525,"size_decoded":1071,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (525), with no line terminators","md5":"95c80f233188efd7eea141df6a8d1f0b","sha1":"968e102e7799d99d5d2cc9a8ccc2d060f78b6255","sha256":"cfe2bd2e85a49d7f1176ffbc1d3843674bfc541e3e4b5bbffbf9dd13fe8b6102","sha512":"a6df80bbcdd7e7f162114cf8935c770a731527d46fd407f584985318137eb9e07c2f6a78945d59e0d8b322bf43c95843e1554639cb82ef39868fba5b72baca29","ssdeep":"","tlshash":"6af0c0f22a0eea12ec11e80cb1567713efba80b7707c1a32838c4f4804551038f82964","first_seen":"2025-09-14T00:38:40.146291Z","last_seen":"2026-06-23T19:04:00.717849Z","times_seen":9,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_ezeth.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.777Z","timestamp":1782232046777,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_ezeth.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/_next/static/chunks/main-3131d3286b68af5a.js","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.740Z","timestamp":1782232046740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/chunks/main-3131d3286b68af5a.js HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:15 GMT\r\netag: \"1b833-63a8311e6f081-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTo%2Bp6M6S23Hc53pGHl1BY8ERk2igueHeoAJUw%2B%2F7afe0WvYY2BpSWz2t6Gz5LhluD8rEiljjKgzYzpZ1ulED%2F%2FijoRGh1b3e6ZO1b3JwGn0%2FiXC1kBhguFbjFQYwpavhMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 31903\r\ncf-ray: a104dc342c270afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112691,"size_decoded":32665,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5a942812898b9a46e1953f6c1a9bb10","sha1":"2caa1c2bd0435ec65e506127f50dba425a914930","sha256":"680d69affdf4ce405d6cca74575f721130a49fde818c2f338064701b5da53ba7","sha512":"8cf199b6d06de90775064335d4cce6447bed3fd1b70c1c75d125cc600a6f592a33c1b6056042430dc181ab1360544992676c4b4bfda2013e0ee5540374fe1daa","ssdeep":"1536:Rlxy2XpG0kjAwknAdgIbIB7dvcsK+viwgNrCrldgM:Rlxyv0IhXC7J6NrCrlB","tlshash":"cfb319b676d1fda202d741d4883b0007f3691cba146eb095b3eadcd6b85099ea0f2f75","first_seen":"2025-09-14T00:38:40.116657Z","last_seen":"2026-06-23T19:04:00.710575Z","times_seen":9,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/_next/static/LUFOILsCgatpv6ZTZ0Xgj/_ssgManifest.js","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.747Z","timestamp":1782232046747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/LUFOILsCgatpv6ZTZ0Xgj/_ssgManifest.js HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:13 GMT\r\netag: \"4d-63a8311c118cc-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0RH4j9hvtZI%2B51hEZkqmTwAdQ60Cj%2BDd02eYDqIRnVhxwl1Ay%2FQlXlW2%2Fmuibb9dphyx4tvIp2gTsFZip6D8yq9Hwe48y8REa6WLEtCpqiYrhm%2BF6ZbPLjUgIoMAnDveOY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 61\r\ncf-ray: a104dc342c2b0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":815,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-07-03T21:12:47.573768Z","times_seen":239726,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/static/media/logomark%20dark%20mode.e06759a464f2e903bf3845a3ef65d51f.svg","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.765Z","timestamp":1782232046765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /static/media/logomark%20dark%20mode.e06759a464f2e903bf3845a3ef65d51f.svg HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:45:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pj1Usx0haflAGVA1IPqFPEe5b6tViOynf63KnCsRfdB1kapT6XfqiDQ9RBTcWdsRQ1ffIGTI6n8Vtfh1LC9OQIHWHrBMreR16aRa2GpTBLwC9mlTA3D7D3Mau73IhEivsB8%3D\"}]}\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"3640-63a831f89958c\"\r\ncf-ray: a104dc344c300afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13888,"size_decoded":7039,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e782ef5c5d5d784ced92ebf72a668515","sha1":"0674eff3e2fb9f54ce1f177da123110f4f987082","sha256":"e92071e7d24e75b065379b5038dfaa9dd606d959deec2ecec49425d991758d99","sha512":"cb11415b904c3bbbea9c99966ae642bf02e04ff848a24467d573fa6550abbbec88b620126e1e29c4951d0830153b10a79eab86ad967674bf2d4a365bf49a1138","ssdeep":"384:YEn1WD/iPkSl32vwdabD4ybhdvqVmN/Zd9z:Yjml3Zdaf4ybhF6GZd9z","tlshash":"d8520ae923634af6e406c7e9acc11894685e30eeb7cd6294c7c0696b64164f88d3ca47","first_seen":"2025-09-14T00:38:40.132931Z","last_seen":"2026-06-23T19:04:00.720758Z","times_seen":9,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/static/media/searchIcon.b03ec01194404390846eb913bb77209f.svg","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.771Z","timestamp":1782232046771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /static/media/searchIcon.b03ec01194404390846eb913bb77209f.svg HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:45:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkTwYg%2F9ndB62pucyiFmo7zo9TRWEmL3aD5JnvP%2FYPXRdc46lSicjTJBp1sTBdU2IrGDMA1%2F7DrsAmSoisyewrvBoroA%2FUNEapfv7nv9gg1KyOpRL7OJrEO9nH4nuOjcLWY%3D\"}]}\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"152-63a831f89b0e4\"\r\ncf-ray: a104dc345c360afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":906,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18c249e3e2d514175068c1e555fc38cf","sha1":"3668d7b6c6c62f8e5f4b2ae64cdd65315cb5ba15","sha256":"e5c327df7ade6fa6828e6b41ec8e53b0bb84ec7990b169501a5ef910f5a2f863","sha512":"808c901d19d2870f64f76ae7815dee18500a29b00fce10f03a9fd8e9cb803f2f89e1f773e6ea4cf47f3da15c68abb5c55f63ce83665e6d822f6e64a2f6a2f5e3","ssdeep":"","tlshash":"90e026aae6282c586525520cd3583360123a14b703dee247d03328b4e4549293537a9c","first_seen":"2025-09-14T00:38:40.159294Z","last_seen":"2026-06-23T19:04:00.726371Z","times_seen":11,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_ls_lp.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.780Z","timestamp":1782232046780,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_ls_lp.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_wbtc.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.783Z","timestamp":1782232046783,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_wbtc.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/_next/static/css/51d154659b5c9fda.css","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.735Z","timestamp":1782232046735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/css/51d154659b5c9fda.css HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:13 GMT\r\netag: \"6e3-63a8311c118cc-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hMlkKO53tKg2OZH736j0xHUtG%2FbX9r5jlQ0gkt0viMAJze0Mnm1WYjwVwOtB%2F9isYewIH9u6VlTFT8OpE%2B3Cii%2FfddNJ4kKC0gXgmh2SU%2BvaTvNrkhnnoAEM7%2FYvtJZ1GU%3D\"}]}\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\ncontent-length: 708\r\ncf-ray: a104dc341c240afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1763,"size_decoded":1459,"mime_type":"text/css","magic":"ASCII text, with very long lines (1763), with no line terminators","md5":"948d5a68579f7943ec6c630adb23b005","sha1":"38db1ee26315c8b8a117dcb606e939a3bb8c0755","sha256":"6ca779b1c3638c85e76ef931c85e0fffae84082a2de088f708c4d1ee1fe79599","sha512":"cbbd6dd1df16f6845a6856aca9446b65fec5e440732d97133a52d85e6a23f2b52bd3868c78ce2ac57b6ad7497f9fe36d3818f80e6c0c14ac9a588abc77e1b014","ssdeep":"","tlshash":"393120734a113d2c70dbc9a33d91c5885c21960ce7a782e9ed772f208cc71d70aa3a8c","first_seen":"2025-09-14T00:38:40.179186Z","last_seen":"2026-06-23T19:04:00.706892Z","times_seen":10,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/_next/static/chunks/framework-768883f30322d1dc.js","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.738Z","timestamp":1782232046738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/chunks/framework-768883f30322d1dc.js HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:15 GMT\r\netag: \"2c9ec-63a8311e3faad-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17BeOxEtkaEdW%2FgjTSHpFPVhBAvhQ%2FDqOhO8f3kQRVM5Cdnb85WP3IIxxlagcRxBucYPKks6GsvBglgSLm9WK5Cfhg2hpSwzwm6lRn4K%2Fahjq2MGDtHpnNXmoAshasT6K2M%3D\"}]}\r\ncontent-type: text/javascript\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 57739\r\ncf-ray: a104dc341c260afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182764,"size_decoded":58495,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e554426495f0b3e3347482e8531efe0d","sha1":"071abe495aff35ac7b5384227a30001e566788be","sha256":"54be168a95d193770ab83a23ece9ced68a6ea9708cfb8cb5532ad4ed9e3c51d0","sha512":"244f93e44c5527bb81145b6a8963e85c41d8130a3c914aab891808977bfca48d2b3a8ce136a47b4567f10a488dc4a53511fce2a34c21267aeeae3b3558306b96","ssdeep":"1536:P+oWdQwtpeR8if4zCsvIvi5GwR5q34aF9SB73kwttWQ4i45GY4bCiwb3f6oAAzTi:PseRezCLujUP9SB7btMyGbHTFc","tlshash":"6704fae83955f5526eb312b700af2803737c262b280d4d60a211fd9db5b845eb17bf9e","first_seen":"2025-09-14T00:38:40.144111Z","last_seen":"2026-06-23T19:04:00.707698Z","times_seen":9,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.754Z","timestamp":1782232046754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Tue, 02 Mar 2021 18:58:36 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 2726\r\nexpires: Sun, 13 Jun 2027 16:27:26 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dH8xYXTl9lFq0DpWqMPVwi3KnCSlZmOUw6Gt1n16HYf%2BPbiIMZSXqwt7HwVo7ogjKAjMYPsnWultykV66YlDzAvE7qjnozZZUXHxCWNWXT%2FxAAjuhOswCc9DwR9bnSydlAF%2BPYVo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a104dc344f29b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89501,"size_decoded":28924,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-03T21:12:42.96373Z","times_seen":486818,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_usdt.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.774Z","timestamp":1782232046774,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_usdt.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_lbtc.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.779Z","timestamp":1782232046779,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_lbtc.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_rseth.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.782Z","timestamp":1782232046782,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_rseth.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/moveModal.css","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.748Z","timestamp":1782232046748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /moveModal.css HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:40:02 GMT\r\netag: \"3ac2-63a830d88a8f1-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0rXce6XjnNpsyPZPLZGDKgB%2FGCaY83MTUH0yLq5vMBpsB2SJpDGCRqaW6Om%2BySBoRuo1NhJ1p1DuuYwucf1sj8b%2FPMZE6nEW8LNEoGxGTimzyu7p30CWq45FpjjflDwGGk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2328\r\ncf-ray: a104dc342c2c0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15042,"size_decoded":3075,"mime_type":"text/css","magic":"ASCII text, with very long lines (884), with CRLF line terminators","md5":"b1a03435398f22bc57f88f394580d33f","sha1":"7d8efcdbaedf8e2e36a8aa0e63bc29d5d374a927","sha256":"6545f86b49762b4ba5f463ae0c2a7b50fc2c765b652a3f9906ec1363c837d089","sha512":"63f959f896302f5daa7235dede5f1b493556dd68983e1add723c86d94a69f6f89495925f42c203e511c6f3b906a526f22e85faa6d0fb84f1b759c8090c7203be","ssdeep":"384:PHWRVnWelLmZhWelLEBzWelLeKm5WelLSjJY1Qm/wn:P2RZmZZEpeFxSK1Qm/wn","tlshash":"21623f66434451296007abd8eb93c7cbeb7ab925b506d27f6ce32414c39f2d309e7742","first_seen":"2025-09-14T00:38:40.164665Z","last_seen":"2026-06-23T19:04:00.711265Z","times_seen":9,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/static/media/wallet.e8eacd8abb0dc9e76040373c3e83da03.svg","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.766Z","timestamp":1782232046766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /static/media/wallet.e8eacd8abb0dc9e76040373c3e83da03.svg HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:45:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BkokLGZhtHpCvqsmYpPP2H%2Fu6j23nGD%2FEYwhqqQhvpat93xJDMzrKlT%2BmsWqWbGDqSbr73Nx8SvwtHtxQkZ8yn%2BSuHg4MDlOZfqMzU9aY8V76WuOfkqfDuc8Z2PyWaxYyEQ%3D\"}]}\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"22e-63a831f8b85a7\"\r\ncf-ray: a104dc344c310afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558,"size_decoded":1004,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c424349e54cfbc349284a9917caa0466","sha1":"a84e3187c36dc3d4250cbb5cdfb0cd011741fb59","sha256":"c808e1e5e019100bdcc52a4389712cc14878f0b6570c9eada91c1d99ac9fa625","sha512":"4c74ccabbf2f1153bd0da4062d97c76f2474bf7b93c03e13ab1f4149e0eb4f4fe27298ab33d1945e17c3a78a119d95c86cfe8d6619fad9ca320c12c972f5bee9","ssdeep":"","tlshash":"4ef08ba4259427bc9e44e30473b4b068f59b20e9c54008dc4dc1d9edf82418f1ff68ca","first_seen":"2025-09-14T00:38:40.167151Z","last_seen":"2026-06-23T19:04:00.712417Z","times_seen":11,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/?utm_source=moverewardxyz","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T16:27:26.071Z","timestamp":1782232046071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /?utm_source=moverewardxyz HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 26 Jul 2025 09:34:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMOyUibnWUL8QpQrNqU4m3Yzo%2BDZyPfvMnmjcgRAplgx3ORSO0ApJhcZ5734ZjjPTCrILwScj1sicaIm5htpT1vLoNsmvwdmrc1Mcqharzz%2BVuvxdgv4cKSEn7YZBvnwicQ%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a104dc306fb43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46902,"size_decoded":9521,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2322)","md5":"546208509cfdb6600f1136782745ae43","sha1":"40292b481d57283a096f0649331280f17512e86d","sha256":"8d9a02ef96a519ce58eb1f96770284c18358d7793f669dde30530b87424ba468","sha512":"f0f42860001a579c207b20d8d8f89259d97da3d5d02564bc596d5368fda545008e4e61af289259334b2fc3b7281b2b138afe971622982ea78e7456cc24388ad1","ssdeep":"768:DNXwBNNUkNPh7p4DMN+ATDacQl3gwVHRgiZi3uCxvQV9mZqjFjkVlZ2VZyDVr8da:BSNUYh8Po","tlshash":"9623eb56eda2893b395390ef6bd2de0f6aa0b0039805f64976fc45c28f46db78db3414","first_seen":"2025-09-14T00:38:40.130319Z","last_seen":"2026-06-23T19:04:00.714539Z","times_seen":7,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":60,"connect":1,"send":0,"wait":176,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/static/media/rewards.0b7c3d1c899b7d792cf37eb8f4278eb7.svg","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.769Z","timestamp":1782232046769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /static/media/rewards.0b7c3d1c899b7d792cf37eb8f4278eb7.svg HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:45:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPicz5Z09e1P7JNJSOmdDXzzrgtRJnLv1akohGp4vwRHo0JUEFymeBGd9d3hZODH0n%2BxEwzJSZ1RH59o2KGLH%2FX9XGOabTnAhcgm3Wr6PBRG9j8v%2FTRoDMBkoGb82KVqdF4%3D\"}]}\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"3ab-63a831f89b0e4\"\r\ncf-ray: a104dc344c330afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":939,"size_decoded":1238,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77f482e29d3c693a11703b1875c6fafd","sha1":"a2393eabf8e1fed9d722dcaf2379445358fadaae","sha256":"84300646232bc06cc1abea9aca3e0fcbea7073a5b6c9da3a64b0c93cd6b31084","sha512":"012b0cc1994aa2cb7215a8349f10929ed4bc73c3f83eebeec92e74f376781745dc722f5962b3f749002665d8b69ea1d799a0e76b050b74ee25f3c5d45c8cf5f9","ssdeep":"","tlshash":"951148b9e1fcf07af104e748878a3454a58c613923548128e3c07e3e146b88a1dd83f9","first_seen":"2025-09-14T00:38:40.148133Z","last_seen":"2026-06-23T19:04:00.72158Z","times_seen":9,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_usdc.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.775Z","timestamp":1782232046775,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_usdc.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_meridian_lp.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.777Z","timestamp":1782232046777,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_meridian_lp.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_stbtc.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.781Z","timestamp":1782232046781,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_stbtc.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.732Z","timestamp":1782232046732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 23 Jun 2026 16:27:26 GMT\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-03T21:16:02.66359Z","times_seen":32641,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/_next/static/css/5994cf050a946d45.css","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.734Z","timestamp":1782232046734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /_next/static/css/5994cf050a946d45.css HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:41:13 GMT\r\netag: \"20d3-63a8311c11cb4-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=0,i=?0\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcCy4fUwEk%2BSeaYwUTsv9cx0Hsv0y%2BafNtwUux2KLeXKVCK3cgXJN2CBM1hYnHLS9wBbYPgMiBhXylwg4E0SZn0HoB%2FfEH48naFgdudpIKnYEsRRunYlZzqmmeBaRWTlwJg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1951\r\ncf-ray: a104dc341c230afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8403,"size_decoded":2698,"mime_type":"text/css","magic":"ASCII text, with very long lines (8179), with CRLF line terminators","md5":"d208a1c2e21f51f353ea25ce1b05b8dd","sha1":"eae858d6c6f0320d197b660ab8509291ad095751","sha256":"9998f0a5bd3155bb23a2573383df9322ad4ae2daa72a4fa506d9978c20d1e488","sha512":"9c595ae452e028ebe29ae4c96e626871b5afaea69988dd96fd55c12abcca9421a1e875801c79f9238d38868771c6dc62aa3b626f1d23b8133b6cdb68228a5b33","ssdeep":"96:s0gGZZIWYZi/+ZQZpZMmIZsZeMc/2gocHcfWjNNJQUpXp3n1X9F1NUd3oi8:sXb/5fbdpX1NF1GZU","tlshash":"8e02ed2162b9b135b532a7373b5886de5040fc41cd9d6234a9c1636dcbc6fae52b0b0f","first_seen":"2025-09-14T00:38:40.177681Z","last_seen":"2026-06-23T19:04:00.716087Z","times_seen":9,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"move-reward.icu/static/media/close.a0140a5458aee448d62ea87d0f0380d5.svg","fqdn":"move-reward.icu","domain":"move-reward.icu","tld":"icu"},"ip":{"addr":"104.21.82.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.770Z","timestamp":1782232046770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"move-reward.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 May 2026 20:05:48 GMT","end":"Tue, 04 Aug 2026 21:05:37 GMT"},"fingerprint":{"sha1":"DD:6C:67:F4:1C:67:E8:C0:06:2C:70:FE:33:D8:D7:77:D9:C4:3C:05","sha256":"13:C7:51:4D:34:A3:6B:30:CE:BB:13:76:17:C0:97:A9:65:42:12:3D:5B:8B:A5:89:38:CB:A4:85:EF:99:41:A7"}}},"request":{"raw":"GET /static/media/close.a0140a5458aee448d62ea87d0f0380d5.svg HTTP/1.1\r\nHost: move-reward.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/?utm_source=moverewardxyz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Tue, 22 Jul 2025 11:45:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLXoFLvSu%2BcZYJ4c7FoiyIvS5FzHwFz3FAjqBKygxk31IS7zhtBo2K3rVTVXTAP6Ow1t9kfED81uZC7nXTNQkyKK22l1d8LyPl0Jaa3c%2FbH9JSBcdUVepVT9Myj94X94Mgc%3D\"}]}\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Jun 2026 16:27:26 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"e7-63a831f880332\"\r\ncf-ray: a104dc345c340afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":848,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ba5962e130615e15517ab1cf3125a59","sha1":"87bbc5285221201781e7ebbd3bf1f59516e9fd23","sha256":"3671b4273e5b86be728792af321f9cbefcfff7c59577a103d59ee0e32feb9d28","sha512":"67f2a6474cac144f4294dce142ce05f0524b7fff2287a030100699e057311ca1dc0b2851937f5848e639ef672d08b00258acc5a0c3d1c61de94b332f6b1bbd8e","ssdeep":"","tlshash":"97d0a76a1608982ca0608464e766745450e750930a8910e5d9012539e516edead371fc","first_seen":"2025-09-14T00:38:40.168236Z","last_seen":"2026-06-23T19:04:00.728216Z","times_seen":11,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"move-reward.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ichi-images.s3.us-east-1.amazonaws.com/tokens/logo_256_solvbtc.svg","fqdn":"ichi-images.s3.us-east-1.amazonaws.com","domain":"ichi-images.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://move-reward.icu/?utm_source=moverewardxyz","date":"2026-06-23T16:27:26.782Z","timestamp":1782232046782,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tokens/logo_256_solvbtc.svg HTTP/1.1\r\nHost: ichi-images.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://move-reward.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T21:16:36.689777Z","times_seen":16950752,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}