{"report_id":"74654acd-c093-4800-b775-ef4225019c22","version":0,"status":"done","tags":[],"date":"2026-08-16T15:24:05Z","url":{"schema":"https","addr":"megaweb20at.xyz/captcha/188543/index","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha/189783/index","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"title":"megaweb20at.xyz/captcha/189783/index","dom":{"size":41775,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14173)","md5":"56d91081a63563c4ba59cdefb5f2c93d","sha1":"186240534918c141baba4cd406fee27f0a22fdfa","sha256":"4632c1263f78b3756cbff50052b4e28c136788d24483149650a3a6afd46a75ca","sha512":"58a5b94dd40d637a29f404c9d437a2c1a6f446e96fa1e088f8ab4463db63c0fc5d21bac1f8262858ef8f2519db70cd7061e12a9e40aef20508b6a8279144be14","ssdeep":"768:4QhvLMSRA7rm0O9PYa/+Wumsw213wQVu2VaVaPC31EaNbFpjerzMQI:XvLMSIrm0O1/+WumshgQoBMPmEOFYrzw","tlshash":"b713bffb3de710066c03f0345feb99807c2a801be14ac96d7d8c264adfc95a599a7798","dom_hash":"domhash22573776508eefd7d23ce9857c1bf532","first_seen":"2026-08-16T15:24:06.667625Z","last_seen":"2026-08-16T15:24:06.667625Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha/188543/index","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T15:24:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"megaweb20at.xyz","ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-12","domain_rank":0,"first_seen":"2026-08-16T15:23:16.580606Z","last_seen":"2026-08-16T15:23:16.580606Z","alert_count":0,"request_count":9,"received_data":68050,"sent_data":5271,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"staticfile.at","ip":{"addr":"104.21.6.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-12T13:31:32.596179Z","last_seen":"2025-12-12T13:31:32.59618Z","alert_count":0,"request_count":1,"received_data":43340,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b271a53a5e3e488bea7d7db2c882b12","sha1":"db585bb0c86f6763d69bc5587cbecf0418d2d3dc","sha256":"6db0965c4955b1de43c053ea8fa66ae4afef66314e6eb1c800197514aba6295a","sha512":"56e795529a9b06fac359e0983aa960bd622c6f7ecfa57e619b92dcd28bffdeb4ad6fd30adda89f125cf286eed3f96a9e41af471faacb73693344162251316df6","ssdeep":"","tlshash":"b7d022ca3a916ef058a509524c1f4249d8f22512ce38f04d5e03ec03d1da2cd414ef0d","size":199,"data":"","first_seen":"2026-08-16T15:24:06.684259Z","last_seen":"2026-08-16T15:24:06.684259Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha/189783/index","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"642a76b52dbeacfff27411f90a68892b","sha1":"c19d7e8c4f2a46b10c6814b9bd4c177b6e3a89e4","sha256":"3d28f7d9bb51254a5b6cc0aee25b060509a407d226bd87c2d271ea09fbdb2202","sha512":"c09c53ea43df1015161eb17c4c21ab710f0c9b4e0c97e4627519995dbce82f84c8075154d8ec1dd8e8420e4958bd82b1e70f334964d27f3609c155be2f31921b","ssdeep":"","tlshash":"4251bbbf36a308200eabb4bf669b92c870228017b84694597c4c5554afd0ab97472fc9","size":2541,"data":"","first_seen":"2026-08-16T15:24:06.686088Z","last_seen":"2026-08-16T15:24:06.686088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"staticfile.at/static/js/ad20.js?v=82?v=8","fqdn":"staticfile.at","domain":"staticfile.at","tld":"at"},"ip":{"addr":"104.21.6.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56d1b598c8d8b7b79d2c53e462d63a92","sha1":"71bf5470170e0aa0719df5030a43511d3412db9a","sha256":"ddad420758640f275a2db01121b1101a27de6f26dfda298723476fe905e9fba5","sha512":"e74da30d9fdbb99ee21c42a26bf4760d962166be105796eba81b3c7dc2a3678bd2f97253e3ac52bc2d0aec65fcabcd0820ff053fb7cd38fbb58a59583bb79285","ssdeep":"768:i1OmdgN6bRGaPC31EaNbFpjeR2xPvchHDoPm331RK70m:4d3PmEOFYRo4jou3PK70m","tlshash":"1613e1370496383325d2f068ef0a5533be6b4d4e7a15cebbb7ece5894fd4a48ca91091","size":42599,"data":"","first_seen":"2026-08-16T15:24:06.682814Z","last_seen":"2026-08-16T15:24:06.682814Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"megaweb20at.xyz/","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T15:23:44.060Z","timestamp":1786893824060,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://megaweb20at.xyz/\r\nCookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; mega1=stveKVuzeOF3Wjg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:23:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlD3sS28ONWx6i9G79KeZdjLB1wvTTj29T5kgmCMMTFxq%2BDbAkK8Ka25kFSu4hMLMePrq0ov9HZkWwS7%2BB60%2FaDRPLKjX3YebABDLKhLLal1GRBpjSuuagCejx2FeoNj6yY%3D\"}]}\r\ncf-ray: a2c171205c540883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jnosit2kdgh52o50s51buscfb6","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T19:35:55.306911Z","times_seen":17923256,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T15:23:46.286Z","timestamp":1786893826286,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://megaweb20at.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; mega1=stveKVuzeOF3Wjg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:23:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nlocation: /captcha\r\nset-cookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oe0CdcT0PJWSXzPJujWVB83CZ0F%2Fr6PHJWpHp2HyJBYPUud1Lhy%2FZ6JCogoR%2Fcuw25NiZ%2FYwNWeicc2mFrrQtOlwITc50EOwdCFNWsj7VZ9k0lvMAQkM8SOvlDG%2B2VStZiM%3D\"}]}\r\ncf-ray: a2c1712e4f0f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jnosit2kdgh52o50s51buscfb6","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T19:35:55.306911Z","times_seen":17923256,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/favicon.ico","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaweb20at.xyz/captcha","date":"2026-08-16T15:23:59.300Z","timestamp":1786893839300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaweb20at.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 10:44:26 GMT","end":"Tue, 27 Oct 2026 11:36:41 GMT"},"fingerprint":{"sha1":"63:D8:A7:F1:DB:86:79:1E:9D:57:F5:5B:53:21:92:2F:79:B0:53:6D","sha256":"2D:D7:4A:13:71:C6:59:08:2E:10:ED:A5:FB:09:66:01:5D:A1:77:1F:06:5B:40:A1:68:91:87:57:02:AD:89:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://megaweb20at.xyz/captcha\r\nCookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; mega1=stveKVuzeOF3Wjg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:23:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufZ4fwyLwgisGgkhSVj13Nm%2FITbddjifmtuVOycj8frKMq8aS9TvfXwFj5pfls8c%2BsSSKyGyF25TyIcV9sRZ0yfv8L2Oq3ZPORsUdGUMUJFTXKU2ACXWQ53%2B8YIqHeqBbl0%3D\"}]}\r\nage: 6146\r\nlast-modified: Sun, 16 Aug 2026 13:41:32 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c1717f98a50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":2332,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"026dd537f468719ac901a72aa407a2fd","sha1":"1aa08f07832884372b309567811c3e0902bdc9ea","sha256":"9cfa7d924f00a7a1b3c3e3fcfa5d25398ad5798f991774c10b7d01d3a557eec5","sha512":"9cc77bb435a17b75de37a129934aa4a383db3e499b8a96b3bc93bc2b5b1edd0ddad3872fa3347297a75d0a6821178301409d88015a7e3fb0734c86a64e3ea2d7","ssdeep":"48:GlvlBKs5ZKXi03bf/RNJWz4D3Iny64KLftKZV55WRw+MlUlp7hFD5SbE/zycAgjS:hs5WT3FNJWzAK9fc+7MoA8i6Qu0WqIE","tlshash":"2b727733f9508730c85907f5bdba4585e769a0cd7a4a6b8ac20c9054fb8612866edf7c","first_seen":"2026-08-16T15:24:06.670846Z","last_seen":"2026-08-16T15:24:06.670846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha/189783/index","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T15:23:59.183Z","timestamp":1786893839183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaweb20at.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 10:44:26 GMT","end":"Tue, 27 Oct 2026 11:36:41 GMT"},"fingerprint":{"sha1":"63:D8:A7:F1:DB:86:79:1E:9D:57:F5:5B:53:21:92:2F:79:B0:53:6D","sha256":"2D:D7:4A:13:71:C6:59:08:2E:10:ED:A5:FB:09:66:01:5D:A1:77:1F:06:5B:40:A1:68:91:87:57:02:AD:89:B2"}}},"request":{"raw":"GET /captcha/189783/index HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://megaweb20at.xyz/captcha\r\nCookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; mega1=stveKVuzeOF3Wjg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:24:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=086O1uC4AW758usOoXjzN0tfHd5b7RuJc%2FVYjY5V8ySNtjR9MAy1il2Tij%2F%2BhGRNjx%2F3L4jW1Sv5KkJcjIExQTjPUNkEmfyJdZZjvy0EGtEtYXfELnAcyXQOfgqa6wF7LlE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c1717ee8790883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jnosit2kdgh52o50s51buscfb6","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26894,"size_decoded":15511,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14076)","md5":"ea972711b2180946609f298668d10cbc","sha1":"b6c37aa62c03203b5f3a3b63dfdc883db0e980f7","sha256":"376fbafa22e1ea32b37722b60d008d8a486790378ffe0ddea4326412a9fc971b","sha512":"3d34ff7e206a38fd83718fe5d564627e738cc12fc8d02477a77feed18dbd2fa2da3a7974ad492904ebc5dcc0608b94251f41ef0447dcfd0400324e7b095874ee","ssdeep":"768:/QhvLMSRA7rm0O9PYa/+Wumsw21fqCMQ8:EvLMSIrm0O1/+WumshfqCMQ8","tlshash":"d6c27ebb3de300056c43f1795ffb9b847829902be18ad95d3d8c2108dfc95a15963798","first_seen":"2026-08-16T15:24:06.672409Z","last_seen":"2026-08-16T15:24:06.672409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1325,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/favicon.ico","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaweb20at.xyz/captcha/189783/index","date":"2026-08-16T15:24:00.832Z","timestamp":1786893840832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaweb20at.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 10:44:26 GMT","end":"Tue, 27 Oct 2026 11:36:41 GMT"},"fingerprint":{"sha1":"63:D8:A7:F1:DB:86:79:1E:9D:57:F5:5B:53:21:92:2F:79:B0:53:6D","sha256":"2D:D7:4A:13:71:C6:59:08:2E:10:ED:A5:FB:09:66:01:5D:A1:77:1F:06:5B:40:A1:68:91:87:57:02:AD:89:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://megaweb20at.xyz/captcha/189783/index\r\nCookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; mega1=stveKVuzeOF3Wjg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:24:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsdFMDBXLoJlQZYJ1EIKrZde2whzZGb%2BxNwwv9pP9EgdBfo5rxUhQFa4s2awhkW%2FYYp19CPrVa3zwHUO8BIml1dYWdAaK49Y1%2BdFbgEMgKHGGmH4ZO6ro3xwFkD6Gznet3Q%3D\"}]}\r\nage: 6148\r\nlast-modified: Sun, 16 Aug 2026 13:41:32 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c17189ca940883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":2332,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"026dd537f468719ac901a72aa407a2fd","sha1":"1aa08f07832884372b309567811c3e0902bdc9ea","sha256":"9cfa7d924f00a7a1b3c3e3fcfa5d25398ad5798f991774c10b7d01d3a557eec5","sha512":"9cc77bb435a17b75de37a129934aa4a383db3e499b8a96b3bc93bc2b5b1edd0ddad3872fa3347297a75d0a6821178301409d88015a7e3fb0734c86a64e3ea2d7","ssdeep":"48:GlvlBKs5ZKXi03bf/RNJWz4D3Iny64KLftKZV55WRw+MlUlp7hFD5SbE/zycAgjS:hs5WT3FNJWzAK9fc+7MoA8i6Qu0WqIE","tlshash":"2b727733f9508730c85907f5bdba4585e769a0cd7a4a6b8ac20c9054fb8612866edf7c","first_seen":"2026-08-16T15:24:06.670846Z","last_seen":"2026-08-16T15:24:06.670846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha/get","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaweb20at.xyz/captcha/189783/index","date":"2026-08-16T15:24:00.833Z","timestamp":1786893840833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaweb20at.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 10:44:26 GMT","end":"Tue, 27 Oct 2026 11:36:41 GMT"},"fingerprint":{"sha1":"63:D8:A7:F1:DB:86:79:1E:9D:57:F5:5B:53:21:92:2F:79:B0:53:6D","sha256":"2D:D7:4A:13:71:C6:59:08:2E:10:ED:A5:FB:09:66:01:5D:A1:77:1F:06:5B:40:A1:68:91:87:57:02:AD:89:B2"}}},"request":{"raw":"POST /captcha/get HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://megaweb20at.xyz/captcha/189783/index\r\nOrigin: https://megaweb20at.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; mega1=stveKVuzeOF3Wjg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:24:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nset-cookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpUMSvaHozwgJNB%2BlOaVHgOUjG7ml7UZk4Cs7Xy2UIKOz8QE1XBsQY%2FY514x3poR1l5T04pX0ck%2FvctiSa8%2BmwwkcFmbcDCuQK0dquuTasRohFEpJ8mQzGfoGxPZGLbUVdo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c171892a820883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jnosit2kdgh52o50s51buscfb6","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4291,"size_decoded":4058,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"569d3d971cb293f868893bbdcf66990d","sha1":"88370304d5f7eb2e6712cdbab9436bc2e18cbd16","sha256":"22d0b26b2ae05c841a527aae4e0d5a17d822358bac376d3a22699d3ce7341062","sha512":"166bf8a66bc0981645e65148abca65f7a498f0db1a53b07fd761ac3c4c14c23a77a82b624ac9918a76550c1c07e76a7572cbf2b7d29fc07f1c6ca2c4859ee0b4","ssdeep":"96:edZ6NVlGb4YnZsXpP9K50j4C6wniUKlPRd0V9DKKqgrHjGWi6SRc1Vox4XEoZA0:RN/2HZsXd4544LIiUKlX0jKgHVFSR4yI","tlshash":"6d916c16bffdaefafda16618117bc116383f8b102a4d9634824c01239a57427d1d992e","first_seen":"2026-08-16T15:24:06.67379Z","last_seen":"2026-08-16T15:24:06.67379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":907,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha/188543/index","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T15:23:38.747Z","timestamp":1786893818747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaweb20at.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 10:44:26 GMT","end":"Tue, 27 Oct 2026 11:36:41 GMT"},"fingerprint":{"sha1":"63:D8:A7:F1:DB:86:79:1E:9D:57:F5:5B:53:21:92:2F:79:B0:53:6D","sha256":"2D:D7:4A:13:71:C6:59:08:2E:10:ED:A5:FB:09:66:01:5D:A1:77:1F:06:5B:40:A1:68:91:87:57:02:AD:89:B2"}}},"request":{"raw":"GET /captcha/188543/index HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:23:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: mega1=7jG2epTMcwmYASC; expires=Mon, 17 Aug 2026 11:23:38 GMT; Max-Age=72000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tf%2FjRYAenZsQh39oFKtLVcflf%2BqQL1MbrInGkp6IJYpiPYo6gTXr96BfyNI2OqyoYuWrqAkFsSk4Ft41%2FP8EXU9SAitT97ykW39zD2Qtj9LjdpKy1G9fsI1YmKdkC02ZeNE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c170ff5cd60883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"mega1","value":"7jG2epTMcwmYASC","quoted":false,"expires":"2026-08-17T11:23:38Z","raw_expires":"Mon, 17 Aug 2026 11:23:38 GMT","max_age":72000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"mega1=7jG2epTMcwmYASC; expires=Mon, 17 Aug 2026 11:23:38 GMT; Max-Age=72000"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T19:35:55.306911Z","times_seen":17923256,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T15:23:58.335Z","timestamp":1786893838335,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://megaweb20at.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; mega1=stveKVuzeOF3Wjg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:23:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gu2tyKrB45K2CJ9Du%2FlTYgYu1IF%2FebKbghgGDTE72pFkU1P6pipa%2BtlexcWgb8nBGaAWe5pHdZPrMXEJ1PmhMHSLoQqCCvua1%2BXk9Tw7VbDhhOK9x8KP%2BDdjtSInSSg7Ue4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c171799fa90883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jnosit2kdgh52o50s51buscfb6","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T19:35:55.306911Z","times_seen":17923256,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"staticfile.at/static/js/ad20.js?v=82?v=8","fqdn":"staticfile.at","domain":"staticfile.at","tld":"at"},"ip":{"addr":"104.21.6.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaweb20at.xyz/captcha/189783/index","date":"2026-08-16T15:24:00.718Z","timestamp":1786893840718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"staticfile.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 00:09:10 GMT","end":"Thu, 24 Sep 2026 01:06:45 GMT"},"fingerprint":{"sha1":"B6:99:84:24:E3:C0:3E:F3:78:1E:79:BF:5A:08:15:5A:BF:A8:18:65","sha256":"1E:5B:7B:C2:82:8A:B5:3F:8D:B8:B1:7C:8F:75:22:0D:44:1D:EF:19:DD:3E:89:98:03:81:03:24:43:29:F8:39"}}},"request":{"raw":"GET /static/js/ad20.js?v=82?v=8 HTTP/1.1\r\nHost: staticfile.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://megaweb20at.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:24:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 23:19:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a80f3e7-a667\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 6167\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKs3OgRu5C6rLwDC5gEEmMkkqyuKFAbYaVOuk3CMQ7XJiESWkfck16Aqj%2BEgKR5RMK2bNiRueVBAHDYpPnw8SZnODhbu%2BqaJOBqb64TLEq9YGnPLUxtItKaGARNhiYUC\"}]}\r\ncf-ray: a2c171889d3656bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42599,"size_decoded":31972,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text, with very long lines (10496)","md5":"56d1b598c8d8b7b79d2c53e462d63a92","sha1":"71bf5470170e0aa0719df5030a43511d3412db9a","sha256":"ddad420758640f275a2db01121b1101a27de6f26dfda298723476fe905e9fba5","sha512":"e74da30d9fdbb99ee21c42a26bf4760d962166be105796eba81b3c7dc2a3678bd2f97253e3ac52bc2d0aec65fcabcd0820ff053fb7cd38fbb58a59583bb79285","ssdeep":"768:i1OmdgN6bRGaPC31EaNbFpjeR2xPvchHDoPm331RK70m:4d3PmEOFYRo4jou3PK70m","tlshash":"1613e1370496383325d2f068ef0a5533be6b4d4e7a15cebbb7ece5894fd4a48ca91091","first_seen":"2026-08-16T15:24:06.682814Z","last_seen":"2026-08-16T15:24:06.682814Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":9,"connect":13,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaweb20at.xyz/captcha/188543/index","fqdn":"megaweb20at.xyz","domain":"megaweb20at.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T15:23:39.153Z","timestamp":1786893819153,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /captcha/188543/index HTTP/1.1\r\nHost: megaweb20at.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://megaweb20at.xyz/captcha/188543/index\r\nCookie: mega1=7jG2epTMcwmYASC\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 15:23:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nset-cookie: tor_port=9285\nPHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/\r\nlocation: /\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDbH3JsT2%2BxxTG%2Fktgz6MoWlm4skR1db6USpwXvrXLEhKKyyh8bLLxzkWvVVAqkqnNeL2oVOCs3uVhw0qEuqQkUU4oKV1MeFjdlyjJbRMcrBQQk19L78WxXVs6EqgN4CwUI%3D\"}]}\r\ncf-ray: a2c17101ad1f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"tor_port","value":"9285","quoted":false,"raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"tor_port=9285"},{"name":"PHPSESSID","value":"jnosit2kdgh52o50s51buscfb6","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=jnosit2kdgh52o50s51buscfb6; path=/"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T19:35:55.306911Z","times_seen":17923256,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}