{"report_id":"66883b8d-b3ac-495f-8e4f-68df452f4afb","version":6,"status":"done","tags":[],"date":"2026-05-03T18:55:03Z","url":{"schema":"https","addr":"megatge.net/","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"172.67.164.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"megatge.net/","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"title":"Road to TGE | MegaETH","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"megatge.net/","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"172.67.164.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T18:55:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"megatge.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-30","domain_rank":0,"first_seen":"2026-05-03T18:32:11.142872Z","last_seen":"2026-05-03T18:32:11.142872Z","alert_count":15,"request_count":15,"received_data":8012485,"sent_data":7002,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"megatge.net/wow-1.1.3.js","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd0e930188c51c0e339d89e1e43d3b78","sha1":"08ed3ae466cae455883721fca7a3b92d11c9f0c9","sha256":"7329751f16cc5ff11a5ee35b4db80cb01de3b9bde15c16a5db573879f3572a85","sha512":"299ae93727fa22f68f4a8870d4ab55eeafbdd6ac0125653532f7f57f4e8a0685265c6e76a078e915dac84c5de51b85fdd36f2dfad6e914d4cee178939a0c89cd","ssdeep":"1536:IH3e5/8g3e5/8ARYgtwWYmjf7+bhW4gMOZPonbKrVaczz:hoEyyQJlRpf","tlshash":"4eb3a3da190ad4d98e1561ded473f808f0684a63cdacf097e66cdcc2b42df62849727b","size":117918,"data":"","first_seen":"2026-05-03T18:32:16.597951Z","last_seen":"2026-05-03T18:55:06.567507Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"71c69a5adb0c8736d9b8949b2740b17a","sha1":"64f71b9afb0e0767a29915ebd14703fc7e299fec","sha256":"090669d27d6bd5a6612ea05cc10accff83089073e74ce2a6bc3738a0f875e2ad","sha512":"50dfe33d3e243a4423b7c8e67a7aa6e09213136c0486731b6bcd87eab96f8f21e75d90c8f549728ad1eed7cbe511b6d70fb9594e77ebf5fb919187ccfbed6e46","ssdeep":"1536:xH3e5/8M3e5/8AVWnquxV6dM5MOKK3yJNybMJrNRAoo:socquxViuM6iP3Xno","tlshash":"2fb37fd9590ad4e88e4161ded473e805e0284e63cdacf1a7e67cddc2b82df22849717b","size":113558,"data":"","first_seen":"2026-05-03T18:32:16.601786Z","last_seen":"2026-05-03T18:55:06.575073Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"megatge.net/5a56e3c1761e58ad.css","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /5a56e3c1761e58ad.css HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: W/\"69f35219-3ce6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbGn8dTaOVZSDF%2FUnqvi2G0BKfpY4foJkQCC3DDFUQVOXz2zCYwFSU48QomRye6PkBQcMW20xJTX2198NNM1YTAKrj939usWM4uVTkeq2JF%2F5fUAuihQuvvZH0hG0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c00ed256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14123), with CRLF line terminators","md5":"42181515d58f86ad8e4523c357920e6d","sha1":"44d8c622cf710311d78b093b2cff8efa3f856303","sha256":"fbf4e2500089d2999cd600d7eb31945d1088feee420af0b52e5b31e0e9ab6121","sha512":"3c456182a54310b0605cd1c21c72c1a5fbcd7810350c2d790eccbb606f7cc4e121cbe5d5bbcc621fc9066b8945b9214a00e1dc6a8c4f932d1e510f2069dda924","ssdeep":"96:0J7RiyeYsfu72Xo5AKIn5PUPUApejzfbjTe+6M/KqKFl86553tQJVqI3O1BVtr/0:K7gbTfu70p5PUPUV/fbjm95Ie/VB/k9","tlshash":"6c62dc84e8505e3a2c237ea247ccef5cc11b94d258eb1a9e3edf104d0a827d91bb5786","first_seen":"2026-05-03T18:32:16.552528Z","last_seen":"2026-05-03T18:55:06.554911Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/anim.mp4","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /anim.mp4 HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3486416\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: \"69f35219-3532d0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1376\r\ncontent-range: bytes 0-3486415/3486416\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2FyHYILx2K723mS2mz3gE7B7gsqY5L8wt8qRbOcYej4UleE8KP3TTXifQLD7WhSgSiB8koSBHFKHhVBUPMBjYC6zTl%2Baq2EJIvZRdPw8rFbAASzmIY2AiSi2jjL0ZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c1c95856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":579200,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"6c0f988354ca56efe98d0dd8ffee235e","sha1":"3bf9812b375ab55e3b93bd359fe12863515e6a95","sha256":"4a4959d8cac6cd6dcfc8f282809a2d705bca3fc880166e842a40dd3bd834b6b8","sha512":"1cd627f06ccdbaded52c14df03c87605225efd89c8699da7594ab888509631116079339dc8d7c2b92a8e67409a40853be1646ff62cecc2f26363df55298a3294","ssdeep":"12288:OKiER2W0fJcAnwOEM5K5SbU2x08eoVMXfnrFnY5Suxwa:ngW0q4/5pbVx08e/Ppnla","tlshash":"4ac42302269f38ddda15e52d4779ed6fdc153ba690086fa386513d226fe26f03203ee1","first_seen":"2026-05-03T18:55:06.556716Z","last_seen":"2026-05-03T18:55:06.556716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":14,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/anim.mp4","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /anim.mp4 HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=3473408-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 13008\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: \"69f35219-3532d0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1376\r\ncontent-range: bytes 3473408-3486415/3486416\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2f92UO663D0nzVztF8AB80edi7n%2FaZGmXCqJrwcQ0bi2BCb6VBJ555rTkv5fWnFZQfNRaW2GsCoj5xpujqp%2B7un9DN0TenzfN1VL7r8XvqxEaju7RO2xQ1CzMEAyFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c229d156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13008,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"0311addffd837b37c70f0d02d3c2164a","sha1":"302a391e4c8bf3a4c5f47682abd6dbedf8b9ca5c","sha256":"f5299e0f4b146d1ab5a383b5ea7e136e82478c8ca0adedc6392bb249cba84108","sha512":"823ccf323d8f76f0431d80bcbc70d26b552f4b90fab17d32d5fd5d78c48fe36b588526966e629148626cefbec64ae86ef2893c6c7b5b6fa79c88dd38198a22fb","ssdeep":"192:NuTH7d6kp2hvfC7zglXCS3/BFgViv/Fh/A12ET7WTnmYhZ24:NiH5me0tJPHgVivtsLT7K5Zx","tlshash":"cf427f9e0f02d411c63a1035edfa83207774e5fc5a9b571f968da83c6cc23a86de4996","first_seen":"2026-04-28T18:10:32.612628Z","last_seen":"2026-05-03T18:55:06.560261Z","times_seen":16,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/favicon.ico","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:41.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:41 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1377\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNBVmPCpxMEpUYM%2FBuqkNVTRZUXITA0yRs2Gl8AKTlUFTKWVFpZLmwyxs8umsBp3oq366hFuTxL1a633T07Oh2dMydgE2TE1HgQ%2B7hrGu%2BE2f4pvb6MY%2FMtnyGR1IA%3D%3D\"}]}\r\netag: W/\"69f35219-cde\"\r\ncontent-encoding: br\r\ncf-ray: 9f6179c3cc4656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3294,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bf57820134b35af7f4f02e9f1ba7cff8","sha1":"7cfb7f2195e3b94f9e53e611524667ddae69041d","sha256":"84a09aa8c59d97079a5125e2c38cdaa5f698eedadefeb9b966c82d15fdf333d6","sha512":"5491a61121fd9a99b3e1ac1e213f774d9a4eedf5e65aeb3ba55bc7c474a50387eed265daee77471fbeadbdbf2c20c90b64ab7dffcefa23f14701e025100cd0b8","ssdeep":"","tlshash":"0f615ddfc812951597290e22bc1fddcaf9ad02f5db30cc61bf926431f62b91d951a138","first_seen":"2025-09-03T17:27:13.432757Z","last_seen":"2026-05-03T18:55:06.561667Z","times_seen":119,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/secureproxy?e=jscdn/getFile","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:41.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megatge.net/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://megatge.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"qrzm94qjqo995rwvjjo2\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CaOR8T%2FslkeWOyCtkBQRkPxJMyHBlnVLtDFakWAOFue2Q7N9y9VCv3QKENttMWRhN123Q%2FUeYFQgmVTfc3L8fEcDD8bN%2FjqadIlnwybj9aBGyd1dMrkCm5fRiD223vzM3IYTu3U%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9f6179c3ec6656a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3412455,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d5c04895259a92f4d816d549c579503c","sha1":"6abd0bdfe37cb33a3e203aae5c6411c7b1996c73","sha256":"3bd3dc6d5a8e2db853726f95835cb45dcd0b4230f684596aa951059b6d062fd7","sha512":"6a593c9475a6b30ff2ad5b3894e417b32274461bdc83b313d6759d7eafd52a642fc51679b9a0ff1d7a8dc46d97b47788617ea6f0046c01dd02e8af9282f03f4b","ssdeep":"24576:EjV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdAHYap:Ej7OwPEZJsIYap","tlshash":"e3252341ae67e99b4f4c6ab6a4f77d4769814f4348cc60dfea21e4c020ec7b541dea0e","first_seen":"2026-05-03T18:32:16.588576Z","last_seen":"2026-05-03T18:55:06.562865Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":637,"receive":487,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T18:54:40.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzcSeTMtw1dVRW9y46UAYreq4abXeHAtLVDG0Qy3Hnsk2V5r3Q9oBEaExARDkJgRT%2Fkg5XuUUdq%2BLVfaL%2BcodgKF3LAVAT9VYa1Zz%2Be9XHktY9zjcHSOv08mn4WR%2FA%3D%3D\"}]}\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f6179becc6856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14003,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1212)","md5":"d9baaf7d6336f5096fe282bcf30563c3","sha1":"f3740de57ebca06e64144892d65d43552492fffb","sha256":"179939a48daa3da206dd00a47b7b2fffdfe675db3bf363f62f2e931728e76305","sha512":"6115ab183f9830426ec9665a1078ff5060e96f3325f0b716a16cb169f5bc9049af87db564e4b9f26421476dad48d155f64790e8a6d630aa4451e3ffcf6ac6a2b","ssdeep":"192:zRQabARGptj9T/2D7kch17oh0JUiTvMRu8FUsjJaBZufg282g2nP:8Ep/MtLUicuwUstAE","tlshash":"af5209a122f4162aa10647d5eaa5b0364d7ab5d7c21f8884f3dc0a4e6fc1cddccb72c5","first_seen":"2026-05-03T18:32:16.565081Z","last_seen":"2026-05-03T18:55:06.564012Z","times_seen":4,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":47,"dns":28,"connect":1,"send":0,"wait":17,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/47bcb21e04bd9675.css","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /47bcb21e04bd9675.css HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: W/\"69f35219-15a29\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxJSAlobUqtIlZm1oHH52tssjU8jL4%2FCnM5CZ79A49UpguJPmLmfs9QXt8BqhRAG7VSAXM63rgqFTWQvh4sYFvenDxMu1tJideuMI7QdiSzroOksTioMM6wbQWp3Ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c00ed756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88617,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c6dd0744db8679ad11363b637b1dac7a","sha1":"75caa75af424dc6dae4c82ddea49f2194f0c1d04","sha256":"bdb5f59934d29d28ce45f60a86636173e2a3b66df6502a7b7cee73825fe4e7f0","sha512":"39d8123a1a6f698f4b7e0a590d54aed45c9fd893080a1898b1ae6125fa8765941086014e41a00d79764c27dc3797fd142d6e4f13010c0e7f043f6327e743295c","ssdeep":"768:q/BNVG0HuPHEI5wbTUo88CIK87te2iw1OTu4q3r077hf4hot7j/EHxRtcgsS71Rs:uBNVG0O/EFTUohdXP+Z6Vi","tlshash":"138352945a47211b6a336ff1ebe5215cfe1b24b3ce1614b57ecc21098ff0ab49692e1c","first_seen":"2026-05-03T18:32:16.558254Z","last_seen":"2026-05-03T18:55:06.566335Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/favicon.ico","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxwHTqvrKhsuV2kK4vlhpkm6T2r0KkF8BrHY4%2B%2B5ZjjKPF5%2FqbP61fYV6NodaIgRJu7zjpNykelRZFBX0sbdQNPIOOG48ai5YL7mdFjo%2BODnfcpHZ8ER2h46RZLRVA%3D%3D\"}]}\r\netag: W/\"69f35219-cde\"\r\ncontent-encoding: br\r\ncf-ray: 9f6179c00edf56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3294,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bf57820134b35af7f4f02e9f1ba7cff8","sha1":"7cfb7f2195e3b94f9e53e611524667ddae69041d","sha256":"84a09aa8c59d97079a5125e2c38cdaa5f698eedadefeb9b966c82d15fdf333d6","sha512":"5491a61121fd9a99b3e1ac1e213f774d9a4eedf5e65aeb3ba55bc7c474a50387eed265daee77471fbeadbdbf2c20c90b64ab7dffcefa23f14701e025100cd0b8","ssdeep":"","tlshash":"0f615ddfc812951597290e22bc1fddcaf9ad02f5db30cc61bf926431f62b91d951a138","first_seen":"2025-09-03T17:27:13.432757Z","last_seen":"2026-05-03T18:55:06.561667Z","times_seen":119,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/wow-1.1.3.js","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /wow-1.1.3.js HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: W/\"69f35219-1cc9e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxmVcBHAjfK6SOzbzJjOvhGpivSGGqGZY5EYYTX84Z%2Bf51aB4ahXmGHnovDChr6rA2D1CQwA3jFnmCVjG6BLI46JNSo4yI%2Fr7VnTm4QZvBoQAogmC33HhwNQEv%2Fv7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c00edc56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117918,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fd0e930188c51c0e339d89e1e43d3b78","sha1":"08ed3ae466cae455883721fca7a3b92d11c9f0c9","sha256":"7329751f16cc5ff11a5ee35b4db80cb01de3b9bde15c16a5db573879f3572a85","sha512":"299ae93727fa22f68f4a8870d4ab55eeafbdd6ac0125653532f7f57f4e8a0685265c6e76a078e915dac84c5de51b85fdd36f2dfad6e914d4cee178939a0c89cd","ssdeep":"1536:IH3e5/8g3e5/8ARYgtwWYmjf7+bhW4gMOZPonbKrVaczz:hoEyyQJlRpf","tlshash":"4eb3a3da190ad4d98e1561ded473f808f0684a63cdacf097e66cdcc2b42df62849727b","first_seen":"2026-05-03T18:32:16.597951Z","last_seen":"2026-05-03T18:55:06.567507Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/e2542b709b225903-s.p.otf","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /e2542b709b225903-s.p.otf HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/47bcb21e04bd9675.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 609908\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: \"69f35219-94e74\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgdCOHW7SAbbqKSDGWaHtkUz6sH2cht%2Ft%2F49FjDvr5aqQvmZ4W76yfElBupf8U4bqFxnws8PzhJV63unLGHgVrTYT5g1natUI0ys5l47waxTs%2BTgEvvWUdFlfvdl3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c188e756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":609908,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"b3ac1bd5e427f84b07373609c6e63d4a","sha1":"32a5639cbf87b4992575738e1f72578d7530744c","sha256":"14928444e337995a7fe9bae85e20b83139f6e0c78416df87feaf68613d41e02e","sha512":"f0982ff299c03d971b14352d2f58f7b51497d3bbdc99f6129f4feb85c66b32f155aa880364b29b6d60c1b57708df44aefb5b34e2d0e6cef7c22549906f28b0a7","ssdeep":"6144:X3Ax9NKA6vWW+LWu4UEvLcEBt2i/PcR86YRNqDKcMxgxb4sjYGKz:X3q6vWW+LWu9EwZi96Yzq+cMxgxPA","tlshash":"72d452111604bd56cf941206cceec6950eb3bacf8f1977d66d6312cb8fc9d1e162e22a","first_seen":"2023-09-10T08:23:33Z","last_seen":"2026-05-03T21:41:56.759168Z","times_seen":209,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/dots.mp4","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /dots.mp4 HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emq6wFw0gPaJxjq74c7Ufp8S8A0Lq09fpq1FN%2FssH5iKmhTqgaHLL0%2B6Swpct1RTlEQ9JrVe1VhpkCQh1DkIBQOqk3iRQKshIbejt9eqAJMJoDgYb4x%2B7CcR7p6CPg%3D%3D\"}]}\r\ncf-ray: 9f6179c1c95a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14003,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1212)","md5":"d9baaf7d6336f5096fe282bcf30563c3","sha1":"f3740de57ebca06e64144892d65d43552492fffb","sha256":"179939a48daa3da206dd00a47b7b2fffdfe675db3bf363f62f2e931728e76305","sha512":"6115ab183f9830426ec9665a1078ff5060e96f3325f0b716a16cb169f5bc9049af87db564e4b9f26421476dad48d155f64790e8a6d630aa4451e3ffcf6ac6a2b","ssdeep":"192:zRQabARGptj9T/2D7kch17oh0JUiTvMRu8FUsjJaBZufg282g2nP:8Ep/MtLUicuwUstAE","tlshash":"af5209a122f4162aa10647d5eaa5b0364d7ab5d7c21f8884f3dc0a4e6fc1cddccb72c5","first_seen":"2026-05-03T18:32:16.565081Z","last_seen":"2026-05-03T18:55:06.564012Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/null?e=jscdn/getFile","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"POST /null?e=jscdn/getFile HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megatge.net/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://megatge.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"qrzm94qjqo995rwvjjo2\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Sun, 03 May 2026 18:54:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grLR1yMUbpNT3GSUDs4voK%2F3Gu9olip0maCeD4Ziq0CprdMqmPECdrdJ0oyQmdOb%2FN9uGBk5tlwRjfjTMlCc%2FGnbghxu7nkCV6AMAyTgsGXsNQoVGPbihFuhDhxYDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c1c95c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"d5ce8ba8dcf98117e9329c3419a8298a","sha1":"fde2a01dc50e1858314b5572887549e2bc2b19b7","sha256":"0e3ae3475a519a5c9f23858c084d3bcd133111e4f42234e99bf09652c5fd937f","sha512":"98f2673ba8d2e2afa175cfd09e401dedd0e5bbb09a0c20aa3c7395343a79a605ac6b2d5af83d7e2f46586de4e0444e0fa86c9641edd26d0e75db4292fabc4f3b","ssdeep":"","tlshash":"17c08c6e271b3c48c66321742ac3f4b0c28e92a284f84300a444005331c32269acbb51","first_seen":"2024-04-28T11:50:49Z","last_seen":"2026-05-03T18:55:06.569665Z","times_seen":95,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":319,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/anim.mp4","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /anim.mp4 HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=458752-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 03 May 2026 18:54:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3027664\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: \"69f35219-3532d0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 1376\r\ncontent-range: bytes 458752-3486415/3486416\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kq2dBItsOuPfJO5c4FAKbF81q%2B5m7iOihP8taJONahCWsMOk9gAnATFNz1SWAvQESJlG3nO6U%2Bf3DmT%2B119Izv7OpDR%2Bys5WF%2BTKBUgT%2FEdRBTFVhA7j4O1zsycqtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c239f656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3027664,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"57d4f59576839ec818400f67f2241593","sha1":"7719173ef4419b6a75ab111f166956775931e839","sha256":"2ffee3e404dfd975fa42bada6ca387ddde5a3f0d7a812fbd3a7b4354b5d7011b","sha512":"11958ec635d2135028a98e124788127cd664ab40de6d4f51e8858e6e4962eca75606e6082d72dc038e4f2dc17137c3d7b7beadf63f3bfab46cabbf67d2801b7b","ssdeep":"24576:7pnlHrehtq1j7X3GfbIJsOjKieEnVgoZqzdfFp:7pnlqh8d7XWIsRie+goZw","tlshash":"292523d131eada8ffc66f77d3b7ac3560092a66c04405edbc60f09f0ae629529b536d0","first_seen":"2026-05-03T18:55:06.570634Z","last_seen":"2026-05-03T18:55:06.570634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/711c3eb9b9f8a5df.css","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /711c3eb9b9f8a5df.css HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: W/\"69f35219-15159\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vz38nVVfFiNBsQmwh%2BYEGaQWb%2Babh4rj32batcIU%2BvVQMGrBHUNwD9bHrKS0dTndpx1tsgFnJY6c%2BGX6DEiNMM1HbnKUXyWLmr%2B2TF5gnsPPz5DOBa6IBGvc81f1qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c00ed456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86361,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64069), with CRLF line terminators","md5":"88a8fbf484a746b60542adb37da7a4a8","sha1":"40033b1453b869b217c6f4f2e4bbf26d42cdcb7e","sha256":"31e59c335a0b2eb26cb34efd20d6ed61f091712d4529889b292865613df2a821","sha512":"7f5ca258053498a02b3f7026a21cdfae3c34d687faa34c7b6d5b5afd0b0249a20e67bae2ced999fe804c1375fdaa063d95c2cf80fd03148189f0f96fb8d1b01b","ssdeep":"1536:oDxGQedsx8Zs6+LnpcFugKvBS0rWC1qdBs87de0DFJZf:oDEQedsx8Zs6+LnpcFugWS0rWCwdu87Z","tlshash":"3383b6a0f225993b7c1368b6e2ecfc4ce21be1c1df6667ecfe56251106c27e51a62704","first_seen":"2026-05-03T18:32:16.574217Z","last_seen":"2026-05-03T18:55:06.572777Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megatge.net/f15252ffd0d82297-s.p.ttf","fqdn":"megatge.net","domain":"megatge.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megatge.net/","date":"2026-05-03T18:54:40.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megatge.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 12:04:03 GMT","end":"Wed, 29 Jul 2026 12:04:02 GMT"},"fingerprint":{"sha1":"40:FF:8A:97:30:3F:83:77:B1:EC:96:FA:FD:14:44:DF:A8:80:03:37","sha256":"C6:36:B6:B7:99:91:C0:EA:CC:39:66:B6:C9:13:A1:7B:56:57:89:03:7E:63:DC:B7:4D:4D:79:D9:37:84:08:86"}}},"request":{"raw":"GET /f15252ffd0d82297-s.p.ttf HTTP/1.1\r\nHost: megatge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megatge.net/47bcb21e04bd9675.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:54:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12772\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 30 Apr 2026 12:59:05 GMT\r\netag: \"69f35219-31e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1376\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6rYDDSxqNV6E9AP3ppVrBuHipnvOoTM3tbvGPlb4%2FL3PIKMdwIzaSseijATljntOU7Qbi7iZ6CTvI6f39QnLj9PClMs0wXnCwUc%2FfARIRbYpqz5KN5TlNKc7rBfooQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f6179c188fe56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12772,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"800e58743d8cb5e90d3ca06ef8c7ac2d","sha1":"10ef7b1c22254ba295d67b6cb03595b1fd70e216","sha256":"235e75e5fd6429303cae29518e112572f55fe6f8fa66202194d21bcaa3f03c9a","sha512":"de98a42534b93262d248f1f26b54e7a68c19875b34981e96cbf0c22104c93ef91a123b24747d7a237a80c32d5a7a7e075c0a20119e1607e71d66a8c5b0253638","ssdeep":"192:KcHfEXTM7n1aXQBG5JrajK6a+QPBb8EUrhyrVVzxy7W+g6xezH73jT27//Mp:Kc8DMRCSU1BHTyK+heT73j5","tlshash":"4642e91ad3a9cb6af44733bcdde21741e7b65740f3a9e74b000d9066ea582c4859873f","first_seen":"2025-09-03T17:27:13.566566Z","last_seen":"2026-05-03T18:55:06.574175Z","times_seen":54,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"megatge.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}