{"report_id":"3e4841b3-b509-4630-8716-995d6605f584","version":0,"status":"done","tags":[],"date":"2026-06-25T04:49:56Z","url":{"schema":"http","addr":"migration-blinks.xyz","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"title":"Blinks GG","dom":{"size":28739,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28194)","md5":"8ef50590a0f4e7137572293167e32bda","sha1":"4402bd7fca383b2a1e56096e05b558c122ae2920","sha256":"146c21f307689cc1b5e0bb8ffee30e0a9e6f2ce2d147b80e44d3fc0d5866e785","sha512":"aae03384b372fff35307b9701c5c243088e9596e36bab027a6ea90f0f9a91760917499bb032a803455123c896f1da0caebf9d6f57cd0b5f1a88b5ff16dd9f48d","ssdeep":"768:440rGV4xksc64Jysq7vuoy/L/ATm/Cj/5lx6UzO+zP8p9vzoCx:44ebx/c64Jysq7vuJ/YevzoCx","tlshash":"89d2c950b50813395c2faaa9eec4f71cd124f542eb134431a24e409be9d9ff63ab6f94","dom_hash":"domhash06d5c0953806729b8783853861b81828","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"migration-blinks.xyz","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-30T04:49:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"migration-blinks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"migration-blinks.xyz","ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-17","domain_rank":0,"first_seen":"2026-06-25T04:40:59.470057Z","last_seen":"2026-06-25T04:40:59.470057Z","alert_count":7,"request_count":7,"received_data":819863,"sent_data":3599,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62cf3da173f17e834c487d513e98c449","sha1":"3f992f465ef278f2647dfec4c616574e689a42a4","sha256":"aa8c85ca6441c8587043d68f1e0646ad373b26a920459e0a24acc89bcc8b873b","sha512":"bf995c087ad64e215849b0e67c986173d83eb14ac6704e660ded8627734152cdd3f0993da0b6152f53a55b8ce9d5bfba86f23f1f33f9a4ac94ad035b5c20bfef","ssdeep":"","tlshash":"2fc0c000c6304e78490c80fb323553c030e02d2c03c1a8dbc1fcccaa24ecfc40d48000","size":180,"data":"","first_seen":"2026-06-25T04:41:02.914992Z","last_seen":"2026-06-25T04:49:57.999568Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-06-27T05:29:52.241034Z","times_seen":1842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-06-27T09:42:50.840803Z","times_seen":3198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62cf3da173f17e834c487d513e98c449","sha1":"3f992f465ef278f2647dfec4c616574e689a42a4","sha256":"aa8c85ca6441c8587043d68f1e0646ad373b26a920459e0a24acc89bcc8b873b","sha512":"bf995c087ad64e215849b0e67c986173d83eb14ac6704e660ded8627734152cdd3f0993da0b6152f53a55b8ce9d5bfba86f23f1f33f9a4ac94ad035b5c20bfef","ssdeep":"","tlshash":"2fc0c000c6304e78490c80fb323553c030e02d2c03c1a8dbc1fcccaa24ecfc40d48000","size":180,"data":"","first_seen":"2026-06-25T04:41:02.914992Z","last_seen":"2026-06-25T04:49:57.999568Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-06-27T05:29:52.241034Z","times_seen":1842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-06-27T09:42:50.840803Z","times_seen":3198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62cf3da173f17e834c487d513e98c449","sha1":"3f992f465ef278f2647dfec4c616574e689a42a4","sha256":"aa8c85ca6441c8587043d68f1e0646ad373b26a920459e0a24acc89bcc8b873b","sha512":"bf995c087ad64e215849b0e67c986173d83eb14ac6704e660ded8627734152cdd3f0993da0b6152f53a55b8ce9d5bfba86f23f1f33f9a4ac94ad035b5c20bfef","ssdeep":"","tlshash":"2fc0c000c6304e78490c80fb323553c030e02d2c03c1a8dbc1fcccaa24ecfc40d48000","size":180,"data":"","first_seen":"2026-06-25T04:41:02.914992Z","last_seen":"2026-06-25T04:49:57.999568Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-06-27T05:29:52.241034Z","times_seen":1842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-06-27T09:42:50.840803Z","times_seen":3198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/secureproxy?s=%2Fipfs%2FKQVlRGtlzGhxxGJw7LrRkA823e58d3c8ef00f6a649054a9167aa2d%3Ft%3D1782362972282","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21fd38a8427baf2b92fde100498ca976","sha1":"d7422dee9f5ed3f07290060f04c18dd5f533edb2","sha256":"2c1742adf873248accb4ccd421e28e1e751bebc9de5ab6efcb73eeea928b7121","sha512":"eb3738ecc399b2db99213fab363af95dbfcb21e3c8c50a203fb10fcb0e4cfb09fa293f684292c10db94bb84414d3be5e90fc3a8148394de74a9e716d38437bc2","ssdeep":"6144:Bh5gDHQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsHQDC6m7hFqa/J/","tlshash":"4fd4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","size":619140,"data":"","first_seen":"2026-06-25T04:49:57.995715Z","last_seen":"2026-06-25T04:49:57.995715Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"migration-blinks.xyz/secureproxy?s=%2Fjmpd%2F","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://migration-blinks.xyz/","date":"2026-06-25T04:49:33.916Z","timestamp":1782362973916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migration-blinks.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 00:43:27 GMT","end":"Tue, 15 Sep 2026 01:43:26 GMT"},"fingerprint":{"sha1":"A1:F9:F9:D6:30:4F:9F:2C:7D:7D:3A:20:58:EB:0D:2C:40:F1:37:CA","sha256":"4A:42:12:C1:08:42:1C:11:F2:52:66:79:05:99:1A:D6:9A:F5:4B:74:B3:7C:73:CA:23:DA:7B:33:DE:09:A8:4C"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: migration-blinks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://migration-blinks.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1390\r\nOrigin: https://migration-blinks.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 04:49:34 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1782363034091\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 06/25/2026 04:49:34\r\ncdn-edgestorageid: 1444\r\ncdn-requestid: b3db7a9e692243e40b46065f56b2e57e\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VqjgUMft%2Fm%2BcI1UQqmxW4imb33hM%2FbcPMYBCS7O0ppGN5SiUQVIwQsRJjtbIOi%2Fy1DE97eTEtM%2FnnR7%2BBijRtocu1wS3FXasNlGB9TnK97DeCXJrclbN0tsDjBqD8WHU4iKb%2F4zOg%3D%3D\"}]}\r\ncf-ray: a11158aaf8510b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3383,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T12:34:36.594319Z","times_seen":16761701,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"migration-blinks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T04:49:27.971Z","timestamp":1782362967971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migration-blinks.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 00:43:27 GMT","end":"Tue, 15 Sep 2026 01:43:26 GMT"},"fingerprint":{"sha1":"A1:F9:F9:D6:30:4F:9F:2C:7D:7D:3A:20:58:EB:0D:2C:40:F1:37:CA","sha256":"4A:42:12:C1:08:42:1C:11:F2:52:66:79:05:99:1A:D6:9A:F5:4B:74:B3:7C:73:CA:23:DA:7B:33:DE:09:A8:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: migration-blinks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 04:49:32 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 17 Jun 2026 01:21:28 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nage: 536\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FX4d37g8UxEI%2BnZ57lcpRKo5iR7IKnRmNTXgtkGdHoIzf%2B6nj0Hk5UVtz7wLqsvwjIReIOz5PT00enbv2UNAfHG5yvcAhnRuMCOfwcR%2BkJW2if1HGNqVKgjssbHFORfPNvo2L4Jig%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a111589ef81b0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28893,"size_decoded":8564,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28452), with CRLF line terminators","md5":"8834caf2fe4ba1ffc3de0d161546b791","sha1":"88dc10a30ee4230271e3cdac118273502df994e8","sha256":"8367e298e5ca2e04d24a0834873b39fc40abec1c091e8710814f322099d81f93","sha512":"7a84f4b94e20e0af16601c4bf8a7ffc705b2138aaf85f99ca9cf1acbe759ed91697be3011ead3ca65239bb8000747e7a86058b296963f36562180a5e32e06858","ssdeep":"768:q60rGV4xksc64Jysq7vuoy/L+/Cj/ilx6UzO+zP8pi9vzoCx:q6ebx/c64Jysq7vuJ/x3gvzoCx","tlshash":"20d2c950b40813395c2faaa9eec4f71cd125f542eb134431a24e409be9d9ff63ab6f94","first_seen":"2026-06-25T04:41:02.909084Z","last_seen":"2026-06-25T04:49:57.99142Z","times_seen":5,"resource_available":true,"data":null}},"time_used":4032,"timings":{"blocked":-1,"dns":4005,"connect":13,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"migration-blinks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/14__uhrhsrfqc.css","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://migration-blinks.xyz/","date":"2026-06-25T04:49:32.316Z","timestamp":1782362972316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migration-blinks.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 00:43:27 GMT","end":"Tue, 15 Sep 2026 01:43:26 GMT"},"fingerprint":{"sha1":"A1:F9:F9:D6:30:4F:9F:2C:7D:7D:3A:20:58:EB:0D:2C:40:F1:37:CA","sha256":"4A:42:12:C1:08:42:1C:11:F2:52:66:79:05:99:1A:D6:9A:F5:4B:74:B3:7C:73:CA:23:DA:7B:33:DE:09:A8:4C"}}},"request":{"raw":"GET /14__uhrhsrfqc.css HTTP/1.1\r\nHost: migration-blinks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://migration-blinks.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 04:49:32 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 17 Jun 2026 01:21:28 GMT\r\netag: W/\"6a31f698-e1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 536\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l83qb%2BpVX3mClKRTSelAZlYkMSQc0plStyeYFkQRFvBKJ%2BDo2KYK3Ss91OZWb%2BViAxWXvhksFbw23By%2F3cvADHxFFkpCxVfADtmMEjsuy1ptMEfuhIBJhojdPyDPkggUfrF3%2BGOBYw%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a11158a0f8280b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3612,"size_decoded":1624,"mime_type":"text/css","magic":"ASCII text, with very long lines (556)","md5":"905c11de002887bceb532a6c1b3ffd08","sha1":"f441de3f273d50856e2d0282f388c7c5194ef742","sha256":"cfe86996f12c66d5475a568e201368a32978dc373578bc44b06a9bedaf203b7b","sha512":"a800ecb2a20373c44a8b299d81ecfb945ed85248b1021426885a23fee809950d0c34864a3c34d5dc64a95605199421275a9fe6ee1d619f5c1082bd5fdac18ab7","ssdeep":"","tlshash":"3171c99c16bc742f99f91c437c8f5bb17b05ae2ee248064e803c2638dce213a5be4759","first_seen":"2026-06-25T04:41:02.910919Z","last_seen":"2026-06-25T04:49:57.993009Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"migration-blinks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/13ugcvhop_4sb.css","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://migration-blinks.xyz/","date":"2026-06-25T04:49:32.319Z","timestamp":1782362972319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migration-blinks.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 00:43:27 GMT","end":"Tue, 15 Sep 2026 01:43:26 GMT"},"fingerprint":{"sha1":"A1:F9:F9:D6:30:4F:9F:2C:7D:7D:3A:20:58:EB:0D:2C:40:F1:37:CA","sha256":"4A:42:12:C1:08:42:1C:11:F2:52:66:79:05:99:1A:D6:9A:F5:4B:74:B3:7C:73:CA:23:DA:7B:33:DE:09:A8:4C"}}},"request":{"raw":"GET /13ugcvhop_4sb.css HTTP/1.1\r\nHost: migration-blinks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://migration-blinks.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 04:49:32 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 17 Jun 2026 01:21:28 GMT\r\netag: W/\"6a31f698-1307f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 536\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drubaneCDk2ptIy36w6wJYr3KXpbmNKfiCBx2KdfPQR8o23b9U5yhL3lcFAEY23qYOEs207CRCr%2BAM6pbtEQQk1lOlEw%2F%2FM%2BGw9Qmj5%2FHH02QgSCp1Gvb2fG126s%2Ba3lX9WaAIP6YA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a11158a108290b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77951,"size_decoded":16602,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1343c2b3b1f0dc2544678069e8b1be05","sha1":"1016be2f78321cf41fb409c61a31556303856997","sha256":"a64c8e4f4ed7a7e683c5385b5bca8ac5d8157621a2ada49271734b2dcbaecef6","sha512":"e6db2543a3b8a23e4cb4554352857aa758d00bff83b1405aad3010b5ba6df5e33721bcf4a30eafbf4158a711a971323976b2ee0a6f0ca9cf220c6d671ec30ff5","ssdeep":"1536:psOwl39iuXbcs+PXDQLhjaFuqkm5ZN+E9Jh416V:2Owl39iG7+PXDQLhdqTN+0X41K","tlshash":"1373e850f12ae83fbd3758fa93dcb48ca11870c09d7547e9fa62232116c7bf29a67614","first_seen":"2026-06-25T04:41:02.911861Z","last_seen":"2026-06-25T04:49:57.994417Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"migration-blinks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/secureproxy?s=%2Fipfs%2FKQVlRGtlzGhxxGJw7LrRkA823e58d3c8ef00f6a649054a9167aa2d%3Ft%3D1782362972282","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://migration-blinks.xyz/","date":"2026-06-25T04:49:32.325Z","timestamp":1782362972325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migration-blinks.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 00:43:27 GMT","end":"Tue, 15 Sep 2026 01:43:26 GMT"},"fingerprint":{"sha1":"A1:F9:F9:D6:30:4F:9F:2C:7D:7D:3A:20:58:EB:0D:2C:40:F1:37:CA","sha256":"4A:42:12:C1:08:42:1C:11:F2:52:66:79:05:99:1A:D6:9A:F5:4B:74:B3:7C:73:CA:23:DA:7B:33:DE:09:A8:4C"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FKQVlRGtlzGhxxGJw7LrRkA823e58d3c8ef00f6a649054a9167aa2d%3Ft%3D1782362972282 HTTP/1.1\r\nHost: migration-blinks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://migration-blinks.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 04:49:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"97284-10It7p9e0/BykAYPBMGN1fUz7bI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=kdV3DxsO-Cftyu2EZUPHbA.js\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/25/2026 04:49:32\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 5005f34cb3131c3dfada78d69b70d2fc\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUVK9m7i2Emwd%2BD69XR9750eN%2BYuevyBALk%2BwLdyxecozIny4jYeFP0XdiG41D8Pu6IecsKOOlj%2BvlnxfolJ2EYaEdZ5KOUHnwbgjw1s9XAiwGUmSXd%2BKoP9hq%2FEqJvl5MjbNbDTqQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11158a1082a0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":619140,"size_decoded":136792,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"21fd38a8427baf2b92fde100498ca976","sha1":"d7422dee9f5ed3f07290060f04c18dd5f533edb2","sha256":"2c1742adf873248accb4ccd421e28e1e751bebc9de5ab6efcb73eeea928b7121","sha512":"eb3738ecc399b2db99213fab363af95dbfcb21e3c8c50a203fb10fcb0e4cfb09fa293f684292c10db94bb84414d3be5e90fc3a8148394de74a9e716d38437bc2","ssdeep":"6144:Bh5gDHQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsHQDC6m7hFqa/J/","tlshash":"4fd4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","first_seen":"2026-06-25T04:49:57.995715Z","last_seen":"2026-06-25T04:49:57.995715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"migration-blinks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/55f35d98841ca62f4119dc3270d66a40d9a80ada91f0a99671ada794826cb5dd.png","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://migration-blinks.xyz/","date":"2026-06-25T04:49:32.416Z","timestamp":1782362972416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migration-blinks.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 00:43:27 GMT","end":"Tue, 15 Sep 2026 01:43:26 GMT"},"fingerprint":{"sha1":"A1:F9:F9:D6:30:4F:9F:2C:7D:7D:3A:20:58:EB:0D:2C:40:F1:37:CA","sha256":"4A:42:12:C1:08:42:1C:11:F2:52:66:79:05:99:1A:D6:9A:F5:4B:74:B3:7C:73:CA:23:DA:7B:33:DE:09:A8:4C"}}},"request":{"raw":"GET /55f35d98841ca62f4119dc3270d66a40d9a80ada91f0a99671ada794826cb5dd.png HTTP/1.1\r\nHost: migration-blinks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://migration-blinks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 04:49:32 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUpAIsSCx2Z7JAaZAaxp01cia7z7kwutzieEi7jdW6UZN7C2EDlnhLj9hvPBdeKv2MEGWGhWqKN6DEzRyk8EDOWNZv%2BDWwGFJK9rtxby18%2BM53WY9zfzNvngOpfvTzzQn3GIaxLNww%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Wed, 17 Jun 2026 01:21:28 GMT\r\netag: \"6a31f698-d1b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 536\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 53684\r\ncf-ray: a11158a1a82e0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53684,"size_decoded":54626,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"4d2af08325b7fbf7d4a83e9e4ead02e2","sha1":"684725a3496ce866375876f16914a0d2c78d0b10","sha256":"025f3467e68298db357a85aa44f792ca1ff2602cabaef24587eae4a33efd66a9","sha512":"f43bb55e1e09bf5dc02b3fa93f7776c8c19952197a489bf259c75aedfa12b533ede9efe4c82e5ea6670aeab83be2490f569fdf7cc6278ef7c4a9c067b9a8834e","ssdeep":"1536:38iIVyeUJdFLam3Md5FzVQsyMgJSKqoDui88888888K6888ORMrI9:3kyLaJ5FVQsyxqaui88888888p888OR7","tlshash":"bc33f1897efaa8ed0eb7750de1cc465de4780192f875e4dcf14cd1c08ad25ea14a63b8","first_seen":"2026-06-25T04:41:02.913965Z","last_seen":"2026-06-25T04:49:57.998455Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"migration-blinks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migration-blinks.xyz/favicon.ico","fqdn":"migration-blinks.xyz","domain":"migration-blinks.xyz","tld":"xyz"},"ip":{"addr":"172.67.136.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migration-blinks.xyz/","date":"2026-06-25T04:49:32.540Z","timestamp":1782362972540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migration-blinks.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 00:43:27 GMT","end":"Tue, 15 Sep 2026 01:43:26 GMT"},"fingerprint":{"sha1":"A1:F9:F9:D6:30:4F:9F:2C:7D:7D:3A:20:58:EB:0D:2C:40:F1:37:CA","sha256":"4A:42:12:C1:08:42:1C:11:F2:52:66:79:05:99:1A:D6:9A:F5:4B:74:B3:7C:73:CA:23:DA:7B:33:DE:09:A8:4C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: migration-blinks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://migration-blinks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 04:49:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 17 Jun 2026 01:21:28 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 536\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzoXU%2B5J3bDRBESLmYDpW3UTDipdi7i7bQVYm5wzMH6dpj9RAeBS5m6gELyPXtfAK%2FM1kgrukgHwl5jHY32%2BAtgkSs9UQLSZPGhWgKRDNByB7jycWDoqvJSxGAiuO4FksdnLX5v7kQ%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a11158a278310b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28893,"size_decoded":8565,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28452), with CRLF line terminators","md5":"8834caf2fe4ba1ffc3de0d161546b791","sha1":"88dc10a30ee4230271e3cdac118273502df994e8","sha256":"8367e298e5ca2e04d24a0834873b39fc40abec1c091e8710814f322099d81f93","sha512":"7a84f4b94e20e0af16601c4bf8a7ffc705b2138aaf85f99ca9cf1acbe759ed91697be3011ead3ca65239bb8000747e7a86058b296963f36562180a5e32e06858","ssdeep":"768:q60rGV4xksc64Jysq7vuoy/L+/Cj/ilx6UzO+zP8pi9vzoCx:q6ebx/c64Jysq7vuJ/x3gvzoCx","tlshash":"20d2c950b40813395c2faaa9eec4f71cd125f542eb134431a24e409be9d9ff63ab6f94","first_seen":"2026-06-25T04:41:02.909084Z","last_seen":"2026-06-25T04:49:57.99142Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"migration-blinks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}