{"report_id":"aa950a33-d72c-4295-84af-f764c319e804","version":6,"status":"done","tags":[],"date":"2026-01-04T11:37:00Z","url":{"schema":"https","addr":"migrationmyro-migrate.fun/","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"172.67.168.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"title":"Migrate.fun - Token Migration Platform","dom":{"size":586219,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52733)","md5":"5ad1d3d9a611be4e179e9c4eefe6219f","sha1":"a310f9a3a70bf2485300d15e9ca45291077c8a39","sha256":"4c3f6d0eac6cd5094a4ecfe952d152652568af4ae5984fdaa751eb747454cf7c","sha512":"b899a9cb410b234a8f1a2ba74694b71a43255df22a0f6ced8c98e061e64983d79cfbca3d73d638a8f182e451fc16a5427fc063d91d9080a8e4f5236b54825d00","ssdeep":"12288:vFssVkLHFogJakJwM9X/8KGhyBtWp9wM9X/8KGhyBtWpEuZ1:vFssV8F3X/uyBgpFX/uyBgpbZ1","tlshash":"0cc4c0bce970b47e7d3ba0f8e148682d78d5f8cade2607a96945431463e36f11e6bd00","dom_hash":"domhasha9abf064cae27b69ef2f3e684a0235c2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"172.67.168.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T11:37:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"migrationmyro-migrate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"migrationmyro-migrate.fun","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-29","domain_rank":0,"first_seen":"2026-01-04T11:37:01.290151Z","last_seen":"2026-01-04T11:37:01.290151Z","alert_count":5,"request_count":5,"received_data":1627342,"sent_data":2419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"261fa5f948bd99fdf005f80595805744","sha1":"51d57156b1974322b3ba8542f48893082199d5e1","sha256":"1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7","sha512":"532ff30dfdd593068e7afc5f98cb1bc72408e594f297911c0a7c590c97a2ed6be6b91981322dfe3b3e90f21241404ae8692139732372f119279dbdf29f3ae429","ssdeep":"","tlshash":"a6015927222233707ce9d5dca8b6dd8e39bb501ae40a0090a09f944d1834bc644f7bec","size":847,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-06-07T04:19:30.117869Z","times_seen":3602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fsplide.extended.umd.js\u0026t=29458776","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-13T15:05:21.535419Z","times_seen":2568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/swiper.esm.esm.js","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb4e7f01f113e31ced3e0d93c5224f6f","sha1":"19ef9eaea61addfb81c11433bf6f036639f6933e","sha256":"5375bab45a8b2b453b362a68e2b2d8f364a87c030e10eadff8140bc58a5cbc8e","sha512":"f80107527ce31ecc2c9ef844e37d0e66d6ce2b10fad3d135e9a3626487eb817031b4628178c66c7bb198cb562a8cb6c6e9d7e5625746cedd869df4c792268cef","ssdeep":"6144:OKUlhfOYyM8duyK9rJZSe/iHkSSPiE/Ss1sFzjSECGl+MhcYUFb2UHYmphnCdAOq:OKSVyFFSEup","tlshash":"b684800b12c90b58ca157f8a373261ef9f148d60479c5be9e7b6a4fbe0948e5a0df710","size":378435,"data":"","first_seen":"2026-01-04T11:37:05.812102Z","last_seen":"2026-01-04T11:37:05.812102Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"46d6039502c7b4ba0e8f417a685f7122","sha1":"20c00080e1fd9900f8e80c57caf328c5fd514309","sha256":"48171569a9e0fe2b1fd15ff91fb599f898eb533481d7180a0e1adff7049f0bf5","sha512":"b33d688f36e2659e3b0501ff1847fdee52ca7c9a8e57af32c008da257669dc1b6ba97b2dec85bb279edb890ac6a56295304f9fed564bce3b60cd0f94fe69d304","ssdeep":"6144:UB2j031Rvq4MWUducOTbLrJZSe/iHkSSZCE/SC1ERzFGE8Gz+MhcY4Fb0UVYmphs:UgjCxMxDGE8m","tlshash":"4984700a12ce0b54ca167f4a373262fb8f248d64435c6be9e776a4f7e0949e5a0df710","size":372070,"data":"","first_seen":"2026-01-04T11:37:05.816344Z","last_seen":"2026-01-04T11:37:05.816344Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T11:36:37.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrationmyro-migrate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 19:03:25 GMT","end":"Fri, 20 Mar 2026 20:03:06 GMT"},"fingerprint":{"sha1":"20:62:EC:89:16:C2:F5:1D:C9:03:F9:9B:09:28:77:F6:BD:3E:C1:CE","sha256":"AB:3D:48:E2:16:75:BE:8F:3B:95:7F:1F:98:86:78:DE:00:39:EB:49:97:01:A2:E8:0D:33:7D:F3:35:99:1E:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: migrationmyro-migrate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 11:36:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 20 Dec 2025 20:02:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8war9WAFp24XI2pfQWzBrnCxX9Wz5pIVKkyWN2sNNLuhGL05icu%2FVC56tyluhVOtJKswKgCZdQm2yHTGoB1ng6A%2Bq4bm7kl3am6UkJu%2BROnVSHOpmLcCMc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b8a70748ac15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586235,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (52718)","md5":"3f90a722b8ca64a380956e5938cc4613","sha1":"ab54b885ae30de9695661a443b4c9a199d9b3566","sha256":"164b8d3b88aed93c854f866be17c6ee67e3bd86b5f5926d8a2d8ffd0cb19ba1e","sha512":"575ed3cadf47fea191579650cff6dbe75143b5862214bedf47e495eb83a2b76bb00e5546d9c63086739b9590c256a857299e65956300fe7f2723418c01e90430","ssdeep":"12288:fFssVkLHF6gJakrwM9X/8KGhyBtWp+wM9X/8KGhyBtWpk7Z2:fFssV8FPX/uyBgpOX/uyBgpOZ2","tlshash":"c8c4c0bce970b47e7d3ba0f8e148682d78c5f9cade2607a96945431463e36f11e6bd00","first_seen":"2026-01-04T11:37:05.81113Z","last_seen":"2026-01-04T11:37:05.81113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":72,"dns":63,"connect":1,"send":0,"wait":242,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"migrationmyro-migrate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/swiper.esm.esm.js","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://migrationmyro-migrate.fun/","date":"2026-01-04T11:36:38.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrationmyro-migrate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 19:03:25 GMT","end":"Fri, 20 Mar 2026 20:03:06 GMT"},"fingerprint":{"sha1":"20:62:EC:89:16:C2:F5:1D:C9:03:F9:9B:09:28:77:F6:BD:3E:C1:CE","sha256":"AB:3D:48:E2:16:75:BE:8F:3B:95:7F:1F:98:86:78:DE:00:39:EB:49:97:01:A2:E8:0D:33:7D:F3:35:99:1E:FA"}}},"request":{"raw":"GET /swiper.esm.esm.js HTTP/1.1\r\nHost: migrationmyro-migrate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrationmyro-migrate.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 11:36:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 20 Dec 2025 20:02:04 GMT\r\netag: W/\"694700bc-5c643\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlOySYa1SKhIXoOgL9LHVShogOVHFe0Hjyfc3HleYHfxyLXPGg0AbGv3cTEJS%2BRwAhEsRZxe9xDOX4wna%2FjEpTTvSCcEZfXb7njEUPi148la3NFFrIKl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8a7076df19b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378435,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"bb4e7f01f113e31ced3e0d93c5224f6f","sha1":"19ef9eaea61addfb81c11433bf6f036639f6933e","sha256":"5375bab45a8b2b453b362a68e2b2d8f364a87c030e10eadff8140bc58a5cbc8e","sha512":"f80107527ce31ecc2c9ef844e37d0e66d6ce2b10fad3d135e9a3626487eb817031b4628178c66c7bb198cb562a8cb6c6e9d7e5625746cedd869df4c792268cef","ssdeep":"6144:OKUlhfOYyM8duyK9rJZSe/iHkSSPiE/Ss1sFzjSECGl+MhcYUFb2UHYmphnCdAOq:OKSVyFFSEup","tlshash":"b684800b12c90b58ca157f8a373261ef9f148d60479c5be9e7b6a4fbe0948e5a0df710","first_seen":"2026-01-04T11:37:05.812102Z","last_seen":"2026-01-04T11:37:05.812102Z","times_seen":1,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"migrationmyro-migrate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/secureproxy?e=ping_proxy","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://migrationmyro-migrate.fun/","date":"2026-01-04T11:36:38.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrationmyro-migrate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 19:03:25 GMT","end":"Fri, 20 Mar 2026 20:03:06 GMT"},"fingerprint":{"sha1":"20:62:EC:89:16:C2:F5:1D:C9:03:F9:9B:09:28:77:F6:BD:3E:C1:CE","sha256":"AB:3D:48:E2:16:75:BE:8F:3B:95:7F:1F:98:86:78:DE:00:39:EB:49:97:01:A2:E8:0D:33:7D:F3:35:99:1E:FA"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: migrationmyro-migrate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://migrationmyro-migrate.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 11:36:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 04 Jan 2026 11:36:38 GMT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Is%2FEkF9tA51Seuab%2BsWWq16%2ByfkHpJHBjmAc2tIlY1BrEAeT2KOKljXvdy7E9i9tV2sX5h2O7h%2Bs6ZkZ1fdHIkM2e%2BeDrkTgy2qJ7rwiJ5rZzlXFplq1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b8a7079ea2ab4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-17T15:53:08.581844Z","times_seen":8825,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"migrationmyro-migrate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrationmyro-migrate.fun/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fsplide.extended.umd.js\u0026t=29458776","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://migrationmyro-migrate.fun/","date":"2026-01-04T11:36:38.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrationmyro-migrate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 19:03:25 GMT","end":"Fri, 20 Mar 2026 20:03:06 GMT"},"fingerprint":{"sha1":"20:62:EC:89:16:C2:F5:1D:C9:03:F9:9B:09:28:77:F6:BD:3E:C1:CE","sha256":"AB:3D:48:E2:16:75:BE:8F:3B:95:7F:1F:98:86:78:DE:00:39:EB:49:97:01:A2:E8:0D:33:7D:F3:35:99:1E:FA"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fsplide.extended.umd.js\u0026t=29458776 HTTP/1.1\r\nHost: migrationmyro-migrate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrationmyro-migrate.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 11:36:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=splide.extended.umd.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/04/2026 11:36:39\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 7c67df81e95f25dfee2660937e24bb25\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5fhONVGc9nUwBp8qcU%2BnoRa%2BcM53yUWJ5rq9XcBc4%2FosuU2WwyNlX5BIqK9Lq6mw6cyNZZk%2FVIP9uHyUVDUZQJNwKz%2FnYaieQNOoclEL5QyA36jOCax\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8a707b9bc0b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-13T15:05:21.535419Z","times_seen":2568,"resource_available":true,"data":null}},"time_used":554,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":377,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"migrationmyro-migrate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrationmyro-migrate.fun//secureproxy?s=%2Fjmpd%2F","fqdn":"migrationmyro-migrate.fun","domain":"migrationmyro-migrate.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://migrationmyro-migrate.fun/","date":"2026-01-04T11:36:39.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrationmyro-migrate.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 19:03:25 GMT","end":"Fri, 20 Mar 2026 20:03:06 GMT"},"fingerprint":{"sha1":"20:62:EC:89:16:C2:F5:1D:C9:03:F9:9B:09:28:77:F6:BD:3E:C1:CE","sha256":"AB:3D:48:E2:16:75:BE:8F:3B:95:7F:1F:98:86:78:DE:00:39:EB:49:97:01:A2:E8:0D:33:7D:F3:35:99:1E:FA"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: migrationmyro-migrate.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://migrationmyro-migrate.fun/\r\ncontent-type: application/json\r\nContent-Length: 1770\r\nOrigin: https://migrationmyro-migrate.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1770,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"64eDryGSwktvU92anyEnftD1x92TeiKyeDVKpHw2V7DufsgG1h3mWkjBLVBRGttPp2p4vUnvyYQj1C1667No8P2H8TwoNeBj3Aa6vVsMEZzyFaZGcN9o7BcPYpTuBifPtBXgQPHppjFv8YJrptjjwzJANGL7L3aLZRFWRtcKJ4mzY6hDQjH1nERkm3eMSjjXf4MmU3oRq3d7Ai6hrH3YuqHq7beUbdcQfMow3oKtLZ1fQ7ngers4Xfk8jQayudQs6NzembDBfLjcH71jELg2WwHyuGp54pNZKEDUBycsabqVy1Lnd59i6qS1P9rg7HwbM1UoQMGK5qxwNZLZrmqXbTMzexgzRMd8tmQgYWFaGGcDSA45WhJqUUhPoSDayags659n4qNjSS6xMFofzV8BcQdWLNiTPqtm7wuADg9ShFiDpAQ2FoKtnKBVR5gVkDyn69aTJSTYWZoxt72iKWrR6rDHoGbqGsZu7uZaiZWyPWgX66PomudZN3GUjxQSe1FcU5r5FW1os3WzXru2A5qgSRx3txSWT7vCdmVjFvspjqw3htj3uWrkymoyuV7YTZUyY6htSkWH6Dug2cesmCf9xVjPckLZ6fwtdM8FLRDRJvMUNrzBAA7oUMRMFTx9NtuSM5owBhXYEKvjD2KYNKMQet9DZ4ton2wpV4hCtvEqMKSFXNwsrN43xiaJYCgVJurMo9actGG59jLRiePzDbTFitUiGiN7aP4YfEdGAhbAPeZR5DEg4aYDhwocZ46isRbc3SZ4jXrxEMe6z7Hw87ijqnsUWFtEahWPQskv4p5D8yqLxmXoxQHwypwNYvrmAQnEYXda3TSsvXAsQqmqp1GdkUP8Z9aK7K9JRmSEbnunsJFTfGFhHxMjrYUPKyinkvD8bmXNexYghH3e6YAxkA943eeVMGhxC9PHbn65EZd69Jxno4bdKwmeoHnqYPyqaV69RHCZYToLyxT7LzcKBSaGmN5DwGHcaz8hQg3JKwBm1PNGknZ7xzvb4Y1mP7xy13JWvx3YjtpZzRot1DMQTq5TvowNe1hRuM4QFXdNCTnw2vUtn1LWXozcPt2SRnaxF92iDHcQsWdKPDZfGddyBV7fe9f6G2oVyv3iz6ocHKybJmFwjrojV4J7t4F2CeHTGcKyhKnfweK6ccyW45kqufeCzkopv8bw9YnWP1A7S7P2HLsiFYw2ydbWRPKJ9txte1pXGmWUJwNBTyrrGwEvhYPQnGTfLzZJAGcgfSRSi3u3raJwqEXn1iPUqnCDwyXVHdx7tkEBr6pLxG7F3GoLDzyU5fEgvaC8KsgCwmDLZD9gczXShdsUW6r7ffZzYW9N9LeqMSWpQGidjKySizShDKcuWGCqCDeM27rCBxNYX1WzmBp8eVhEvRZ8mfBFhQnmtohAWDvnymc5v7w2bfxdP8MWZbiPTmXP4f12DWhG64fPBFJnxhX8PkpEk6VvjrDCNWp2rXLksX1ZgdWASZPW7wURb6GFBG6xfkTx3bHShfmydJFu3f9yWV3Zyc5Tvr5awTdX3urjTsw8sGzUPTG9M3ysvmr4kiCX5GBYLUhCWpxGchcsdtcawoDJ1S5mhWZsrzZgrANBAH2KYBs72a8HkFRUmygvGy6v5TFJkQGo9J9USYDheBqYda4gUW9DmiGi5UgmHbnFDAewq5eAx2C6rj7rFYRdrAwT9e9MgrBARTqCnCY864RqN\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 11:36:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"e0-2aYOwGZFj47alb5HyU7cxlNo0SA\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1767526659949\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/04/2026 11:36:40\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 0112d60fdd061be20bf484fbd3cea8b9\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xV49ePW8cf0E71LvXR%2BaAxVsBjyOXj86ZqpSGAyVfuDWvtW5QONlrFWNf5xqvnX7F0h%2FZgCzHWNhP5GoCcQ8%2B2ApJzCXuv6TJGs3Cw46wzqW4olNJ5lm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8a707fcf6bb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e26c349fbe8a48a728fa976e4c0f07a","sha1":"d9a60ec066458f8eda95be47c94edcc65368d120","sha256":"5a6dc269ca15bdea707fbd4cf573431eca4c13cbabc58df2328ec1347e388705","sha512":"76a0d9d7848d5c66b101a5cfab534ca7bb294f65fdec6d9693eb1840b125f7b41c01461aec042ca09d9bd155eeec289b4e30c089b60d35f4b50072d7a18bda53","ssdeep":"","tlshash":"75d023345e1435745714237d80df055522177179ff52502ea031c813db5f12675e3b95","first_seen":"2026-01-04T11:37:05.814693Z","last_seen":"2026-01-04T11:37:05.814693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"migrationmyro-migrate.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}