{"report_id":"37be5fa0-5ae1-4d9e-a5dc-a6c09aed6f92","version":6,"status":"done","tags":[],"date":"2026-02-14T07:32:53Z","url":{"schema":"https","addr":"migratewojakcto.com/","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"migratewojakcto.com/","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"title":"$WOJAK Migration Portal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"migratewojakcto.com/","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T07:32:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migrate.wojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"migratewojakcto.com","ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-02-12T21:20:10.694365Z","last_seen":"2026-02-12T21:20:10.694366Z","alert_count":9,"request_count":9,"received_data":5447349,"sent_data":4208,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"migrate.wojakcto.com","ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-05T21:40:23.781675Z","last_seen":"2026-02-05T21:40:23.781675Z","alert_count":1,"request_count":1,"received_data":26237,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"migratewojakcto.com/three-r154.min.js","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f6d9f20f8ad8aa937879a27b27cf47d","sha1":"b9826f15a2c8e84c33dcd62fbaabbe2b11086a7b","sha256":"610519ddcbecea143647b9dd066aea4cba892a7beb831500ad29d6fb4c0a888f","sha512":"0f92cb98279b688dfb61609c355cbc1b281134fa26b3be349c6e9e47a6142dff3ef2fb4102b5ff8c42b5744eafd066d2fe1a8a548bf264165717247eaa2b1ae6","ssdeep":"768:lu3VLctT2CmoTYDaGI+Vs9bCk2cYGJLcwcj5cTqYUb4izAg4jUNiOwcGcQcWc2cH:/26GxVE7vgZ4kuds2u","tlshash":"3d7382d9681bd0d48e5620ded473e805e4280a23cdadf2a3a67cdec1745ef66c48763b","size":74861,"data":"","first_seen":"2026-02-12T21:20:14.378178Z","last_seen":"2026-02-14T07:32:54.797733Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/951ed927-3d18-4859-9373-06c65a4e06a0","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-07-22T10:58:35.558319Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"migratewojakcto.com/app-icon-logo.png","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:30.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"GET /app-icon-logo.png HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migratewojakcto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:32:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 25672\r\ncast-mode: default\r\nlast-modified: Wed, 04 Feb 2026 21:34:18 GMT\r\netag: \"6983bb5a-6448\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=syKorxORq4kxikRbplmEc7L3m%2FlDXjg7SCbFXmoF7gvFBLmI2Hk%2B6Za6I2aho5jIWgyublQubKegpPzrC81K6Gk0s3KT558whuzluUVr0I4%2Bmi0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cdadf3d0c02c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25672,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"dbf2e5b3ca104102f87456cf90b5c7ae","sha1":"a3fe4bb9ed761bed80a9fac6adc3804cf4042800","sha256":"0a8373bd0589866f86ca5e53177fded5b97a3d9dbb4b3a982a8f6db3ff20a68f","sha512":"93054205d6c456746c9f66301eef385dc567d7935476dba57e975754063261a8edcf852c2c5b17c0389ee423b14baf3619674f0c2eb76dd1d16005105ea4bbc2","ssdeep":"768:PEzTfdUbslplWhvkLmFTNmyJ/gcWuHXQgrO:PEz+bslplNCFE8ocWuggrO","tlshash":"cbb2d0c98d3848a43703f124f6b2b4fb25bb568590f5fc30b86b68f6183462d16a9ddd","first_seen":"2026-02-05T20:54:33.124262Z","last_seen":"2026-03-06T14:48:56.220616Z","times_seen":29,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/181ced9a43b7ff33.css","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:29.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"GET /181ced9a43b7ff33.css HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migratewojakcto.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:32:30 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 04 Feb 2026 21:34:18 GMT\r\netag: W/\"6983bb5a-c097\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ND4CvG41Uh5XACGfe9A9hDI%2BLCDbUI4CaPUwCgNFtEfN3zs40i%2BZiy2RAYgTCrBHb3rXbV4VB0kFZuH%2F3qsjxHfcqSKSFPQiRhE1lA4SRUnXy6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdadf369a96c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49303,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (47010)","md5":"90c62cf695994aa5844f8c78d48d005b","sha1":"1d4f3dc7c6e6d54fa60c5626bab551a408dada4c","sha256":"142b5c3018133b7c3d1ae1588214773d682e44454b187b1679656ab5346d8d5c","sha512":"7da7cf6897bef6ae0fd3c95fbb258503275ad684f86bf926cd2d12b7a87fd966b5cd260371759aa48136c19cc7e249b6d70c731a3ef6e3f464658c68e6d0095f","ssdeep":"384:GHrWpxO7UrmrCIApSed283Zcy23qWF7O36AgzyAIfPojPFEIn:GHSvOgrKC5pSUJCAgzyAcojPFEq","tlshash":"9f230d0d7e1c3e397d23a3b584c095dc6207738bee7d4397acd2260c9e9d3a535a9628","first_seen":"2026-02-05T20:54:33.150072Z","last_seen":"2026-03-06T14:48:56.222631Z","times_seen":29,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/three-r154.min.js","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:29.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"GET /three-r154.min.js HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migratewojakcto.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:32:30 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 04 Feb 2026 21:34:18 GMT\r\netag: W/\"6983bb5a-1246d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbItYQc6%2B1yGVw%2F%2Fozf1bMJA0%2BoNklGcFqqj0uqnzNkqLqXXo0cy7ZVquBbvHbvWfiycYyqKsJjQJsAJU7sXJ4R%2F4vMhMJYD3vZhBsgLU%2FVKzdg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdadf369a97c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74861,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f6d9f20f8ad8aa937879a27b27cf47d","sha1":"b9826f15a2c8e84c33dcd62fbaabbe2b11086a7b","sha256":"610519ddcbecea143647b9dd066aea4cba892a7beb831500ad29d6fb4c0a888f","sha512":"0f92cb98279b688dfb61609c355cbc1b281134fa26b3be349c6e9e47a6142dff3ef2fb4102b5ff8c42b5744eafd066d2fe1a8a548bf264165717247eaa2b1ae6","ssdeep":"768:lu3VLctT2CmoTYDaGI+Vs9bCk2cYGJLcwcj5cTqYUb4izAg4jUNiOwcGcQcWc2cH:/26GxVE7vgZ4kuds2u","tlshash":"3d7382d9681bd0d48e5620ded473e805e4280a23cdadf2a3a67cdec1745ef66c48763b","first_seen":"2026-02-12T21:20:14.378178Z","last_seen":"2026-02-14T07:32:54.797733Z","times_seen":4,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/migration_wojak_0000_Migration_Mechanism-1.jpg","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:29.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"GET /migration_wojak_0000_Migration_Mechanism-1.jpg HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migratewojakcto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:32:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21701\r\ncast-mode: default\r\nlast-modified: Wed, 04 Feb 2026 21:34:18 GMT\r\netag: \"6983bb5a-54c5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zljoXopHJvJLly09rlXP%2FcJY4xiHmjLWszvNSR8uVVyKhSNcWQOg7ofKZJLELYNse3iR9VPt7KOMIio%2F6u4jsLgaGuWQF9cH90LfINuU3gkW6LI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdadf369a98c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x566, components 3","md5":"c49d6bf31398e69c6bbddb7d0c578f34","sha1":"673a90a6dde997bceb178d819113e3305b3f6645","sha256":"d32cfcaed01c55c96901bfb214963de4b8d84554203e0410791bbecc032fe740","sha512":"9aa3b0d64a2267d34e2e323d53bdb1dabcd94d1297c58adf1d6dac3346db84aa0a21f95f29752564e5fa969486efca1933db05e27b1421fc189d4737dd9829c1","ssdeep":"384:lzE0t61nO9Zpo0yARV5d+Lkcb6uQUqA4WhXP9ebDa5JuEeO62eml/MBLB7I1XWA:lztgnoWA1kLBbxQUj4IXP9ebDCw29GGF","tlshash":"20a2d1edbcdf8883e5e0667002c77e8153860865c87643eac3036a64e7bbd41e55fad8","first_seen":"2026-02-05T20:54:33.169255Z","last_seen":"2026-03-06T14:48:56.228573Z","times_seen":27,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/background-noise.gif","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:30.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"GET /background-noise.gif HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migratewojakcto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:32:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 76046\r\ncast-mode: default\r\nlast-modified: Wed, 04 Feb 2026 21:34:18 GMT\r\netag: \"6983bb5a-1290e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3ejpFxOCYDyxdM2Z2b3OoPq02LxKOIm77FkPdEQR%2F%2B4vswVKsSx3CZiztNrc6CxBX5znqcmO%2BfRnk6QrMBX4OCs3MfGHG8KyyvQkJzM6olAAmM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdadf39cb2ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76046,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 360","md5":"ca275314206fbb15f39c8025c5bbc6e0","sha1":"91e944afab35ab2b7cd3575070ee398ca71a3649","sha256":"71aa02e5d94755df95f63970df6aa7040eefa72e13e35860cbeed25453837a53","sha512":"a0aaf8667067ea4ecec39213b55b7fea25e58f68da536ca1fd1775d569770fcd60c9203a779f32d1d66dcd66aa101f7f67eda3bcca81327980f3ed7cea53e18f","ssdeep":"1536:7Z+URTG5oSLOT9OB9XTovsbAH+V+ISYJEbdjkc7AaPdMJeJ6FknB:xK5oSsUB9DusbcGqY2Zkc736KOknB","tlshash":"f97312b080c4a273b966641f6b50a475b7d5ee3002091f586cee7527aeb740cebeef14","first_seen":"2025-10-27T03:59:43.106426Z","last_seen":"2026-05-15T20:13:50.072126Z","times_seen":37,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/app-icon-logo-2.png","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:30.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"GET /app-icon-logo-2.png HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migratewojakcto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:32:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 935\r\ncast-mode: default\r\nlast-modified: Wed, 04 Feb 2026 21:34:18 GMT\r\netag: \"6983bb5a-3a7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfQKFOzvNuiSD%2BM%2Fd4tpVja8HX%2FHqF%2FB6C%2BuqbpXtsyrlEadBxcJL2x1zqZoMuJdi8dEygdDejsgqrSkFvRuTnG7geIyD9CLVRyKCW6Hh7yZiZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdadf3a0b42c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"f86b7fe9cc94e4d517f20f84dccf6f37","sha1":"780cbde94b6376c01e2a34c11022516f3b632348","sha256":"fed0c0886a14490e896244f0e7f0263e7b283f6788859c302c8ae2cfb23e1db3","sha512":"4703f4a5377c1dd9777a0f7f629a28d255cd72ca7170de19ed4419432f33010de35123400d68a9c6b7a8c5ece2b588ea6b3b9c30614d55142bddde4ed87f251a","ssdeep":"","tlshash":"6d11b7cbb5322c73fc9096e619319b726c6f879ac1fa0014dd4687258c900cb5b4c8e2","first_seen":"2026-02-05T20:54:33.157947Z","last_seen":"2026-03-06T14:48:56.224134Z","times_seen":27,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrate.wojakcto.com/assets/app-icon-logo.png","fqdn":"migrate.wojakcto.com","domain":"wojakcto.com","tld":"com"},"ip":{"addr":"216.150.16.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:30.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate.wojakcto.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 03:13:03 GMT","end":"Mon, 04 May 2026 03:13:02 GMT"},"fingerprint":{"sha1":"6E:B0:12:EB:5D:B5:7F:DB:78:24:AE:94:0F:44:0D:6E:FA:69:9D:EC","sha256":"DC:05:04:96:F0:AC:51:8A:BF:40:7D:DA:8F:9B:87:D7:C9:80:90:8D:E1:3C:B0:C7:20:F1:ED:D4:A0:CD:EE:04"}}},"request":{"raw":"GET /assets/app-icon-logo.png HTTP/1.1\r\nHost: migrate.wojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migratewojakcto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 868037\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"app-icon-logo.png\"\r\ncontent-type: image/png\r\ndate: Sat, 14 Feb 2026 07:32:31 GMT\r\netag: \"dbf2e5b3ca104102f87456cf90b5c7ae\"\r\nlast-modified: Wed, 04 Feb 2026 06:25:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /assets/app-icon-logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mxvds-1771054350977-c6319c7f0c29\r\ncontent-length: 25672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25672,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"dbf2e5b3ca104102f87456cf90b5c7ae","sha1":"a3fe4bb9ed761bed80a9fac6adc3804cf4042800","sha256":"0a8373bd0589866f86ca5e53177fded5b97a3d9dbb4b3a982a8f6db3ff20a68f","sha512":"93054205d6c456746c9f66301eef385dc567d7935476dba57e975754063261a8edcf852c2c5b17c0389ee423b14baf3619674f0c2eb76dd1d16005105ea4bbc2","ssdeep":"768:PEzTfdUbslplWhvkLmFTNmyJ/gcWuHXQgrO:PEz+bslplNCFE8ocWuggrO","tlshash":"cbb2d0c98d3848a43703f124f6b2b4fb25bb568590f5fc30b86b68f6183462d16a9ddd","first_seen":"2026-02-05T20:54:33.124262Z","last_seen":"2026-03-06T14:48:56.220616Z","times_seen":29,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":51,"connect":1,"send":0,"wait":50,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migrate.wojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T07:32:29.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 07:32:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 04 Feb 2026 21:34:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oD3J7vWlWkG%2BKN41hdcdGneyaD%2F6KBW1tJ02gdBsBTJLVh0uydUVPkLc20WitKXZA0jBSHzqa0fDzlqs2jvFsq7TMe5b5yd7gdNdFlWdgJNCqb8%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdadf33e981a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17172,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2425)","md5":"20333b7cc8649c4f835bb542f1a03377","sha1":"6006702c3b03d1a2bb27a3243f25f36bf2f169bb","sha256":"368181d6f06f8083c682c09e2e7ec492d2c661352514fd1a7e2248f2d5bf5f6f","sha512":"df0d176edfdfdaa11c3b52e1f499cc6e9022046c04a189e5c192a4ee4870fe0ef6df6c8abbd48438654d85ef84a704d92ebff8ced37e06dc2c7e4d425e4ea65f","ssdeep":"192:DTT8YDMH2d+PQAEDa/B34nPZPXvn/hVdtp3NZb1Xa5HM:nT88MH2d+PQAEDa/B34n5vzV3l+HM","tlshash":"a1729591add010b67227c2b435e5eb4e7a30a417c617a998f3ec1194cf8edb6cda318d","first_seen":"2026-02-12T21:20:14.381669Z","last_seen":"2026-02-14T07:32:54.804029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":27,"dns":10,"connect":1,"send":0,"wait":242,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/migration_wojak_0001_Migration_Flywheel-1.jpg","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:30.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"GET /migration_wojak_0001_Migration_Flywheel-1.jpg HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migratewojakcto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:32:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26034\r\ncast-mode: default\r\nlast-modified: Wed, 04 Feb 2026 21:34:18 GMT\r\netag: \"6983bb5a-65b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2B2FTRoEjR5jzFaEuckGRBZRwSvWwXQ5hLP9YuhGzqnym29LcvFJtiq29XpKrHUgq%2BbH3VwkgA51Kvn69u5IqWr9h4rDQA7S%2FV1CBCzMl5ilce8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdadf3a0b43c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x566, components 3","md5":"8f98607f0ee165a9a2954143fd93d2cc","sha1":"eff47b85f9244f89af63a24db179d6febb7be752","sha256":"cc822efc96d9a91048cdbe06e9819aa2a6e5585ec5efda31a4a1fd241fe2c338","sha512":"3740b968b03477b62009019e9da283b49c3e91df5420b7a8f165b8f461faafbee6df029ba85695759d38c45fe7196dcc07e7034b0a44ff946d35c8a146f5aaf7","ssdeep":"768:lzxDinebsNLlx/FZ+RUIVSj4jf9nE9vxHNQ:lz1bsVbFZAVff9nE9xHq","tlshash":"d2c2d0bf2fa24d44dfdc16f219f82ee631cae405cf460b58b9d44a2281bd3216d927e1","first_seen":"2026-02-05T20:54:33.173442Z","last_seen":"2026-03-06T14:48:56.2237Z","times_seen":27,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migratewojakcto.com/secureproxy?e=jscdn/getFile","fqdn":"migratewojakcto.com","domain":"migratewojakcto.com","tld":"com"},"ip":{"addr":"104.21.64.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://migratewojakcto.com/","date":"2026-02-14T07:32:30.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migratewojakcto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 20:37:47 GMT","end":"Tue, 05 May 2026 21:36:20 GMT"},"fingerprint":{"sha1":"1E:BF:78:06:31:52:3E:24:FB:95:AF:8C:D0:4B:8A:00:FD:63:29:0F","sha256":"55:55:C3:1F:5B:82:B1:C0:4D:E7:0D:56:37:52:7B:C8:41:BC:98:AE:CF:5D:19:2C:32:5B:72:73:E5:32:3F:0D"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: migratewojakcto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://migratewojakcto.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://migratewojakcto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"o26083mj7oqlwo7587uv\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 07:32:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JV7BEhKVQGv8BssTYGVrXUXTtySV68ZPMXgdU4eLhJwICjuuLXaRkTpU3gtE0b1oeidncSLAq5W1zMoMSR8ysGidnLZah7AenZBpJxvavqSzA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cdadf3a2b45c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5147147,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e3760561c000256accecf777a045858a","sha1":"acd6848a7711e1f10fb43685a548ae923b17ac85","sha256":"8c92552ae683edb0edfe173d65f8be8f6ed774b24423a3957239eae05420f8d9","sha512":"b63ee35301a3762ca5bb6b23cf4931677a559693a79183fb49c21bc348c720663b6739c4e73905c3587abb6f12fafffa2da707edd2c9577d971950f8ddbafb7d","ssdeep":"24576:t1KuCDROH8Ny5Od99mK/svrm+3OJ5U9CQ3A9y9jiBbg95GUiMd:t4xhdOK1I9CNE9jggKUiMd","tlshash":"c22512d68021f09237289574aed239d9aaaa406f5bdd07721558ece0309f4f98fdcfd2","first_seen":"2026-02-14T00:11:09.755878Z","last_seen":"2026-02-14T07:32:54.807187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":272,"receive":392,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"migratewojakcto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}