{"report_id":"5f279f32-b689-46c7-9315-34ae1fb8d8a0","version":6,"status":"done","tags":[],"date":"2024-09-16T02:09:35Z","url":{"schema":"http","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"final":{"url":{"schema":"https","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"title":"Code Postal night folder 161.rar - MegaUp"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-28T20:20:45Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"click.pclk.name","ip":{"addr":"173.239.53.24","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":35168,"first_seen":"2019-02-06 12:12:21","last_seen":"2024-09-15 18:16:15","alert_count":0,"request_count":1,"received_data":226,"sent_data":411,"comment":"","tags":null,"fingerprints":null},{"fqdn":"theharityhild.buzz","ip":{"addr":"54.225.185.110","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2022-09-19","domain_rank":0,"first_seen":"2022-10-20 09:00:21","last_seen":"2023-10-04 09:06:55","alert_count":0,"request_count":1,"received_data":64161,"sent_data":562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"onelpfulinother.com","ip":{"addr":"143.204.55.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":7359,"sent_data":1914,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d2w9cdu84xc4eq.cloudfront.net","ip":{"addr":"54.230.241.102","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1980,"sent_data":1336,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.222.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2016-03-20 13:44:49","last_seen":"2024-09-15 18:12:36","alert_count":0,"request_count":6,"received_data":14120,"sent_data":3650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.mediaxchange.co","ip":{"addr":"174.137.133.17","port":0,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2021-04-29","domain_rank":76933,"first_seen":"2021-12-15 09:28:44","last_seen":"2024-09-10 18:12:37","alert_count":0,"request_count":1,"received_data":226,"sent_data":415,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-09-15 18:12:18","alert_count":0,"request_count":4,"received_data":3549,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"megaup.net","ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"domain_registered":"2004-06-24","domain_rank":179052,"first_seen":"2017-09-01 20:45:15","last_seen":"2024-02-11 18:57:09","alert_count":0,"request_count":56,"received_data":1749389,"sent_data":31966,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":0,"first_seen":"2024-04-24 13:44:57","last_seen":"2024-09-15 18:16:50","alert_count":0,"request_count":5,"received_data":3499,"sent_data":1625,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nismscoldnesfspu.com","ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-07-08","domain_rank":0,"first_seen":"2024-09-15 20:53:26","last_seen":"2024-09-15 20:53:26","alert_count":0,"request_count":11,"received_data":6323,"sent_data":6426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-09-15 18:13:05","alert_count":0,"request_count":6,"received_data":5321,"sent_data":1962,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.servingserved.com","ip":{"addr":"95.101.11.33","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2023-07-05","domain_rank":0,"first_seen":"2023-07-11 16:07:12","last_seen":"2024-09-14 20:06:20","alert_count":0,"request_count":2,"received_data":11409,"sent_data":852,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2024-09-16 00:32:18","alert_count":0,"request_count":2,"received_data":172157,"sent_data":867,"comment":"","tags":null,"fingerprints":null},{"fqdn":"getrunkhomuto.info","ip":{"addr":"143.204.55.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-03-31","domain_rank":0,"first_seen":"2024-03-31 12:52:35","last_seen":"2024-09-15 19:09:50","alert_count":0,"request_count":2,"received_data":5670,"sent_data":1810,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ukankingwithea.com","ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-01-01","domain_rank":0,"first_seen":"2024-09-07 02:18:13","last_seen":"2024-09-15 12:56:33","alert_count":0,"request_count":8,"received_data":416346,"sent_data":3352,"comment":"","tags":null,"fingerprints":null},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":142677,"first_seen":"2020-01-28 20:52:40","last_seen":"2023-07-23 07:59:56","alert_count":3,"request_count":3,"received_data":0,"sent_data":2809,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-16","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-16","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-16","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"38c5167c8052d0c73892c3742b16e903","sha1":"213ef9210b4a5c4e73a242e832a08f4abef69a74","sha256":"743b919a337dfbb6d1e8648d0793532d47f8af48059e17f7e32ae8738c7614a7","sha512":"a2846b069959c3f7ef7d045ab897be48909c077a5e93ad8e012a41826df33e0d4385d844597f44bb3af13e2716ddee76adcc9bc4fd89f84b2e83b3d4dcd7a138","ssdeep":"384:1NeN/o4+J2jv0pLWu4A9kvpB8SgDC1aEPtc7RPajcw:hJ2jan9kvpCB7w","tlshash":"1772838d738133218187b2a141bf110f7137aaf66a468cacb63bc5daae7550d2077e7d","size":16045,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T11:37:18.484101Z","times_seen":3003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"65436867672aa72dccda58d50d8254f8","sha1":"04d6b89de9b34d0fadbef23cefbd45caca61da64","sha256":"a52cc14dd4bcd9dbd59548e2fa40a5e57c032689574a7fec848fbcd528ce075d","sha512":"cd620ce5e6049b4933330a5df1cff17a9fb890d4d1199c71ddd1e5094989e175c4bf2d44f55687dac64041c97f7540f3790699d086c4f17f8e286c407beef264","ssdeep":"","tlshash":"412100202080a23cc0008000830c8302382f0c0020000288a8000002000e008c022c00","size":560,"data":"","first_seen":"2024-03-05T01:33:50Z","last_seen":"2024-12-08T13:21:40.603359Z","times_seen":1385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-validate.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e083d9e4a3e014b760d70ad0f1e85cb","sha1":"dbc0b1b973f8f77b74baadc0a696e001234f8ac5","sha256":"217bffe44b964e10fe120949b9a143b665a8c03a57ab348713de7d8b2878345e","sha512":"df2c351d5c58319f68b1b276e6e87c0a1b166e01038187842e1bf670bc72a5c6b6ef3bbf4f92a6a6cbe473d7e26bb8888649d2e25e4bcde0f06ef7f0add78687","ssdeep":"48:mtMZNCDY/dvZ7k8hk9KCTU54t8wudDXTUwKlpPkALcrnk5KyR74BalGhy:yMUYDhaTU5OQPKl2AAr6plQy","tlshash":"e281388f761651b14e9327e99b9ca0456174f3196034d268bc0cd3d93b8b4b6a1d1bf8","size":4074,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.082303Z","times_seen":2960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"28a89f085f9ebc1fe343608881a0fc1c","sha1":"5e7823a040f8ea22578b1db1d18843aaf7b99c53","sha256":"0a971197bd8c40570653d35c91c9d46e6caeb74bbfa55702f01a555c52642efa","sha512":"cd438911d330e659046a3a3acc884ca2d170eeb201f03472ef0c440b119c1f6f0fa63f5b5c7fbec0e9a1870244c2c16afe00b5dc94fc326743ce604defb5b0bb","ssdeep":"768:yf5ADJryRurmWLctQZCwc2e49Ctna3sA3g1/AYb60SMmesa9aDvAxTIUxX8GucXo:huurzCZN4xsPyYxmuUAdIO8Gugpiv","tlshash":"6c43f73f97185c7b0fd2e6d47c462ad376d0909883819c0dbcb8c62d32eede5699b492","size":59247,"data":"","first_seen":"2024-09-12T19:36:38Z","last_seen":"2025-04-01T17:36:27.457499Z","times_seen":1795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery-ui.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec9758d9508e2fd22ddbdc6d5a28f214","sha1":"0ed7df6cc32be8f9687cda3cd6e109e5de44339e","sha256":"ba0103f765802f299bc7dca5c35d9a00359a0abb10cac136f43caf9c0bf98b7c","sha512":"eb1c05921adc80474acf15d80c04344236031d6de5f05a36c0d03663fba22da3ae31cf07bba7f3b048d3ca9154d3e995202378ce8defb83a294a2ad3f06d6ad4","ssdeep":"6144:HH8aL8lYTUdtP5u5R5x56BHHWi/Jn3qnj9Pj3iEXPW6l/plqEp4lH8aciVAbsuBD:PTStP5u5R5x56Bnj/Jn3Ej9Pjg5y","tlshash":"2994a689f39c266a867a325d5c2e02cd723c8076d601587fbc5d59dc29d883c42bbfb9","size":435844,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T08:08:15.847267Z","times_seen":6708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.dataTables.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"737f853e9fd6a31d62f5028e88663c9f","sha1":"cf144f2ab49f53a69fbfe10d3588fc23437d2736","sha256":"6c3ca64b7acfdd29b3ca6f1b9b46696369abd462d4546182085c347f72211841","sha512":"c148b09fba278ea4a75f57817a8be87abd06f9a6d9a46a23619a32a4bcd4ca4ac89e73d969ecd359bfb2b6b09c7a25e6f5bec05b9435928f585847c47026d91c","ssdeep":"1536:9Wbx6yktBJR6wIsJLl8Td/7oHfCkYQJtpG3:EOMoa","tlshash":"7763ea1923043e2ecbef70d401af8e5e647069719a895070a169f8be2d76d7910fee7c","size":69604,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.108258Z","times_seen":5643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-process.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f27159561d43ede851b9b84f63cd727","sha1":"c4672cc17326d35d092741dad007ee72b2c13095","sha256":"f6626568ee243b737cdfc12efc464eb97d786bdcce590a0326427e11f360293f","sha512":"63dc471e42c751f05753b4e182fa9fa3a6c17154de71e8cfa5725d87371fa6761a6237adf4113068c107a8457bde35fae6a3d8e95872f0012e9dc06d003adb5e","ssdeep":"48:mvMZsCDY/dHZC8hiXjuFI7v06svN9/IkQIQxqb8ZMqCDLARk1al8lc5MQOFqK4Ms:v7YjtQ8aIb81Cn0QXlVgt","tlshash":"76b1dd0bb51e113246db3ae1a7be414b7aa8f22d0332c5343d6cd7c64f5446692d2aef","size":5302,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.079519Z","times_seen":2746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.iframe-transport.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbf8d80f1841d07cbee13abcfe0a5ba2","sha1":"a69ad62ab8a001e0ea8ea106ac404ac0af88984c","sha256":"4f3f67c68965b4076cc7bc531f648c3a15aa30c1b9cede0486afd4eb4353f8c1","sha512":"459a3691a039e0ad04bd5711823e0ef579ddb7b7e603f802fad21134ed993194ad7e6f83acd00b70b3eaf57e9be01fd6677570cde9635ec1284e5cedc8875e3b","ssdeep":"96:uQYCMNvKUWO38itw7rg8LJfNm/7qZ57Jo0463x:uzMUtJts88Nwqr3x","tlshash":"261213872c2213310aa37bd91beaa0587639b3247125cb70bdee17861785506d2e17ee","size":9255,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.12958Z","times_seen":2960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d31e0426a59b32581835680633809ea3","sha1":"98caf983b9349fcf2a32d6512f998ea9a557a90e","sha256":"c7fe89a030ea54a29616f0a473366e07d109dfb775f2afa050c2de82e3606fba","sha512":"49edd2ac8f4e60397a150b5b033a9096cb9702a4d81f2456a39870ad60cd2f3d7268c755130cef05254e3a448180a153882cbcdb8ed93ab272975da0f0b13774","ssdeep":"384:hl+ANBtIu13EPgC/5l3IkOxteCYMKtpfhtw7gD7ml7D0Qg0ONj8yegeiOpR8yeHF:/BOu13EPgC/5l3TOxteCVKnfhtw7gDSg","tlshash":"0f622d087afa197bd147703e4b5f600c3638815ba648dd44bc9ceae02f64d24a5fbf98","size":15314,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-01T17:42:40.479799Z","times_seen":2905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/global.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b62957c3c4788544cad00a761303b836","sha1":"0436c4efedfe2075b24a87ff969034b2e258e609","sha256":"ef8a1ff709899584c91496da397de0b0fcab774e3b6d258ccca9997e592e84d3","sha512":"e04864ea59a92688ac5cd2eaaf92a75e9b5fe0a98cd9235afac14ee54dec2ebd2f14f2538708726b852b6b5e7b2e69b5bf8e3acc0b9d3b3ffcea1b34a03d2703","ssdeep":"","tlshash":"bf611008a9f292a18a37a86e07cf961971599503000cdc557c8cabf4afd553acdfbcf4","size":3417,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2025-04-01T17:36:27.456224Z","times_seen":2491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/sw.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee51131e416458b88d6da4e6e6959ca","sha1":"a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4","sha256":"db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734","sha512":"c15181f56e6a1d9644315da37a99789bd77c9bca734094caf065e54d9b525fc5d1268821e707398529a616c78140e6bd4c594cbc3618335d40b757214b4b1c58","ssdeep":"1536:vSpw5PMhOhJ6ZbaL7l65oQ668X4BtmG9vpjthaoytu/W:vSpwVJ6EXX4rvttkbtuu","tlshash":"31a309497252389617d7e03e177fa5cb6d7a4a09bc698d974051c3c02d2a0cec6e3fba","size":103036,"data":"","first_seen":"2023-03-09T23:12:43Z","last_seen":"2026-06-07T20:21:05.750486Z","times_seen":7050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ebf524053e3259b38cd33a44bff9685","sha1":"4b073458bfd8526583eaca302f5d21bd1d8b31f5","sha256":"10815e9b5addf60315886f7216b0530fd58fa8580ca6a81687f14ffee517c619","sha512":"eb10aca3c7f790fb2f061689c584271a05ce56b0c0f0877cfe7ddd32dff156433cda84c780bec7b47694c04cba33aaabce5e4523818a1fd1c1c8bfea24516abb","ssdeep":"192:FIZRWftohx7HRDYAEUvOE64occ6tXS6LCRH5:FIZgfuHHRDnEI64rc6tXS6Le","tlshash":"70d11236663e3631ccab2b3da4179285363b9d5bb00d113239b57c80e4dde29e263e65","size":5447,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-30T07:34:31.458851Z","times_seen":2675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/clipboardjs/clipboard.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"55db0ff82a3b6b247844ae0d07d85fc6","sha1":"9bc5c7dc92ef0b31d212a66bbdff591e484f427c","sha256":"404b016f5c9a369726eec56a280c93478da17a52ed0f1fee116838330772ec70","sha512":"1629c5ce3ffa898e5354079549676595161bb73eca975b76a6af4ecb992eedca31184848c704c6e8ac6c6efc7c0b96ed44ab00ef3b2dde6a61374d4c058b0b82","ssdeep":"192:K0Gfh/1JmtuV6qDpOJ4GQUrAg9fvsx1tkvcRIIS7e1t:nGZ+kV6Kh8E2fot+Iaef","tlshash":"df128688f290b1b1929b607b417f420fb372d45da02e50a4b65de4f5ad78aad4227f3c","size":8854,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-06T07:13:40.428367Z","times_seen":3724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/custom/custom.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d40e9899d9667475ee4a7d5d9731311","sha1":"6e3b230480bc36ce2e9b0622a48af5924535a72b","sha256":"a72e6ce7c10983fcd6773f0db77f049b7a85039d3e7212a12ad56fbb8d70a6e6","sha512":"853026bb54a8884baa86d039bef045bcb24de596df4c4defc060dc8a4628cdd0274b8a0aae821b3b378b1775f4772ee332113fb62b21a78bceeb69cf99c352e2","ssdeep":"48:IjcnEj1+HNc2ozMpcwkPoM2dXFsGNMkapisii1iMwGCKQEqh9O2lwmbKtxCKR5EF:1Zd1uqAtGwAs6Vp","tlshash":"e5b1fe7c6e1f7cb90993253b683e94c015af3c4a240242217d4db858d3deb28ca7ade5","size":5152,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-30T07:34:31.461319Z","times_seen":2673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e4ba2a9c6f022f7c920cd2e76d95bd4","sha1":"f15cbf023a4a1e1c810eff679cc9b35b81a6f2c2","sha256":"afff7cdd8f6f0ca43b26573840f5ec5d3302dc1fc2b2209a1163e3978c9d012c","sha512":"972050054ab1c3c8f4e6ea8edeb48800fc6a9f90cd736b35fbba35bd9a42856a55be6c539a4dde51cb9a97efa5a156009af8fc57263dfb34e27b92de601c73b2","ssdeep":"","tlshash":"a55197947159310443d6b89a31ab6709ba7c69e7b01b6e506008c8d9ad38777053bfbd","size":2433,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T23:48:45.394655Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45ba0abcc464a9239b0a51561d758f82","sha1":"7cb9604d64c1d567b953f4c3241735ba33832bc6","sha256":"bbe693217a47754dba17ec49a605ee891e0f3cdbd8b1db589af459277b914d82","sha512":"1b34151827d55eff524da316bd9ace26ac3eb18a2bd9ad86f04ba36f63187ac2a395567d4accef86aac794aa44f78e4e30ca1ec0b5fdf73f7b39625f32e5ed46","ssdeep":"6144:MS/o+p1FNnl0xgHvHRgk0seAEXli4XuR9Ln:FwU1FNl0xU/R9z","tlshash":"744429cd73c674664297b47840bf018ba57b68e2f84cc894f189c8e42e74a9a4277f7d","size":265808,"data":"","first_seen":"2024-09-19T20:20:48.434455Z","last_seen":"2024-09-19T20:20:48.434455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-resize.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"23a8f0c0a8e9febbf563aef9fb28f2b0","sha1":"a0d188d6535c31b9bce7d874e4731f3a0bd2a220","sha256":"2d6f1126fbf381ae50f1264f82d5d2c55c400067557abf21387ab4c72af624cf","sha512":"f6a0152781a6771d5a14b620708277d488378b10d45ebf7af3d811dca57e09423fd04e7be323e76ecb34cf03cd7db697cdabaed0f8e7699a41423f2b680feb31","ssdeep":"96:oUYxqdjVr2mk6d6/Ln+HtNkiD2m31vPtVRb7VBQYJdUdAZ5g1e5+uoPrrqF:oPiymOLn+cM33RbTJdU2Z5yeguoiF","tlshash":"2202341e3a66317a496321c87fee60c8b659726d1132c710bd4c538e376b927e0e67ec","size":8063,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.123167Z","times_seen":2745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"72e348954c20cc27df3e9d9bd3a4905f","sha1":"e50ad79ab0949f7e40e8d0dc4ed38476220f79f0","sha256":"9c9f251d98edd1208a6c45aee90ff4011ed964e87e8bb622ae7a45249f1dae43","sha512":"45dbedd4c37e7d9add86523f5203f885f7c5801100beaec34068d0d78baddd3d421990f8e35a84437913263b3b99227b4af95628ffffb5d2ed82d241bed43606","ssdeep":"96:+gRWOQ8nCGOYOx6TOkDFChbkXUWV/QFEfhMpWF:hAOfXOYq6TOkDFChbkXUlFEpVF","tlshash":"76916747b3226035465faaee9ff9938c32673291d27399147d1d8a460357bb280f0bf5","size":4249,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-30T07:34:31.495875Z","times_seen":2681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"76cff321a3da409f04f1b9d25319ab78","sha1":"f9de6b54f2eeeb85ea43693bee32dc930a252649","sha256":"9930043ffb4753c135a12f6be97e24ef56fdfd5aaf1af6a204d99937a7ba8ef2","sha512":"b256243244379bc8bd3d2496a71ac10a98b496bfad598e8b20cffc2d583a4915137f92208c08a82e011442d36279b0a699aed67edffe1b854ffaf2ba24f978de","ssdeep":"","tlshash":"dd419b597c0e37302e9330fd1e4b90885a79f6639106c896bd8ecbc4f7e400dd166e9a","size":1821,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-30T07:34:31.436895Z","times_seen":2675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery-1.11.0.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-08T00:23:02.102953Z","times_seen":29726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/canvas-to-blob.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1b353d74742a0d0d8dba4a82f07c050","sha1":"a1b03792ee014e57e16a27cf343aaad13af08666","sha256":"233a048b5eab2ecc75e2f72bf9a65de6ac06e697746156ade5b144305d76ca3a","sha512":"07d8a774ffbf52cf7f90c03b3b8d615d331235c7ccf4f750dd9aeec8a935addfd8fba582d795a97c9b9010c37d1710dfdc1ed8c86342e9a80335ee7149c6b3e0","ssdeep":"","tlshash":"86110084f1922461919b225c40ef4cc9f2b68d2146c414a0c2599fcc5b74efea3faf58","size":1032,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.116852Z","times_seen":2754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2474adb496ade0e96aa9400a3974307","sha1":"9ab48147ecad83275d147a61dea8df8a968e5a0e","sha256":"fa77538239ff2758ff9fa8ef646cad3e9ca818dd13fbf15ff3ca8a8bee173c69","sha512":"06206b23a91b29c1cd11541ae21c8a4562066fc197cdc3ff3f9e0cdb693697dd9f6fd2a8c533d2c05a494eb268820e701107d3e0302a9e8a55a4e0e9cd6e878b","ssdeep":"","tlshash":"7e3112aa34db3e6647f7712f7a1fb2462121943b16829082d9eade3c3df2c417813e14","size":1478,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T14:46:31.469334Z","times_seen":4016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"35045d45f7d1dde1f90457c5d73700c5","sha1":"a7fcee0ab1da615e828e51967c474ae91d768569","sha256":"d72616e59f2ba832c54a0e734cdf0a79cb8730f81a07b5de43864c15a240e221","sha512":"6845d70397a4fb6d9a75c0d6f066270b91566f134cfdf2fcd44d1c9a598592a00581f1a8dccbc7147c53aa7f5da397b8a16d716ae4e88e805fecdddd52b46d8c","ssdeep":"3072:7hXjjqv/V7QCpOgV7TOwSV7T/reUo+oPXaGZ6ZgsvOqnG3csrj/SZA4:xjjqnV7ggV7DSV7/e0nG3cs3aH","tlshash":"dc14d6c8774f2c2f8aa7330b697d18ccd03cd576811251b6b6e6f46967cc448a3a6adc","size":197554,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-30T07:34:31.47125Z","times_seen":2665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b85ba9fdc07788f5208002e4588c1e2a","sha1":"f4a5b283e901f573f1237b6a096da4c295e8a65b","sha256":"f809de94a782db6c7c5bc85db8bc8f6b05b1a473f736080b3ea8377fd6ed35cc","sha512":"7bb50a5b8a823b51badfba73950f0337d1b44e15306ee1c89ad60e3a71ebce0330668ab05faad288541dca0d02902b3a89a599a437f1b789e063944654ad387e","ssdeep":"768:vch0r9GOvPOhSF7pzC89Na9UNdO3gDe2VOk4:U4v0SDzC19OXDe2VE","tlshash":"9a43430d3ee7221584a771e89b9f64057634e42f290add153c4d87c4ef48938e2f2bea","size":56276,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.108978Z","times_seen":2736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3fa893fbabe62b0bb62aabd61940f9e","sha1":"224addac3248f30bde79aae3a56b8534af4c9bc6","sha256":"ddc61699835ae9ad83896235264bfe5eeee3fcada20b10d5aee6dd7019ce39e8","sha512":"d84a28e93cb88bef05306eadf551077375253255299336b4e478d9a71bff14690aba87e3407366cbe23b275608b16f96928b018155f4d4627e497df37b62e741","ssdeep":"24576:iFHBlf5e33nVqJsGud28Thz7lW8BZFHBlf5ez:j3nV8sGud28Thz7Q8B2","tlshash":"5405929476d0f81b27de4b63be1baff9d47a486b6894204bd318f9c818b810bc5b5d70","size":852109,"data":"","first_seen":"2024-09-19T20:20:48.50293Z","last_seen":"2024-09-19T20:20:48.50293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3d2ed3d8c9fdafe671f8a1358f97e05","sha1":"1dd55669afff313f9e12e024f4752c164d37fa0b","sha256":"99eb9ddb373d10495f367e606f18b2d63c855b50b039e19988be08fe87778bd6","sha512":"e4dcbda57dbeb3f44330ea0937f3f54349232afb943e638aa325e91777a93a7ec6832fbb9b7eaa794a03a0a92fb87c8b7362d83f3239cda3df0e3f44a6b8a2f3","ssdeep":"","tlshash":"46019c0f75daec54423320b203be2f455ebf5407944add18bedd58c8ef62514ae8828b","size":819,"data":"","first_seen":"2024-09-19T20:20:48.505224Z","last_seen":"2024-09-19T20:20:48.505224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theharityhild.buzz/bTJJaDgWEDofZxhAJUoCT1o9HEgeCGZHVQhVKB1IQ1wsHBceRWcCS08eaxtVCxBzWRRPQSQeGlcQfUYLTx5rHFkKbSAMGlcQcVsKWwF6ShRPQTwKZwRWe0oCT1RxWwsOAn0KFVtXeQoVWVYrWBVUBnFfFQsELA1dDlcqC1sOV2sV","fqdn":"theharityhild.buzz","domain":"theharityhild.buzz","tld":"buzz"},"ip":{"addr":"54.225.185.110","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4fa08aa2cc5626f342e410bf53f8152","sha1":"add6e1cab19779750767ead9ff36d96916ef12fe","sha256":"b65080d9fe7841e8bb83f2c10b431261746bce6a7781b87830e187d649b57406","sha512":"a07f1bbb0a0ddaee75da040292ad96e9b9823f2e277f6ed00a1f174f5beb9d99f799ceaf5e33a54ad9eb92b1fd9f892041b8701c31f29e5d7472fce1f7266ca5","ssdeep":"768:FztzTFMttCFipWJfWoHY/2fETPcFY0+X9/0XheaEicPClOxxS0reI71xD/:FpECEp/SY/2fad0O0RDUClOxxDesj","tlshash":"21534cd172912083c207f1f59e2fbe47793f0e12d4895ae26ca7e081ad7909e91e3e74","size":63759,"data":"","first_seen":"2024-09-19T20:20:48.461429Z","last_seen":"2024-09-19T20:20:48.461429Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-ui.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d74ec0b03e02825fef8093d64629489","sha1":"de746f1c7aeb0927541e1d55bdea4672bb47aa73","sha256":"5d4a5378ed9f8bf68dbfb6246761e6d44e2b11fa626d8b4f8d1d6a779f037cd2","sha512":"a61efb4485d6107a74edf5dd6f3cf66d3e7cdb2c7469a3e5fddb3a1005133fbe7b2d4cbc15eabf7cd10e25bf9a344287530701d712bafccbdbade6d114b2ae42","ssdeep":"192:jherScJi1x5JyGKvJKmaAiWCfK4hsaMCSC/N2aoItnEiu7x8MKWpKuTKErCmE+N9:Naqb2aLhsapa5iTDwwYwpGJ","tlshash":"02b2ff0d7aa7a114826770bedbaf540a3225e42f190acd193c5c53c4df9493ca2f6bf9","size":25071,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.093239Z","times_seen":2738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/retina/retina.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3e2d6e7887add1872c197bab95a16b7","sha1":"fe996175492409ca9e5b4f42911c5a69e8b2698c","sha256":"4b75d94f66a12f86bb0c238861680cc589c4463ba29be6889ed6dbeb5594aa19","sha512":"63f81f4ec4fee992eadeddc42815c3a5df5e67cdefbb60993528354c78219462b6fc1b9cb0d11333df87a453f34248e89a8ef5980789a912a88ffcb96f0a2178","ssdeep":"","tlshash":"db215069b69131370142a911403f6da27b36b0fd12834178bb0dc9e7ec31e38966efa9","size":1326,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T09:00:57.759192Z","times_seen":3015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-108868042-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2417cdcf70c320b5602d9a266997b80","sha1":"201c54aea776d3d631df722ef0a079d298fb1941","sha256":"497cdcf65dd16bb7f94609585025c8d93ea9804ca6024a8d491d23cce58c844a","sha512":"cb0aa652749095a3f838b27d7e0c90f198cd2051f71aa6c91b635cffc9daf22e85bbbfa375235e3baa8aec4153294f2f04b051722804ebd9513db7292521162a","ssdeep":"3072:yWL9pYF+p1FOgRKtL603uUh/COE9v1bfGh9O1tRgk0seA5ugd:9o+p1FN0igD6Rgk0seA5uw","tlshash":"f82419c8b3d6b42683a36474507f014bb13a6de2f80cd894f185d5d82e74aaa427bf7d","size":216108,"data":"","first_seen":"2024-09-19T20:20:48.423601Z","last_seen":"2024-09-19T20:20:48.423601Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.tmpl.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"411df7e2bc659d35015f7fdb7432b331","sha1":"848575bfa595b60987cf60ce9efca64ede45a20b","sha256":"9509c1e67bedbaded059d0aa8d5cee65cee3c9e3f43a5952a7a233cbc10810ae","sha512":"b0cebabb6b349bef206566c5c3bdb0671a63e37f2614d8e400050a16a649c80bdecf68f4fe39bec93a5e6e1b6221c7d91234c057da31daae294b078f42a26c7d","ssdeep":"","tlshash":"6911adca3465e086c1d57d20607fcc2970aa58ebe2995628c286c7a83e314be9037fb4","size":971,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.090437Z","times_seen":2764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba847811448ef90d98d272aeccef2a95","sha1":"5814e91bb6276f4de8b7951c965f2f190a03978d","sha256":"898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1","sha512":"bced99d9331614757643273441a2b8921103382949ab0e510f386c453ec2a2359da39680d8a169e6bcbe7531844eaf5f598560f0d133d3fa3a9f6c7502b148df","ssdeep":"768:jryxMjJYkskKzykVtCb+9C8agZMdyKHfivbOCtFKH:3HbjZC7w","tlshash":"f1d26506b2303161079fb2f5515f020b733a6a7ee906907c38b99ae63d79c587167f39","size":29110,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-08T00:16:26.826122Z","times_seen":28433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"04426bc66c09c8881b5b329310e903e9","sha1":"ff7f2f64ed5938023a91050e27f22f77becba78c","sha256":"ebf4e570b96d611fa540bb8745ba518a1005d50c4589a2c2cf3a60a97151a184","sha512":"9c87ee7ad099489801e0d6f8b241b7b6e77a7acd612cc5102716fe80e22a70f12181f927bd75c1bf145256de3eb56165878b28a2b45665231cb0b1848121275f","ssdeep":"1536:ItIeDCPRC0ebI00ZH1sWwTSww1fZbls9prC8BfTGnKDFtWm88:IWEIC9I0gH1s5TSww1pm9p2CtWY","tlshash":"778319ce7261702006e720e6553f0a47b237a999b40d456cf258c9ce3d7c98a62bff76","size":85185,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-06-07T09:11:58.689117Z","times_seen":3106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffa5849037af7c5e6fc1971877859645","sha1":"deb7c1eca1d4ed43dfbf33442047136d5a5f41a9","sha256":"8fa669071ed5fb03e9954ba360885e7ba95fb77ae5448dfc313c3c01202b46aa","sha512":"0aa82ab0804da9c2cc5df51b5a46fecea2cad1fcdefac18130bb910c2ad4eb5ba68df54cc34f7a8b893d01e0b256839d657aef8f8318e32433c0929d1a8dfec1","ssdeep":"192:ZqaMynq1A7BP8HdC6ibNlko/io/pbhZE2o:vFqOlgdC6ilxG2o","tlshash":"66f1247bb912207596177faa07ee811a3576314001a7ea6b3d0cc45b1b58b70a2f6ffc","size":7391,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-30T07:34:31.445561Z","times_seen":2696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/load-image.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"29c8a390a6c8038b015af4fda1af1c38","sha1":"516b1c42416ad647530192872785a5b3b35bd471","sha256":"b49885ee9e161e5595dfe428642255234d8d557c85699bb8bba72499717498c5","sha512":"c90051dfe89e0e643f8bc0244b55682c267c0fb9eb6c58d86cb5198b2bb2b4d9ad5cd6357aff66f39b207e9f461a216c91919e8fcad4dbc23e5638d140e384c6","ssdeep":"","tlshash":"b051db6c725874e522250993226f8649f518f4a6574f74205714d4ccb4becef837ef09","size":2546,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.111763Z","times_seen":2755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c5344f3c45196fa90087fa5091fe077","sha1":"87ccb6407143d5f6e903e8ca63433d19b62d3dca","sha256":"b3d346aab31b4ed5487d72996581dbff3bb212be0b8cb54e141d3b6204757375","sha512":"e229c1739e508f9d2b1fa910a74f48afbc5c8da8182950fb8d24153cb54e745f7f5cf2be9695f07dfb2c30d7eb69d3a40cf070bd063e8232f231bb66ae225168","ssdeep":"","tlshash":"f4f0262750aa44d0d9372c769b7e431d6123e2037e5bb8007b4daa581f1f01f42ba3dc","size":544,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-30T07:34:31.507722Z","times_seen":2569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/gauge.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"aafe893df6f86140460a76d58dcecfe2","sha1":"fe1a74890dc8f040f5f681041663b96d983163f6","sha256":"2d9574ce1b6890bd6ccf1ef3d04fe1328f35c5bbced7b6b331459119ef4fe480","sha512":"0af0c5d095719622b6555f20180eea104c913dc391440da688fbe90e15ef95fc344e96c6026a101cc9843f67b38b028bb0dcfc3daa0d7ece328e795ca67e04df","ssdeep":"384:2YOQ4fji+TgW3nFcnwNUsLyrqK9dVSK9fa/cZ+O45wIh1CX4:2YR+EKvYJ9Z+twIh1CX4","tlshash":"f182a38a726b1629dbc796ea101f035d933bf669044951acb570d2fb187ee01823fbf4","size":17848,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T05:25:35.54109Z","times_seen":2719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbc6f821e8ff7c4828576a426ee2d4e8","sha1":"f043b3149f201934cfc9ff603023868202ac2141","sha256":"68db8c28a54f45ff784d9386fb96e04dc8131f033f5f68307876dc2f1652ea59","sha512":"52367de364d9ace4ac9b8153c94f9d61db6f3321d48cc988a69c63c3bafb68fb828cac5e6545e80bb98ff384186877f11fcc5a7863a32eefa7f466ab29aaeafb","ssdeep":"","tlshash":"06c02bc8350a0cb185f727008b3ffb00f406325498d05d33480973085d20f03d754800","size":155,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T07:56:00.776983Z","times_seen":5876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/sandbox%20eval%20code","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4892197ddb025be67e8f246f57eca9e8","sha1":"228f84ac2c4ac9db9aa639783b46c57650889a33","sha256":"7cc4a9de3a1b9dcb2e2600358446c14ef296168d5388072fd94cbaac64891b09","sha512":"1ed7ae70f16e5e6a38e5fdf331cbc19d232d88b3113f1175cfe381d9cd51308c7d97bbb6d453e6a18b4953f6c55216eeac9722aedd9bd6582efe994318da5873","ssdeep":"48:MX6clUAZWCRcGYqY9pC/Z/KJlStAR4b7eMrxpqYhUKOahgrXMSxJJseKzwSAVvfo:MX6cKAwR+9KJlSPTU7r8SLuHAVjR+","tlshash":"669185a39160320565278d44f7c8ab99232e856262228beffb913144cf87f55278e27f","size":4359,"data":"","first_seen":"2024-09-19T20:20:48.514175Z","last_seen":"2024-09-19T20:20:48.514175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:04.899613625Z","timestamp":1726452544899,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"73C53B2F9EA6CB310EB9DF3E6D917F4649A2C2470B3AE7EE1E4BBB7102550016\"\r\nLast-Modified: Sun, 15 Sep 2024 21:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11193\r\nExpires: Mon, 16 Sep 2024 05:15:37 GMT\r\nDate: Mon, 16 Sep 2024 02:09:04 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b4ddabe3dc0fdf5ea3a82a9aebbb01c6","sha1":"bfbff7cc66b83f1e16d8739a987f175866a6de68","sha256":"73c53b2f9ea6cb310eb9df3e6d917f4649a2c2470b3ae7ee1e4bbb7102550016","sha512":"fa30674cb0205ddc62bceb4f66b8b8cb150c5da00de2c0ca2fbd9bc68a9a1817e768db99f30e5c54fa4418d89fe881549dc6540662001362b9f80107c53cfa73","ssdeep":"","tlshash":"82f00e372aa875a0bee9154269f9d83d4a753dba72002fc5188216d2ef607e846cc80c","first_seen":"2024-09-16T01:16:34Z","last_seen":"2024-09-19T20:22:21.795612Z","times_seen":28960,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:04.96930292Z","timestamp":1726452544969,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"A50CD1C21CA6FCD7B91806CC79BB4669602F2ED234D5722704DF5959AFFECAD0\"\r\nLast-Modified: Sun, 15 Sep 2024 00:20:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4193\r\nExpires: Mon, 16 Sep 2024 03:18:57 GMT\r\nDate: Mon, 16 Sep 2024 02:09:04 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"cbe3df23d7a1a604654e06ccca10ab85","sha1":"907419e4690cac7c3af83a771260ec3dd8118bf3","sha256":"a50cd1c21ca6fcd7b91806cc79bb4669602f2ed234d5722704df5959affecad0","sha512":"a91c0b95465fe8bd55e9e735258db4f89bd976c8944f47d6e138b987e6bdb55d3ff103010b695c901a92399eab71333883a6a8eebde412f2174ed4c872b92b45","ssdeep":"","tlshash":"11f07577b995f600fee4154d15e4e064962267ffe5c410e1258023f11601bf8e48840c","first_seen":"2024-09-15T07:08:20Z","last_seen":"2024-09-19T20:30:08.478969Z","times_seen":27661,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:05.36138024Z","timestamp":1726452545361,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4A2A3E3BB18F4046A78FD131FDDC30A26B37C78F0B85554F495B4B7631261D42\"\r\nLast-Modified: Sun, 15 Sep 2024 02:37:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7288\r\nExpires: Mon, 16 Sep 2024 04:10:33 GMT\r\nDate: Mon, 16 Sep 2024 02:09:05 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2964f413d127163e967d87e9760719e2","sha1":"9f1f8d00cda959fbe9e65e3a0e4af3710fbc3a24","sha256":"4a2a3e3bb18f4046a78fd131fddc30a26b37c78f0b85554f495b4b7631261d42","sha512":"6860b2d24a49bebfda4e8565d06fc5230bb62e4c8a0b25778f0959bb2e4346e307b6910d6aa29910c3d4dc97a0cd038ff2dd6ac06942d806165116f9594dd01e","ssdeep":"","tlshash":"d9f0054327b4b550ebba2eb829e9ec1968027dceb1d048c635c400e76711795035c189","first_seen":"2024-09-15T07:59:35Z","last_seen":"2024-09-19T20:29:50.61604Z","times_seen":16288,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:05.515140942Z","timestamp":1726452545515,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"658FA4C02B7173A1EDD360B308D5A7C4B2E368C43A45BA39463A13776A20628C\"\r\nLast-Modified: Sun, 15 Sep 2024 02:33:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7596\r\nExpires: Mon, 16 Sep 2024 04:15:41 GMT\r\nDate: Mon, 16 Sep 2024 02:09:05 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"14f167e71d8f49f0b7b3456f7e0d1139","sha1":"c71676c9b8d66326a877780f7ef66512f362f623","sha256":"658fa4c02b7173a1edd360b308d5a7c4b2e368c43a45ba39463a13776a20628c","sha512":"b466cbc05ca4bb509bd2fd180533b7068ce3b96e5a40e710b9292f4e7094e479e2e246016ae55dce8a9318a6cbb0d00320e849bdb8143aa3c022505373a3f367","ssdeep":"","tlshash":"53f0055356b27f24d33629009c5999653c11d8d93514e4f97d90c3d2e4207f8edcc10d","first_seen":"2024-09-15T08:04:40Z","last_seen":"2024-09-19T20:29:46.624671Z","times_seen":11703,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/images/main_logo_inverted.png","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.253Z","timestamp":1726452546253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/images/main_logo_inverted.png HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 7137\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-1be1\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7137,"size_decoded":7137,"mime_type":"image/png","magic":"PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced","md5":"5d15526be10b904a6b48d1af04a10cc3","sha1":"c09b6874359ac6d71db95593618a9acb55baa984","sha256":"894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018","sha512":"a54311ad6980495f4f4084489b5e78ceed681f810c75c33dcf062ad2cbe9d78758e4dc45d8a69eec3d1e3d6ba555f205c217900f01a228a4fb51d299133d6aa5","ssdeep":"192:JS0tKg9E05T7QszTovb+0BPQF0NHdvo6nD4F:3XE05paTPusHtouD4F","tlshash":"f8e19d5b04316098f7dea8818fcd7417af68d16dc8933578c0d0a4ef8479d29a7b9497","first_seen":"2023-04-07T01:23:06Z","last_seen":"2026-06-07T20:21:05.745453Z","times_seen":8198,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/images/loading_small.gif","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.297Z","timestamp":1726452546297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/images/loading_small.gif HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 184355\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-2d023\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":184355,"size_decoded":184355,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"b0dd5b3af9c4c0644d7bddee83716209","sha1":"30002468d0266b893b3559b8d0d260c6cbf0ad7c","sha256":"2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d","sha512":"30b979509dab0ca3482c9d04909d7465ec88d94e0da8b1315554e593307d44f69d06343962ea7ece20ca5cd85515689d92e31702a0e5904a97e5137425da54f0","ssdeep":"3072:UqFI6Jsdc/zx61e5900tjC5erRJK5H7F6/8ULb6xU/6q214ycwuKQUKn2FA:TtJsdcbx6c5EerRU9J6kUncgH2QAFA","tlshash":"4604df6fa009936a053d62f130f31f463b7d99f295c1c51799aebf9e3c1078e2085aa7","first_seen":"2023-04-07T18:32:22Z","last_seen":"2025-04-01T17:36:27.429361Z","times_seen":2486,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:06.479676897Z","timestamp":1726452546479,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Mon, 16 Sep 2024 02:09:06 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"436d532eb3b6b4996a3b62d955e4bc76","sha1":"800eef5f1c2623f1f1d6566226e4b1f79a8f8ba8","sha256":"1bbe286d61a3373acf9ca2b61de62e38bf582499d608620974ee56c76490b3da","sha512":"50a3db2776fa8af155f62c854674ddaef719679418cfe55b9a420ce4a4c58379c30846e212d1847f5137ed43a120fc0b68044fc992d29b1b263bbe0917749d15","ssdeep":"","tlshash":"faf0dc5462b230d9eb6714a8369df2be2414e68e1c9c6ce8313944c14adbeaf8608b94","first_seen":"2024-09-15T18:16:15Z","last_seen":"2024-09-19T20:25:15.076383Z","times_seen":366,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-108868042-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.349Z","timestamp":1726452546349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 06:33:44 GMT","end":"Mon, 04 Nov 2024 06:33:43 GMT"},"fingerprint":{"sha1":"E1:54:98:CD:9D:7A:BD:80:E1:F7:F7:9E:4A:C0:BA:A2:F1:F0:5D:C0","sha256":"D9:7F:C1:13:60:97:4C:0E:E8:13:33:47:E8:6A:D1:A9:AC:A6:74:2C:CC:32:04:39:FD:B2:3E:A1:5B:E1:16:51"}}},"request":{"raw":"GET /gtag/js?id=UA-108868042-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\nexpires: Mon, 16 Sep 2024 02:09:06 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 16 Sep 2024 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 77625\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77625,"size_decoded":216108,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4179)","md5":"d2417cdcf70c320b5602d9a266997b80","sha1":"201c54aea776d3d631df722ef0a079d298fb1941","sha256":"497cdcf65dd16bb7f94609585025c8d93ea9804ca6024a8d491d23cce58c844a","sha512":"cb0aa652749095a3f838b27d7e0c90f198cd2051f71aa6c91b635cffc9daf22e85bbbfa375235e3baa8aec4153294f2f04b051722804ebd9513db7292521162a","ssdeep":"3072:yWL9pYF+p1FOgRKtL603uUh/COE9v1bfGh9O1tRgk0seA5ugd:9o+p1FN0igD6Rgk0seA5uw","tlshash":"f82419c8b3d6b42683a36474507f014bb13a6de2f80cd894f185d5d82e74aaa427bf7d","first_seen":"2024-09-19T20:20:48.423601Z","last_seen":"2024-09-19T20:20:48.423601Z","times_seen":1,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":141,"dns":0,"connect":21,"send":0,"wait":37,"receive":42,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:06.634892803Z","timestamp":1726452546634,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Mon, 16 Sep 2024 02:09:06 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"436d532eb3b6b4996a3b62d955e4bc76","sha1":"800eef5f1c2623f1f1d6566226e4b1f79a8f8ba8","sha256":"1bbe286d61a3373acf9ca2b61de62e38bf582499d608620974ee56c76490b3da","sha512":"50a3db2776fa8af155f62c854674ddaef719679418cfe55b9a420ce4a4c58379c30846e212d1847f5137ed43a120fc0b68044fc992d29b1b263bbe0917749d15","ssdeep":"","tlshash":"faf0dc5462b230d9eb6714a8369df2be2414e68e1c9c6ce8313944c14adbeaf8608b94","first_seen":"2024-09-15T18:16:15Z","last_seen":"2024-09-19T20:25:15.076383Z","times_seen":366,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-process.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.243Z","timestamp":1726452546243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload-process.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-14b6\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1536,"size_decoded":5302,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8f27159561d43ede851b9b84f63cd727","sha1":"c4672cc17326d35d092741dad007ee72b2c13095","sha256":"f6626568ee243b737cdfc12efc464eb97d786bdcce590a0326427e11f360293f","sha512":"63dc471e42c751f05753b4e182fa9fa3a6c17154de71e8cfa5725d87371fa6761a6237adf4113068c107a8457bde35fae6a3d8e95872f0012e9dc06d003adb5e","ssdeep":"48:mvMZsCDY/dHZC8hiXjuFI7v06svN9/IkQIQxqb8ZMqCDLARk1al8lc5MQOFqK4Ms:v7YjtQ8aIb81Cn0QXlVgt","tlshash":"76b1dd0bb51e113246db3ae1a7be414b7aa8f22d0332c5343d6cd7c64f5446692d2aef","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.079519Z","times_seen":2746,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.458Z","timestamp":1726452546458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/isotope/isotope-style.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-af3\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2010,"size_decoded":2803,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"17ab9c0627529d1e053dfc75ab26a6cc","sha1":"f98cc6e4fa314b65f9a242b004e7a4736cd061c7","sha256":"31ca2164134c089fcedd15176160feea7b4369b404e9c8fd7b410292b9233550","sha512":"646b5ef4930a6d7e1acfd724cc15888ec63ae6e1a12f60f1ef6cd5d0b61a8decaae7e14d4e08815b059cc922ba790a013a9f59d9c61606a2304a83e3eaa7437b","ssdeep":"","tlshash":"ae51baec63077c4a4223ab5a63f30554da3cc0f1bf27606c7349aa1655639087da3be6","first_seen":"2023-04-07T07:10:08Z","last_seen":"2026-05-30T07:34:31.454878Z","times_seen":488,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/bXBQT09CTzM8cjtCaRwBBkkmGAgoNTUYHQ4pN3p7DxxpJQ4DF3Y7JglNZ3l+XEhmaT8EFG1+aR4EMTs6Hk1haSYDFj9yaRtNYWF8WV5jeWFZViVyfksEIC4oUEF2PzsZHG1+eF9GZHp9WERmeXtU","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.659Z","timestamp":1726452546659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"GET /bXBQT09CTzM8cjtCaRwBBkkmGAgoNTUYHQ4pN3p7DxxpJQ4DF3Y7JglNZ3l+XEhmaT8EFG1+aR4EMTs6Hk1haSYDFj9yaRtNYWF8WV5jeWFZViVyfksEIC4oUEF2PzsZHG1+eF9GZHp9WERmeXtU HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ouuo5ika%2BWnKYjFOr2XQ5zaSjnLdzCn0qZwC0CsNQYoy4j27byt8tuJxAjdDn95jv6dBBJjw7uiER2Pgsz4%2Fa9j%2BL5Na%2FjF2A%2BT1ubtYNPcPJP7MvkANURI%2FFpinLvNgSi9%2BTV61BA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d5000eb391c12-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":48,"dns":4,"connect":2,"send":0,"wait":130,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.451Z","timestamp":1726452546451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-ce4b\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7641,"size_decoded":52811,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"ed12cc46f06e67ca636a1ad8a717a7fd","sha1":"570b3588ff8e186929233b93a6ecb0d7a76adbcb","sha256":"aed2be655d20468968674662b26c808a995b7288e82168ada025531738e766ba","sha512":"bc83d976ebcf0f5cfa86d51791cd82773e65ae7b065c948a0689e0fe58e216d6ef119bd3cdc83f1fff8c03504cbb8d84df68c8667dce1efff555d24221790b2a","ssdeep":"768:zdyu2R25Azpk2nv78KKK4+tF/W0LcIwhf9TY5a/AK6zOZiAuuuU+xvNmrDJ4jQg8:B2R2yU+gJfzrDJgJ1E","tlshash":"bf33e868dd559c86b343ba5873b25fe06f2902669e07856cf073396cc38d9ac2d723d2","first_seen":"2023-04-05T23:50:12Z","last_seen":"2025-03-02T00:32:27.073898Z","times_seen":383,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/colors/flow.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.218Z","timestamp":1726452546218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/colors/flow.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-a83\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33093,"size_decoded":2691,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b0043a6c7a7969f6d9d76e9684005150","sha1":"38c6010b1a1110baf5efb78b05d4b99784aa2836","sha256":"91e4749e45a517ca4168cf9573eef0ee72fa93a9b7b96892844e9935afc832af","sha512":"8800742c5787053b695845e3ab5200f6aeb85b25ee7978ef0d2f1ef02f9f1935b88a4e598a4e94178c7ab93e82d582a768cfe387521d67462eabae1d13105ff4","ssdeep":"","tlshash":"9d51b199e74a0e8eb31b9b2936b5c5509b6931f5cc2c7f3cb1b5916a133d4643e3a880","first_seen":"2023-04-05T18:40:54Z","last_seen":"2025-03-01T07:52:06.641948Z","times_seen":612,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.453Z","timestamp":1726452546453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1cc1b\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":121580,"size_decoded":117787,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (540), with CRLF line terminators","md5":"26bfa8a47d74b90e1fc4632710026e85","sha1":"2993c7f968fb5e5be8d256d5c7271fe64c87326d","sha256":"69c6352bd7a8de550563a81b40dab2234fa30ff0ae9e90a8b5c896dea033ca3b","sha512":"1d05f55e9a55614ee20b74aa2bbe46bc549e8bb0c47402c2cdcb134fd6bf5c83b80dfe972c557fcad505abb412bce90374edb19ce7410411da515b79c689c9ab","ssdeep":"768:Z6L37fA1CW077ENcJ07WJF0JewI/JfMVJADjEzJbrxtXFepJFvM+vITxIgc/mUL7:ZJLE49rxneSUQmL","tlshash":"53b34074aa1031cd2353efd9b7b0ce435f0d62f0ee1e4d7ef156299c434b8492a62a96","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-01T17:36:27.447991Z","times_seen":2453,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-09-16T02:09:05.589Z","timestamp":1726452545589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: filehosting=jp2qt94kiivveerija0k7ehmt6; expires=Tue, 17-Sep-2024 02:09:05 GMT; Max-Age=86400; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":291415,"size_decoded":924971,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59102), with CRLF, LF line terminators","md5":"30af9f6491a938fa5f40106d74b0aa66","sha1":"8a813f7070a5f8cd52911aacb7c371777b5e6f0e","sha256":"f55ed7f0c3385b219da58a999dfc92935c22f54320a377365a5cf03a5e161be8","sha512":"353aa89d6a8934f85b9fc16a880cb6147f3fe4bb032761c0b9e94753ecd02f877c2596b9883053de5b4b3163aa1b60b303a38bebd0011bf8aa152ed37e579c10","ssdeep":"24576:0BmFHBlf5e33nVqJsGud28Thz7lW8BZFHBlf5ex0:E3nV8sGud28Thz7Q8Bo0","tlshash":"e615a29876d0f81b17de4b63ba1baff9e47a446b6894204be318f98c19f8107c1b5d70","first_seen":"2024-09-19T20:20:48.429456Z","last_seen":"2024-09-19T20:20:48.429456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":182,"dns":1,"connect":40,"send":0,"wait":83,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery-ui.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.226Z","timestamp":1726452546226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery-ui.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-6a684\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140501,"size_decoded":435844,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"ec9758d9508e2fd22ddbdc6d5a28f214","sha1":"0ed7df6cc32be8f9687cda3cd6e109e5de44339e","sha256":"ba0103f765802f299bc7dca5c35d9a00359a0abb10cac136f43caf9c0bf98b7c","sha512":"eb1c05921adc80474acf15d80c04344236031d6de5f05a36c0d03663fba22da3ae31cf07bba7f3b048d3ca9154d3e995202378ce8defb83a294a2ad3f06d6ad4","ssdeep":"6144:HH8aL8lYTUdtP5u5R5x56BHHWi/Jn3qnj9Pj3iEXPW6l/plqEp4lH8aciVAbsuBD:PTStP5u5R5x56Bnj/Jn3Ej9Pjg5y","tlshash":"2994a689f39c266a867a325d5c2e02cd723c8076d601587fbc5d59dc29d883c42bbfb9","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T08:08:15.847267Z","times_seen":6708,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.298Z","timestamp":1726452546298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-71b6\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7956,"size_decoded":29110,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28941)","md5":"ba847811448ef90d98d272aeccef2a95","sha1":"5814e91bb6276f4de8b7951c965f2f190a03978d","sha256":"898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1","sha512":"bced99d9331614757643273441a2b8921103382949ab0e510f386c453ec2a2359da39680d8a169e6bcbe7531844eaf5f598560f0d133d3fa3a9f6c7502b148df","ssdeep":"768:jryxMjJYkskKzykVtCb+9C8agZMdyKHfivbOCtFKH:3HbjZC7w","tlshash":"f1d26506b2303161079fb2f5515f020b733a6a7ee906907c38b99ae63d79c587167f39","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-08T00:16:26.826122Z","times_seen":28433,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.dataTables.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.228Z","timestamp":1726452546228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-10fe4\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40856,"size_decoded":69604,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"737f853e9fd6a31d62f5028e88663c9f","sha1":"cf144f2ab49f53a69fbfe10d3588fc23437d2736","sha256":"6c3ca64b7acfdd29b3ca6f1b9b46696369abd462d4546182085c347f72211841","sha512":"c148b09fba278ea4a75f57817a8be87abd06f9a6d9a46a23619a32a4bcd4ca4ac89e73d969ecd359bfb2b6b09c7a25e6f5bec05b9435928f585847c47026d91c","ssdeep":"1536:9Wbx6yktBJR6wIsJLl8Td/7oHfCkYQJtpG3:EOMoa","tlshash":"7763ea1923043e2ecbef70d401af8e5e647069719a895070a169f8be2d76d7910fee7c","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.108258Z","times_seen":5643,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/custom.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.215Z","timestamp":1726452546215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/custom.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-3577\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8587,"size_decoded":13687,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"5c6cc304ddf594371c91e46020c2dec5","sha1":"5b8d133530fe6092bcd642ab20c028dd869ab45d","sha256":"cb11ef787fc18b87a0420239ee788379f6218b79ac81fa012ecad676ae1cb144","sha512":"4d6b4e8acd2d7021c71795625d3ee959d60f2c2efd306ba409173f1794de7114dd18dae13548f58490eea503db6427257092a46e6daecaaaa6ee2811636e5374","ssdeep":"192:jsV+0jAhhOkWmwaTd5AiSaguxULj/9ptuIVRE0/6Hqsw9MsDlqgPRXag:jsV1pF14gj/XXlPRXag","tlshash":"ca5263ace643915763339968b7722695ee1400234f078d7c3aecb2448ff55bd2222edd","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-01T17:36:27.449328Z","times_seen":2453,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.305Z","timestamp":1726452546305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-303b2\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40448,"size_decoded":197554,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (464), with CRLF line terminators","md5":"35045d45f7d1dde1f90457c5d73700c5","sha1":"a7fcee0ab1da615e828e51967c474ae91d768569","sha256":"d72616e59f2ba832c54a0e734cdf0a79cb8730f81a07b5de43864c15a240e221","sha512":"6845d70397a4fb6d9a75c0d6f066270b91566f134cfdf2fcd44d1c9a598592a00581f1a8dccbc7147c53aa7f5da397b8a16d716ae4e88e805fecdddd52b46d8c","ssdeep":"3072:7hXjjqv/V7QCpOgV7TOwSV7T/reUo+oPXaGZ6ZgsvOqnG3csrj/SZA4:xjjqnV7ggV7DSV7/e0nG3cs3aH","tlshash":"dc14d6c8774f2c2f8aa7330b697d18ccd03cd576811251b6b6e6f46967cc448a3a6adc","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-30T07:34:31.47125Z","times_seen":2665,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/fonts.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.450Z","timestamp":1726452546450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/fonts.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-690\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":782,"size_decoded":1680,"mime_type":"text/css","magic":"ASCII text","md5":"fddcefaab6f97068221e3a5a903c049c","sha1":"251044c138ad554f9a8d4ee8de0422fc7f02851f","sha256":"61a41176d3175622252d5c00b2bab632e4b35d8828380dc4c72dd5efe3a53d73","sha512":"eeb74e8490c69369f300465e84993cf88f2e4fc0ace091649890362eebe7e9c2618e8847c64256e22184a807a4767ecae525bfca537e3e984c5969b67502e44d","ssdeep":"","tlshash":"f831ad1017daa605dd622eee735f3e14ae281525300fc52b1b7d1c78bdb6d2e028175e","first_seen":"2023-04-07T02:50:38Z","last_seen":"2026-05-30T07:34:31.462097Z","times_seen":436,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:07.515827073Z","timestamp":1726452547515,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"62DF584FFD1997155CA14C4776A12CB16EB5C75E6E8E231D61D70FABB4B6704B\"\r\nLast-Modified: Sun, 15 Sep 2024 04:05:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=180\r\nExpires: Mon, 16 Sep 2024 02:12:07 GMT\r\nDate: Mon, 16 Sep 2024 02:09:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"7f4e355ea92a51788d0f70172639b0e1","sha1":"8e14caf6726be67d5bedf9f7ac5c0a1f7cb14e2f","sha256":"62df584ffd1997155ca14c4776a12cb16eb5c75e6e8e231d61d70fabb4b6704b","sha512":"051ee5a6c59cd482703a035da117a0ba532a84cc9bc77d8f97585fc7498f4b53df159410d5a1b2354a12cc4a67874aff5615bea93ce3c5206cdcf8763fdd4805","ssdeep":"","tlshash":"76f00ed42486fca8966a1c928dfad77b2c348ef9308956e2e54846e424017ade09884c","first_seen":"2024-09-15T12:46:49Z","last_seen":"2024-09-19T20:27:56.457435Z","times_seen":12,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/popunder.gif","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:07.522Z","timestamp":1726452547522,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"GET /popunder.gif HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 58\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=604800, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 28977\r\nlast-modified: Sun, 15 Sep 2024 18:06:10 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZVKNKSJ9THa1Rwo9t8vegu0QdSRFacjDM7ZIETkiKGAKJax%2BpxjVE0lHpcCpwmLUIBEurqaFbVoDymvJJKinIPYomBQVR3M0ebi1sYjEpqlLKtK4qEROKCIpIEVuKgfXoZrZniSZeg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c3d5005e83eb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":58,"size_decoded":35,"mime_type":"","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-06-08T01:43:41.233909Z","times_seen":48889,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:07.516Z","timestamp":1726452547516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 06:33:44 GMT","end":"Mon, 04 Nov 2024 06:33:43 GMT"},"fingerprint":{"sha1":"E1:54:98:CD:9D:7A:BD:80:E1:F7:F7:9E:4A:C0:BA:A2:F1:F0:5D:C0","sha256":"D9:7F:C1:13:60:97:4C:0E:E8:13:33:47:E8:6A:D1:A9:AC:A6:74:2C:CC:32:04:39:FD:B2:3E:A1:5B:E1:16:51"}}},"request":{"raw":"GET /gtag/js?id=G-Z9TE2LW16Q\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 16 Sep 2024 02:09:07 GMT\r\nexpires: Mon, 16 Sep 2024 02:09:07 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 93304\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93304,"size_decoded":265808,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5945)","md5":"45ba0abcc464a9239b0a51561d758f82","sha1":"7cb9604d64c1d567b953f4c3241735ba33832bc6","sha256":"bbe693217a47754dba17ec49a605ee891e0f3cdbd8b1db589af459277b914d82","sha512":"1b34151827d55eff524da316bd9ace26ac3eb18a2bd9ad86f04ba36f63187ac2a395567d4accef86aac794aa44f78e4e30ca1ec0b5fdf73f7b39625f32e5ed46","ssdeep":"6144:MS/o+p1FNnl0xgHvHRgk0seAEXli4XuR9Ln:FwU1FNl0xU/R9z","tlshash":"744429cd73c674664297b47840bf018ba57b68e2f84cc894f189c8e42e74a9a4277f7d","first_seen":"2024-09-19T20:20:48.434455Z","last_seen":"2024-09-19T20:20:48.434455Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:07.644667369Z","timestamp":1726452547644,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"0AD9533C4127402E2A1A5C69348BFB80EFAE59D86421D999FCDA931F78678CB9\"\r\nLast-Modified: Sun, 15 Sep 2024 02:39:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5489\r\nExpires: Mon, 16 Sep 2024 03:40:36 GMT\r\nDate: Mon, 16 Sep 2024 02:09:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ae91f2ff66efda1c5b7d5345fc206806","sha1":"2ec2fd30ee0750d33032435e0eaefd1689e4c4b1","sha256":"0ad9533c4127402e2a1a5c69348bfb80efae59d86421d999fcda931f78678cb9","sha512":"ac5d3197c3f91e0b7b9d41334697d82e551b0aa9a2da390ad865c5205e508655c00f1ed547525bf1551927bbc30668dbc2817a9390f6876556ee4c7712400703","ssdeep":"","tlshash":"ebf00e76393074909b283c3289d9e8332e68a8fe288062e761a04ad9b9113f84084348","first_seen":"2024-09-15T08:02:12Z","last_seen":"2024-09-19T20:29:48.356185Z","times_seen":17840,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:07.661033661Z","timestamp":1726452547661,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"0AD9533C4127402E2A1A5C69348BFB80EFAE59D86421D999FCDA931F78678CB9\"\r\nLast-Modified: Sun, 15 Sep 2024 02:39:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5489\r\nExpires: Mon, 16 Sep 2024 03:40:36 GMT\r\nDate: Mon, 16 Sep 2024 02:09:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ae91f2ff66efda1c5b7d5345fc206806","sha1":"2ec2fd30ee0750d33032435e0eaefd1689e4c4b1","sha256":"0ad9533c4127402e2a1a5c69348bfb80efae59d86421d999fcda931f78678cb9","sha512":"ac5d3197c3f91e0b7b9d41334697d82e551b0aa9a2da390ad865c5205e508655c00f1ed547525bf1551927bbc30668dbc2817a9390f6876556ee4c7712400703","ssdeep":"","tlshash":"ebf00e76393074909b283c3289d9e8332e68a8fe288062e761a04ad9b9113f84084348","first_seen":"2024-09-15T08:02:12Z","last_seen":"2024-09-19T20:29:48.356185Z","times_seen":17840,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:07.664011406Z","timestamp":1726452547664,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"0AD9533C4127402E2A1A5C69348BFB80EFAE59D86421D999FCDA931F78678CB9\"\r\nLast-Modified: Sun, 15 Sep 2024 02:39:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5489\r\nExpires: Mon, 16 Sep 2024 03:40:36 GMT\r\nDate: Mon, 16 Sep 2024 02:09:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ae91f2ff66efda1c5b7d5345fc206806","sha1":"2ec2fd30ee0750d33032435e0eaefd1689e4c4b1","sha256":"0ad9533c4127402e2a1a5c69348bfb80efae59d86421d999fcda931f78678cb9","sha512":"ac5d3197c3f91e0b7b9d41334697d82e551b0aa9a2da390ad865c5205e508655c00f1ed547525bf1551927bbc30668dbc2817a9390f6876556ee4c7712400703","ssdeep":"","tlshash":"ebf00e76393074909b283c3289d9e8332e68a8fe288062e761a04ad9b9113f84084348","first_seen":"2024-09-15T08:02:12Z","last_seen":"2024-09-19T20:29:48.356185Z","times_seen":17840,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:07.668428928Z","timestamp":1726452547668,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"0AD9533C4127402E2A1A5C69348BFB80EFAE59D86421D999FCDA931F78678CB9\"\r\nLast-Modified: Sun, 15 Sep 2024 02:39:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5489\r\nExpires: Mon, 16 Sep 2024 03:40:36 GMT\r\nDate: Mon, 16 Sep 2024 02:09:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ae91f2ff66efda1c5b7d5345fc206806","sha1":"2ec2fd30ee0750d33032435e0eaefd1689e4c4b1","sha256":"0ad9533c4127402e2a1a5c69348bfb80efae59d86421d999fcda931f78678cb9","sha512":"ac5d3197c3f91e0b7b9d41334697d82e551b0aa9a2da390ad865c5205e508655c00f1ed547525bf1551927bbc30668dbc2817a9390f6876556ee4c7712400703","ssdeep":"","tlshash":"ebf00e76393074909b283c3289d9e8332e68a8fe288062e761a04ad9b9113f84084348","first_seen":"2024-09-15T08:02:12Z","last_seen":"2024-09-19T20:29:48.356185Z","times_seen":17840,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:07.672088369Z","timestamp":1726452547672,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"0AD9533C4127402E2A1A5C69348BFB80EFAE59D86421D999FCDA931F78678CB9\"\r\nLast-Modified: Sun, 15 Sep 2024 02:39:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5496\r\nExpires: Mon, 16 Sep 2024 03:40:43 GMT\r\nDate: Mon, 16 Sep 2024 02:09:07 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ae91f2ff66efda1c5b7d5345fc206806","sha1":"2ec2fd30ee0750d33032435e0eaefd1689e4c4b1","sha256":"0ad9533c4127402e2a1a5c69348bfb80efae59d86421d999fcda931f78678cb9","sha512":"ac5d3197c3f91e0b7b9d41334697d82e551b0aa9a2da390ad865c5205e508655c00f1ed547525bf1551927bbc30668dbc2817a9390f6876556ee4c7712400703","ssdeep":"","tlshash":"ebf00e76393074909b283c3289d9e8332e68a8fe288062e761a04ad9b9113f84084348","first_seen":"2024-09-15T08:02:12Z","last_seen":"2024-09-19T20:29:48.356185Z","times_seen":17840,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.300Z","timestamp":1726452546300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-5c6\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5014,"size_decoded":1478,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1285)","md5":"c2474adb496ade0e96aa9400a3974307","sha1":"9ab48147ecad83275d147a61dea8df8a968e5a0e","sha256":"fa77538239ff2758ff9fa8ef646cad3e9ca818dd13fbf15ff3ca8a8bee173c69","sha512":"06206b23a91b29c1cd11541ae21c8a4562066fc197cdc3ff3f9e0cdb693697dd9f6fd2a8c533d2c05a494eb268820e701107d3e0302a9e8a55a4e0e9cd6e878b","ssdeep":"","tlshash":"7e3112aa34db3e6647f7712f7a1fb2462121943b16829082d9eade3c3df2c417813e14","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T14:46:31.469334Z","times_seen":4016,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.301Z","timestamp":1726452546301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-14cc1\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37900,"size_decoded":85185,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23470)","md5":"04426bc66c09c8881b5b329310e903e9","sha1":"ff7f2f64ed5938023a91050e27f22f77becba78c","sha256":"ebf4e570b96d611fa540bb8745ba518a1005d50c4589a2c2cf3a60a97151a184","sha512":"9c87ee7ad099489801e0d6f8b241b7b6e77a7acd612cc5102716fe80e22a70f12181f927bd75c1bf145256de3eb56165878b28a2b45665231cb0b1848121275f","ssdeep":"1536:ItIeDCPRC0ebI00ZH1sWwTSww1fZbls9prC8BfTGnKDFtWm88:IWEIC9I0gH1s5TSww1pm9p2CtWY","tlshash":"778319ce7261702006e720e6553f0a47b237a999b40d456cf258c9ce3d7c98a62bff76","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-06-07T09:11:58.689117Z","times_seen":3106,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.307Z","timestamp":1726452546307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-981\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1247,"size_decoded":2433,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2241), with CRLF line terminators","md5":"1e4ba2a9c6f022f7c920cd2e76d95bd4","sha1":"f15cbf023a4a1e1c810eff679cc9b35b81a6f2c2","sha256":"afff7cdd8f6f0ca43b26573840f5ec5d3302dc1fc2b2209a1163e3978c9d012c","sha512":"972050054ab1c3c8f4e6ea8edeb48800fc6a9f90cd736b35fbba35bd9a42856a55be6c539a4dde51cb9a97efa5a156009af8fc57263dfb34e27b92de601c73b2","ssdeep":"","tlshash":"a55197947159310443d6b89a31ab6709ba7c69e7b01b6e506008c8d9ad38777053bfbd","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T23:48:45.394655Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-ui.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.247Z","timestamp":1726452546247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-61ef\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13854,"size_decoded":25071,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6d74ec0b03e02825fef8093d64629489","sha1":"de746f1c7aeb0927541e1d55bdea4672bb47aa73","sha256":"5d4a5378ed9f8bf68dbfb6246761e6d44e2b11fa626d8b4f8d1d6a779f037cd2","sha512":"a61efb4485d6107a74edf5dd6f3cf66d3e7cdb2c7469a3e5fddb3a1005133fbe7b2d4cbc15eabf7cd10e25bf9a344287530701d712bafccbdbade6d114b2ae42","ssdeep":"192:jherScJi1x5JyGKvJKmaAiWCfK4hsaMCSC/N2aoItnEiu7x8MKWpKuTKErCmE+N9:Naqb2aLhsapa5iTDwwYwpGJ","tlshash":"02b2ff0d7aa7a114826770bedbaf540a3225e42f190acd193c5c53c4df9493ca2f6bf9","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.093239Z","times_seen":2738,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getrunkhomuto.info/multi?cs=ZVg2VmRUaAVkUlVqA2FTUWEBYVE\u0026abt=0\u0026red=1\u0026sm=76\u0026k=download%20file%20code%20postal%20night%20folder\u0026v=1.0.60.4\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=876318\u0026rxy=1280_1024\u0026u=1835761539964257\u0026agec=1726452546\u0026fs=1\u0026mbkb=173.01038062283737\u0026ref=https%3A%2F%2Fmegaup.net%2F35a4ff91401f11c6996f859b7341abef%2FCode_Postal_night_folder_161.rar\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_8nPK=1726452547541\u0026crc=1","fqdn":"getrunkhomuto.info","domain":"getrunkhomuto.info","tld":"info"},"ip":{"addr":"143.204.55.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:07.572Z","timestamp":1726452547572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getrunkhomuto.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 01 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E","sha256":"E0:2E:8E:E2:F4:4D:47:72:B3:70:D4:85:A4:D4:78:58:C5:6D:3D:49:C0:F7:FD:EE:97:88:D5:8D:1F:B6:8D:02"}}},"request":{"raw":"GET /multi?cs=ZVg2VmRUaAVkUlVqA2FTUWEBYVE\u0026abt=0\u0026red=1\u0026sm=76\u0026k=download%20file%20code%20postal%20night%20folder\u0026v=1.0.60.4\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=876318\u0026rxy=1280_1024\u0026u=1835761539964257\u0026agec=1726452546\u0026fs=1\u0026mbkb=173.01038062283737\u0026ref=https%3A%2F%2Fmegaup.net%2F35a4ff91401f11c6996f859b7341abef%2FCode_Postal_night_folder_161.rar\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_8nPK=1726452547541\u0026crc=1 HTTP/1.1\r\nHost: getrunkhomuto.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\ncontent-length: 1855\r\ndate: Mon, 16 Sep 2024 02:09:07 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=46785386-ea56-4e3c-ad17-1a426e6dcccf\ncsu=1835761539964257\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: fydrbbcvvUWOj4j9wgaLFY5pumRZlarYi9Y-J4AGUcynxQTYqiZ-5w==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1855,"size_decoded":3783,"mime_type":"text/plain","magic":"ASCII text, with very long lines (3783), with no line terminators","md5":"6313133d13867cbddd9b32f1d385bb07","sha1":"f08caf6b5006714306969788e6b026ef9cca46ee","sha256":"73623ddd4bcf1123ecc69da61c3f8e8c6d6ea95e891cd0d6ebd4e013ac333628","sha512":"25fe6a6c0fda1fa605da550b1b6061e319f8f95560bd6d5d5051e143045cecc79d75994c69575e9c4092467a3242dd8761d36f387cbbf715ba95228a8d0101e5","ssdeep":"","tlshash":"70717389159b596f70e9e2219c399db7ac396f07125b5ecf8c2f32c35c9207436a0d22","first_seen":"2024-09-19T20:20:48.437344Z","last_seen":"2024-09-19T20:20:48.437344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":166,"dns":13,"connect":10,"send":0,"wait":119,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"d2w9cdu84xc4eq.cloudfront.net/FN1pBMjRUNS9UC0MzJQ8DAWtwCgIRKjNXUgo3JFVVQipvXFFDfCtBW1kqfFNbW2g4Ymx2NWdGTlNncRRYVjQmDxJSNCIPBRE7JVAJA3w1QltcZy1HR1gyKllQQjdnR1UKNy5IXVs2IBcGcW9vAhEFamlKBQZ/cnARBWotW1pCImQABE9id20CA39ycBEFaj-NEEQQbeAQaB3NkAARQPyJZWxJoBwAEBmpxAwQGf3MCUl4oJFRbT39zdA0BdHEUQQpr","fqdn":"d2w9cdu84xc4eq.cloudfront.net","domain":"d2w9cdu84xc4eq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.102","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:07.903067703Z","timestamp":1726452547903,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /FN1pBMjRUNS9UC0MzJQ8DAWtwCgIRKjNXUgo3JFVVQipvXFFDfCtBW1kqfFNbW2g4Ymx2NWdGTlNncRRYVjQmDxJSNCIPBRE7JVAJA3w1QltcZy1HR1gyKllQQjdnR1UKNy5IXVs2IBcGcW9vAhEFamlKBQZ/cnARBWotW1pCImQABE9id20CA39ycBEFaj-NEEQQbeAQaB3NkAARQPyJZWxJoBwAEBmpxAwQGf3MCUl4oJFRbT39zdA0BdHEUQQpr HTTP/1.1\r\nHost: d2w9cdu84xc4eq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onelpfulinother.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 620\r\ndate: Mon, 16 Sep 2024 02:09:07 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 1zL2qyTmlaHrgaTOFKQF9piELeJzdswpn__X3N2uJYHOHpcG4jf_7A==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":620,"size_decoded":849,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (849), with no line terminators","md5":"d14dd99c1b6ab47887fa4f737b4b1c6d","sha1":"04eac2e0421c88f4f7b4107320d3426ca0b25139","sha256":"e902105f011b7d80c34874000a27966f217f0504f6d8a6882d2282d403867356","sha512":"93ae16536f60dffab6bfcfbcb806a1176e9a0fa09f4061967db58095d6077bdc0fad35b022de64e0c2907c56ef4e864205846a23b3feba758b4f102905be8f01","ssdeep":"","tlshash":"900196b3bd909e604838b53905e4f08d530c83fbf4a49f3f48252541c58d79f8331120","first_seen":"2024-09-19T20:20:48.438707Z","last_seen":"2024-09-19T20:20:48.438707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"d2w9cdu84xc4eq.cloudfront.net/DcEZJVUwTKSczcwQvLWh7RnJ4YX1WNjswKk0rLDItBTZnOykEYCMmIx42dAMNPAQZZy9FNhESFVYyMzFxQGAlNCIXe28wIhN7eHMtFCR0YWoENiY+cRwzOjokGy0tICFWMyhoIR88IDkgEWN7E3ledmxnfFg+eGRpQwRsZ3wcLycgNFV0eS10Rhl/YWlDBG-xnfAIwbGYNSXBnZWVVdHkyKRMtJnB+NnR5ZHxAd3lkaUJ2Lzw+FSAmLWlCAHBjYkBgPGh9","fqdn":"d2w9cdu84xc4eq.cloudfront.net","domain":"d2w9cdu84xc4eq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.102","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:07.911368973Z","timestamp":1726452547911,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /DcEZJVUwTKSczcwQvLWh7RnJ4YX1WNjswKk0rLDItBTZnOykEYCMmIx42dAMNPAQZZy9FNhESFVYyMzFxQGAlNCIXe28wIhN7eHMtFCR0YWoENiY+cRwzOjokGy0tICFWMyhoIR88IDkgEWN7E3ledmxnfFg+eGRpQwRsZ3wcLycgNFV0eS10Rhl/YWlDBG-xnfAIwbGYNSXBnZWVVdHkyKRMtJnB+NnR5ZHxAd3lkaUJ2Lzw+FSAmLWlCAHBjYkBgPGh9 HTTP/1.1\r\nHost: d2w9cdu84xc4eq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onelpfulinother.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 602\r\ndate: Mon, 16 Sep 2024 02:09:07 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: li7Ds7I33WBP0K1vIlwSFAbxs_qRLJ4f_0QtVcximvNbb3iEFwGQ7A==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":602,"size_decoded":852,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (852), with no line terminators","md5":"255c96c8dd90b4abdf96bf98ef206247","sha1":"d4d3fbf4500735e9b1a11612630a8c943f46c839","sha256":"4de23db005f46c904d9ea46f0c3fe531df0ca07c24a1d0f8490c2f5c695f6e72","sha512":"b9798deebf67a00dfa76a4171581b6ab2bb02d039cb14ec2f367821b45ca35ec6b130d712eaf8ec2e92a2ff8342a6976affb2208c6e964989804efc2ecf2e59a","ssdeep":"","tlshash":"d20163f36da0d8a04a36f13e08fdf08d5308a3afbdd45b3b54393582554838e8320411","first_seen":"2024-09-19T20:20:48.439624Z","last_seen":"2024-09-19T20:20:48.439624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getrunkhomuto.info/floater?cs=WVM4SHhtag5xTG1gC31KYGEBek4\u0026abt=0\u0026red=1\u0026sm=83\u0026k=download%20file%20code%20postal%20night%20folder\u0026v=0.9.2.6\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=825911\u0026rxy=1280_1024\u0026u=1835761539964257\u0026agec=1726452546\u0026fs=1\u0026t=600\u0026m=2\u0026ns=1\u0026ndp=1\u0026asi=1\u0026mbkb=173.01038062283737\u0026ref=https%3A%2F%2Fmegaup.net%2F35a4ff91401f11c6996f859b7341abef%2FCode_Postal_night_folder_161.rar\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026aa=oi1_\u0026_wSXg=1726452547536\u0026crc=1","fqdn":"getrunkhomuto.info","domain":"getrunkhomuto.info","tld":"info"},"ip":{"addr":"143.204.55.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:07.569Z","timestamp":1726452547569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getrunkhomuto.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 01 Apr 2024 00:00:00 GMT","end":"Wed, 30 Apr 2025 23:59:59 GMT"},"fingerprint":{"sha1":"07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E","sha256":"E0:2E:8E:E2:F4:4D:47:72:B3:70:D4:85:A4:D4:78:58:C5:6D:3D:49:C0:F7:FD:EE:97:88:D5:8D:1F:B6:8D:02"}}},"request":{"raw":"GET /floater?cs=WVM4SHhtag5xTG1gC31KYGEBek4\u0026abt=0\u0026red=1\u0026sm=83\u0026k=download%20file%20code%20postal%20night%20folder\u0026v=0.9.2.6\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=825911\u0026rxy=1280_1024\u0026u=1835761539964257\u0026agec=1726452546\u0026fs=1\u0026t=600\u0026m=2\u0026ns=1\u0026ndp=1\u0026asi=1\u0026mbkb=173.01038062283737\u0026ref=https%3A%2F%2Fmegaup.net%2F35a4ff91401f11c6996f859b7341abef%2FCode_Postal_night_folder_161.rar\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026aa=oi1_\u0026_wSXg=1726452547536\u0026crc=1 HTTP/1.1\r\nHost: getrunkhomuto.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2186\r\ndate: Mon, 16 Sep 2024 02:09:07 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=3882a5c2-2b0e-43b4-8da3-18f0a696cf39\ncsu=1835761539964257\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: cwctydZ56lwOMjKfOYi1h43mB3plr8UTM76ZwEZemcpN9cHpvV78Gw==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2186,"size_decoded":3675,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (3675), with no line terminators","md5":"a11d42bf51fd68c4c8d630249ed83e89","sha1":"957a4040f37616c31ecf1c7124a379333f74c18e","sha256":"0184378a593d1b957c45506f8f26b4f967c1ac17350ad1890dc8c23fed840ad0","sha512":"064e58a79279873793bf627ceefd6a945efbe714398d06598ac2be74a5a9eb48d42f94f31097e37cbef7a448adf18054c913eac4c7f12a90bd01ef98ca844b4e","ssdeep":"","tlshash":"a1710a951044ee6254f2afc1c98f7fe4045964c18a4ba84cdcbe78247b4397e4689c1a","first_seen":"2024-09-19T20:20:48.441108Z","last_seen":"2024-09-19T20:20:48.441108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":183,"dns":18,"connect":15,"send":0,"wait":240,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:10.297Z","timestamp":1726452550297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:07 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31568\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7b50\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31568,"size_decoded":31568,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31568, version 1.1","md5":"e0c4ac0e73196bd0469c5c33304b7773","sha1":"bb071565f82907d117b0732dca8013409162c67d","sha256":"ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af","sha512":"850bd12cc28459f01f0d398edf8d58e834dd0ce890cf7bd9bd3c237f574847832c3b841f8bdbe063d302e95edf06d464a63dbc7f44c6312b165f858e8eacd984","ssdeep":"768:AbAx6BRjYvG7fvoufxOXPHxcBn+xVwcjhYMoK5r1M9Fq:Abs8R6G71xAP2Bn+nwcjaTirSFq","tlshash":"5ce2e1d85908d707c3567d385918eb9ca995fdc0cb126f9b52921258361cefc083a37e","first_seen":"2023-04-07T14:26:10Z","last_seen":"2026-05-30T07:34:31.464761Z","times_seen":2676,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.014Z","timestamp":1726452548014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 951\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-3b7\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":951,"size_decoded":951,"mime_type":"image/png","magic":"PNG image data, 114 x 114, 8-bit colormap, non-interlaced","md5":"76852bc6b2c028db97322a74e85bd020","sha1":"ed52fb4de0d51f93277bbaae42fa80ba5f92c31e","sha256":"8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884","sha512":"6c75f46be72c52a9e4eb3998ff3e93df48db13f2dff3c8dbfded4d86fbc5efdbe06ed023528202f7c93a9f8a5fdd918df0670f79634777ef2542ff6df04d5502","ssdeep":"","tlshash":"fa119496663a5c92c90ba7fec1e3e23c18a43f6a02ac04032c814a8f252405dc2c2897","first_seen":"2023-04-06T19:03:00Z","last_seen":"2025-04-01T17:36:27.421256Z","times_seen":2480,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:08.084940909Z","timestamp":1726452548084,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Mon, 16 Sep 2024 02:09:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"16d52a36230f9551296c1b03e6e403fc","sha1":"4e63f1df7f59e407eaa42faaead3b51f6e6347f7","sha256":"724048c8b674f981fa1cc46ded4640bf2105690a37d9d46970c7c94f57a7d228","sha512":"497f9cbd9168e367ea4712b0a9aab767278798768e1ada07aaf168ed623530089461841c999919f828441bfe7cdb9051dd582469ace8682c180f6ab4773eaa45","ssdeep":"","tlshash":"46f0d48c57b3a8468e7b5c0428fff7267470c55c4c182565502d63d22689326610cbad","first_seen":"2024-09-15T18:10:17Z","last_seen":"2024-09-19T20:25:12.053933Z","times_seen":93,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.222.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.007Z","timestamp":1726452548007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 07:19:44 GMT","end":"Mon, 04 Nov 2024 07:19:43 GMT"},"fingerprint":{"sha1":"FF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53","sha256":"85:F6:7D:45:E5:D6:9F:0F:F3:C7:0F:6C:6C:A5:E7:BC:7A:E5:4D:E2:48:3B:42:38:7A:81:EA:12:09:AF:A7:31"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:X66nG4DC16pjfr11GqpjhGnkwZsg7g:RE3E7LHjYZ_Xxkkh; Expires=Wed, 16-Sep-2026 02:09:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=ARpgrqc3yYFex6LQ6pXdOhNYkKGwKymX-hcruNd__huniJZFleoEYbOMkRISl6IE79iuICsRfi5A\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-B_f2sJ0EH2OuzmrXN4B8OA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":79,"dns":0,"connect":18,"send":0,"wait":26,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:08.117542948Z","timestamp":1726452548117,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Mon, 16 Sep 2024 02:09:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"16d52a36230f9551296c1b03e6e403fc","sha1":"4e63f1df7f59e407eaa42faaead3b51f6e6347f7","sha256":"724048c8b674f981fa1cc46ded4640bf2105690a37d9d46970c7c94f57a7d228","sha512":"497f9cbd9168e367ea4712b0a9aab767278798768e1ada07aaf168ed623530089461841c999919f828441bfe7cdb9051dd582469ace8682c180f6ab4773eaa45","ssdeep":"","tlshash":"46f0d48c57b3a8468e7b5c0428fff7267470c55c4c182565502d63d22689326610cbad","first_seen":"2024-09-15T18:10:17Z","last_seen":"2024-09-19T20:25:12.053933Z","times_seen":93,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.222.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.008Z","timestamp":1726452548008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 07:19:44 GMT","end":"Mon, 04 Nov 2024 07:19:43 GMT"},"fingerprint":{"sha1":"FF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53","sha256":"85:F6:7D:45:E5:D6:9F:0F:F3:C7:0F:6C:6C:A5:E7:BC:7A:E5:4D:E2:48:3B:42:38:7A:81:EA:12:09:AF:A7:31"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:6898rdnnyX-17DnorisAl_RQLnPnEg:EzA3FU4Nx5hjbnmp; Expires=Wed, 16-Sep-2026 02:09:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ARpgrqcSjMMZRgclB3Kc40z6MBmAynP_zDZ5cq5LaIArebkrPG3RoaYnG0gTVmURYm6iL1RNdjHy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-xVXbYnwBKbQp3KkOG8vB2Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":110,"dns":0,"connect":31,"send":0,"wait":22,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=ARpgrqc3yYFex6LQ6pXdOhNYkKGwKymX-hcruNd__huniJZFleoEYbOMkRISl6IE79iuICsRfi5A","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.222.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.119Z","timestamp":1726452548119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 07:19:44 GMT","end":"Mon, 04 Nov 2024 07:19:43 GMT"},"fingerprint":{"sha1":"FF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53","sha256":"85:F6:7D:45:E5:D6:9F:0F:F3:C7:0F:6C:6C:A5:E7:BC:7A:E5:4D:E2:48:3B:42:38:7A:81:EA:12:09:AF:A7:31"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=ARpgrqc3yYFex6LQ6pXdOhNYkKGwKymX-hcruNd__huniJZFleoEYbOMkRISl6IE79iuICsRfi5A HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:BAdE2xD66zsXS-CxzLF8xN6Q5MD9Dg:2a1dUPkYMqdrMM6S;Path=/;Expires=Wed, 16-Sep-2026 02:09:08 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqcrIQb_DYjQtCSHzXvZ8o_Jr0hNcAM0EpOiZkcdjDboC2pIHAmBHxVo_0J6QT0pC_l8jGQB\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1798228601%3A1726452548134391\u0026ddm=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: script-src 'nonce-b4fzsi_hT_xttABOvRVPMg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 421\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":421,"size_decoded":554,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (388)","md5":"bdc6bd5d2810526f3dc534132c91acc0","sha1":"4f87bc8b5a3078bf7c88c35e34e7b4c1c324ed72","sha256":"b253bf9d0faccb97a40dcbb4e625c562ed0c75d50ec51a2a979e0a9d6a21b0bb","sha512":"16b3977e883a338d159fcd543170a38d1120d2a5d51cb4b2319678babaecda611fc6765d38e1e8258e4393a14631190362bbf6c31b1f966848ecb8d70b865bef","ssdeep":"","tlshash":"9ff075ef8d8e10e9146324e4a024b1dc083438387dd7b4a8b1fa1b2506c0c1f30863f7","first_seen":"2024-09-19T20:20:48.443805Z","last_seen":"2024-09-19T20:20:48.443805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ARpgrqcSjMMZRgclB3Kc40z6MBmAynP_zDZ5cq5LaIArebkrPG3RoaYnG0gTVmURYm6iL1RNdjHy","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.222.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.145Z","timestamp":1726452548145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 07:19:44 GMT","end":"Mon, 04 Nov 2024 07:19:43 GMT"},"fingerprint":{"sha1":"FF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53","sha256":"85:F6:7D:45:E5:D6:9F:0F:F3:C7:0F:6C:6C:A5:E7:BC:7A:E5:4D:E2:48:3B:42:38:7A:81:EA:12:09:AF:A7:31"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ARpgrqcSjMMZRgclB3Kc40z6MBmAynP_zDZ5cq5LaIArebkrPG3RoaYnG0gTVmURYm6iL1RNdjHy HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:ydoIdGuM8X6km12Rvrg9J1uUpzlYVQ:a1zqTzC_EdiP3s6K;Path=/;Expires=Wed, 16-Sep-2026 02:09:08 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqeoJtBU5m4e0RU5bzwHuB4LWibpmz3oXjCP7Tts6ii6WEn2jIvGSEXdpOUuidgj4JrIP_ad\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1090944383%3A1726452548160829\u0026ddm=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-m3OwWHZv23xc8c8pXOyeVw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 421\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":421,"size_decoded":558,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (392)","md5":"de86a089d67a8631e1ac06cb0ca75888","sha1":"b5ee90718599302e97d261b1ea0fec20332e41d7","sha256":"bc07f5ae935e583776ff70bb5bbef8b7115bf5b99c41bb2e899be7ff2453e631","sha512":"6ecf04ab43948f03bfb3bb8c0fe01708deea07cbae7c7f51a84ee7efe46f83bb0a7e2404266d4af7eb1865fae619c5a01893d0e0f9ac53a629c0cfec214f5c3f","ssdeep":"","tlshash":"69f020db498a40e9446329f8a024b1dc187429ac3ee6697831f5a30509e982b20453b7","first_seen":"2024-09-19T20:20:48.445282Z","last_seen":"2024-09-19T20:20:48.445282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-16T02:09:08.204197591Z","timestamp":1726452548204,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Mon, 16 Sep 2024 02:09:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":471,"mime_type":"application/octet-stream","magic":"data","md5":"290b508241699251dea34dc491938da5","sha1":"a7cfd3f88e82e5c0f816353ea86cfb988ac358be","sha256":"ab91a90cfdde3e919557c1ed4836340ac1d70b3d29ddcb916698ae2d69030c35","sha512":"b54bff1a3d7a563b13e13bcdd3edcb01834f87baf6b51f7e1df8d76f0953dcaf3687dfe901618697999d30379115ed695a89667806eb18c72c6b5b43ddc0fb9b","ssdeep":"","tlshash":"26f0236821f48c436e675dd075dce97c3826391d411c592a30b77ae57d93ffd4518132","first_seen":"2024-09-15T18:08:12Z","last_seen":"2024-09-19T20:25:14.678243Z","times_seen":1101,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/NmZPdGEZWSwHXFMiCTYEXSgfNTl8KisfCnwFJDobZREnAzUFI2kACFJbeEJVB1J+UhFfAnJFR0USLgAURVt8RFEHQCYaB1lbf0RRB0A5SVAYVXtaUgBIe1IUC1d3R1QBUH5BUg9feUBTA1FpABFXAXJFR0YSOxhcB1F9QlUDVHpAWQVTfw","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.358Z","timestamp":1726452548358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"POST /NmZPdGEZWSwHXFMiCTYEXSgfNTl8KisfCnwFJDobZREnAzUFI2kACFJbeEJVB1J+UhFfAnJFR0USLgAURVt8RFEHQCYaB1lbf0RRB0A5SVAYVXtaUgBIe1IUC1d3R1QBUH5BUg9feUBTA1FpABFXAXJFR0YSOxhcB1F9QlUDVHpAWQVTfw HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RqH9vy2MG1TvUmikwfUll2q8ZidUPVc43bycXcCjig3fH1fVNGO8mlWkUiCK%2FjR4VjG4X597MjgRECbBcqxKjq8GH%2Fb4zhzQzJ6YRzfbV8DXyu%2FR8jY9CqZD%2B3YzU5HsOgeyE3Amaw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d500b39f7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:10.295Z","timestamp":1726452550295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31900\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7c9c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31900,"size_decoded":31900,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31900, version 1.1","md5":"1b285c8e5b7445a8e434b2cdf036bab2","sha1":"c97d4772fbb5c5637d466b5f991bc7ec28830b32","sha256":"09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825","sha512":"ae6596215b6708cbf90265c55c799a895e506bdef539c7cd71b19a6679c0b6ac43f9da0011850912e4a559fa7b54e4cc0518bec9db524e2c8914f06a86c1b470","ssdeep":"768:OKbIXZML2+rggwHCFj7lDaTRyMQsVPHDajmk:OMYDnElDInQ6Pejmk","tlshash":"09e2f15a3962c9ebd41c62b3d471c3f536e4c022469a3a91fdc3b45caa4572d14fb362","first_seen":"2023-04-07T18:32:22Z","last_seen":"2026-05-30T07:34:31.479841Z","times_seen":2673,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqcrIQb_DYjQtCSHzXvZ8o_Jr0hNcAM0EpOiZkcdjDboC2pIHAmBHxVo_0J6QT0pC_l8jGQB\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1798228601%3A1726452548134391\u0026ddm=0","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.222.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.159Z","timestamp":1726452548159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 07:19:44 GMT","end":"Mon, 04 Nov 2024 07:19:43 GMT"},"fingerprint":{"sha1":"FF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53","sha256":"85:F6:7D:45:E5:D6:9F:0F:F3:C7:0F:6C:6C:A5:E7:BC:7A:E5:4D:E2:48:3B:42:38:7A:81:EA:12:09:AF:A7:31"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqcrIQb_DYjQtCSHzXvZ8o_Jr0hNcAM0EpOiZkcdjDboC2pIHAmBHxVo_0J6QT0pC_l8jGQB\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1798228601%3A1726452548134391\u0026ddm=0 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-GENL8N3rsiFAsF9WynGoEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.6cUd-ouEgD4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":810,"size_decoded":1658,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1654), with no line terminators","md5":"23e2d2a720fbd6cd291b43f2839c1737","sha1":"0dbf6c7ba558ab5e9a9cc5129aabeabccdf82f43","sha256":"14130e38262ebef258968d5362905312d26767470554a56a5fce4796d18fa603","sha512":"ce6f3d70906c19e36a6a322d0bdf001fe7bf25bd916aa92adc3afc08590bc0b638eff1840cc8ac413e6840ec7299d171741ddce013bdb070f46c1ec266aee623","ssdeep":"","tlshash":"8b31c8bb6ec830af7c3bc0e9e893525450114c80b356dfde7b08d639e0a954520319d9","first_seen":"2024-09-19T20:20:48.44709Z","last_seen":"2024-09-19T20:20:48.44709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:10.289Z","timestamp":1726452550289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31836\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7c5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31836,"size_decoded":31836,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31836, version 1.1","md5":"4514fa5a5b3d1e0b14aa32a7d068124a","sha1":"e634977bfabc20ed15fe7ed03d3876cf68834b93","sha256":"5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861","sha512":"5688e1ee21dc661d8bbd6db76821b29789043f5f9528dd7ce40954e0f0cbae6d1153ab430f9ae70b31f6c8cf72247b918f84747d608c94a6147eeee80b41621c","ssdeep":"768:2Fdq5E8aIKvbTEuK4hMMyIVZXpIElYjuXy:2FI5EHPDwuKGuwsEejuC","tlshash":"a0e2f286486d0f1ace28b7beffe732d064a85272cb72cdddd4642453da5d5075022d47","first_seen":"2023-04-11T18:08:40Z","last_seen":"2026-05-30T07:34:31.4727Z","times_seen":2708,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.898Z","timestamp":1726452546898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31344\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7a70\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31344,"size_decoded":31344,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31344, version 1.1","md5":"21f79e4c0fbe54a555170aa70bb4c8b7","sha1":"9d4aaf2016cd21f16bc45089a48de84dba951fa7","sha256":"2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42","sha512":"1e968a5936efcb3f6372b047354027600abae6aee5b059e91caf035b3b488689dbdc6af3c2e2316833a90d59530eb00b90705780504ed8574d20f2163cbbc244","ssdeep":"768:FR+RRH9jpYBsGvNjWpgHY/02Jvb1veXNnXyUnl:FYZpYBbWpgvGmNnHnl","tlshash":"b0e2e04d2dea6e1bf68001ba18fb7b2066c16545df844f0ff20dbc13ac97aa22967457","first_seen":"2023-04-11T18:10:15Z","last_seen":"2026-05-30T07:34:31.47822Z","times_seen":2568,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:10.295Z","timestamp":1726452550295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31900\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7c9c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31900,"size_decoded":31900,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31900, version 1.1","md5":"1b285c8e5b7445a8e434b2cdf036bab2","sha1":"c97d4772fbb5c5637d466b5f991bc7ec28830b32","sha256":"09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825","sha512":"ae6596215b6708cbf90265c55c799a895e506bdef539c7cd71b19a6679c0b6ac43f9da0011850912e4a559fa7b54e4cc0518bec9db524e2c8914f06a86c1b470","ssdeep":"768:OKbIXZML2+rggwHCFj7lDaTRyMQsVPHDajmk:OMYDnElDInQ6Pejmk","tlshash":"09e2f15a3962c9ebd41c62b3d471c3f536e4c022469a3a91fdc3b45caa4572d14fb362","first_seen":"2023-04-07T18:32:22Z","last_seen":"2026-05-30T07:34:31.479841Z","times_seen":2673,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:10.297Z","timestamp":1726452550297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31568\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7b50\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31568,"size_decoded":31568,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31568, version 1.1","md5":"e0c4ac0e73196bd0469c5c33304b7773","sha1":"bb071565f82907d117b0732dca8013409162c67d","sha256":"ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af","sha512":"850bd12cc28459f01f0d398edf8d58e834dd0ce890cf7bd9bd3c237f574847832c3b841f8bdbe063d302e95edf06d464a63dbc7f44c6312b165f858e8eacd984","ssdeep":"768:AbAx6BRjYvG7fvoufxOXPHxcBn+xVwcjhYMoK5r1M9Fq:Abs8R6G71xAP2Bn+nwcjaTirSFq","tlshash":"5ce2e1d85908d707c3567d385918eb9ca995fdc0cb126f9b52921258361cefc083a37e","first_seen":"2023-04-07T14:26:10Z","last_seen":"2026-05-30T07:34:31.464761Z","times_seen":2676,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.961Z","timestamp":1726452546961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:10 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31980\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7cec\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31980,"size_decoded":31980,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31980, version 1.1","md5":"99ac81a158028ac2023fb3350d2497e7","sha1":"f08c12c91ab29282a616c3ba8e533f49b5b433ca","sha256":"92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d","sha512":"7b26310ce2f53a3bb3f5a4701a9c945e3190263b17add279c0c26ffa18d5ad15048140c3576be49de5c54f8156073e62c362d2de70ee9efc75bc297ae6c67e17","ssdeep":"768:rusBBeUhRWvnas0lc/4auhvv67p/1ehu9t7EPmRy6VXZthd:rusbeUhRWvnt0mmxO/Qhu9GuXZl","tlshash":"30e2f1470d4c23a5c7c46134e046959e0afa1989bbb338c8269b98d636aff31f415f3a","first_seen":"2023-04-11T18:08:40Z","last_seen":"2026-05-30T07:34:31.476474Z","times_seen":2680,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.mediaxchange.co/thumbnail?i=ZUbN*c3S8n0_0\u0026imgt=icon","fqdn":"xml.mediaxchange.co","domain":"mediaxchange.co","tld":"co"},"ip":{"addr":"174.137.133.17","port":0,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:10.030Z","timestamp":1726452550030,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /thumbnail?i=ZUbN*c3S8n0_0\u0026imgt=icon HTTP/1.1\r\nHost: xml.mediaxchange.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 16 Sep 2024 02:09:10 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://static.servingserved.com/n337/ad/192x192_rFH1xLW8YCAi9oNkmkq3.jpeg\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.servingserved.com/n337/ad/192x192_rFH1xLW8YCAi9oNkmkq3.jpeg","fqdn":"static.servingserved.com","domain":"servingserved.com","tld":"com"},"ip":{"addr":"95.101.11.33","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:10.744Z","timestamp":1726452550744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.servingserved.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Aug 2024 17:32:20 GMT","end":"Thu, 31 Oct 2024 17:32:19 GMT"},"fingerprint":{"sha1":"2F:48:90:8D:E8:9A:AC:5E:8B:3E:BE:CB:2C:F6:6C:83:64:F5:BA:7C","sha256":"0D:08:3A:87:51:3F:54:8D:70:78:B3:30:DE:50:E6:B7:80:DA:C5:8A:1B:79:7B:FB:C5:4A:69:3C:17:F6:3A:0B"}}},"request":{"raw":"GET /n337/ad/192x192_rFH1xLW8YCAi9oNkmkq3.jpeg HTTP/1.1\r\nHost: static.servingserved.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 5350\r\nLast-Modified: Wed, 06 Dec 2023 17:38:01 GMT\r\nETag: \"6570b179-14e6\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=21865\r\nExpires: Mon, 16 Sep 2024 08:13:35 GMT\r\nDate: Mon, 16 Sep 2024 02:09:10 GMT\r\nConnection: keep-alive\r\nX-Forward-Proto: http\r\nCDN-Origin-Protocol: HTTP\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5350,"size_decoded":5350,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"d76e391083ab3bbfb065c3ac9964033e","sha1":"646e240f494ca55dac98a1843390ab64347758a7","sha256":"0a78ad7f59fe9109363947eda0957d3b705ba4d44637523ca9b1f67211874acc","sha512":"2e73ab8cf54ae23b765719efb713ea11dd5861f1d0326dad5d45a5c3bf6e7f77d8c811ab8a824fad139dd21cf520b27097d3630c3c9146be88506d8c84caf3d2","ssdeep":"96:fb0iMk/XR73UlMZJ/SeC4wAzXH3x19mSubyx85dvCdAD8LCnyn2lY:IiR/tklQJ/EAzXn9mSubw8DrynUY","tlshash":"c9b18d5ade898396ca110079d333b7e8ca366c431bd3fc2b98046a9d90094878fa1ddd","first_seen":"2023-12-12T23:51:30Z","last_seen":"2025-09-27T16:59:33.732236Z","times_seen":250,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":142,"dns":113,"connect":1,"send":0,"wait":3,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/dmNpNzhZXApEBS9TBUBtMikxVH0sEytbXEAyW2J5IQ0dfWERMk9DURJeUQUNT1JYEUgfB1QEClAQHVZMAxBUBQhGVk9eVhAMVAUIRlVZBwpFV0wAex4XHUdLU1AoEgowRltxWxoKClwWBgAFXBYYAgRSHUQlHV9NGwEHVlEaRlpxUVNQLQ90OiFcUk0gLTB6Z0ZGWwFRGwQdEgsyCgpYVlNUKllNGg9MAHtHW18OD05bXwMNRVJbAwFHUFsBHgBeWRkBWFFHAR4DXlgPC0NUXwYNRVpQAQxEVl4RTAYCDgoJUBMdQ1RLUl4FDkJWWwINQlNYBA","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:14.028Z","timestamp":1726452554028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"POST /dmNpNzhZXApEBS9TBUBtMikxVH0sEytbXEAyW2J5IQ0dfWERMk9DURJeUQUNT1JYEUgfB1QEClAQHVZMAxBUBQhGVk9eVhAMVAUIRlVZBwpFV0wAex4XHUdLU1AoEgowRltxWxoKClwWBgAFXBYYAgRSHUQlHV9NGwEHVlEaRlpxUVNQLQ90OiFcUk0gLTB6Z0ZGWwFRGwQdEgsyCgpYVlNUKllNGg9MAHtHW18OD05bXwMNRVJbAwFHUFsBHgBeWRkBWFFHAR4DXlgPC0NUXwYNRVpQAQxEVl4RTAYCDgoJUBMdQ1RLUl4FDkJWWwINQlNYBA HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:14 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IRCa2C%2FG8eBCQxeWHqQ0IIjQn6k43kk4q88749S3eASgpLbx8jHOGZXCNOUglbOOQxbAmOQvnHn0HRv1cy3FcwqMq4djLryBb%2BofNORgql0XRVHIm70j%2FeSeCxNWT1g0Pat3Gg9v5Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d502eac55b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.pclk.name/thumbnail?i=8LLB5euVNYM_0\u0026imgt=icon","fqdn":"click.pclk.name","domain":"pclk.name","tld":"name"},"ip":{"addr":"173.239.53.24","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:14.033Z","timestamp":1726452554033,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"click.pclk.name","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 23 Nov 2023 00:00:00 GMT","end":"Mon, 02 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"84:32:68:29:E6:57:48:45:66:17:98:89:F7:D7:02:25:3A:C5:C5:57","sha256":"30:F8:25:E4:6E:51:6F:07:D3:98:7B:FD:38:CB:68:23:03:5E:65:2D:08:65:E3:33:F7:A1:7F:C8:CC:DF:39:64"}}},"request":{"raw":"GET /thumbnail?i=8LLB5euVNYM_0\u0026imgt=icon HTTP/1.1\r\nHost: click.pclk.name\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 16 Sep 2024 02:09:14 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://static.servingserved.com/n337/ad/192x192_Lyrd9uAownGqIw1KkFn3.jpeg\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":953,"timings":{"blocked":371,"dns":76,"connect":97,"send":0,"wait":205,"receive":1,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.servingserved.com/n337/ad/192x192_Lyrd9uAownGqIw1KkFn3.jpeg","fqdn":"static.servingserved.com","domain":"servingserved.com","tld":"com"},"ip":{"addr":"95.101.11.33","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:14.619Z","timestamp":1726452554619,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.servingserved.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Aug 2024 17:32:20 GMT","end":"Thu, 31 Oct 2024 17:32:19 GMT"},"fingerprint":{"sha1":"2F:48:90:8D:E8:9A:AC:5E:8B:3E:BE:CB:2C:F6:6C:83:64:F5:BA:7C","sha256":"0D:08:3A:87:51:3F:54:8D:70:78:B3:30:DE:50:E6:B7:80:DA:C5:8A:1B:79:7B:FB:C5:4A:69:3C:17:F6:3A:0B"}}},"request":{"raw":"GET /n337/ad/192x192_Lyrd9uAownGqIw1KkFn3.jpeg HTTP/1.1\r\nHost: static.servingserved.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 5355\r\nLast-Modified: Wed, 06 Dec 2023 17:37:17 GMT\r\nETag: \"6570b14d-14eb\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=78377\r\nExpires: Mon, 16 Sep 2024 23:55:31 GMT\r\nDate: Mon, 16 Sep 2024 02:09:14 GMT\r\nConnection: keep-alive\r\nX-Forward-Proto: http\r\nCDN-Origin-Protocol: HTTP\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5355,"size_decoded":5355,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"74d6eeeaf0eeb4b68c5190847738401e","sha1":"edcf07ab31b871580185d9ea1a740ca814af7be1","sha256":"53c08ed0b3c05dd9e71cb603815b706d92bfc98dbe4e294f9d1f85bab9c3c398","sha512":"8c9586168bb61c1a98cb9ea033571655fb6e66b1c50198ea59f84376f295176ccdec13d1f508d23b22daf488105ea9410e7631bd05212be79e9c28c1d6d26dab","ssdeep":"96:fb/fCNjkvY/HnLtWzHj7F6xi/P/QHyRf9RGVp5bshcJV8LYkHB7lhRTe:8jkQPLMTj7FjHMefqVnbsh86LR77he","tlshash":"06b18d5297c2cb12de07df32416e2be249e7913bfc36434d0198f327881a09227c1ba9","first_seen":"2024-01-10T19:17:41Z","last_seen":"2025-08-29T03:27:09.233012Z","times_seen":237,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.310Z","timestamp":1726452546310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1547\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5447,"size_decoded":5447,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6528), with no line terminators","md5":"86379ef62388dc773f0c909c8678823c","sha1":"5eff5eeda891aeb71ef023ab40006f5e9be33642","sha256":"4152201489950049e566388267c82b03eda1810018354b17055593f250d1e658","sha512":"4f7d6af436eea4f478c755929aa6a1f4ede96e8cd68eecb090d4b032825816fbe6603661ae102a7c8a20b73f64785abdfa14f342e94c437c5b7f6afe56afe698","ssdeep":"192:lIZRWftohx7HRDYAEUvOE64occ6tXS6LCRHZ:lIZgfuHHRDnEI64rc6tXS6LU","tlshash":"90d11236663e3631ccab2b3da4179285363b9d5bb00d113239b57c80e4dde29e263e65","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.397365Z","times_seen":1985,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/responsive.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.219Z","timestamp":1726452546219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/responsive.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-e56\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3670,"size_decoded":3670,"mime_type":"text/css","magic":"ASCII text, with very long lines (3795), with no line terminators","md5":"984d21bc996f9907b59b8e80308d1d33","sha1":"6d00958737d36f4d07a0920a303d230dad004a43","sha256":"94ca9c89c3f698aa1a6247d089d9d866002358183a4e8376eba5452cb5182f1f","sha512":"dfe2b5bb50dacf1ad7373b2ce1c71b091897236ac896c54d3fac8d2f7bb5a042b4c00d747f13072432e92410e0c86397ba6bd9144435235e656d20b264b36c26","ssdeep":"","tlshash":"9c711f53f181103c5a364938a9b736bcb939b006c703e5b87859b768c79e6cbe2715bc","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.422363Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery-1.11.0.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.224Z","timestamp":1726452546224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1787d\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96381,"size_decoded":96381,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-08T00:23:02.102953Z","times_seen":29726,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.456Z","timestamp":1726452546456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/animations/animate.min.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-bc86\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48262,"size_decoded":48262,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6678bbbf8814eac6d7f987ad2a32111a","sha1":"aa9021d4f27c58d5ffe5a8545c20b47232d7d0cb","sha256":"9b36949876f75f2961b55a066b1f9695ec8c3772771d700e951736b1fba45cbe","sha512":"6f290e91c6920de891e266af0cc949f2ac6fbde8651b0941b40eb269efce8a72edb2fe811ae35845b06a64b2465e41d5531486dd7eba0dca54ebd02aecc654e8","ssdeep":"96:ZWGBZNbkIAKADvZAYAKAD2XmLXZZvYAIALsvYAuAIAyzfAHFTGjvpZ5qRkK0d9QG:ZX7n6+4iDV0wIHpyfmAcnbop5v","tlshash":"1023839a0de0918456625e56cbdd5fa80b1cc6b328724cdf338b684f8791b9c33cd66b","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-05-30T07:34:31.472003Z","times_seen":2606,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/asd100.bin","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.648Z","timestamp":1726452546648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4982\r\nlast-modified: Mon, 16 Sep 2024 00:46:04 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BnOIMB4Ec9mz2haCL1Bocb5K8F%2Fbpsaanh5VPVJeyoj1I7xy9VbpiGxfnMYqGbp3zeqBWDOfuhVng%2BoZpGJcs%2FCZH5m9fWgqYJgzwMMscFPEi2XgZtthzFou7Sp8c%2BWolNd7qps%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c3d5000c87f0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":102400,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":36,"dns":4,"connect":1,"send":0,"wait":12,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/aVdhNVdGaAJGags6L38FIQEAYjlQbjBjJzgyD3MfP2YnQjMCGkdBPg1qWQdiUGZQEycAM1wGZU8kFVQjHCRcB2dZYEdcOQ84XAdxH2pRG25HZU8DcRxqUBMjGTYGCGZPJxVBO1RmVgdhXWJTAGNfYVgE","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.795Z","timestamp":1726452546795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"GET /aVdhNVdGaAJGags6L38FIQEAYjlQbjBjJzgyD3MfP2YnQjMCGkdBPg1qWQdiUGZQEycAM1wGZU8kFVQjHCRcB2dZYEdcOQ84XAdxH2pRG25HZU8DcRxqUBMjGTYGCGZPJxVBO1RmVgdhXWJTAGNfYVgE HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZPKynJRPqB%2FHyHQHFxxqUwji0BVPjazt67bFKccy8iZ%2B6jeACuA3QaIAXd0HZbs7G3%2BKCZPFbLZhXuZ6e0H7qsxJBaY%2BkkIqG9EhhYJfFssnBLG628aRxbLoUEKD7UxMZkqpDaULsg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d50012b481c12-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.209Z","timestamp":1726452546209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-8d4b\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36171,"size_decoded":36171,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/asd100.bin","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.694Z","timestamp":1726452546694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4982\r\nlast-modified: Mon, 16 Sep 2024 00:46:04 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gyDa1r9h5kSH84c3ABtqUKiLLbAdG63138%2B7CBq6pWE5uBnSp9WVM1eb76lYY0le0jpGBW74eMfHEHzLwzXpygE8mq%2F9Wk08zlDT5PDkZAy1597ss60QIRE3a8q5db0%2FO4yIkrs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c3d5000d8870b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":102400,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/asd100.bin","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.866Z","timestamp":1726452546866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4982\r\nlast-modified: Mon, 16 Sep 2024 00:46:04 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XxM1jQ9qXPlR1PUZTvYBqkTezK13R%2BRopRF7fIRgiNA6%2F%2B1cQwHYLW%2B1SRB1OdC6AoDjppiKWK6T1SZbfOlnivCnONm%2BdGaAqAh4%2FXWUEo9UoLJk%2BxuYTw03SyH1%2Fj9Oe%2BCVFeE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c3d5001aa020b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":102400,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/amRmNEFFWwVHfAgxI00TPgwHVxAsVCJiOV8lPkMIMgoBcCIrC0BAKA5ZUQJ1W1BXEjEDAFsFZxkQB0A0GVlXEigEAgkJZxxZVxpyXkpVAm9eQhMJcEwQFlUmV1VARDUeCFsFdlhSUgFzX1BQA3Ja","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.892Z","timestamp":1726452546892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"GET /amRmNEFFWwVHfAgxI00TPgwHVxAsVCJiOV8lPkMIMgoBcCIrC0BAKA5ZUQJ1W1BXEjEDAFsFZxkQB0A0GVlXEigEAgkJZxxZVxpyXkpVAm9eQhMJcEwQFlUmV1VARDUeCFsFdlhSUgFzX1BQA3Ja HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LFG7J%2F0NsLvc6Io5%2BTS3wZ2aqv8F7Lw88UgFVAvR7TevYLU%2BcfDA3Y%2FTb0ZPzVTxt%2BpYG3R60g1oPp1EldHjlwKIVan5pX9H2D56qM3F%2F%2BtrNxTr%2BwKeK2tr8djoHpNe3vwzRdSCqw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d5001ab5d1c12-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/asd100.bin","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.681Z","timestamp":1726452546681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4982\r\nlast-modified: Mon, 16 Sep 2024 00:46:04 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=if03XJqoS%2Fh7WG2nb9XSnY0mXxVRSeNqvUNZcclpXvwgj2j3F8vH%2FfkbnFuu7wneDz9UiAmW3SpsoAkSkLMgnfQ2M9Gi2TUAKlzTtwNW1xaabGr1w9XG4yC0m9iG3%2F2snhJiato%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c3d5000c8800b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":102400,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/ZG9iMU1LUAFCcAEFLFguCAsocyEqJABaACg6N2sjNwgsaR5WPkRFJABSWwV0XFlWFz0NC18AdUIcFlA5ERxfAGsNAQRecEIZXwBjVEFQH3hCGl8AaxAfA1ZwVUkSRTkIUlMGf1JbVwN4UFlVAXk","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.835Z","timestamp":1726452546835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"GET /ZG9iMU1LUAFCcAEFLFguCAsocyEqJABaACg6N2sjNwgsaR5WPkRFJABSWwV0XFlWFz0NC18AdUIcFlA5ERxfAGsNAQRecEIZXwBjVEFQH3hCGl8AaxAfA1ZwVUkSRTkIUlMGf1JbVwN4UFlVAXk HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V4oiOu0x%2B4MuW0TnX0lF2ngj61lyV1wm3lD473zBx4N4paXaAfJ1eQ0K2EqeFcdB%2BnPXxl13%2BfQR5Aw7N6szLWCrQBXSrhIIHppIFocKYNtP7w1sh7dNtWK0bO%2BgZABfe5YqCXHe5Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d50019b5c1c12-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.017Z","timestamp":1726452548017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/images/icons/favicon/favicon.ico HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6; _ga_Z9TE2LW16Q=GS1.1.1726452547.1.0.1726452547.0.0.0; _ga=GA1.1.1255886131.1726452548\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-47e\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":1150,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"e95c130b43ef6c32b9c9459aff5706c1","sha1":"51b8b0d3ae3eabd9c31e65098acfa9ba18e9bb30","sha256":"6c3dde0843949903d807800c8d6706e357fd762d29885946bacac881d4abfb35","sha512":"f6b0075e48d33244447273996cc51f7b7626423136bc89b726467769939e2b66661ea57075cbdc716fe6f2d89b7edd941ee412bc1c14ced1e3dc3f177f96b360","ssdeep":"","tlshash":"40211a80ed82ee4ccd256e79e802daf5450bcd05d4f4860710da3e977f7407947cba82","first_seen":"2023-04-30T18:49:37Z","last_seen":"2025-04-01T17:36:27.427654Z","times_seen":2634,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqeoJtBU5m4e0RU5bzwHuB4LWibpmz3oXjCP7Tts6ii6WEn2jIvGSEXdpOUuidgj4JrIP_ad\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1090944383%3A1726452548160829\u0026ddm=0","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.222.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:08.188Z","timestamp":1726452548188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 07:19:44 GMT","end":"Mon, 04 Nov 2024 07:19:43 GMT"},"fingerprint":{"sha1":"FF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53","sha256":"85:F6:7D:45:E5:D6:9F:0F:F3:C7:0F:6C:6C:A5:E7:BC:7A:E5:4D:E2:48:3B:42:38:7A:81:EA:12:09:AF:A7:31"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqeoJtBU5m4e0RU5bzwHuB4LWibpmz3oXjCP7Tts6ii6WEn2jIvGSEXdpOUuidgj4JrIP_ad\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1090944383%3A1726452548160829\u0026ddm=0 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 16 Sep 2024 02:09:08 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-Iw7hGQQ99f_WJtb2U8yIEQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.6cUd-ouEgD4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.iframe-transport.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.241Z","timestamp":1726452546241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery.iframe-transport.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-2427\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9255,"size_decoded":9255,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9459), with no line terminators","md5":"e703222aaa30359454a64b070b20b7a5","sha1":"bbe0de722f2f9eb912ba3fc0d960e35b3ef58b4e","sha256":"917390ec2f9d9d63aaa67ee2078e601f84538945732e4a89d3be346728f80fca","sha512":"8f5c61a04ee8bf483599981ed9049bd5586eebdf9ef2531f34f3195348ab7beafb682f839e4982d4aad59ff1c4c1b7f09980e5e1dac6a99951e4db81b6a7e12a","ssdeep":"96:OQYCMNvKUWO38itw7rg8LJfNm/7qZ57Jo0463B:OzMUtJts88Nwqr3B","tlshash":"2a1213872c2213310ba37bd91beab0587639b3247125cb70bdee17c61785506d2e17ee","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-06T03:47:50.867487Z","times_seen":2102,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/stylesheet.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.455Z","timestamp":1726452546455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/stylesheet.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-6c82\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27778,"size_decoded":27778,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8568ee885222fb5ef651a99221bfd347","sha1":"0dc1b30d1a58c3cdafab8b38da04f3fc2462ee46","sha256":"3b35d09fae892be2b76a67f47bbbcbe289b05a2850e02295f70f9c2e537d927a","sha512":"d159e454bf53515e1d2754614188caee87965fa7aff4e01829ae3d0c6bc8575d795611c2251b771890d15f6db7b1c952f37eb667ea616561c21672c5e972272a","ssdeep":"192:B9JmhRI4JiXOEuDMCKDO3rynaTVZze91nJASlR4XELsFAHH1OMDwYatvrzYeileO:B9JmwCMr/J+IkKHjdWs","tlshash":"e6c20b5cee012049623bebb9abf75350fa2c50939e0241a87be96250cf7509c563efdd","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-01T17:36:27.445357Z","times_seen":2436,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:07.208Z","timestamp":1726452547208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: font/woff\r\ncontent-length: 20972\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-51ec\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20972,"size_decoded":20972,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20972, version 1.0","md5":"cad75e2dacc6794c4e6b14727d4a989d","sha1":"694d04c8f643df4100c23efc1463ac9f4e732f60","sha256":"ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887","sha512":"a25d9ce98c7bd94801a884bb2135e5513381cc14320398906177d8e50625dc8bc4d0ef49d08b7e961e2d80567ecdd57590a2757bece3a7014a51df60c59d0f23","ssdeep":"384:+COVD2aFH7DW4y4duekNHezxwNKTQKmyaMSEV1nu3nNkR:+C6aaau8HezyATQKmfMSELnSnW","tlshash":"b892e11de789c1b8e5dde1f850d3cf6ce05cd2690c56244b3c63ab28ebb15d241d8568","first_seen":"2023-04-11T18:08:40Z","last_seen":"2026-06-06T08:56:09.9229Z","times_seen":2680,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/canvas-to-blob.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.237Z","timestamp":1726452546237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-408\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1032,"size_decoded":1032,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1052), with no line terminators","md5":"a6496a71738d7a150a3e065ee0e12fe3","sha1":"5312d1558e59026ae5f14cb04f8bc87248f23826","sha256":"7700f942a6370cef00334962637f3de505a110832c554efdaab8aa645b10359d","sha512":"a3c6b52bcfe622b35dc6bdb10cb344d12090cbe3628072d636128e21240dab4b8c6ee8b6aae5d9eb7d43eb287bbd95a9039b793b1cb5d7486d7a1322a7ca9624","ssdeep":"","tlshash":"0e110084f1922461919b225c40ef4cc9f2b68d2146c414a0c2599fcc5b74efea3faf58","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-04T10:47:21.420347Z","times_seen":2048,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.213Z","timestamp":1726452546213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-153\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":339,"size_decoded":339,"mime_type":"text/css","magic":"ASCII text, with very long lines (375), with no line terminators","md5":"e60adfdae6f5cf19011dbe4154390a71","sha1":"e91fc65490f58b7072d25b8edeed4b213e72ad96","sha256":"0633957c46201ad0d4143ecfcb0c12d9c400a8edadb2670026573d8f8c2ba2f2","sha512":"b02bde9b49b0aac1651af8e343f172ee95051b7010ddbf602355284c7b1a15c6778b014c322e980725cd2b5da4e318a3d63bf52ee24024fb42a25e63d0e3109c","ssdeep":"","tlshash":"4ae01a0bee0832664b83372b380902387ea0908abec0b1951a741e7ccbfdc0de111742","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.399716Z","times_seen":1753,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-validate.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.246Z","timestamp":1726452546246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-fea\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4074,"size_decoded":4074,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4192), with no line terminators","md5":"4ad5c2f2ed0230271d44a12b09ea1361","sha1":"2070df63b71eda62f5a90b091595ef67595273b7","sha256":"84047dced279f3c811d4cb54e6a5dc9310569b51eba58aec89f03ced7bfadafc","sha512":"e4950a6183d9ed2571f98a1fb167345d5176f52f18fe4458469d75c221fc777a05fbce7f2ddb4a3ba577fd71ed7db2a7e78dba023714968f49353da623ae3a76","ssdeep":"48:GtMZNCDY/dvZ7k8hk9KCTU54t8wudDXTUwKlpPkALcrnk5KyR74BalGhw:SMUYDhaTU5OQPKl2AAr6plQw","tlshash":"4381388f761651b14e9327e99b9ca0456174f3196034d268bc0cd3d93b8b4b6a1d1bf8","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-06T03:47:50.851578Z","times_seen":2173,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/sw.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.295Z","timestamp":1726452546295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /sw.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Dec 2022 16:15:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a1dfa3-1927c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103036,"size_decoded":103036,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9ee51131e416458b88d6da4e6e6959ca","sha1":"a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4","sha256":"db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734","sha512":"c15181f56e6a1d9644315da37a99789bd77c9bca734094caf065e54d9b525fc5d1268821e707398529a616c78140e6bd4c594cbc3618335d40b757214b4b1c58","ssdeep":"1536:vSpw5PMhOhJ6ZbaL7l65oQ668X4BtmG9vpjthaoytu/W:vSpwVJ6EXX4rvttkbtuu","tlshash":"31a309497252389617d7e03e177fa5cb6d7a4a09bc698d974051c3c02d2a0cec6e3fba","first_seen":"2023-03-09T23:12:43Z","last_seen":"2026-06-07T20:21:05.750486Z","times_seen":7050,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.338Z","timestamp":1726452546338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-3ead\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16045,"size_decoded":16045,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15714), with CRLF line terminators","md5":"38c5167c8052d0c73892c3742b16e903","sha1":"213ef9210b4a5c4e73a242e832a08f4abef69a74","sha256":"743b919a337dfbb6d1e8648d0793532d47f8af48059e17f7e32ae8738c7614a7","sha512":"a2846b069959c3f7ef7d045ab897be48909c077a5e93ad8e012a41826df33e0d4385d844597f44bb3af13e2716ddee76adcc9bc4fd89f84b2e83b3d4dcd7a138","ssdeep":"384:1NeN/o4+J2jv0pLWu4A9kvpB8SgDC1aEPtc7RPajcw:hJ2jan9kvpCB7w","tlshash":"1772838d738133218187b2a141bf110f7137aaf66a468cacb63bc5daae7550d2077e7d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T11:37:18.484101Z","times_seen":3003,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/aGwwSHoJDlMlRQlRUm4PGgANbUguSQIOHlobCSseHVQEMBlcCUFmGQQDRSwcGgNePFQGCURtSC4YfR8OGDp0LCkqLVMxOS05cwwtAzxxeU85NmERIi8UQzAvORt3DD4mO2IKDiAjXAI8PD19Ji0uVFIeOSEuZhoJLShlAjspBwgvLj46Zx8iIg5lCS8nDWIOLyo9QDg4AA97DC4xJ3IdSgwmdiAbPgRHfi9ZPX4JPhg/Zh1KCyJhOBkqLn1xLVlcexw9MhRyDSwyD2EdODkUdiQ4AD5pA0ktKnEZGSkjWwIwPABEIy4fAFQGFyEodg4dGg9hHTgvPh1xAiokchsiWwN4Dz9dDmoOOD0vcQFNLQt9PC1aPXcJLBw1agkjPTtmIwMwB30HPhIYYA48AxpSGT8OOwBwEisLcW4QGwNeOEceWlQ4FzEZQSE","fqdn":"undefined","domain":"undefined","tld":"undefined"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.808Z","timestamp":1726452546808,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /aGwwSHoJDlMlRQlRUm4PGgANbUguSQIOHlobCSseHVQEMBlcCUFmGQQDRSwcGgNePFQGCURtSC4YfR8OGDp0LCkqLVMxOS05cwwtAzxxeU85NmERIi8UQzAvORt3DD4mO2IKDiAjXAI8PD19Ji0uVFIeOSEuZhoJLShlAjspBwgvLj46Zx8iIg5lCS8nDWIOLyo9QDg4AA97DC4xJ3IdSgwmdiAbPgRHfi9ZPX4JPhg/Zh1KCyJhOBkqLn1xLVlcexw9MhRyDSwyD2EdODkUdiQ4AD5pA0ktKnEZGSkjWwIwPABEIy4fAFQGFyEodg4dGg9hHTgvPh1xAiokchsiWwN4Dz9dDmoOOD0vcQFNLQt9PC1aPXcJLBw1agkjPTtmIwMwB30HPhIYYA48AxpSGT8OOwBwEisLcW4QGwNeOEceWlQ4FzEZQSE HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-16","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/custom/custom.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.343Z","timestamp":1726452546343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1420\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5152,"size_decoded":5152,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5537), with no line terminators","md5":"f11b915d430ce9e1d2470ce7a88c8df7","sha1":"9f1fbcd5391969567e9b0c14467d637446cb69ed","sha256":"13d1a0a149018d6e707511272a19e324ca469919e8546570cfef14f24c2219e6","sha512":"ec0f9f60886af3d134d153fdf5071f1e5e37452ff9168db3bc9cf4994a47fdfe3f6b6891f83a9e246c030bbc033b25f53dde9fc9c0802baa550f9e5fd6f6a849","ssdeep":"48:ojcnEj1+HNc2ozMpcwkPoM2dXFsGNMkapisii1iMwGCKQEqh9O2lwmbKtxCKR5Ed:VZd1uqAtGwAs6Vp","tlshash":"dcb10e7c6e1f7cb90993253b683e94c015af3c4a240242217d4db858d3deb2cca7ade5","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-04T10:47:21.383513Z","times_seen":1959,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/styles/file-upload.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.223Z","timestamp":1726452546223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/styles/file-upload.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-21ec\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8684,"size_decoded":8684,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (9188), with no line terminators","md5":"e6aa00105765c90499065e7b4953475e","sha1":"c214db0a0c9ceda57bef567789961817554e01c9","sha256":"33af7cdbf9e003d6a268f344b7d9fd8fc39d19b0a412b9eaa4487d509a4a54b1","sha512":"9a7819645aac852a9ebd62ac1423b827ca774784b8320066434998fd033328158c4e69929745933cb0110cc378db67af3d2280b74329bd5a0787618bc3f2fa2e","ssdeep":"96:Voc4HxTk5U5Knp1NH4w99hq+RTTy5S1BsBjYF96tu6j/ASvU4k:3NK5Kpz/fy5S1BsOF96tPM4k","tlshash":"bb12ba28bc03503874359ffcf2eb5276763ef0638522506d3a8d5687cb6e5c082e66ad","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.41342Z","times_seen":1939,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.457Z","timestamp":1726452546457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-59d6\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22998,"size_decoded":22998,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (305), with CRLF line terminators","md5":"f8398a4ad2442f1943b62d93f89249b6","sha1":"280150fc79d01a95808b1c16ca8749e8d8cda85e","sha256":"7c10acbcb15a2f181df3ad0d009a44f892e406bbfc8f94df12f8a47a71b696e5","sha512":"af9c76def042b18a72925a4314bc3ee4894e4319f1e7a1c52255b6a0b7c870fc72668eee52bfde384c4503fde13906bf73577a4f1eb08573e600618485829569","ssdeep":"192:A12sn4XvjS/9QSpZnFrkePqx39TVxDUJDB7kW1NkQXDmktOF4RcWUPPywHtR6v4n:k47AQSEwx5DNcWmKi6I6v9TfRMNs8","tlshash":"f7a247fcd56e00c04b33daa1a7426a227b3da2bdfe425d45f2623d8c95c2654a1c6fcd","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-01T17:36:27.451929Z","times_seen":2439,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theharityhild.buzz/bTJJaDgWEDofZxhAJUoCT1o9HEgeCGZHVQhVKB1IQ1wsHBceRWcCS08eaxtVCxBzWRRPQSQeGlcQfUYLTx5rHFkKbSAMGlcQcVsKWwF6ShRPQTwKZwRWe0oCT1RxWwsOAn0KFVtXeQoVWVYrWBVUBnFfFQsELA1dDlcqC1sOV2sV","fqdn":"theharityhild.buzz","domain":"theharityhild.buzz","tld":"buzz"},"ip":{"addr":"54.225.185.110","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:07.323Z","timestamp":1726452547323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"theharityhild.buzz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Aug 2024 10:14:31 GMT","end":"Wed, 06 Nov 2024 10:14:30 GMT"},"fingerprint":{"sha1":"E1:00:0E:E0:78:B0:4D:D5:3D:EC:44:B6:BA:3D:0E:1D:32:6F:0C:32","sha256":"57:3B:1E:63:18:44:E8:52:7B:6C:9B:CF:4F:BA:8F:C8:E7:A5:F0:1F:50:36:ED:06:CA:15:BC:5C:EF:01:F3:D9"}}},"request":{"raw":"GET /bTJJaDgWEDofZxhAJUoCT1o9HEgeCGZHVQhVKB1IQ1wsHBceRWcCS08eaxtVCxBzWRRPQSQeGlcQfUYLTx5rHFkKbSAMGlcQcVsKWwF6ShRPQTwKZwRWe0oCT1RxWwsOAn0KFVtXeQoVWVYrWBVUBnFfFQsELA1dDlcqC1sOV2sV HTTP/1.1\r\nHost: theharityhild.buzz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nset-cookie: 2482ae224cf4e041530606c0b3446d59=1; Max-Age=604800\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: X-Requested-With,content-type\r\netag: W/\"f90f-rdbhyrGXeXUHZ+rZ/zbZaRbvEv4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63759,"size_decoded":63759,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63759), with no line terminators","md5":"b4fa08aa2cc5626f342e410bf53f8152","sha1":"add6e1cab19779750767ead9ff36d96916ef12fe","sha256":"b65080d9fe7841e8bb83f2c10b431261746bce6a7781b87830e187d649b57406","sha512":"a07f1bbb0a0ddaee75da040292ad96e9b9823f2e277f6ed00a1f174f5beb9d99f799ceaf5e33a54ad9eb92b1fd9f892041b8701c31f29e5d7472fce1f7266ca5","ssdeep":"768:FztzTFMttCFipWJfWoHY/2fETPcFY0+X9/0XheaEicPClOxxS0reI71xD/:FpECEp/SY/2fad0O0RDUClOxxDesj","tlshash":"21534cd172912083c207f1f59e2fbe47793f0e12d4895ae26ca7e081ad7909e91e3e74","first_seen":"2024-09-19T20:20:48.461429Z","last_seen":"2024-09-19T20:20:48.461429Z","times_seen":1,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":188,"dns":51,"connect":94,"send":0,"wait":108,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/aTFKaEZGDikbewxnJiISWV0EMQ5QAyw9dxhUJBhxOHY+HyAxCWwcLw0MclpzUAB7TjYAVXdbdE9CPgkyHEJ3WnZZBmwBKA9ed1pgHwx6Rn9HA2ReYBwMe1B1XAZ8WXNaCHNeclsEfU4yGVAtVXdPQT4cKlQAfVpwXQR4XXJeBHlc","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:07.567Z","timestamp":1726452547567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"POST /aTFKaEZGDikbewxnJiISWV0EMQ5QAyw9dxhUJBhxOHY+HyAxCWwcLw0MclpzUAB7TjYAVXdbdE9CPgkyHEJ3WnZZBmwBKA9ed1pgHwx6Rn9HA2ReYBwMe1B1XAZ8WXNaCHNeclsEfU4yGVAtVXdPQT4cKlQAfVpwXQR4XXJeBHlc HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:07 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FmUgosJc2o9YBeNWwEToR%2FlsC0lMSCTczWQxddd483SfnsmcSXEteDHc3HTacQPVjUOv8xXyGiWLdVX73f71xXTt51MAEF83O%2Bi%2BJxGhqTIAGt14nBlH1AXbJ38ube9rgCuGk8H%2BoQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d50063858b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/gauge.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.344Z","timestamp":1726452546344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-45b8\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17848,"size_decoded":17848,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1259)","md5":"aafe893df6f86140460a76d58dcecfe2","sha1":"fe1a74890dc8f040f5f681041663b96d983163f6","sha256":"2d9574ce1b6890bd6ccf1ef3d04fe1328f35c5bbced7b6b331459119ef4fe480","sha512":"0af0c5d095719622b6555f20180eea104c913dc391440da688fbe90e15ef95fc344e96c6026a101cc9843f67b38b028bb0dcfc3daa0d7ece328e795ca67e04df","ssdeep":"384:2YOQ4fji+TgW3nFcnwNUsLyrqK9dVSK9fa/cZ+O45wIh1CX4:2YR+EKvYJ9Z+twIh1CX4","tlshash":"f182a38a726b1629dbc796ea101f035d933bf669044951acb570d2fb187ee01823fbf4","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T05:25:35.54109Z","times_seen":2719,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.696Z","timestamp":1726452546696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=321878251445949@1@1726452546; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y7hPgfHEkslJccssFBxCQqCvDQXINuF1wH5FpqMlrTXYey5EuhCo5HmoVh5f%2F4x5EKgU33tyLNj2pPS%2BUdRYeomVHhdnVap8YTEWc96d2QyXT70UbcpOD8gUZ7Wxrpokm3EFWUI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d5000d88c0b06-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26,"size_decoded":26,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"b38d15acca3feebffc6d47b31aa10b6c","sha1":"42a0e2187cf67438ac21efb1fe01b5188967d41f","sha256":"dde64bd1748f420b4e9dd5f8eb68c82f862a61c5a264f4acbedebcf3b87b1dd0","sha512":"007633f8efa2d48ce105dc443da2fb4ccb672a4cddd0fb4a3cc480680333dd740de838f5706fc3b763bb47a14090a911b6ed103196ea282382a687452f8a3361","ssdeep":"","tlshash":"b680000e2aa8f880ce00c0088083223820280a320a80020ab2c800800c0ae02a0b08a0","first_seen":"2024-09-19T20:20:48.463096Z","last_seen":"2024-09-19T20:20:48.463096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.339Z","timestamp":1726452546339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-71d\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1821,"size_decoded":1821,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1946), with no line terminators","md5":"28bfbd66415c5e20a0d8ce1ee03bd87c","sha1":"144fa15fb0a7090117e6f4ef33d9f465241e5459","sha256":"6eb7ee7937139b13785d0befc27eb61cffbae32d066959c6370829209c0c4e46","sha512":"271468d7324c775de48b01af48e1d4183b74bed1859a4e4c0091341479b90dfaf492a335a8ffcc945f2271829a8fe5da6abde78cf44b463afd8aed04b82bf75c","ssdeep":"","tlshash":"f3419b597c0e37302e9330fd1e4b90885a79f6639106c896bd8ecbc4f7e400dd166e9a","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-04T10:47:21.411304Z","times_seen":2023,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/b3V2OHZAShVLSzwzJGAkKDtOWiEpTCALDgEvPn4kDCIsTRIDIFBMHwtITgpDVkRHHgYGEUsLREkGAlkCGgZLCVAGGxBXS0kDSwhYVltEFkBJAEsJUBsFF19LXlMGTAIDSEcPRFlBQwpDW0NAAEA","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.726Z","timestamp":1726452546726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"GET /b3V2OHZAShVLSzwzJGAkKDtOWiEpTCALDgEvPn4kDCIsTRIDIFBMHwtITgpDVkRHHgYGEUsLREkGAlkCGgZLCVAGGxBXS0kDSwhYVltEFkBJAEsJUBsFF19LXlMGTAIDSEcPRFlBQwpDW0NAAEA HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZtDe2icbuqI4Oy%2F22RVsr3mP5KM6As0bS2kOVyNMdiZoZkw3duzvfuYcf0ZOXi81UOxBZr1xJZuhfiIRq8r37yi7VvDxOsGFFx2QrppFhGcvh%2BGmI8If4YRc1Mtbgliqu3O8TT0%2Fhg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d5000eb3a1c12-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/RU9BeXAkLSIUTyRyI18FNyN8XEIDanM/FHc4eBoUMHd1ARNxKjBXEykgNB0WNyAvDV4rKjVcQgMIEi4YLCoqEgEHODYaFC9/AzsbITgnLzYkGwlIBgINAB88dh4HOwh1IBE7GAgJAg5JESgmMzosLBghBz13CCsHFQoQNCIJIwwhEwE3Dj8XBDslPxgACSgeHgF+eBo8BiwNIUAxOQo4BwQdckgGDR4PMToGFhI6CBwjCjxBFB8JAR4SCiUwFRIKECxAMTwkEAANHAkSHAQeNik9EjcgLBcPNycDFBAbLAFGDiQlMBURPCQrQC4GIj9FCBwsOwMSI2wwFAkMLj00E3Z2PUE1HBJKHHAYFzM8Jwc1IDIHAnY1MXEBABQIcgMtDT0ffC02NnUrdV8aNiAvCU0zeikNHS4FGT9BKHY0","fqdn":"undefined","domain":"undefined","tld":"undefined"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.820Z","timestamp":1726452546820,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /RU9BeXAkLSIUTyRyI18FNyN8XEIDanM/FHc4eBoUMHd1ARNxKjBXEykgNB0WNyAvDV4rKjVcQgMIEi4YLCoqEgEHODYaFC9/AzsbITgnLzYkGwlIBgINAB88dh4HOwh1IBE7GAgJAg5JESgmMzosLBghBz13CCsHFQoQNCIJIwwhEwE3Dj8XBDslPxgACSgeHgF+eBo8BiwNIUAxOQo4BwQdckgGDR4PMToGFhI6CBwjCjxBFB8JAR4SCiUwFRIKECxAMTwkEAANHAkSHAQeNik9EjcgLBcPNycDFBAbLAFGDiQlMBURPCQrQC4GIj9FCBwsOwMSI2wwFAkMLj00E3Z2PUE1HBJKHHAYFzM8Jwc1IDIHAnY1MXEBABQIcgMtDT0ffC02NnUrdV8aNiAvCU0zeikNHS4FGT9BKHY0 HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-16","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/load-image.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.235Z","timestamp":1726452546235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/load-image.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-9f2\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2546,"size_decoded":2546,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2582), with no line terminators","md5":"a695bcdeef4ab1f27d01d2175ab9ddcd","sha1":"442e6298bf7092455528a2b81e721aaf7a72ef09","sha256":"ac92521ad4d3d0191d63ce8dda671b9e78c7c7e1d5f0b3fb2cf5424461f3f315","sha512":"253e7df234bc9de6b2d9022ecf6338aa1525880398bfb3fb0901e0073ad09326c5e68c93a06ad709213b8039abed7498e2dc149281ba56f6ab6101b9ce4883e5","ssdeep":"","tlshash":"5251db6c725874e522250993216f8649f518f4a6574f74205714d4ccb4becef837ef09","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-04T10:47:21.427361Z","times_seen":2058,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-resize.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.244Z","timestamp":1726452546244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload-resize.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1f7f\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8063,"size_decoded":8063,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8281), with no line terminators","md5":"fe90ec8075308aa0695b41a01faa8d7c","sha1":"9ef0157a99a6efd2a8672b699dbf4225d8fa67ad","sha256":"782f2530cd4df35901bcdba4dab3cd8769f7cebfcfa96cec776cbcdc10d66062","sha512":"b061e91ab30cdd3c00af3a948f7c0ce550d11eafea141165335d48bf2bd02383ec11abeddf33b81a5af1709d2981019ae68e376df8c18923bca0d988a05e516d","ssdeep":"96:IUYxqdjVr2mk6d6/Ln+HtNkiD2m31vPtVRb7VBQYJdUdAZ5g1e5+uoPrrqd:IPiymOLn+cM33RbTJdU2Z5yeguoid","tlshash":"7c02341e3a66317a496321c87fee60c8b659726d1132c710bd4c538e376b927e0e67ec","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.412144Z","times_seen":2086,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.248Z","timestamp":1726452546248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-3bd2\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15314,"size_decoded":15314,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1288)","md5":"d31e0426a59b32581835680633809ea3","sha1":"98caf983b9349fcf2a32d6512f998ea9a557a90e","sha256":"c7fe89a030ea54a29616f0a473366e07d109dfb775f2afa050c2de82e3606fba","sha512":"49edd2ac8f4e60397a150b5b033a9096cb9702a4d81f2456a39870ad60cd2f3d7268c755130cef05254e3a448180a153882cbcdb8ed93ab272975da0f0b13774","ssdeep":"384:hl+ANBtIu13EPgC/5l3IkOxteCYMKtpfhtw7gD7ml7D0Qg0ONj8yegeiOpR8yeHF:/BOu13EPgC/5l3TOxteCVKnfhtw7gDSg","tlshash":"0f622d087afa197bd147703e4b5f600c3638815ba648dd44bc9ceae02f64d24a5fbf98","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-01T17:42:40.479799Z","times_seen":2905,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.867Z","timestamp":1726452546867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=151016556055501@1@1726452546; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LL6AK2rpBaSb9MyKZ9mjWXTdaEXVDCh%2FV%2BMFrzNW8PetjtDYq7TmbzqnSMjpoDUkAf%2BppUGZDulmd6nZc%2BUp3gzTYK49vYrv1KF4201lEkFfdgzp7nH%2BxIwOHlqmITa6U2WO26o%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d5001aa030b45-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26,"size_decoded":26,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"4dc6c4cf039ca4c8cb26952eebe7fea2","sha1":"6caefcc58027bac4cd3a98378d28aee34094c780","sha256":"0f7fd09e459224653ba0dae706ce8a86d1ff6725fd521ab96b2c0f7ef9c848dc","sha512":"4d40b083f8a818e50f7e2bacb7c3d95161e5d834243f6713c1edfc6523e367fb60df22681334c9ba305a52da6d516f46383a6678f8eab193a74ca62f2a22d767","ssdeep":"","tlshash":"b28000000808b8800a030000ecac283b202883020080800032c82000bc2288a20a88a2","first_seen":"2024-09-19T20:20:48.466624Z","last_seen":"2024-09-19T20:20:48.466624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/global.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.250Z","timestamp":1726452546250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/global.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-d59\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3417,"size_decoded":3417,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3612), with no line terminators","md5":"e44702657a9e124a9ba6ba57e941d9e8","sha1":"cbfc48ed2d804918f7f97c4f1ed6ea2a4780151b","sha256":"39b318c989a0ac479bbf9196494fb1bec96cd1e54186051f5ba6225877acfd83","sha512":"cd213a55d530b80034f2c863b7c32ffc45aae921c7e4daa5702ec06652f30abaed7309948bce773a1fcaf248fb744aa3d63aea38d873e953c2961b99b83acdcb","ssdeep":"","tlshash":"3d7142463970e2b18b23afa957ef46257059b3000015d0157c8cbee92b9e979c9fbcf8","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-01T17:36:27.45001Z","times_seen":2055,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/retina/retina.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.341Z","timestamp":1726452546341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-52e\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1326,"size_decoded":1326,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1353), with no line terminators","md5":"63539576529cb2ba2cf10de877f1e8cc","sha1":"78cf75b3bc45e3da2e5753c4d47582957b222e1c","sha256":"f3bf2760a81cfb66c729ad39451b437da09f7e0a04fe93ffc34e23194d813619","sha512":"030a329600a7b92c68a071e5d72cb2668274d118c742fc2ffb99a4c17c01fcf7d80cb4c5ea7565dc149379721f2b78f720eba43b68e002c4a43c5b8e1254844e","ssdeep":"","tlshash":"d0215069b69131370142a911403f6da17b36b0fd12834178bb0dc9e7ec31e38966efa9","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.385514Z","times_seen":2008,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.649Z","timestamp":1726452546649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=1835761539964257@1@1726452546; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Z7zeXhwRnJsZYNsQYai0akRrl4PUNbAah3YDNyfL6dpZDFPHw3sFObK8UPuU0RlyAfD2SNovA9WDIaJQ6I6TpC%2FoaXGl3JhGNqxXqP6EbaDz49jCViSxVwPC0lYKjGX%2F%2FeYZSi8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d5000e88d0b06-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27,"size_decoded":27,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"2f20ffcb5f3962f63718b3b6239506ae","sha1":"513854dda7cd9f7ee84cc925531557d3ff484422","sha256":"747f19fff3436abe996a03cc75e0a9071e6114fe636434429dacbfef378186ac","sha512":"e1690903e9d58995f7cc71d942448b5bda167fb34aa5098518196763490b39cd6a76a6011937083e1cf36b1f9c58fea0f4a29cb051751284a4d537dc68e2c3ac","ssdeep":"","tlshash":"698000a20808ea88880a2282808c203c20282a033082080832cc00200eea080a0f0880","first_seen":"2024-09-19T20:20:48.469225Z","last_seen":"2024-09-19T20:20:48.469225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":54,"dns":3,"connect":5,"send":0,"wait":503,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelpfulinother.com/UVY3c04wNFQecTBrVVU7IzoKVnwXcwU1KmMhDhAqJG4DCy1lM0ZdLT05QhcoIzlZB2A/M0NWfBcQeUI+ExtdIRsfBQ4mDWEbTTkfaRJ2JDomFVA6HBo8eSsbNjkEOQgHAGYaPicOcTUKNxVDMRlgPUYVCB80YEEpZQ9aC3wfAVM0Gj0YWRAcAw9hGR88Ek85HR8VfiMMAxMAORgQHHZAOWAHWwctCy8GOxxgMU44Ij0HZhkqPwQGJgUfLwI6FgclBToMMhFUJHcnF182CDA7WzgMAAwSQQgyOHYhDAY5QyR/IRV+Hh8QFHJKJzVkBzAPYm9OEAwUEFYZYx8TciIfMzN2Ii8TZXkYDxAEZiM3GwxgCwQ+FEAyCxM7RwsPJgdwFX0cFWIfej4ccSEsBWUOCSoQZnUXBhQDZiI+I3BdACE/JgoSIT1kTiMWEDk","fqdn":"onelpfulinother.com","domain":"onelpfulinother.com","tld":"com"},"ip":{"addr":"143.204.55.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.675Z","timestamp":1726452546675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onelpfulinother.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 19 Aug 2024 00:00:00 GMT","end":"Wed, 17 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:C8:76:FA:93:95:D2:6A:1A:6B:3D:6B:D5:76:82:58:31:55:B9:2B","sha256":"6B:63:34:43:84:F8:B5:0B:49:C6:ED:6D:1A:15:0F:F6:0A:55:AA:5C:41:06:A3:8F:1D:AB:6E:37:DC:27:A9:0D"}}},"request":{"raw":"GET /UVY3c04wNFQecTBrVVU7IzoKVnwXcwU1KmMhDhAqJG4DCy1lM0ZdLT05QhcoIzlZB2A/M0NWfBcQeUI+ExtdIRsfBQ4mDWEbTTkfaRJ2JDomFVA6HBo8eSsbNjkEOQgHAGYaPicOcTUKNxVDMRlgPUYVCB80YEEpZQ9aC3wfAVM0Gj0YWRAcAw9hGR88Ek85HR8VfiMMAxMAORgQHHZAOWAHWwctCy8GOxxgMU44Ij0HZhkqPwQGJgUfLwI6FgclBToMMhFUJHcnF182CDA7WzgMAAwSQQgyOHYhDAY5QyR/IRV+Hh8QFHJKJzVkBzAPYm9OEAwUEFYZYx8TciIfMzN2Ii8TZXkYDxAEZiM3GwxgCwQ+FEAyCxM7RwsPJgdwFX0cFWIfej4ccSEsBWUOCSoQZnUXBhQDZiI+I3BdACE/JgoSIT1kTiMWEDk HTTP/1.1\r\nHost: onelpfulinother.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1184\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: j9U3MeaThmsBPKuR2Ioo0Vfrkw7CmJLdOgpYsngK2fBlNELU3z1a0A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3032,"size_decoded":3032,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3058), with no line terminators","md5":"d9cbc4f7fad1e574a80f734ea8dc0be9","sha1":"4139424f8ff945907be1041906f2d0652090b863","sha256":"d56f8d8109cee58ba4f30c5d047938c28ea5fd912e75abfb4a537de9111b6fb5","sha512":"49991b8f8b90743018cd08c70686de735b1d350492340bb87e27b33cc8ab17cdc133ddca229340e805e60f69bb0c6b32fe69dd5afc372d9ac4f8656cfbfa733d","ssdeep":"","tlshash":"f351ed8d34f3a08282f27024053b78aafa285aa0934ccb14877d96bcbc755ed6317f4c","first_seen":"2024-09-19T20:20:48.470732Z","last_seen":"2024-09-19T20:20:48.470732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":42,"dns":6,"connect":3,"send":0,"wait":108,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/cGdYVm5fWDslUxEKPAINQjU6AFwyJQ06HiY9MwQ6KAttPTw2In4iBxRaYGFYQ1ZgcB4ZA2VkV1YULDcaBRRlZ0gZCT45U1YRZWdAQEluZkBEQS1rX1YTKDcJTVZ+JhoEC2VnWUJRbGNcRVNuYFhJ","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.683Z","timestamp":1726452546683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"GET /cGdYVm5fWDslUxEKPAINQjU6AFwyJQ06HiY9MwQ6KAttPTw2In4iBxRaYGFYQ1ZgcB4ZA2VkV1YULDcaBRRlZ0gZCT45U1YRZWdAQEluZkBEQS1rX1YTKDcJTVZ+JhoEC2VnWUJRbGNcRVNuYFhJ HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YH1%2FPFAan%2BIMe06JD8SDUHDeXufzp0Ld%2F19nd8RC5hMA1Jeub%2BTqgV8AYyxWeO7qwzqH2NQ%2FqjyL1%2B2GX%2F39YSf75SDoi5mbBDuheZmt%2BWP%2FxhiP7Ekg5fOSKTLHJyhhm4LfKFUY8w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d50010b3f1c12-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":40,"dns":2,"connect":4,"send":0,"wait":120,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/WGJFMUk5ACZcdjlfJxc8Kg54FHseR3d3LWoVfFItLVpxSSpsBzQfKjQNMFUvKg0rRWc2BzEUex4oFwEmaDUTUiISNCoUex4DAXwjDSUXRyoQFQ1QDmEKCloQYC8dXicNNnEDBDINJH8zERgnd30pLQZafxswIggKPwoueiAJNQRgCH1QA2sBGhEUcgQiByteGhY2HEEFCQ5gAw8VCy5BCg8KPXsgbTUfdgcwMi5gewgqKlwYCw1xfTAeBBViACkAAHR9OQsqXR0yI3J6MCswJEkPITgEY3ECOiFYHR8KKGgnNFAjdh9rKCkBehEIfEcLNQkzV3ogECcDBzEHHRwTYDgdUn0JDD1aCzYvBlV7PBcnRhMoLwZ4OQAYH0gtCRUCUB4CUSBWHyg4KHt9GiZ9FHsaLBYIGhYLfFgsECgiaB40VABYMSkGIhcjKw0rQXQZCAhzGSsRFHp9PlFy","fqdn":"undefined","domain":"undefined","tld":"undefined"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.689Z","timestamp":1726452546689,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /WGJFMUk5ACZcdjlfJxc8Kg54FHseR3d3LWoVfFItLVpxSSpsBzQfKjQNMFUvKg0rRWc2BzEUex4oFwEmaDUTUiISNCoUex4DAXwjDSUXRyoQFQ1QDmEKCloQYC8dXicNNnEDBDINJH8zERgnd30pLQZafxswIggKPwoueiAJNQRgCH1QA2sBGhEUcgQiByteGhY2HEEFCQ5gAw8VCy5BCg8KPXsgbTUfdgcwMi5gewgqKlwYCw1xfTAeBBViACkAAHR9OQsqXR0yI3J6MCswJEkPITgEY3ECOiFYHR8KKGgnNFAjdh9rKCkBehEIfEcLNQkzV3ogECcDBzEHHRwTYDgdUn0JDD1aCzYvBlV7PBcnRhMoLwZ4OQAYH0gtCRUCUB4CUSBWHyg4KHt9GiZ9FHsaLBYIGhYLfFgsECgiaB40VABYMSkGIhcjKw0rQXQZCAhzGSsRFHp9PlFy HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-16","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.com/Mmt1YTAdVBYSDVE/Ny5+X1IzImhVOyJRZXYNJC9UYSo/UnJ0AFMVWVZWTVMFC1pER0BbD0hSAhQYAQBERxhIUwACXlMIXlQESFMAAl1FUQkEXFBWc1ofARFDF1g0RAJ0TkcnSF8HWwxVVgIUGVNaChsGVRwIGkQCdB8dFF1QBRQIXBdYMwgVAS8vNFJ8QRZSYwoFRT4AF1lDCF1VH1BSdFsIGg8VBShEUgADXkZZCQVeUFZzA1NDWAcKU0NVBQFaR1UJA1hHVxZEVkVPCRxZW1cWR1ZEWQMHXENQBQFSTFcEAF5CR0RCChJcARQbARVcD1pCUwYGXkdUBQJbR1Y","fqdn":"nismscoldnesfspu.com","domain":"nismscoldnesfspu.com","tld":"com"},"ip":{"addr":"172.67.180.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:10.035Z","timestamp":1726452550035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 07:52:25 GMT","end":"Thu, 05 Dec 2024 07:52:24 GMT"},"fingerprint":{"sha1":"BA:05:4A:DC:8D:3D:32:78:43:63:AA:60:7D:72:C1:C1:08:E9:80:9C","sha256":"6E:56:1F:70:D0:D4:0A:69:EE:D3:A1:9D:FC:33:E1:FC:8A:60:33:CC:8D:A4:24:D6:E2:D3:4A:C5:71:56:C3:F2"}}},"request":{"raw":"POST /Mmt1YTAdVBYSDVE/Ny5+X1IzImhVOyJRZXYNJC9UYSo/UnJ0AFMVWVZWTVMFC1pER0BbD0hSAhQYAQBERxhIUwACXlMIXlQESFMAAl1FUQkEXFBWc1ofARFDF1g0RAJ0TkcnSF8HWwxVVgIUGVNaChsGVRwIGkQCdB8dFF1QBRQIXBdYMwgVAS8vNFJ8QRZSYwoFRT4AF1lDCF1VH1BSdFsIGg8VBShEUgADXkZZCQVeUFZzA1NDWAcKU0NVBQFaR1UJA1hHVxZEVkVPCRxZW1cWR1ZEWQMHXENQBQFSTFcEAF5CR0RCChJcARQbARVcD1pCUwYGXkdUBQJbR1Y HTTP/1.1\r\nHost: nismscoldnesfspu.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 16 Sep 2024 02:09:10 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qk%2Brh4QdAvKqbKD4B9iifz150tAx1%2FN5M7VPnXUx8iKsbt9ZFLaSzhJPfQzWagZ7YYRDBGk4BuOvIoXXzGo%2BqHoV9Gv%2B%2BsEchorB3t6smgIM7rwhodWL7HuYS1CvbXgbO0%2FvZgILrg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d5015bd29b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.342Z","timestamp":1726452546342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1cdf\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7391,"size_decoded":7391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7733), with no line terminators","md5":"aaaac23173da082efba2d6874d01cf03","sha1":"b14b1cd1e6bf4cf4a324182e4ee3fe3ec370b896","sha256":"85ede8080213e13bdc68570d742105289541dfc11847ea8cab78c5575bac71e9","sha512":"b62005a9bb20bba89b0f5b2a65ab88eeb353cf179401959b1455f5db826eddb72ecfee7711511f326a29cfdc45dcbbb9cb22bbe16efaa07ceb58954250958a94","ssdeep":"192:5qaMynq1A7BP8HdC6ibNlko/io/pbhZE2O:PFqOlgdC6ilxG2O","tlshash":"c8f1247bb912207596177faa07ee811a3576314001a7ea6b3d0cc45b1b58b70a2f6ffc","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.427938Z","times_seen":1996,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.682Z","timestamp":1726452546682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Sep 2024 11:45:15 GMT","end":"Wed, 04 Dec 2024 11:45:14 GMT"},"fingerprint":{"sha1":"1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC","sha256":"E7:28:53:09:93:42:8D:80:AF:A6:C7:8B:00:0E:81:92:CA:AF:29:34:FD:99:AF:2F:95:C4:F4:29:8C:BD:E6:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=374855076774760@1@1726452546; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=w7p5Rs6SI%2FTYIGWrVl%2FJNVhGiy8wMvnD7SXCx9WF7p1hMhGXg51BT7%2FiPUQP4nPuo6K3kNxk8RUYci0vjSVAf8vulSa82G49NEIT3ICKsOuo8tAlNyNO1vmtNMERb6ive6AI9Co%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c3d5000c8810b06-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26,"size_decoded":26,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"178b11b56071f339daf27ec08ede0dae","sha1":"1807e33238fa43b633c90c374d20581ec6d69784","sha256":"acb4142fe1dc370dfff096e411b714b1d956b8f52902061902f5b2767cce334d","sha512":"ffe7b83fd5e6c241dda0e36038ef524b6f2ef65bedff6fe7d76efa691a165c848be0ef3f64156cdbea32279682a3935cf81656dabaa340de818ea90e642d8033","ssdeep":"","tlshash":"4e800002020aa8a00a02a8008282303c023003088ea0202c3bc820020e0020820e8cc2","first_seen":"2024-09-19T20:20:48.473951Z","last_seen":"2024-09-19T20:20:48.473951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/clipboardjs/clipboard.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.347Z","timestamp":1726452546347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-2296\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8854,"size_decoded":8854,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9015), with no line terminators","md5":"80d5abc1a138e0bd813ef3c0175406a8","sha1":"4f81606ecb7eb2a0d950a56c4feb97bc5e2833f6","sha256":"f96c1b2b44a8462c6ac4b47fa8e79da5c929f610c49abfc0e9ac38e070d5b724","sha512":"dd16673617bfd4ddb69e60e281e1e39877f643f6d5987f569139db847ea9b341a0983c7729781398971df0e4dc8685fc2276da93b8c7b1195d3ce3a6ab80cac3","ssdeep":"192:q0Gfh/1JmtuV6qDpOJ4GQUrAg9fvsx1tkvcRIIS7e1V:HGZ+kV6Kh8E2fot+Iaev","tlshash":"15128688f290b1b1929b607b417f420fb372d45db02e50a4b65de4f5ad78aad4227f3c","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-06T03:47:50.857025Z","times_seen":2242,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.242Z","timestamp":1726452546242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-dbd4\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56276,"size_decoded":56276,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b85ba9fdc07788f5208002e4588c1e2a","sha1":"f4a5b283e901f573f1237b6a096da4c295e8a65b","sha256":"f809de94a782db6c7c5bc85db8bc8f6b05b1a473f736080b3ea8377fd6ed35cc","sha512":"7bb50a5b8a823b51badfba73950f0337d1b44e15306ee1c89ad60e3a71ebce0330668ab05faad288541dca0d02902b3a89a599a437f1b789e063944654ad387e","ssdeep":"768:vch0r9GOvPOhSF7pzC89Na9UNdO3gDe2VOk4:U4v0SDzC19OXDe2VE","tlshash":"9a43430d3ee7221584a771e89b9f64057634e42f290add153c4d87c4ef48938e2f2bea","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-05T13:30:35.108978Z","times_seen":2736,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.337Z","timestamp":1726452546337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1099\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4249,"size_decoded":4249,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4394), with no line terminators","md5":"07d7abfc2a0b542f84b84f090361b81f","sha1":"ba07801dd09cbaaf882acc40f96449ea5edb878a","sha256":"57c815c1f2e67478932fca8e2311f7b9308ec3fdea93379ca7b61559fc67caaa","sha512":"ba997b6cdfa01c678356daa1c863ed406cb0c4883595b003366240b14a83e8fadd72844bb45824384012bf2bb8d8f1a343d1e057f9654bafd71d6e314cc9a301","ssdeep":"96:egRWOQ8nCGOYOx6TOkDFChbkXUWV/QFEfhMpWd:BAOfXOYq6TOkDFChbkXUlFEpVd","tlshash":"63916747b3226035465faaee9ff9938c32673291d27399147d1d8a460357bb280f0bf5","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.423035Z","times_seen":2042,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelpfulinother.com/VW8zM2o0DVBeVTRSURUfJwMOFlgTSgF1DmcYClAOIFcHSwlhCkIdCTkARlcMJwBdR0Q7CkcWWBMrUHYwHzlmRD4ePFBJCSI+RX89PVhhXSBhNmsCPRsFQEQhPl9Bfy4cG3FnMDsgSlgvDCx+XiMtWwFXKxghY3I7DzVKCiwbB3ZgLAM2Sn4QExdidCs5IXB6MjBdC0QjPSEEViIYG3VwOGU2ZFwvGwZqFlgXDGFEEBoFXFgtLF9HeikTOH5KAjomYQtSHCtYVC8CIQR2WTkKV14SOwl1VE9nLVZ0OCU+RGEZD1xEUCYsDFR9LANfVmBbZT1bX09nKWpkBhEtdB4SOwlyeh03KGp9OQ0tXWk9AzlXewEsJGF+Hh8BcRZYFyFdYV8PJ0tyDmYDWFI/H11/SR1wXXF1ORQCf2QGFi57cQAMBHFUOhIHChUAJgBdQ1cDLn9xOmcMBkMyEjY","fqdn":"onelpfulinother.com","domain":"onelpfulinother.com","tld":"com"},"ip":{"addr":"143.204.55.43","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.831Z","timestamp":1726452546831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onelpfulinother.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 19 Aug 2024 00:00:00 GMT","end":"Wed, 17 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C1:C8:76:FA:93:95:D2:6A:1A:6B:3D:6B:D5:76:82:58:31:55:B9:2B","sha256":"6B:63:34:43:84:F8:B5:0B:49:C6:ED:6D:1A:15:0F:F6:0A:55:AA:5C:41:06:A3:8F:1D:AB:6E:37:DC:27:A9:0D"}}},"request":{"raw":"GET /VW8zM2o0DVBeVTRSURUfJwMOFlgTSgF1DmcYClAOIFcHSwlhCkIdCTkARlcMJwBdR0Q7CkcWWBMrUHYwHzlmRD4ePFBJCSI+RX89PVhhXSBhNmsCPRsFQEQhPl9Bfy4cG3FnMDsgSlgvDCx+XiMtWwFXKxghY3I7DzVKCiwbB3ZgLAM2Sn4QExdidCs5IXB6MjBdC0QjPSEEViIYG3VwOGU2ZFwvGwZqFlgXDGFEEBoFXFgtLF9HeikTOH5KAjomYQtSHCtYVC8CIQR2WTkKV14SOwl1VE9nLVZ0OCU+RGEZD1xEUCYsDFR9LANfVmBbZT1bX09nKWpkBhEtdB4SOwlyeh03KGp9OQ0tXWk9AzlXewEsJGF+Hh8BcRZYFyFdYV8PJ0tyDmYDWFI/H11/SR1wXXF1ORQCf2QGFi57cQAMBHFUOhIHChUAJgBdQ1cDLn9xOmcMBkMyEjY HTTP/1.1\r\nHost: onelpfulinother.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1193\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: bAKNUoaOyfz9wFG5QW5cKtz7_40mqPP8P9G9QrtH2SsI5s4o7azDGw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3039,"size_decoded":3039,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3065), with no line terminators","md5":"0c9c97dd32bf3d4d89502375a971aa54","sha1":"ff8388669e01e84b4cbeafe94795d265ef480ec5","sha256":"3477ed19f19f1d7dca37d14b4895304ee8a47d2a905ba0dfe313b5a97f40e1cb","sha512":"bcd7360d43b45ffaeb5b041a2eecf47d1339c83a230466dbae8506db7fd0f107ed13bb5550e0b263919b91621978f6b936b8c93ce950bf7a700485d0e0e8afdc","ssdeep":"","tlshash":"9051008e34f3a081c2b27024553bb89afa385a94834cce14863d96bcbd715ed6317f4c","first_seen":"2024-09-19T20:20:48.491725Z","last_seen":"2024-09-19T20:20:48.491725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.221Z","timestamp":1726452546221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-45f5\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17909,"size_decoded":17909,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.tmpl.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"SIA VEESP","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar","date":"2024-09-16T02:09:06.231Z","timestamp":1726452546231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 05 Oct 2023 00:00:00 GMT","end":"Mon, 04 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A","sha256":"15:B0:C1:8D:75:20:95:51:19:6D:16:9E:38:D6:24:1F:24:92:F9:03:A9:4C:50:93:69:06:B0:EC:E9:0F:71:3B"}}},"request":{"raw":"GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/35a4ff91401f11c6996f859b7341abef/Code_Postal_night_folder_161.rar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: filehosting=jp2qt94kiivveerija0k7ehmt6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Sep 2024 02:09:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-3cb\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":971,"size_decoded":971,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1068), with no line terminators","md5":"089e1431cd0ddbbacc07175c48de0f15","sha1":"65898769225f99ca698658bd7a4c3aa623dc82d4","sha256":"dcd0212b5e453a6411aeef7b4302e0be890be6462d8197cac028f185c2f174fb","sha512":"c0da696423c8a92e9f721bc1dc676fda1d797a9a75910344dd186d57fa481079e912bf249e2206d16ab6043898586faf4fdbd1ee95150b958ad6ab553b40db89","ssdeep":"","tlshash":"7611adca3465e086c1d57d20607fcc2970aa58ebe2995628c286c7a83e314be9037fb4","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.415652Z","times_seen":2089,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}