{"report_id":"46b44942-ed72-4df6-aadb-f79503204398","version":6,"status":"done","tags":[],"date":"2026-04-14T13:23:49Z","url":{"schema":"http","addr":"mega-rabbithole.com","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"104.21.44.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mega-rabbithole.com/","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"title":"MegaETH | Rabbithole","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mega-rabbithole.com","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"104.21.44.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T13:23:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"mega-rabbithole.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-06","domain_rank":0,"first_seen":"2026-04-14T13:23:51.155167Z","last_seen":"2026-04-14T13:23:51.155167Z","alert_count":20,"request_count":20,"received_data":9221667,"sent_data":9409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mega-rabbithole.com/","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e154d7a74a29d4a158c5b6060ce92ebd","sha1":"2b3a668ed8b7f31863f16b299e580e2d9d497d95","sha256":"a48f48a8acc4ce735c3f1625d2182b0932e3678ebcada79282bdcd5aff7e4c57","sha512":"9422d02e41071939edde384d53f96420f02dc75ff83f0803eb277d3021f7b4f6341506619964d59a6cd0cdcdd86a7d397bf05d0f06c23adfd3d91aabae4a8471","ssdeep":"768:2EDVEcDKLIYP99Y4WZQLuJ40Cg4x25lZ/fot1kZ4QRcMcBN0oFWcW/gcfLcwe2S3:SLZPTY0SJbf46lSLQsc5Mkvk","tlshash":"c563a6d5680bd4e68d9124cdd437ed09e4688d23cd6df163a52ceec0781ef6aa44b23b","size":67381,"data":"","first_seen":"2026-03-24T12:03:34.945937Z","last_seen":"2026-04-14T13:30:10.91075Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/index_1.html","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e245e63006fd1bf6fb45c8576854e85","sha1":"24d167cfbee92a5c942eb70768f06982e3d3f406","sha256":"e4323a2321eec7206c47833a4efdc9f90b271b56926e0300ec57fca5bf52a6d8","sha512":"8bfd8c57fe2cec359831980042ea5b543de3f6426768afd102011a2d8abe35a8f163ce037b9416505d4537a6080141b9b861eec688a309f02d5ed8f5900c7083","ssdeep":"","tlshash":"aad0a74860649539058e283e08cf088a7e228512720849c999dcd4287f71fa801a584c","size":222,"data":"","first_seen":"2026-04-14T13:23:55.907721Z","last_seen":"2026-04-14T13:30:10.909307Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/main-7f8b9c1d2e5a3f6b.min.js","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59e7408e947111bc63fe7354d37035a6","sha1":"a18c27f69aaa69ca059026257f3b3f8d2e7f98c8","sha256":"d12317a02bf0dc0ad7d8b86bf587ec9a475eb21f4041506e3884bd8bc32593ec","sha512":"6d1cb03d90c0609e9ac46dc448052fef7a78ea5a7b7a7143f61d899f18a4c30be27df59fbfcf698b1f5bb8bbeca065e594939c7711589784c22250f7a03fe18d","ssdeep":"768:PAbVYcdqfggXs3EPIHtucNbjW4Pv6MnTZh3bBVgPj82W3cq7cKch50sbWcWFwcfV:xfN83EPIH9GC6S1pbBiP/qouPGyfr","tlshash":"8f63a8d6680ad4e68d5524cdd437fc09e0688963ccadf053e62cedc5b81ef69a44b23b","size":70464,"data":"","first_seen":"2026-03-24T12:03:34.920424Z","last_seen":"2026-04-14T13:30:10.873335Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02e42e26f2d4efab14905fbfb2978c10","sha1":"df88d0803437644f779e66b901f4fc17228b4c3f","sha256":"b8752c9eee3f04b9ff94552a2d0b7bd69e32ce7435ca3cbd1c7b42db66815f0d","sha512":"b10304fca1385233ff2a446d080a870cf86f68f5679f1b232b3701ae14eb78c7c2bd5a93ac2f74213f458d2f101dee0ec9f33dc32563cdcf1ac764579dec311e","ssdeep":"192:w8kdES6CMz8feKSXCcuUS6C95btjOSI3hrZUMKftymJHvCY:w0z8fm4pjk4","tlshash":"78d16d6d9f92063798abb5bd8f9bb080292284275909ed303d4cd142df8cd3997f6f94","size":6752,"data":"","first_seen":"2025-09-09T17:13:15.573075Z","last_seen":"2026-04-14T13:30:10.908381Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/index_1.html","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-04-14T13:36:49.332333Z","times_seen":3027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"mega-rabbithole.com/index_1.html","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:23.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O8KznPePdVpBZqVTHTxy%2F6jTxDI3C%2BWXgWJ8JKYWor6WFN9AC5PniwKrAPZty2SNgztJNAC44iix2JUuU%2FD%2B3sqM3H6AM03iESaFNK7BDm8%2BR%2BpiDXAAVp7FpewM8YgkGFzA1RQ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ec30657ddcc56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50644,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39535)","md5":"4fdab3d0514b865f651ff646f3c2772a","sha1":"31c30cb2e1f47af5f25faf39ad7a4d1dcf8576f6","sha256":"3e74e322a849f0cd97bc400a8c23ff428a2e5027439960b7321ed7e918c3af09","sha512":"5bcf23abecad3dc1148862576bb3108820d8d7f61c1d1c1906e7fd7da89a646824433aa1d54ec87f31ee5b06d6a2ba150710ee401d8ccb53869d7efe0f577456","ssdeep":"1536:HweJExkJ/RE6n+62teZ6u+pBVy1B641oAvzoCx:QHdtEiy1B6YoK","tlshash":"fb332ab4e3c200775a0f9b692878e7eeb312ea0b95079d8db7dc13a1bfc1d68c4a5514","first_seen":"2026-04-14T13:23:55.882482Z","last_seen":"2026-04-14T13:30:10.890662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/secureproxy?e=jscdn/getFile","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:24.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-rabbithole.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://mega-rabbithole.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"svlxx3h7lc5htno2ykk6\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZOFmZsuEEZPICWImzUVQktVe%2FliXOXG4A11MSJv4QBbCWQaVnrq9G9onxs5TtUo88wP9iGl9xaJSCYd%2BAQ4xuG%2ByxPES3vOjlFkDMR%2FRUq0tALVzsSHzMDqrFApqDm%2BKp5ZbaU%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3065b199756b7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4704702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"db5fa88d001a6cf1679318872f9d3352","sha1":"a7591988e421543745b27c55934b2ea346ad02db","sha256":"2cda8157745ac5a91c8b2790757cd703c3a0f97fff8d9493e58b35da124d1527","sha512":"a9187160e9505dd77fd08b639a0ffe54ca5639893e14f82a85c0f88af172666f7a7428ff1e4e47867b691feaafce924f15d1f313a1376f73d9880ea32a72266b","ssdeep":"24576:/b/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeQ6SI51/:zGkwdNZngkvGB","tlshash":"7d2523937f1b583ccf6c09a8a16b1e0e2c454c111449e6f6f7a1d8c732a5bb052eba7d","first_seen":"2026-04-14T13:23:55.883597Z","last_seen":"2026-04-14T13:30:10.875208Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":769,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/index_2.html","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mega-rabbithole.com/index_1.html","date":"2026-04-14T13:23:24.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xmf5d%2F76o%2BhBPH%2FF4KMir5jV48mTb643orKo8MmG9ivQJCWeXn52ePB%2FVQ9UNYDoTYcS8lqLX41Oan4cVkBXRfuAioWhS32Z4mZhKylUgqGnF55%2BX3g2HwA593a%2BSi4BR6aOmzvA\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ec3065cebbc56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":542,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (541), with no line terminators","md5":"4c1ae83bf4c3a57e8abd4000bd81199b","sha1":"09b1037cbbe5988aa9f4aa2008170f8a974e1941","sha256":"8119fd5172d915b5ee3d84f7a2525bd4bca164bcabe81f9b917bfcac44aa83f2","sha512":"d76c839b9c969ccef44a5fb12b44d70ab94d3cdc596a643e66a2a7b5883dfb99e1bcb15315896170fabc35d68b5305d8eb3dfbedaadcccf52226bb4559e592cc","ssdeep":"","tlshash":"bdf0c0a61a519c0cb3131bd08e85b0848893fd5dc7819cd1b69965619d74a39a805c84","first_seen":"2026-04-14T13:23:55.884818Z","last_seen":"2026-04-14T13:30:10.883879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/default.png","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:23.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /default.png HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 37138\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: \"69d37fd4-9112\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jmt0kIo55WVe5Bov4wTbtdVBB%2BHfmxEirj8RXCytWA0F6%2BFPPhBrs3bg4q4Dpt865uORCqd6DWc52iDUqtal4Oj6Gzjf38Uox1dFD194GErb%2Fb9b%2BLIi3%2FnAg3tinzCKw1QQt39L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3065a386c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 323, 8-bit colormap, non-interlaced","md5":"ed41c3e439cb7d82edbb69ea2ce42241","sha1":"f5fe578693104de786a87c7de775bc9573d3d19d","sha256":"a5c60ceb3fefefc095a374d74c2dbedff9868d94969d179b3b7e2f6e17e8377d","sha512":"4d0a32307076b6494951cbf82954d8aef87ce633d0669d8f6520eb3ec3acbd9ca0e49fd4c0451c1efcff557fb523836419cfd695ea17ac3508678a954910a273","ssdeep":"768:Wvi/Mh2NurphnHcV0dY8e+fVABefX5lVbDf/YsbScn5WALJG0LtPXnfl:Wq/M4QrkV0da+NZv5lVbDfAsbSaJ5fl","tlshash":"04f2f1ae7e52a684d1e347ae0ace843355f53d036deb657dd061cc46e1ec2808bd136a","first_seen":"2026-04-14T13:23:55.885993Z","last_seen":"2026-04-14T13:30:10.894244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/scan-1.png","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:23.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /scan-1.png HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 21275\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: \"69d37fd4-531b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUBH5dmqDeyU9xUExMj2kURpXzwLmtbDaIgO07unKO5JpJR4mxEPTNk%2FoSoprMT11Wq6%2FSafzJtikYD5dwT2oMue5myvGfWNKoy6wOAO8YD%2Bo1Yae8lwpgI5Bufhr%2F4991uFA63%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3065a387056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21275,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit colormap, non-interlaced","md5":"9f2b3630277db0638758893daca276af","sha1":"3f13472b54778b2a47f8202423d039dd1c6b34e0","sha256":"74ddfa70fce3e4686f32bede15de7b1fb2799fdc94fc042b87c73e3d38509e05","sha512":"f1be342f8228f1a51caaa62a6756beba295b51156b4f307681785bad843eb8a88b7e13c23177b17027e2f7e5b624047b4f5ebdbc612b1167162946b91d213ca3","ssdeep":"384:BVn2G0kQwRZbQeyj5Hg+8TXCantLdcIqR2iBpoNXKbkut:/n47wLtyj5aXVtJcxRHOXiH","tlshash":"4ca2d02dd9f64c564ec2caf334b8a5a44bb06d9320e107ce559772e39e5023d0b6362f","first_seen":"2026-04-14T13:23:55.887065Z","last_seen":"2026-04-14T13:30:10.87011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/9722456a4ad99fe0.css","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:22.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /9722456a4ad99fe0.css HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-6d9e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZb1yLa5PkczpAn%2FbTP6nsg973bji8%2B6SYxozjecSjPGQSWsWf80MVQSbndrFv0xHnH2A2G6OzqwsJW29yhR2CWELu%2BkA%2B8Avbm7GmVq5Ni32Evy9quWWc1A1Cp%2FcYTA3vp2Jz1%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec30654aa4656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28062,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28062), with no line terminators","md5":"b06c08500e32c56b15dab50d887b0311","sha1":"e131304fec1b297c8e717e0c7928fe467ea45c45","sha256":"ac50ff87190bea4ef8fba0e895c90a5c177efedef0ceeca4ffaa898129fced01","sha512":"fe09764f0f31f55c043a9395f2c79d6cdfbdf35ada449f097433569aa8d7089139496a6317d0c4acd242bd50346926428f5f168d48b6a73eb6d94d29a3659aea","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPo8PFEIN4:TpSUJoAgzyAco8PFEw4","tlshash":"bac2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-06-18T00:26:14.391201Z","last_seen":"2026-04-14T13:30:10.902908Z","times_seen":107,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/20e5767a7c969ec3.css","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:22.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /20e5767a7c969ec3.css HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-3b8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93QrlBsBebDzgUZAPJyCdQrczlP0snWrSJVnN%2BepQrdF8L%2F7UzyrXyEXTeIUCs52anPN6oOP81RC7HppHePPALI6UaUe8SkowH5E62H1Q5gf%2FCv7IPJewPfjec7NlrXSlnZfvtTz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec30654aa4b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (952), with no line terminators","md5":"a19781ed1969d3bdd21547b59c10c02e","sha1":"a6dd4a2f247d67938c9c9a22207cf30033b6aaaa","sha256":"9c6e72310d7ca84a8786c0cf94a1ed23db7b4734d8008dbe1273d14e77a4abe1","sha512":"04ffb3c46b7e542980d3e62f1cf9126cde808024caf7ef65ff7b9054c5167ee9a61848ad4df96c6ca1faee4709a9c8e2dd15d5cd30bfd5b1afc45041afb30a24","ssdeep":"","tlshash":"0711a3e6be8d4533110af305710f69d1ca4baa2196707f5cf8a901d4bbf946739e1d13","first_seen":"2026-03-14T18:29:02.76335Z","last_seen":"2026-04-14T13:30:10.907619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/004d8cb9684e6e59.css","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:22.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /004d8cb9684e6e59.css HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XnTQhW3jan4EEhQAnIdIX9Zv0QaY5UArojTMhIuQawYtIJXOJU3s7N%2BUlvdmdAYWmojOI57zJ4a9ThpQcGC2O%2BqeTae4wkMK7JaGAoXxO9NGkMyPjlMvoIR6qipHGrY6aFoAh1q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec30654aa4d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3894bab2fc63ee3cb78aaf8e1c7dc29d","sha1":"b530fb26c896d998b4dbe11439767a05a67a3396","sha256":"55b8bd3a3108ff87b1caf540b787b2592864cbc8e9ca8006243b0a82225bc055","sha512":"0705b3513cc8b7ad01aba04f7df6887859049fa9d8ccce46719a733bad0ddcba2acc09bd32b5e9e958701fedcc44b37ae23f1fb922fb8941d4d2f9cf9d1de6a5","ssdeep":"","tlshash":"24d01224112ce03ae1675c9b30cebf11f10d7c26d1755527c2155978dcd349313d8f61","first_seen":"2026-03-14T18:29:02.741415Z","last_seen":"2026-04-14T13:30:10.898505Z","times_seen":7,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/bg.webm","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:23.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /bg.webm HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: video/webm\r\ncontent-length: 1876222\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: \"69d37fd4-1ca0fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-range: bytes 0-1876221/1876222\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4JHe0ZNwX7sKMngzig7Cuc4OC%2FIMsKsYImPAUwqSamJzpzZ3suMckddS%2F8iF8WDJmXklvJZWcKIvRVhSO8%2FnecC5L1z9rJxFJUcDmYNMC9CKqSFQo6NKndv%2Bb9SyzDz%2BNbUe8cH8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3065a284f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1876222,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"4a61b98983dbe3ebff1268e99b787e09","sha1":"1feb8266c212fdbc73ff5421ce1887dea89b2f19","sha256":"fa242df16585da5021e4260915bfa18c45bd4fd137053ed78b50bfd33a320898","sha512":"1401925666c3e0d68b2cc715f5a06cb5fba91648541c983a8a4f663e68441996c5a89a8fa964b9110e50759e1c65b82eb25a9df17c2a3d0111a94bb422caa966","ssdeep":"24576:FPDisqFEuGJW4y3XTNPagbRXkmoEy19v9QotLDqr4:FusqFxTaWRXk9hVlZh","tlshash":"fd2523a5e7ea38db890763fda6268544b421560f40ab7502b8748fcddf1ec28bb31537","first_seen":"2026-04-14T13:23:55.892476Z","last_seen":"2026-04-14T13:30:10.869225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/d637ce2f7d5e4c2d.css","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-rabbithole.com/index_1.html","date":"2026-04-14T13:23:23.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /d637ce2f7d5e4c2d.css HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-aee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnFNF9uZB6VmjWGReYULRPL2MEdrz2ENgoHTDZfggoVHTydnzEXkCXruWBkWRAad6BuDEOB3PDQp%2FRBziX6rI3HE%2FIh9ZSMtY1%2FgHH1qnawtHuVSPZUGKrXcFpDxyj5VoSJUxTjk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3065ad94556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2798,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"a14b746d563c3ba61ad0b62bcbaa2dbd","sha1":"9454e1be046f867cfbec8ea07f53b2fc31133c5c","sha256":"879e4566ebd075934a655e7531b52cec8cf9b9861c79a3596c2ed771b74d5044","sha512":"d6dafb2ab91c95dff6774dd42c718571d4fd8cd9f5defcf4e08b4e7e940917a653f6ce05298ac530777079103f189027d306a9f8af6522617e25589c2d9d4496","ssdeep":"","tlshash":"4551ac18aa1e9626cca25dd3b24e7721ad59b49985fa0165a069126ccdc303f13f0f3c","first_seen":"2026-03-14T18:29:02.77177Z","last_seen":"2026-04-14T13:30:10.871119Z","times_seen":7,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/e7e5a9f869622d23.css","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-rabbithole.com/index_1.html","date":"2026-04-14T13:23:23.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /e7e5a9f869622d23.css HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-1aed7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kh39lzJ1ADrcYYFXoRIYey2kjB%2F%2B%2ButHyC7TPiv1yu%2Bbjq9s0kXWjSYCXimrk6XUHdw9PMZd1amVix%2BdbkmeiuUaVveUwG8Z0BPNSYlx%2F4yijaK0NYeRcTfesCPHbEn22ZaqFmVN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3065ad94956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f55a79606ffcb5cc32863364ec3a9fda","sha1":"8498f7ee211909766ed41676239586b0fd8ca592","sha256":"3f5331a1a404eff2c796aed9af2f0a2edf60c4a6b686da0ad8331f13ac0c7150","sha512":"b7e7b4ae04fe006a6e902d08e03c50965ab3b1702fe82d81d7276ebde9760e83ce0151b1fe4ced32144fafb5d77349dc6c848059cc3b66f0e891508186d7d773","ssdeep":"3072:bAOmZH7Q2HTb332deh5BvZdRvJh3vb8IQDJAEi+IB1m6xHHwIbO:bAOmZH7Q43B5BvZdRvJh3vbRQqEO1m6O","tlshash":"5bb31aa4e1658d7bbc23e6fd135ce81d6146a4c1ba36b7d8bb83390295caaf70df1104","first_seen":"2026-04-14T13:23:55.89423Z","last_seen":"2026-04-14T13:30:10.874175Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/favicon.ico","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:24.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2FU3PvhBKeN%2FVdBQjKqA%2Bu%2F3%2FVwe5htQuOMs%2FoNGJ92vLj3cNbGYny7YRWTp%2B1SlJZ2QSCkNrt%2FH%2BzEZqyfxa60%2FLbDxotkg8Q0XZRqbJ0iB1otpW48Uj6i7QOOdzkmh9SI12yn\"}]}\r\netag: W/\"69d37fd4-cde\"\r\ncontent-encoding: br\r\ncf-ray: 9ec3065ddce656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3294,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bf57820134b35af7f4f02e9f1ba7cff8","sha1":"7cfb7f2195e3b94f9e53e611524667ddae69041d","sha256":"84a09aa8c59d97079a5125e2c38cdaa5f698eedadefeb9b966c82d15fdf333d6","sha512":"5491a61121fd9a99b3e1ac1e213f774d9a4eedf5e65aeb3ba55bc7c474a50387eed265daee77471fbeadbdbf2c20c90b64ab7dffcefa23f14701e025100cd0b8","ssdeep":"","tlshash":"0f615ddfc812951597290e22bc1fddcaf9ad02f5db30cc61bf926431f62b91d951a138","first_seen":"2025-09-03T17:27:13.432757Z","last_seen":"2026-04-14T13:30:10.895777Z","times_seen":89,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/2fef08b7e9cd6f1d.css","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:22.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /2fef08b7e9cd6f1d.css HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-133b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FwcEe2a0WYCx21dkstG9CzrEQscFP0zDnF9co13fe7R96xouM9RbSbwPfWzqclL3EVLY4nVy8aYTkX2w1vg%2FP%2B%2BVzSILOORiwzlF86YTJvEN4X2%2BwSoK0rIiQ76hyJpvn9POrPc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec30654aa4856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4923,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4923), with no line terminators","md5":"0e03739dcaad4df3ae27935e89f796d9","sha1":"a80a853032524fe447213a13d81ab27b361bf127","sha256":"d28592924b4f0509664a2266851e49a7b835fe0b3f23d7bfa7c8fbafc64f8556","sha512":"a931f072f3fde44296ec382375723910b30966c0fba970406c9cfd36216b5b385755f5689d86b69cc80d198b4b2870deb479e41b96fad173a378b22efb58c92e","ssdeep":"48:kRaMUPrYiTucxWw0f09Y0H0odnqn3LMswLkNhLMSNDfokVt:ArUPrYiTtxWg5dqn3IswAXISNDLVt","tlshash":"59a175dff9733dd600c7d141218af7944f3786a1aecbb579a0a460ecb66d4a80fad106","first_seen":"2026-04-14T13:23:55.896843Z","last_seen":"2026-04-14T13:30:10.903965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/0682410dca2f7465.css","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:22.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /0682410dca2f7465.css HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-14f37\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWSEtrNdpNxrwplmkK%2F%2F0Kgvv6%2B3BZFRTELfNYr30pdU9nF4E40moCWMQPAcJ3t4SFGQT40xxne6QCJw03IdkHFKMsR5w4P8nZsFVQ7VB25ks6NM5mdO5RJAMFclpOzHL0mY5XLp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec30654aa4f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64387)","md5":"e38f23dafcdbfb41cff3a96267a7450a","sha1":"a894ac6e0dab278c771f48e32db7611c32331b40","sha256":"e00fc801d601c2c6c9588f9c2eab4c6c88725d36a1584d1aab6d5ef65cf26049","sha512":"d28cb40e333e1cc911770f2b90bfef0d275d546008bc2f73b972bbe8e761bbc766099948a1c43d67177c463e5b4cee803791b95935a38313fa87a43c2d1d25fc","ssdeep":"1536:aDxGQedsx8Zs6+LnpcFugKvBS0rWC1qdBs87de0DFJhe:aDEQedsx8Zs6+LnpcFugWS0rWCwdu87E","tlshash":"1083b5a0f225993b7c1368b6e2ecfc4ce21be1c1df6667ecfe56251106c27e51a62704","first_seen":"2026-04-14T13:23:55.897761Z","last_seen":"2026-04-14T13:30:10.868124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/main-7f8b9c1d2e5a3f6b.min.js","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:22.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /main-7f8b9c1d2e5a3f6b.min.js HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-11340\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPNK%2FlGWamEY0Mn8JsxcPvKXj8t60KbnteFneZLdN%2FuGUXXE8TeQiIRR0JwJ2eLM8oFf61YMJBUw6mAkAUCHovQErKM%2FX2gRTDLYak2M%2BPVbo6H4wZ6pvQHWMER2o3B8oHYB3pcp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec30654aa5056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"59e7408e947111bc63fe7354d37035a6","sha1":"a18c27f69aaa69ca059026257f3b3f8d2e7f98c8","sha256":"d12317a02bf0dc0ad7d8b86bf587ec9a475eb21f4041506e3884bd8bc32593ec","sha512":"6d1cb03d90c0609e9ac46dc448052fef7a78ea5a7b7a7143f61d899f18a4c30be27df59fbfcf698b1f5bb8bbeca065e594939c7711589784c22250f7a03fe18d","ssdeep":"768:PAbVYcdqfggXs3EPIHtucNbjW4Pv6MnTZh3bBVgPj82W3cq7cKch50sbWcWFwcfV:xfN83EPIH9GC6S1pbBiP/qouPGyfr","tlshash":"8f63a8d6680ad4e68d5524cdd437fc09e0688963ccadf053e62cedc5b81ef69a44b23b","first_seen":"2026-03-24T12:03:34.920424Z","last_seen":"2026-04-14T13:30:10.873335Z","times_seen":8,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/mouse_music.wav","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:23.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /mouse_music.wav HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 71558\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: \"69d37fd4-11786\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-range: bytes 0-71557/71558\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6sCo8Myq6wBHNtMhX4GT30gx62jw6Dl6HGPVVw7Hv5zOuIw64ZqYzhFYgW746AcawnJc0A%2FpX1aGG%2FdQCsaPGMD3sjK5KBo1PwtHSezQ023MZYUy47vc7Tqr3ZwAGQADfPm814i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3065a284b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71558,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio","md5":"7f3d41c3eb973e014153dac59063728f","sha1":"3a583dc92cf4601180991ada56c8be75c8d3262d","sha256":"c127805c9ef9042555e9b66de877d4a0ee458d6e08ea5d6f0a157386c0cb6bc5","sha512":"52ab6d619ce6310940a479ba2fb78841c088b888d395a78564e113ddbb6a8c0f9ab5a6d0efe6327c0fcac14af63e5a45585e6b800af4b81a97654680de56c4c3","ssdeep":"1536:dsauVrOiMlnGO8SIXtsTVD1N6SofZvxLm2z4VioLzGIheTGnm:4VrOeO8ZYHASmvshnLzGIsTGm","tlshash":"f663382271c5fa07d600a13f8625c2a14327ed999f16f7653649b7bfa8b8b48cf19780","first_seen":"2026-03-14T18:29:02.769742Z","last_seen":"2026-04-14T13:30:10.892572Z","times_seen":7,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/Logo.png","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega-rabbithole.com/index_1.html","date":"2026-04-14T13:23:23.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /Logo.png HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 13094\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: \"69d37fd4-3326\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4urycWWz9t4qmOYlpcWRXba0ZGdLb%2B2KBVkV4mgTLQ9mVhNwN5hUR1zTTRD6i%2FnY4y99S8CVpXfB6y8mHbXH42g85pZED48ZX72Hh8YbZVh8niEEuTmfZGSjcdQvO71PoI8Rf%2BUg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3065ad94b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"65e9129f81cc6aa19f9f2454b746297f","sha1":"b8ba9cf59b99fde767f6ef489eb25a8ccb88ae01","sha256":"f2fe9b1a021d9247ef2659a7b14b9f199482ff66c12f8bd28726a86f8d7ca9ea","sha512":"23f6a8d3d716026a78b5d3f6d31068c99d8b5216076f108af743127d91fa2a0ad3141b30ec682b53ddc603ade7e965198d32866c85772f30a0df6c41cb7f9e89","ssdeep":"192:9SpHMMhmXyNgyBLElxTYkidn4IrHPhXOB8KPi:8h1gyBLEDT9szH56q","tlshash":"9742f943d42745e0da6a143e1edf5ebc6eb61f280146ab1fedb0ecb23e865311b41574","first_seen":"2026-03-18T10:55:31.274297Z","last_seen":"2026-04-14T13:30:10.899307Z","times_seen":6,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/7c6917055dd3b30c.css","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-rabbithole.com/index_2.html","date":"2026-04-14T13:23:25.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /7c6917055dd3b30c.css HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:25 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\netag: W/\"69d37fd4-1b4e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zLCS5Jc%2BgyFH9HhmNW1MSG%2Bg63fvqCyMxdNN1vAcGuxhSbNl2ZOCprAiAWhi6nYyz2ZKF1qxmvcrhhhS5i4NJPb%2BPn4QOakBnoAMwgE3FPn3ecCbXC4Gn9lsYe2hYCom1nWRp%2Fv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec30661f9ee56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111840,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"20f2f262aedeb18f3ce8195324004d93","sha1":"d2f78cbb7328e231f19444dc3bd25c99d9dce687","sha256":"38e64961a01353d730db79f7cf79b0658fc529f7ff714a3f9515fc5b1bc3812c","sha512":"6322761fd8737a1864e6fbeef13038c83c1a48e15d0a662e69749b0e19d3cb248cabd3908437fad0d139a50ec3d1477aded5fb66f61a565e47373a7b3211fb03","ssdeep":"3072:MG5hfVxxDZfCmUy8BlI4Q2w5tZbjrSWxDhbOZlv5zw0:MG5hfVxxDZKmUdstZbjrSWxDhbOZlv5B","tlshash":"31b3811df612113f3c2780fdd29cedada116b1c0ee296be6be4261118ac67e35de3254","first_seen":"2026-04-14T13:23:55.902916Z","last_seen":"2026-04-14T13:30:10.885585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T13:23:22.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:22 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxPY0U6p%2BqbBruOpPr9QF2d7dHAjmcWXWHE1J3zufrZojWutd72dSM888C%2FXw1xBybsDjrZi1z%2FzmNN%2Ba%2F7%2F%2FFZ%2BUzTywB6RsivX7v68gxosfSA9apAL3CE1z47ORb7AdBP2RHbA\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ec30651fcb5b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88127,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1022)","md5":"af565edd97b04c7465106685c8b90174","sha1":"74e7447059e5ed2f7a6bee4d106f7cf19bd2520a","sha256":"dceaf4ffcab7f0f6c04177d5e3a868df00eb97d76367cfe10891de9600579f4a","sha512":"c8bfd8db4b3cf486f8a024e106c1b8718b6088aa3533b5ae5d676b5aff66c911a86c4ac91e33f8700ecf0bf9ce403fe6bd031bbdae2d5dddb5c1150927d5d40f","ssdeep":"768:rPcFp9BoJB7Pip35vUc1YZ8Jk9beaQ3UiGr2k+0z8+yU:gpBoJB7wvj1YZEgXQ3dGrYO8+yU","tlshash":"1083fb5071f105b16c1f96795bee9a0ae611f0d3c95aed4cbfcc12858f85ec58ee2388","first_seen":"2026-04-14T13:23:55.904262Z","last_seen":"2026-04-14T13:30:10.9001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":40,"dns":24,"connect":1,"send":0,"wait":217,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-rabbithole.com/bg.svg","fqdn":"mega-rabbithole.com","domain":"mega-rabbithole.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega-rabbithole.com/","date":"2026-04-14T13:23:22.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-rabbithole.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 08:45:26 GMT","end":"Sun, 05 Jul 2026 08:45:25 GMT"},"fingerprint":{"sha1":"4A:49:E2:29:51:C4:84:33:3E:7D:1F:EB:DF:B2:73:ED:A2:45:1F:D5","sha256":"58:04:B6:7A:DB:57:85:C8:0A:C9:9A:DC:A0:11:3A:BF:10:F2:E0:C5:E1:3B:DE:ED:AB:BB:29:C9:75:66:BF:11"}}},"request":{"raw":"GET /bg.svg HTTP/1.1\r\nHost: mega-rabbithole.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-rabbithole.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:23:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 06 Apr 2026 09:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpGPEk2aKdECD8JLFsryxwLvEM3P76n6cRYNLfhCynBLNjHrNAR0nrkeYeavzZ6huNpB%2Bxoj0lzAhZb6ueExno7nJxBwgltMLNULMKgcx4lFhp0ooymaTCVuZzOfwTHMtaLNzi4N\"}]}\r\netag: W/\"69d37fd4-1d4f01\"\r\ncontent-encoding: br\r\ncf-ray: 9ec30654aa5256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1920769,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d117e1d10aa4b831a647fbb265315da","sha1":"6425e15cd4738ec3f3f893be81dbbcb18071e796","sha256":"df6f045b56d7bc140246edae2410404dc7fa00463e3dd73d8accbb04eefaa4da","sha512":"59c633c43dd2615335848a86dd60940d2e7826f507e36bbdb668c2760730914ff0f8b5d6bc9d05eb2ed63bfe367baa038e867a67052fc55179ce3df495d014df","ssdeep":"24576:7pHwfeCpKX6GKvbUM502wGCiMk2rJJ1OyH/l36Wv:7pH+Z+MiFP/fv","tlshash":"26252341bdfa7d7b5b08e230357f0e1d2ed84e6990813b9a86a5f4e1c167b8049399fc","first_seen":"2026-03-14T18:29:02.752972Z","last_seen":"2026-04-14T13:30:10.872573Z","times_seen":7,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"mega-rabbithole.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}