{"report_id":"c81111a6-b471-483e-849d-8cbc5adb629d","version":6,"status":"done","tags":[],"date":"2026-05-16T18:15:54Z","url":{"schema":"http","addr":"migrate-re.xyz","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"104.21.38.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"migrate-re.xyz/","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"title":"reUSD Bridge Migration | Re","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"migrate-re.xyz","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"104.21.38.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-20T18:15:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"migrate-re.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-08","domain_rank":0,"first_seen":"2026-05-16T18:15:55.551302Z","last_seen":"2026-05-16T18:15:55.551302Z","alert_count":9,"request_count":9,"received_data":4046111,"sent_data":4010,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":24951,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":7,"received_data":314510,"sent_data":3893,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.brandfetch.io","ip":{"addr":"52.84.50.90","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-17","domain_rank":443360,"first_seen":"2024-11-15T13:00:59Z","last_seen":"2026-05-12T01:28:31.304185Z","alert_count":0,"request_count":3,"received_data":31331,"sent_data":1511,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"migrate-re.xyz/rkmwg0dnxg.php","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e45290a924c865e8cf2aa3d3073edf4c","sha1":"7c4703d5c738ebcd8d369a24f787a26e997047ea","sha256":"4af0ecf8e4bb39c76b471d4c9bc992acb3c258725b3f22e0e4dbf56e23c6fd71","sha512":"7d8335b38af42c0c7af4a63560bad1a8e7d9b36bce0c1535a14a7445e71b5399c3007531e20ac6e4ff5fa55c447bce839c36866d23cff3cf35b6107cc3d509d3","ssdeep":"3072:u0NHLCOtoVtvgduL3hDzWgQjeKS2sJkrGS5KEKQAaCS7X+8fSPkAHwHMwlWdptx0:jtUgDrmO5tp","tlshash":"9024a18adb17808c8a99519ec4b7f949c9449d16ce5c70a3ef2ecdc17a25fb1818327f","size":219378,"data":"","first_seen":"2026-05-16T18:15:59.087284Z","last_seen":"2026-05-16T18:16:49.619813Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2464c553913abfba0d1a632d8633e1a","sha1":"b261b8158fdb540a0843186f9aef1bf9136e366d","sha256":"bf1625d5997eddd22dc4cfd4eb054330de1d2401fb8830eef3162a1b00a94053","sha512":"2ada65572f8a63dbac5b36444390ca01a265d9470098b332226111484b9c644fdc53224163ee83b15a6feaffc47c8d0446ec2046f1a915c4dfd46c484efcd404","ssdeep":"768:AJ/cXBoyZcac+ZcJqYUb4izR4ylk/8DcSSj:AJ0XBos+","tlshash":"ce0393d0660bd4d59e5650eee033e801e128196bceacf193ea2cddc2352df62c58767b","size":38565,"data":"","first_seen":"2026-05-16T18:14:04.635469Z","last_seen":"2026-05-16T18:16:49.635732Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41948743f4c7bb07d1bbf0be3ab84a39","sha1":"7e75b9fc871b79a7a5f274d891bac82640b2f5d8","sha256":"bb26d211f16dd4e61ab29f4efa7ab8d759be1c668a9c0b903e32f25606b98498","sha512":"1c31af7444e47ab45f7c7621b746f809931b713a301180aa108e352e8b948b184fd66d3118797de6c281ca7ae311ed4d3297eb70f2f9bbb7cfb4449e9c2c0ce0","ssdeep":"","tlshash":"80219d5fb2e2183a0dfb26ab93db57c476210043a44585143a7cdf990f42af2b972ac9","size":1430,"data":"","first_seen":"2026-05-16T18:15:59.088666Z","last_seen":"2026-05-16T18:16:49.636536Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"migrate-re.xyz/","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-16T18:15:31.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:15:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 08 May 2026 15:35:27 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AH%2BMdZAcX2WaIS0vFbsG7thjCtdq0Sxh%2BWX%2FaN2F6V%2FezXIIbwdgztXfyYPQ2eOrrA%2BF%2BWPer%2Fg5sMyc7fHk%2B6qNuN1TzcI6K4UbL%2B5JAhd5oeyX072e1o8DboUdB%2B36pA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fcc5e44be87b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38168,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (346)","md5":"851c35febf76172f7ac855e4e36b9557","sha1":"2c947b5d7441a9610fabe1d8e8d701fce25e9367","sha256":"40e099ee88eff06b012f387b899eac53c609f6b987c52d5e529746d10aeb3d06","sha512":"165907b01188c4f1cd9944d1113720f07bd3f7e9cee0792c3ef4a03b33e8388f1df300e7adb80c0911479e93314cabbd7811e9246f2ef560e26172d8b73ea5cb","ssdeep":"384:vr43VzpWlQ9VryVwlYj0XHTJLnXD1BFcrLXaoMfufdxPDbewbxIpNJAcvFvIvnZx:8YjcJLTvFRTZiZj8OMMBKZ+n","tlshash":"0d03a532a2a314267417d1ad7ba7a35e7260f003f506c624badc71888fcded9d96367c","first_seen":"2026-05-16T18:15:59.068363Z","last_seen":"2026-05-16T18:16:49.627851Z","times_seen":2,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":87,"dns":63,"connect":1,"send":0,"wait":83,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;1,300;1,400;1,500\u0026family=Inter:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Cormorant+Garamond:ital,wght@0,300;0,400;0,500;0,600;1,300;1,400;1,500\u0026family=Inter:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 16 May 2026 18:15:31 GMT\r\ndate: Sat, 16 May 2026 18:15:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24265,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fd8e95699f9ebd1a7b902601d802bb1e","sha1":"86370d95a34eae54a26e3cea13819b94a1587bdb","sha256":"fecd54e9494b552388e9893d056a0b94b83a3ef48c55b56ff65000ce2cd0e8fd","sha512":"8e8b8588277707a405a87bac11ea586fe27f3034539139a4fad2a067f0ec0a8883649b85089f85f063e5c183c21f84d8c6a108cfb62abdbfa420f4f91f3d593d","ssdeep":"384:NJdtkyd0QdqkjAFrdbkQ3J/MGulEcgKYXuM0pR:7","tlshash":"63b2bb92002ba400eb470dd277cf7e35ee8e555a2141c5b95bfe1cc8aceed2613a876d","first_seen":"2026-05-11T23:10:53.580824Z","last_seen":"2026-05-16T18:16:49.632737Z","times_seen":4,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":137,"dns":1,"connect":21,"send":0,"wait":46,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/polygon-icon.svg","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET /polygon-icon.svg HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:15:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 15:26:15 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mydvtpI1N2LTZCvHCEHs8HoIzm6KsxWcxeo8Pfj8JvgPFOUYp%2BJyElcw%2BaFfR9FGsq3Up2G%2FITTkg4Tse5M7fRTUe0bMD9P3OzJIe7qNZHmjarFevBPfGuIkXmhNzyaAg%3D%3D\"}]}\r\netag: W/\"69fe0097-4b1\"\r\ncontent-encoding: br\r\ncf-ray: 9fcc5e469fbf0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1201,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22bc56b4768205afb97faa28be95f4ca","sha1":"db1bb9a67974d961aa199abc2e85df80d0c243f9","sha256":"643cdaa9c28d7dca2974f5d51c225f50c8e8b6e496e07e19f1bd4ef80381ea96","sha512":"e81772b6d1ceb48f6c5d6337adeddaa70a730baf7292d9427329c3254af879d2844b66ee924b147f34d169975aaa0b3c05140c7e728daf114e2803570cd4817c","ssdeep":"","tlshash":"63212459c95d6c7fb2a6c558ebf8d44f13a8619bc0d58096f1f227fd34244f32d46141","first_seen":"2025-12-14T14:20:12.892622Z","last_seen":"2026-05-16T18:16:49.621544Z","times_seen":3,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/rkmwg0dnxg.php?m=2964925","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET /rkmwg0dnxg.php?m=2964925 HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://migrate-re.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:15:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9d7dWiWjE224HQ60JMgDBpTlJ%2BH5Mu%2BKKYqA%2FHg3927EBu%2BEdlnEWnP%2FLaX8QzAWf2tZZRTiQuuOQPXlF2UPX6ARxklGBnP92pmNsFjnq8fSxbAgvpIxcCspCwSo8TrVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcc5e4b4b210b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3309011,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"81dc31e3da34a84a3657a235820c3db3","sha1":"d7308ff2645731c9de5c2a170019278e9e00a5b0","sha256":"b1e8135e80e83165f2b6bc9a9ca3fd8a59642bb620f6cd99254ba52646966bda","sha512":"427fb292023a7fa2b9ef6712c41bd031c1364c4be43b2a9e0912b29d72956f00e9b4a87e367f503d568b587fe09854b0fe95b955816077c03d9d46dd61036b43","ssdeep":"24576:cjb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeJ0ipX7o:cPGkwdNZngkXwo","tlshash":"eb2523d35f1ae938cb6c0d98726b6c0f6d4509135484eabab6c6e4c736d8b2041fbc79","first_seen":"2026-05-16T18:15:59.072267Z","last_seen":"2026-05-16T18:16:49.625977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":78,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/castle3-web.mp4","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET /castle3-web.mp4 HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 16 May 2026 18:15:32 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 467188\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 08 May 2026 15:11:08 GMT\r\netag: \"720f4-6514fce705b00\"\r\ncontent-range: bytes 0-467187/467188\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kx2j5%2FG%2Byn01zlaeRPX%2FYrdWqalrz6qhuLmFHXgjg96xiq1ji4zaDTT4HyyAQCmHo88moo9wmNpvLP1DzPdJ4wIG0p%2BaHZMZqxznzjrU6fFgyJrlGDRaI3O%2Fn3FvEJ%2BSwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcc5e4b3b0d0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467188,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2d36a2ec98d84d54ed2dde262ff8fe5d","sha1":"450cead02841b329d9e802a1ebed0aec8d70d639","sha256":"56407ba22406d12da916100ffe8f2a0ca326bf598f743583f51d83b49138195c","sha512":"c0de87c46bde304af16166c6811c1d69137f9ae4807d650d77f13bf0b13fcc5cb5ab7f5a4304e4cdc6ac575e6df55cf207396543cd7e8e021f5bd4998bfc4352","ssdeep":"12288:zILmruH3/N23QSZ5LgIjXw1O9ywpnhKtdC103:zGIuHl23tgmXw2pstc103","tlshash":"a0a4238ea7d13494e4358236c6c12a0eb79ce8a0ecbb5bcf1fd85589750b2991e47c72","first_seen":"2026-04-18T07:50:48.55764Z","last_seen":"2026-05-16T18:16:49.625299Z","times_seen":3,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":70,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/icon.svg","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:15:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 15:11:08 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QEqPWkLEasYCjeGiXGYJS%2Bhp857ids%2FlcT5sT1xmJ2K8SZNnQcImhivGCL2JPo4CF2NLuUnjGGdIpJ98leCR06uQTUXt1qmqD4xmj2DBv3qN5GBZHmoY6pTuQonXzAODg%3D%3D\"}]}\r\netag: W/\"69fdfd0c-8b8\"\r\ncontent-encoding: br\r\ncf-ray: 9fcc5e4e7dc40b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e070da4023c134547557ab5b13b0022","sha1":"d86a8ed061c5b817bab9731e96e1bc0e0a1a8493","sha256":"7c3fc36f22b90c9e17840a5e08c5db3c9a1c91dd4ed0e4cc397b65280e3c65ed","sha512":"7753c9d05ec6c1078fe0d7ca8a219dd9224430f24860c2ef56199f6cf6ad53590fea3627feab57dc594e5fa9e2e8776813061a9cdcab8406d1dc3ba2a40dbe97","ssdeep":"","tlshash":"1241e93f024b644105798742d278c1f09d2a0d4bc9f89264fe90be92fb97993bd72b8d","first_seen":"2026-04-18T07:50:48.577497Z","last_seen":"2026-05-16T18:16:49.617425Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/rkmwg0dnxg.php","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET /rkmwg0dnxg.php HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:15:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bp7nEZq8kiiXi6iFOlpMy171hae8bUEBxxfQvb%2BgwFWOs4xkv53HVko46%2B%2Fu5SC3i5UjBsFIr1sCGO2vq0R%2B6id2gKwR%2BwAgD4gsWRUc3Gk2hut04kPqgdws3TXXfX4OgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcc5e468fae0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220334,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48072), with no line terminators","md5":"0f401c42045c45f3b90f904f9ce2936e","sha1":"84f0fcaa152bf8733153506d0009018f270a6d82","sha256":"3dafd4173fb0771b85bf8451aa5ee2d15f981e93d729ce566b8b8683ca6405a1","sha512":"fd71b40ad90c64db712d2570c8a291f6b988be524cd02ef5d987c55a98e2d7be2f9e00715c295ceb31052e8ae8c7e9edf32c5cd29209674941e2429c99099faf","ssdeep":"3072:u0NHLCO3QVtvgduL3hDzWgQjeKS2sJkrGS5KEKQAaCS7X+8fSPkAHwHMwlWdptx0:j3MgDrmO5tp","tlshash":"58243e49db37a38c8a89319e80a6f845d7c45d16ca5c70a3ef1dcd836a15fbd818327e","first_seen":"2026-05-16T18:15:59.076148Z","last_seen":"2026-05-16T18:15:59.076148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/chainlink-icon.svg","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET /chainlink-icon.svg HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:15:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 15:26:15 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XinB07eMAVT1fC9KorBsF7vqJWpLCgmCIsXpW15ZMEYzPf2A7sKQm%2FTQodTio8vnlwFW9K0MTTb0C0MOT6GvkbSN%2BIB6Jkc4ehhohg1vYwtCsKOaBZy7R0NQZd3HmLbt4Q%3D%3D\"}]}\r\netag: W/\"69fe0097-12c\"\r\ncontent-encoding: br\r\ncf-ray: 9fcc5e469fc00b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f639c10dca6c915ad0504e59dc97b374","sha1":"2c40bf507169d21806aa24ab7a3f8923499dea15","sha256":"baf12d3c3c62a86c7ae649f5126d8055141d0927954fa355292c18f4a8e0f12e","sha512":"f0b6190b90ede840723567b02141b9b35cf75c5f5bd67f48fb683429536a6332f151ab112f5f843ea7fcff8acca9fc5f0e0ec425d6e8beb307aefe6c95a013a3","ssdeep":"","tlshash":"e1e02bfd979ad532541bcf42ba2828bb383d73f107665275e5422305f140ecb4c2ee98","first_seen":"2025-11-26T17:51:17.933784Z","last_seen":"2026-05-16T18:16:49.622325Z","times_seen":4,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://migrate-re.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 362739\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-16T22:15:08.66543Z","times_seen":183137,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":128,"dns":1,"connect":27,"send":0,"wait":10,"receive":5,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://migrate-re.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 362739\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-16T22:15:08.66543Z","times_seen":183137,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":205,"dns":0,"connect":23,"send":0,"wait":9,"receive":3,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cormorantgaramond/v21/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYqXtK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/cormorantgaramond/v21/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYqXtK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://migrate-re.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 02:02:32 GMT\r\nexpires: Sun, 16 May 2027 02:02:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 58380\r\nlast-modified: Mon, 08 Sep 2025 17:59:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37640, version 1.0","md5":"c47ff12887a36dac62f887a6fdb51066","sha1":"74db058fe06da79b5dbf5b33d12041ddd45de510","sha256":"d80df8ff5aecd299a61549f9e29ab1ed0b9b05f4ea71d50fe978e07d5240b235","sha512":"69f1a213c6e2b30be219b919c0086745889bab293f93446bbc05273116c4bef115e9a5196dd0c23d8bf23a83a50f3b457051c43bcc0db992b8616f08de84d765","ssdeep":"768:mIH/m64lGpv8WbiaJix/6J6u3sVB3L1IgtXvsu3v2GZZsWnkZGJMjQL:hH/H4lw0jRG6msf7u8/sUr5nkcJ9L","tlshash":"23f2f21bbd69581e2fe5cb36c288cc6137309761cdd6bb25e2bf95e18b512198a0337c","first_seen":"2025-09-09T06:42:41.917008Z","last_seen":"2026-05-16T21:01:34.169238Z","times_seen":5641,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/navLogo.svg","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET /navLogo.svg HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:15:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 15:11:08 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BO50g0p8eXQDGSpBuRp6LF9gKyyrka23RZbGuUy5A4PcZi5%2FR6Gf6Fw23jDc79BRalLp1fMFjRSzW6snoIafs%2FbVHXnH7nHL%2FeNZPsE6qX7YMXfl9EBPsPw0eHVTYzr0Q%3D%3D\"}]}\r\netag: W/\"69fdfd0c-33c\"\r\ncontent-encoding: br\r\ncf-ray: 9fcc5e469fb90b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":828,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595b0d1df8291f86fb35226a21dba0ed","sha1":"f2269f47b26ea0b6a8a2a6d737e465944808aa97","sha256":"a26e05888c6a25a271121cb551eabae91d0fc7a65fb61b11adf36519a2b1a6f0","sha512":"e1069aa75b3f3faec92825ecad36b4a29ed77eabb0283796bababc9d663530d23d87ea77b10ae044410808687d03de88e2ff0113590f7fb45fb83ca87cdc37ab","ssdeep":"","tlshash":"7a0186c737e46041e680e3f486253d3e247f0c79a738cc1853c9a8d0b82c59da980470","first_seen":"2026-04-18T07:50:48.587599Z","last_seen":"2026-05-16T18:16:49.623742Z","times_seen":3,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.brandfetch.io/idvFc3YhUM/w/400/h/400/theme/dark/icon.jpeg?c=1bxid64Mup7aczewSAYMX\u0026t=1768403645502","fqdn":"cdn.brandfetch.io","domain":"brandfetch.io","tld":"io"},"ip":{"addr":"52.84.50.90","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.brandfetch.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 23 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:F2:DF:8B:7B:F2:05:42:93:2B:E8:AE:7D:92:38:A0:B7:BE:2F:D2","sha256":"6A:D1:91:2C:6C:2F:C8:4B:62:FF:BD:D2:92:2D:DF:99:02:68:AE:40:2E:C5:DC:C4:37:AF:12:BE:BB:16:DD:3A"}}},"request":{"raw":"GET /idvFc3YhUM/w/400/h/400/theme/dark/icon.jpeg?c=1bxid64Mup7aczewSAYMX\u0026t=1768403645502 HTTP/1.1\r\nHost: cdn.brandfetch.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/jpeg\r\ncontent-length: 14776\r\ndate: Fri, 15 May 2026 16:48:48 GMT\r\napigw-requestid: dakxkg3zoAMEPHQ=\r\nlast-modified: Wed, 14 Jan 2026 15:14:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=86400, immutable\r\netag: \"4cf8-wojm75ynzNQVU7M2USgL/gorqfU\"\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: a_i-XiHdGCITK33Z_XPeuEpEnupTe92830bMtDobNpZejK-gstAL_w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":14776,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=bf@v1], baseline, precision 8, 400x400, components 3","md5":"17742838f531eed67614eff3d085d820","sha1":"5c1c5e42b4bd3f98f57a7bc101cd9111bcff80ed","sha256":"cb3e17e810a6f989d0e62e187fde182c0c817c284c16bfafd179f19bf95aa30c","sha512":"a6085799fddb9917d4f1dcef649c06b9e14a0b684b65ff9bdce5f1167485ad00b70453db34ad7bab07958fa34611af05f86c95ea5c4387044ccba6eb8efa079b","ssdeep":"384:/w/Y+2g9ChCW0AgrFC8PI/RTjDx2gUVAXpZ2gQ5Abts87i:IAoCdxwhI1j92cXP2gNxFi","tlshash":"db62af98fd4540016e3e67f554d3a61be24a48b9ded6f87d0c0b0a21f683f988c69bc7","first_seen":"2026-05-16T18:15:59.082736Z","last_seen":"2026-05-16T18:16:49.62918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":107,"dns":69,"connect":2,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"migrate-re.xyz/eth-icon.svg","fqdn":"migrate-re.xyz","domain":"migrate-re.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"migrate-re.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 15:01:49 GMT","end":"Thu, 06 Aug 2026 15:01:48 GMT"},"fingerprint":{"sha1":"75:07:E2:4E:C2:7F:51:74:FB:3F:5C:9C:4E:96:B1:B3:F2:5F:C5:DB","sha256":"A9:EA:D8:D1:5D:71:5B:23:27:23:B5:F1:84:EA:AC:1D:DF:89:74:AC:74:FF:DF:59:FB:1D:95:FB:18:61:E2:1B"}}},"request":{"raw":"GET /eth-icon.svg HTTP/1.1\r\nHost: migrate-re.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:15:31 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 08 May 2026 15:29:01 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9TcbtF%2Fup8B14vhWpqho8QHH07VRhihpnZDvLedmKbFowntOIalOdQRo1YoCr2govI6KlaHcSxJQ%2BRhVQ30JAKvFsQr6LUzLmGTVS7K8LHC7fN5AzAf8778JBsRTG6H0Q%3D%3D\"}]}\r\netag: W/\"69fe013d-1dc\"\r\ncontent-encoding: br\r\ncf-ray: 9fcc5e469fba0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56fbef6617812048166266be9f8acdd5","sha1":"46ee0de344e2ca94545b79a0c460ae7ceaf7aaf8","sha256":"7320e64e211db747308cc3e546e5360d42f3790b7a14fba0504573790e17f124","sha512":"0ab853a6c1bc48235266ea2ef89b024634c03fc880b93f0b177315e8616a08e1fff1a2a2a9e45cda65caad43cd70ca567aa7566b8f6c8105f4db45db1077ff04","ssdeep":"","tlshash":"e6f0e2c8b16a683b5c0387b5fa7ca476126c68dda008a669b0491770b141fefe5b1e54","first_seen":"2025-11-01T08:20:42.099246Z","last_seen":"2026-05-16T18:16:49.624425Z","times_seen":4,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"migrate-re.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.brandfetch.io/id6XsSOVVS/w/400/h/400/theme/dark/icon.jpeg?c=1dxbfHSJFAPEGdCLU4o5B","fqdn":"cdn.brandfetch.io","domain":"brandfetch.io","tld":"io"},"ip":{"addr":"52.84.50.90","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.brandfetch.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 23 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:F2:DF:8B:7B:F2:05:42:93:2B:E8:AE:7D:92:38:A0:B7:BE:2F:D2","sha256":"6A:D1:91:2C:6C:2F:C8:4B:62:FF:BD:D2:92:2D:DF:99:02:68:AE:40:2E:C5:DC:C4:37:AF:12:BE:BB:16:DD:3A"}}},"request":{"raw":"GET /id6XsSOVVS/w/400/h/400/theme/dark/icon.jpeg?c=1dxbfHSJFAPEGdCLU4o5B HTTP/1.1\r\nHost: cdn.brandfetch.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/jpeg\r\ncontent-length: 3871\r\ndate: Tue, 12 May 2026 16:23:33 GMT\r\napigw-requestid: dQoQ9jkjIAMEVow=\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=86400, immutable\r\netag: \"142c-ROWCaFxHoIly82fQUIO4x1L4deI\"\r\nlast-modified: Mon, 15 Sep 2025 09:49:44 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: P2fQ2cCeDnDpta8ecuNyR9S3QbEIYHjMcRLYVyNrPoj0daute_moWg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3871,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=bf@v1], baseline, precision 8, 400x400, components 3","md5":"8ee7c550b6ae7a788e59581a06035141","sha1":"1d2909097023e3b7e97450410a5372cd4bcdddbb","sha256":"95442c72e24cb65e677d3149ffb9bad9e1ae8c4976a75036144a70d7feeced57","sha512":"befebf63422414d1c3179c6195b82afd3d61f44d89ec87a38ae31a5a4ca41876a323020c0cdd3d50f3d002822b451847c3c11b60492141d90b4aeb9f3db19840","ssdeep":"","tlshash":"fb81016eff245c0ee0bce7b02100e69b37f2e4649f77913e280861d9699f16191b76c9","first_seen":"2026-05-16T18:15:59.084747Z","last_seen":"2026-05-16T18:16:49.633414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.brandfetch.io/id8njqSNGQ/w/400/h/400/theme/dark/icon.jpeg?c=1bxid64Mup7aczewSAYMX\u0026t=1768403612231","fqdn":"cdn.brandfetch.io","domain":"brandfetch.io","tld":"io"},"ip":{"addr":"52.84.50.90","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:31.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.brandfetch.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 23 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:F2:DF:8B:7B:F2:05:42:93:2B:E8:AE:7D:92:38:A0:B7:BE:2F:D2","sha256":"6A:D1:91:2C:6C:2F:C8:4B:62:FF:BD:D2:92:2D:DF:99:02:68:AE:40:2E:C5:DC:C4:37:AF:12:BE:BB:16:DD:3A"}}},"request":{"raw":"GET /id8njqSNGQ/w/400/h/400/theme/dark/icon.jpeg?c=1bxid64Mup7aczewSAYMX\u0026t=1768403612231 HTTP/1.1\r\nHost: cdn.brandfetch.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://migrate-re.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/jpeg\r\ncontent-length: 10594\r\ndate: Fri, 15 May 2026 20:31:42 GMT\r\napigw-requestid: dbFbUjY2oAMESBg=\r\nlast-modified: Wed, 14 Jan 2026 15:13:32 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=86400, immutable\r\netag: \"3730-yVvL+WoTETzM738VIK9KBvQ74Tg\"\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0Na3nVFya8pP5sDVXCRLtSsoBusiV1IhOUGs53DnGkQILdicvQolrA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10594,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=bf@v1], baseline, precision 8, 400x400, components 3","md5":"7297570d0573f0a3a50db107597fb530","sha1":"3eee1482c4b9cd6c1d36bc6392543882f7316042","sha256":"d95f184396dd385038b9a8718f9550e0f41c8d9bc61500fa3eaed0ef29cd6066","sha512":"71ef6da3a8c75cca83cb8cca96fec2de234b8a870591b404761251a33cf82fdda1256e48e3bad6bddafebd8c8e89dc315459be1cba2826110cb642876528e2b8","ssdeep":"192:/vIV3V/4FIMyGSWCwoPugJs/YoJkg20UI1Z8SI0bBIk/XOjikETpjfW3:/wNV/+Fy92gS/YoJkgNZnbBIAejVEW3","tlshash":"1122afa572cbb647c693dd77f87603ef67a1b1466992d90cde36932c2f8044e01c893a","first_seen":"2026-04-04T17:30:58.220169Z","last_seen":"2026-05-16T18:16:49.630453Z","times_seen":8,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://migrate-re.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 362739\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-16T22:15:08.66543Z","times_seen":183137,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":124,"dns":1,"connect":23,"send":0,"wait":15,"receive":4,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cormorantgaramond/v21/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYqXtK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/cormorantgaramond/v21/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYqXtK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://migrate-re.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 02:02:32 GMT\r\nexpires: Sun, 16 May 2027 02:02:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 58380\r\nlast-modified: Mon, 08 Sep 2025 17:59:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37640, version 1.0","md5":"c47ff12887a36dac62f887a6fdb51066","sha1":"74db058fe06da79b5dbf5b33d12041ddd45de510","sha256":"d80df8ff5aecd299a61549f9e29ab1ed0b9b05f4ea71d50fe978e07d5240b235","sha512":"69f1a213c6e2b30be219b919c0086745889bab293f93446bbc05273116c4bef115e9a5196dd0c23d8bf23a83a50f3b457051c43bcc0db992b8616f08de84d765","ssdeep":"768:mIH/m64lGpv8WbiaJix/6J6u3sVB3L1IgtXvsu3v2GZZsWnkZGJMjQL:hH/H4lw0jRG6msf7u8/sUr5nkcJ9L","tlshash":"23f2f21bbd69581e2fe5cb36c288cc6137309761cdd6bb25e2bf95e18b512198a0337c","first_seen":"2025-09-09T06:42:41.917008Z","last_seen":"2026-05-16T21:01:34.169238Z","times_seen":5641,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":139,"dns":1,"connect":7,"send":0,"wait":17,"receive":2,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cormorantgaramond/v21/co3ZmX5slCNuHLi8bLeY9MK7whWMhyjYrEtImSo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/cormorantgaramond/v21/co3ZmX5slCNuHLi8bLeY9MK7whWMhyjYrEtImSo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://migrate-re.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39260\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 14:46:15 GMT\r\nexpires: Sun, 16 May 2027 14:46:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 12557\r\nlast-modified: Mon, 08 Sep 2025 17:59:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39260,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39260, version 1.0","md5":"3e2c4175a96de7ac356a2bff686a68ef","sha1":"52ea38a7d8d6b615e3e7b9bd55e62b76c988a2b0","sha256":"6f2f5c3b1abc3d0bb035a927f66a90ca873f94fc31c4966c8d024142c2036e55","sha512":"2fb35fd65901af62623561df0f559f24d17bdc86bcaa5b230c3254fc6a829479aac80d1e633ad2bb862d4699e7800cf2af4aeaf7f8d5b2c173c6ed640e42272a","ssdeep":"768:loQHh64MfNb1DL7P9ocSy4Xfq6otNFt24kQ14MzjI8R7jsY3:uQH84KLbSXPqL3FkkI8J4i","tlshash":"710302776f68c004d776bad0912893398aeacc984004466efe423de6fc1ca9fc50d6b3","first_seen":"2025-09-09T06:42:41.906558Z","last_seen":"2026-05-16T20:26:32.670625Z","times_seen":1567,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":101,"dns":2,"connect":7,"send":0,"wait":21,"receive":3,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://migrate-re.xyz/","date":"2026-05-16T18:15:32.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://migrate-re.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 362739\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-16T22:15:08.66543Z","times_seen":183137,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":171,"dns":1,"connect":13,"send":0,"wait":8,"receive":2,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}