{"report_id":"770a6810-e30d-4270-b4f5-3e3031a21a03","version":6,"status":"done","tags":[],"date":"2025-04-23T10:53:15Z","url":{"schema":"https","addr":"mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":0,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"title":"Download - MEGA"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T10:53:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"eu.static.mega.co.nz","ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"domain_registered":"2012-07-25","domain_rank":64878,"first_seen":"2013-01-19T19:02:09Z","last_seen":"2025-04-15T16:28:38.921567Z","alert_count":0,"request_count":55,"received_data":13816364,"sent_data":26906,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gfs302n110.userstorage.mega.co.nz","ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"domain_registered":"2012-07-25","domain_rank":503972,"first_seen":"2018-06-14T08:06:11Z","last_seen":"2023-05-31T16:03:35Z","alert_count":0,"request_count":16,"received_data":26809857,"sent_data":9601,"comment":"","tags":null,"fingerprints":null},{"fqdn":"g.api.mega.co.nz","ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"2012-07-25","domain_rank":23332,"first_seen":"2013-12-26T02:26:29Z","last_seen":"2025-04-22T18:30:30.709499Z","alert_count":0,"request_count":5,"received_data":2686,"sent_data":2533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mega.nz","ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"2014-10-01","domain_rank":16544,"first_seen":"2014-11-03T07:55:06Z","last_seen":"2025-04-18T20:30:07.683329Z","alert_count":0,"request_count":13,"received_data":734009,"sent_data":5545,"comment":"","tags":null,"fingerprints":null},{"fqdn":"127.0.0.1","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"g.megaad.nz","ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"2015-07-01","domain_rank":0,"first_seen":"2024-03-21T19:15:30Z","last_seen":"2025-04-16T18:31:13.063209Z","alert_count":0,"request_count":3,"received_data":124695,"sent_data":1535,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-04-23T10:52:35Z","timestamp":1745405555,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.34","port":50580,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-04-23T10:52:35.467028+0000\",\"flow_id\":697832435875360,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":50580,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-04-23T10:52:35.392736+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-23T10:52:48Z","timestamp":1745405568,"ip_dst":{"addr":"31.216.144.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.34","port":53694,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-04-23T10:52:48.792579+0000\",\"flow_id\":518328573497919,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":53694,\"dest_ip\":\"31.216.144.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3386,\"start\":\"2025-04-23T10:52:48.725567+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-23T10:52:49Z","timestamp":1745405569,"ip_dst":{"addr":"31.216.144.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.34","port":53698,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-04-23T10:52:49.051466+0000\",\"flow_id\":25116004062261,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":53698,\"dest_ip\":\"31.216.144.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3386,\"start\":\"2025-04-23T10:52:48.988213+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-23T10:52:49Z","timestamp":1745405569,"ip_dst":{"addr":"31.216.144.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.34","port":53714,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-04-23T10:52:49.058152+0000\",\"flow_id\":411207794171455,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":53714,\"dest_ip\":\"31.216.144.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3386,\"start\":\"2025-04-23T10:52:48.990783+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-23","alert":"Sinkholed","trigger":"127.0.0.1","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mega.nz/secureboot.js?r=1745064133","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce94b5326d2d5964312fa8a008a3ab3d","sha1":"831805ea5ee9cdad317b57beef914d0736b24b62","sha256":"3fa6574287593374b26c94e2e18b948ddd3a52577684dad6e555e6a8c5a5cdeb","sha512":"578fddfb8b5ce7513280338f9d82d85a13111d2c4ee661800ed374bd83fda48a5603223c89006c30234eed622148f3e627faa2b3fa33140d43e6c70f903b0acf","ssdeep":"1536:sGh3GFBBmYuAobPMng5Hcqc8yOayERNxUmU8UaovJ4bxbIbY9uPU2w5G1bKjH7jE:sjrIgaqyEtUmU8U5vWNbI072RWLm1","tlshash":"4014f819a8ea011f8913207f579fe542b2e5c02b054cdc907acd53757fd1e2a86b2bfa","size":198843,"data":"","first_seen":"2025-04-19T17:33:14.17224Z","last_seen":"2025-04-24T10:09:10.257168Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/672df9ce-446f-47f2-a8f4-45ba4d3bf1ca","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf609c0b705c1b873fc30e94a8a72f2","sha1":"4f4e6ae980f40abf9df2cb69b3b30ed8b92e0162","sha256":"ca0b050b1e4e5291f59c2b4a310ff9b1d161a3250b7d5c4537bade2ad77266b2","sha512":"42c0b60fc59d1540aae19da7b8151ba8386725acd1a82fa14bd5832ecc3c749784621c689b60926f1a03257be7a440dde550feae9ab3845ab1be8604029a9adb","ssdeep":"","tlshash":"9bd022cc7a4a52611828271a200ef0248ab3df3b40032ad48382ae4e8c014222b4ea68","size":200,"data":"","first_seen":"2025-01-10T08:32:50.232999Z","last_seen":"2026-04-18T23:06:06.056813Z","times_seen":608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/3dc5c80a-b3d7-4390-ad1b-f65a04ec5ce9","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dd8130d7db464efa9c71a961b684944","sha1":"f68efee0c065dc94909e4e28fa9285df751d7fd0","sha256":"faade5384f10ce8bb1ff7428682f6f67d7f880411e370b8696ddd1364476116a","sha512":"01ed9f90b2ab38fd125aeb486ee3a698e55d2e7ac5a93f1634deca2d8ce07f809d25aea19b10e5b86ba89e92ba1c6c9e8ee0639914574304eb22814c174b6f8e","ssdeep":"","tlshash":"25a022cc888230fabc0833832020f00088aeec30c83308a823c2280eb80c00ac3bc238","size":73,"data":"","first_seen":"2023-03-07T12:04:57Z","last_seen":"2026-04-12T15:39:02.314663Z","times_seen":1207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.megaad.nz/?w=728\u0026h=90\u0026ia=2412vpnb\u0026id=WEBFILINKB\u0026c=17454055658018165\u0026m=0\u0026l=en","fqdn":"g.megaad.nz","domain":"megaad.nz","tld":"nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd2d9830c567a2e672c5628460f7f77d","sha1":"aa07cf889723cf3b8d98c1db6d80e6e34d2fc87d","sha256":"c3ccb03fda8f734eaee5efa7c1beb42a377e469db6ac30f3dbb66be38c984008","sha512":"ebb1d77bed91309bcffabc5ef76681b19295af7f4e860a8d689f08c20e16ecc9accff2d1939d542d64e09bbf3ca74ab9be2914ebf802331ddadfdf5dd5c0b9ca","ssdeep":"192:+VrFn1+PcIcacNocsc+cLlOmMkw1PboZnK6ureASW7pIFgR3tgqSLQHDiJQxh+3P:yn1q8ZlOfmbMr+O/8j0vi","tlshash":"6fa2bcaa48a200174553526dd74f264c34a38bcb5c96fe1c7e5c6118af9c93ca6f0fbd","size":22098,"data":"","first_seen":"2025-01-13T17:49:27.66996Z","last_seen":"2025-04-30T08:45:40.090099Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/108888d6-571f-4a0a-900f-17b7da7ab423","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"30a72b79e1de3f7bb48ac9c38cfe26fb","sha1":"6e76245e1d5a1ca1ffcb887175874f9ed9293766","sha256":"c8580c21984ea06cc3b42d1feae90eefc14605b24fc35c8edf1a7982295204d7","sha512":"f7e98547e1f4fc1fcdc53ee6845bfd095c62f37e477cb379aa0c4ba97ec3a37301c26514f1ad5957355fe93565f1dc60118062f9eff5e519814766eeb1bdfba0","ssdeep":"384:2kZpPMg3EGK/5OAHAvRuANJbzlbKC39+jqQQkTtQ9T:2kZpPMOAHAvRuA/lOC3cjBQ6tQ9T","tlshash":"53d2531c5aac220e9a43e6df01cbe0033ddad5611d599cd56acd10b3bfd1d2f29b21ba","size":28398,"data":"","first_seen":"2023-03-07T12:04:57Z","last_seen":"2026-04-18T23:06:06.05484Z","times_seen":1582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/2a694d62-8d89-49e3-b1d3-48869be52cc2","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"039bafef2406979c560430a61c2078ea","sha1":"649f59b9386398ad8e609ec1a4b338e6656c02f8","sha256":"2e884b248bc8fd99426b98c9e2b0347d64a1d76e0cbed818a7ed42a09afa75b4","sha512":"223bad065fb825441e1684fcf7a00a165dd013b07db48c8fdb5c3d4493a4d4337fe73c87e62f28d1cf13784247e261c00fc03fc5d55978ea31090cdbba1dde2f","ssdeep":"","tlshash":"a48004004051440c351331d5114173351103431004c0457405c034001175107dd4c054","size":37,"data":"","first_seen":"2023-03-07T12:04:57Z","last_seen":"2026-04-18T23:06:06.055622Z","times_seen":1501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-19_5f0758de3c0c8fd811148b3edc2948003f94cffd3aebf7491a6d5ccd1b9859ee.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-19_5f0758de3c0c8fd811148b3edc2948003f94cffd3aebf7491a6d5ccd1b9859ee.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 107460\r\nlast-modified: Sat, 19 Apr 2025 12:11:29 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f1-1a3c4\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":495705,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"dbabddd1ff9a0dd7eb447ad6fa6539c4","sha1":"ea0ebdf5e482d16514975821ebae2e0975a0ced9","sha256":"5f0758de3c0c8fd811148b3edc2948003f94cffd3aebf7491a6d5ccd1b9859ee","sha512":"686a50c0e1293745d19fc0578e1f204dee7abb9b455c3ee8c3c3e932119b883d541fc877d0c74add769284da15903b05986a03231b871e1c4676905e4ef73959","ssdeep":"6144:42ALhdv42nMJIhNLbFqgUf3sJGfHfynNxvZeNscRc0PAMePKqA:enVtqgLnNxvZeNs24M/","tlshash":"2ab4824979fb1136442370bd9bcfa044b73480176109de98bd5c53986fc14b8aafafea","first_seen":"2025-04-18T20:30:15.822471Z","last_seen":"2025-04-24T10:09:10.274123Z","times_seen":8,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/mega-icons-3d-icon-key-3d.10e986479b570c8a.png","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:43.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/mega-icons-3d-icon-key-3d.10e986479b570c8a.png HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 3159\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\netag: \"6803916c-c57\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"719b56b6986378fc91dd50c591759d7a","sha1":"2be2b44a26ffa67d3ec7d8a5f3d711cd261fc202","sha256":"01fa8ea62966f7a58ac5d84a1f91660ee5341b3ce29b8d80ef02c10d7ad1cbaa","sha512":"1d391bbb7370ffe9a5d512aa341d54594ebd58338b9444630d44ef59ed5fa32405cdccd3f51aafb9cecdcc210fe3185940c4171ada9b9d15f6fefd89a70114b2","ssdeep":"","tlshash":"82517cc2a138b0973854ab12d388ae504cd3f87160590b0c5f6bcdf8ef49b69c87893a","first_seen":"2024-10-27T18:25:40.692182Z","last_seen":"2026-04-18T23:06:06.050684Z","times_seen":1055,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg#icon-twitter","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 65894\r\nlast-modified: Sat, 19 Apr 2025 12:11:26 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ee-10166\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":235250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f60d55e80adf8da94d3e46482c69398e","sha1":"d2e5e2fec747b5b7d594710b55b6b777cb02662f","sha256":"85c3a6c15686901bd9f0925f424e719ab42a2da6492dc7ebcffbea1d55ba5671","sha512":"78c1b7791f53bc2a21c6788a9ff9f883a6fe8352bf5248daf8693b8089a44630733b66375d43f83e179a66be021c5419bf582ed8afd595da4e783c613d31e1e6","ssdeep":"1536:ImqmDroQJ8d7bGqeb5V0J8LE3KQEvR2tB+ej+yd+e3+v+v/GI94OFVfjWoEBf+et:GwzLXQhT4yxCVV75WSwKRXQDIqxBfc","tlshash":"2d34a4e1a21c518ce40b97bddb7eec51031ea0ebb4c58ca8aa8dd799601f5cff947490","first_seen":"2025-03-14T08:16:00.667407Z","last_seen":"2025-05-13T12:17:22.891864Z","times_seen":72,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-mime-90-uni.6e9449b56f53a44d.svg#icon-generic-90","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-mime-90-uni.6e9449b56f53a44d.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 11646\r\nlast-modified: Sat, 19 Apr 2025 12:11:26 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ee-2d7e\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52828,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d9663a1820b944c45f0961db2e6372e","sha1":"c6b8b98a95e5ba0f94dad23b6d9f4b0d4e7ce31f","sha256":"75cda10b8cf9d7c8eb983dd5ce640f2fcd79fe517ed9304023791a0e207abf35","sha512":"caf880f248a6fef9960fb289d1505eeb433fe84a88416ad1e8d79533c806ce34e55a9ec2a861f3b4e457dd4cba727688756faa81310376da0508d1d6234a0d40","ssdeep":"768:f6Bya7OU2Wd7shHZq4d9WbuqI2ir5G3l9QPvfy1bp:f6Aa7uWd7SHZq4dQbuqI1UVOPSL","tlshash":"33336075f11c56dfc04bd27cdb3a9c91234dd0bab4e4cc74ca9d9bad502a4caea0b5a0","first_seen":"2025-03-14T08:16:00.67177Z","last_seen":"2026-04-04T01:09:23.03584Z","times_seen":225,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/3670016-4718591","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/3670016-4718591 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1048576\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1048576,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"2c0c470aa5719a1ef6b6b4a19b350c68","sha1":"f9cced1d28f9b10c6fb0f84e927182f7a04caea5","sha256":"029c04f8e30bfaf53bda8cbb376c9d0c61bf692e8706275dc77f4a0c8916af3d","sha512":"588066b4e6e8d6e3f5bc30bff07aad254bfc379213ddf4ff846db1c8bf2395fc0fc59080dba237c8dd3aec2b2a144d52114dd959d4610218450f1793e7f26d3d","ssdeep":"24576:3SBEgJVquLanOeQutxSkn/WUGW4PQXG1jCBh2hTbVIGx5M/fu9UH:3SBXJgu2nOeVyG/xZfXeEgIM5t9UH","tlshash":"bb25336147a24b247bc9da1cc5fb591b200c805ff0dba6187736b2216e7fb53c9e91b4","first_seen":"2025-04-23T10:53:33.017091Z","last_seen":"2025-04-23T10:53:33.017091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":440,"receive":398,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-5_8b52a7c4ba234bd490a22da9c782d0705eccc3d7a82dca509a139a10321434de.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-5_8b52a7c4ba234bd490a22da9c782d0705eccc3d7a82dca509a139a10321434de.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 116203\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-1c5eb\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":509888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ac7206cd0be41ccfc58cb5309de3fa38","sha1":"d4f642fae74491a629f955ba5c11a610aa792ea1","sha256":"8b52a7c4ba234bd490a22da9c782d0705eccc3d7a82dca509a139a10321434de","sha512":"1e30fa93bd284a6cb639c681593325d09f9805a6c271a6246e19f68f131269ce26cd771afdd902ec1858b77aa64631659adb538ac4d64a1239ac3a293cf32e3e","ssdeep":"6144:rmWdoPMvAeE5GTnq8c9cCrLOXw3lRWNoSkNEBQeFYuN0cdavCXDdavg:rmWHAenGzR3F6RFYuN9","tlshash":"0ab4b54a7df721224663b07d9b9f9005f2399007110cde64be9ca3a06f8553897fafe9","first_seen":"2025-04-18T20:30:15.828186Z","last_seen":"2025-04-24T10:09:10.31501Z","times_seen":9,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-8_9870452cc9d3a0ae80f10b74baaee8fd068a7d2c60b536597127a9a010320f0f.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-8_9870452cc9d3a0ae80f10b74baaee8fd068a7d2c60b536597127a9a010320f0f.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 28839\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-70a7\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":136455,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ec0b21a7db1c36f74e832b2a86bb48e4","sha1":"fbd9f972916c7cea47eccac36e92b6d56771f053","sha256":"9870452cc9d3a0ae80f10b74baaee8fd068a7d2c60b536597127a9a010320f0f","sha512":"43bdca2d38535de1a783b265147f5b9d80f3e514f987ad103f9b564330b36f196e651cbca3559e73088fe3ab456b2de84f70ec9baebb92f388d52cddd83fe183","ssdeep":"1536:/sugGY9MMRtf9dNYvEs8KIxiVTlN4TWQTNOL1MWwmYLt+XPNoTr:6/SSCIxiVBANOL1MWwT5","tlshash":"07d3930932f7127580a7703eafcf9148b23690176149dea47e9c87946f9167883f1fe9","first_seen":"2025-04-11T15:35:58.571589Z","last_seen":"2025-04-24T10:09:10.287162Z","times_seen":16,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-16_98ff296cbef8891332d2d6b398d36f23dbc81bfcfc6b98e55dc66d4ed6d8d986.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-16_98ff296cbef8891332d2d6b398d36f23dbc81bfcfc6b98e55dc66d4ed6d8d986.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 93098\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-16baa\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":495513,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"01dda135ee1dfb19a27f062a9f703d0e","sha1":"cbfa6fc94a64d9d9b2b10581de9b812f83f72da6","sha256":"98ff296cbef8891332d2d6b398d36f23dbc81bfcfc6b98e55dc66d4ed6d8d986","sha512":"3fa9dfcb0dbbb5e19a6343a6602769104acb91b6a35c21a4a5b6a16a7c6d9198b67c2438d1a3245c99db64900a8738eb470a9973625d23b3238e518b62ea5375","ssdeep":"3072:SVvnk4Jl8/fyl88+mnqXkhDP+RdeWlG/bMkhDtAWUmDTBwD+s0RMIWVp1g2:Spk4/8Jo+82","tlshash":"2bb4714966fb112580b7707e8fcf9056b234900b6809de697eac97885fc453886f6ff8","first_seen":"2025-04-18T20:30:15.845635Z","last_seen":"2025-04-24T10:09:10.276322Z","times_seen":9,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:43.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 8787\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\netag: \"6803916c-2253\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8787,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"3f788625bbc4f87885b982ed70876dcb","sha1":"d4155b22d2e63b149b42e238ab5c2788199a2f99","sha256":"741f05bca4428e5880a44222f68a2f50172860f43b09abb57e3dc12d3ce5766d","sha512":"80fce5a6fe9afcebc834b8f324bbabb368aaf5bd4cb4753cd4b675b18d657a988f91806119844ab68ab58ffdc25b2f27e6f8728487e6ccdfea82fa6f0115ccd8","ssdeep":"192:QQ9CzWgjVU7tlCZR7WzmvEIOT7XJ+rgRNn:X9CzWgj+5loFo7ygL","tlshash":"82027c86c9a0c159d46383f204cf496e1ac127ec407c275d5e90e655ecdb7aeba0cbed","first_seen":"2023-05-04T20:06:27Z","last_seen":"2026-04-18T23:06:06.049848Z","times_seen":1432,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.api.mega.co.nz/cs?id=59074751\u0026v=3\u0026lang=en\u0026domain=meganz","fqdn":"g.api.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:47.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:92:87:B0:48:35:8B:0C:87:B6:40:CD:57:89:6E:C8:6B:7B:5B:5D","sha256":"C6:D0:8D:45:31:54:1C:DA:39:7F:1F:F7:E9:86:33:9C:94:DF:2B:F3:91:2C:9F:3F:25:B0:CE:2F:36:8C:77:9B"}}},"request":{"raw":"POST /cs?id=59074751\u0026v=3\u0026lang=en\u0026domain=meganz HTTP/1.1\r\nHost: g.api.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 46\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"[{\"a\":\"g\",\"v\":2,\"g\":1,\"ssl\":1,\"p\":\"I6QHVSAL\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, X-Hashcash, MEGA-Chrome-Antileak\r\nAccess-Control-Expose-Headers: Original-Content-Length, X-Hashcash\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-store\r\nOriginal-Content-Length: 355\r\nContent-Length: 355\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":355,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6637b4b4a43d31fe8275a3e26989de5a","sha1":"6cd5a4702fed1d63d1f373734c3ea38be1d1b671","sha256":"6cd01255046315589d2845fa16170f673c68a0eda456bfb75c6bb3cfb78a7d40","sha512":"1736c9b7b196b3d75983b4a92ceacc79dc40e133c120a3117b17214dc69513976271f2871efb2a0bfd2db97110a2176c5e18be9c024695e71c1e07b6c1f65373","ssdeep":"","tlshash":"95e06a64877bc40df488118c0b37fc70371007750c67410cd577411e5164c431d41f14","first_seen":"2025-04-23T10:53:33.024301Z","last_seen":"2025-04-23T10:53:33.024301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/131072-393215","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:47.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/131072-393215 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 262144\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":262144,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"4042f6017aedc55cb1fde82d266360ae","sha1":"b53ab217f49f5a2eae35638f0d5d480bf800f1be","sha256":"ea8f5616d425bcd761d3c214a37c14fe4694460dd1f2d79f2fb34315aadccb95","sha512":"3070ba67bb4510fbf8b5bc03b51e01f1706c4891a89edd1be0f10d8211b230842fb3cfa58cf5430d4bb12d9b12dd6029738e18a196a7102a3663788642013740","ssdeep":"6144:a+Nvl8+uiK1jYTNFHQzw/9qFeDy75Bl/obkHCJtQ+h0T2rMRbnaYhmFA:hl8J1jexE4O75MMKQ+h0fbzV","tlshash":"fe4423d1d07d4b71ccfcb56872ed47846d6b1ccb6c063e2466581af138874f8f0965aa","first_seen":"2025-04-23T10:53:33.025354Z","last_seen":"2025-04-23T10:53:33.025354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1640,"timings":{"blocked":347,"dns":13,"connect":106,"send":0,"wait":439,"receive":502,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/decrypter.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /decrypter.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/file/I6QHVSAL\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 817\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2039,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"eb261c1b3ddafc3a78652dc6036e2a66","sha1":"e25fe9adb999932ed47d5504ee3ef6f36863b9bc","sha256":"e9f9d35c7c0906dd2aa24f1451adf7876ddfd1da5b5ac10910fb4a816d11fdf1","sha512":"80478ff3658b9015a77366789ca09b945f2b92e882403d1329b81f49bffe87fa324e8b6d3f60ab5aaae39f7a2ba1fd180d9412c943b5dcb1e041bcde952ff7b5","ssdeep":"","tlshash":"a041de219f1f482cc0261269927e270f58b6b06641c1691baa3f8c61bbfa931237df49","first_seen":"2023-06-17T20:11:14Z","last_seen":"2026-03-05T02:17:26.869293Z","times_seen":44,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/17301504-20447231","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:49.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/17301504-20447231 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":502,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHQ1SySP2RhBdH40NYVyAKht9V%2FN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBAy9BAo%2FluFjI5oaIe65l2fkIAOjyh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWr9aWsSHmfTcWBQmVtdFhBdHasCyiyvaW0QVpP3OWICk8yd%2Bsl2OgyOjEPGXkyTRkIVF9IepRfGsiM2s%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFmIhk8yh8htNIVNScEPnDhMAsqlq8hP3zGN9c%2Bt3OhMGphsGHWtSIVfVz5tNY8PSH4yAEgyQIWP9wErNlhMAOpyQjWs9upDScWfQuGrCyilNazbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3145728\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3145728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"42ab1be25194d535e5d7f86a07abed28","sha1":"253236ea7ee27724098edc837bb2bd8e587eafe5","sha256":"704807f9fe393e6983e4662f2547e26e8847b312555664c806a999efffb2e787","sha512":"701d04bf33eb657f0759b39086f5876d192b4f86801641e8e06aaa9e0279bfae410c378a56d8a554bb834a60f013b9d0ecd225cf6f0355fc7060d608244af15a","ssdeep":"49152:YdVibiMZ7VardYC1re6l9oKOAda/ZfZUlbQFmf4pAOOZI5IvXw8q+ctltM+wi0Ir:6YFVardYC1K6l9nOAKwlsFjavXZq/3t9","tlshash":"8ae5332e0d136efe5405e9a7b4b5f4dc87ae8ca079e8af169b02957c270790b1f49334","first_seen":"2025-04-23T10:53:33.027195Z","last_seen":"2025-04-23T10:53:33.027195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1970,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":304,"receive":1512,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-10_7097eded3f98fb6e5d7cb2a4a2a939d6f30644ba01ec9dec3db3726de8e5e0dd.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-10_7097eded3f98fb6e5d7cb2a4a2a939d6f30644ba01ec9dec3db3726de8e5e0dd.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 118881\r\nlast-modified: Sat, 19 Apr 2025 12:11:27 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ef-1d061\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":515025,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8768a51fbdf6c5bda8338eb1dfd68bc6","sha1":"2c63e895c7bc8c5a7cfc2b0557f6b346609d9ef8","sha256":"7097eded3f98fb6e5d7cb2a4a2a939d6f30644ba01ec9dec3db3726de8e5e0dd","sha512":"212aafdcbe5fed1a586a52301e587fae0f7a279eed9eb20d966920d5dd4ae530be9ef4e46ebabcd22c74d253d68953b3f52003c22020ff32d9cbfc1dca540ecc","ssdeep":"6144:WIab58oFfgGHM2MNVdtbFgFS2GsUfeX/zCFr41NFZ6Ay:WIG3HM2MNVWFSHsUfa/z6r41NA","tlshash":"36b4a08e6afb102285637079afdf51497235800b150dde183e9c6388afc953986f6ff9","first_seen":"2025-04-19T21:10:17.116864Z","last_seen":"2025-04-24T10:09:10.280983Z","times_seen":8,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-12_a79ded5128a9647d691ac2fe60b3c3569a997dc93b72dfdb6628cd3d0a617284.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-12_a79ded5128a9647d691ac2fe60b3c3569a997dc93b72dfdb6628cd3d0a617284.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 89365\r\nlast-modified: Sat, 19 Apr 2025 12:11:27 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ef-15d15\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":490327,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"705e7a6d03b875c5fd383214d94b4564","sha1":"950ddc572706736246d9b1915999394f0179c18d","sha256":"a79ded5128a9647d691ac2fe60b3c3569a997dc93b72dfdb6628cd3d0a617284","sha512":"5ae196e71e7446cc8a430468e6da1073901aded5671252972aea0fb50694a915d5bfae1353fd35e76d55dedfe2dd47d946aabb5e1b54c9ed391cfa42fadea079","ssdeep":"3072:7iOp909Y/6aN+H6OZk7PTpnGdCpU/11nbx3hx92IOsb5bhTqGKGji7XVhZ4A0TOl:X/6aN+UTsd3hx9FOsbNhTqG7NA0TOOFE","tlshash":"73a4a248aafb112184a7307e4fdf9005b374810b964dee587e5c83985fc827896f6fe9","first_seen":"2025-04-11T15:35:58.556433Z","last_seen":"2025-04-24T10:09:10.327096Z","times_seen":16,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/aesasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.144.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/decrypter.js","date":"2025-04-23T10:52:49.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Feb 2025 23:00:56 GMT","end":"Sun, 18 May 2025 23:00:55 GMT"},"fingerprint":{"sha1":"FD:63:4E:E0:43:E1:9B:4E:BF:92:C3:B2:33:60:EF:69:6A:BC:8A:C8","sha256":"2F:AC:02:78:9B:9B:DD:7D:17:27:BB:3D:06:2E:5B:27:C9:09:90:04:37:59:91:44:BD:BD:69:A7:5A:FF:3B:DF"}}},"request":{"raw":"GET /aesasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/decrypter.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 17915\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126274,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"a60d20c0cb2ffc5058ff87d62a4f198f","sha1":"41e67c7ecfb2d648575ac8dfae68c447f10c98dd","sha256":"ef6f148ae55723b5bb5d2bde5261e4f132cf4c49267ad27cc45cfdce1c2c35b6","sha512":"2951fc47674a72ff4bc26e219f3258c0012535a41717b389ac37712a8389c413ada5f9a0d8444905a036b1ff9a308c93d0aebafce6829a78c123b540a69e7c61","ssdeep":"768:FkrRYgQWe2k5z2WGvb1G7S4bgjj+hl/6N8FyD8hz015jH3YScyfQW/vvkmd:FDgQWHk5z1Gvb1wSCgjj+hl/6LZnvsY","tlshash":"1fc358651b1f02b92963813d4f1f01020af6c1971762db15b97d9a10afdece6f6b223e","first_seen":"2023-06-17T20:11:14Z","last_seen":"2026-03-05T02:17:26.871342Z","times_seen":48,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/aesasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/decrypter.js","date":"2025-04-23T10:52:49.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /aesasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/decrypter.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 17915\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126274,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"a60d20c0cb2ffc5058ff87d62a4f198f","sha1":"41e67c7ecfb2d648575ac8dfae68c447f10c98dd","sha256":"ef6f148ae55723b5bb5d2bde5261e4f132cf4c49267ad27cc45cfdce1c2c35b6","sha512":"2951fc47674a72ff4bc26e219f3258c0012535a41717b389ac37712a8389c413ada5f9a0d8444905a036b1ff9a308c93d0aebafce6829a78c123b540a69e7c61","ssdeep":"768:FkrRYgQWe2k5z2WGvb1G7S4bgjj+hl/6N8FyD8hz015jH3YScyfQW/vvkmd:FDgQWHk5z1Gvb1wSCgjj+hl/6LZnvsY","tlshash":"1fc358651b1f02b92963813d4f1f01020af6c1971762db15b97d9a10afdece6f6b223e","first_seen":"2023-06-17T20:11:14Z","last_seen":"2026-03-05T02:17:26.871342Z","times_seen":48,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-9_097f7caf9a2a6a6c4202d375f9942c235ec361b2f1d0780cd849d50676930182.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-9_097f7caf9a2a6a6c4202d375f9942c235ec361b2f1d0780cd849d50676930182.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 99407\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-1844f\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":507601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bbdeb6ed7dce126f5fb2078227c5e71c","sha1":"ee36f8333204fae681c5be588f0a7cb334372a44","sha256":"097f7caf9a2a6a6c4202d375f9942c235ec361b2f1d0780cd849d50676930182","sha512":"5bd61373ba4b9848409d8d5b312e5e44c92c6b256761dc755e33c1ec600c25692fd7fc1202def03b057e67bb6c811666eb0397458c4e6ea0976ed75b8bef1699","ssdeep":"6144:YQ7/OWBO2KfSP+ToCCsRMqhZoRWEBHHDNB4kRQ:Yc/OWBOvoCCsRMqoQmQ","tlshash":"03b4c30979f7112248b3707d8bdf5040b639c01ba609ce447dad93e41f85a78abb6fe9","first_seen":"2025-04-11T15:35:58.551039Z","last_seen":"2025-04-24T10:09:10.280119Z","times_seen":16,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"127.0.0.1:6341/","fqdn":"127.0.0.1","domain":"127.0.0.1","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:45.069Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: 127.0.0.1:6341\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 9\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-04-23","alert":"Sinkholed","trigger":"127.0.0.1","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/786432-1310719","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:47.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/786432-1310719 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 524288\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":524288,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"c28f08dea6c6ac46f25d25a54c075415","sha1":"0509d7062351541adc5c637fc4c05a7cd7972eff","sha256":"9c95b4c81c376296297a757879cb5199de07bad3b8939d66c4f21ecf6bc76506","sha512":"c4e906e773f369f2093a5534c329bd53846b5bed7ff99b1a6003847793353e959c6ffcac15ff5599eab40948a987f543fc6a2931dd2d8b55912637f74c5d06a6","ssdeep":"12288:TXnfVepYm8cLiIIbbpCpNUxiB0XvilJLC8/sKnaVwWL21+:TXfVe78cLiIIb9Cp+t8ZaVk1+","tlshash":"f8b423dd0ffb2878065428d7b1c9f9d4a5bfaf20d8c49a14f46f52852e4d30af30696a","first_seen":"2025-04-23T10:53:33.03657Z","last_seen":"2025-04-23T10:53:33.03657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1805,"timings":{"blocked":348,"dns":0,"connect":108,"send":0,"wait":439,"receive":673,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/1310720-1966079","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/1310720-1966079 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 655360\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":655360,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"ebf936ffe1b3a591f2e4290d6250a9de","sha1":"e6fd624f1b717281b2e994087481cfed3fd56af7","sha256":"080817f5fab465551e0f79e9c36b75196c205badac15013e9fa928e981f36ae6","sha512":"c78d1a0657a9c88a7605702d4a4ceae708f81fa0cef69122f368d2f4c1bc806e04bfc9550444586cfa7569a15eac19f84e578e5afdadd76f9451126cd9fa107a","ssdeep":"12288:TDPCGb6KdG/Y06SAib+Ljl0mk2SPbLu+nnwLtTDLEHa3RX0RURVMob6siCG4:fPCG+KdGH6SAbjiVDPbLjnwLtXAHahXN","tlshash":"eed4230cd684491e0c0ac17882dda6e4e12ec881be6df8686ff555252ffe3059fd5d3a","first_seen":"2025-04-23T10:53:33.037481Z","last_seen":"2025-04-23T10:53:33.037481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":420,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/1966080-2752511","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/1966080-2752511 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 786432\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":786432,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"d704638eaf9efd8d93e33dbcb9864441","sha1":"72b122ab029f8413cced0ae8f28f9a37ec823605","sha256":"6e97da2930c0650c2f949577a587767dc785e93df2819db805e7adad00ce3caa","sha512":"2101a153a69e3f9e08906c201b747eb4750c1cc70007945bbfc197662aa7e17d0dc562e4eaa8ab0f7428d9c061b7da8c15651426861dc32d2ed0d8aa95cad0da","ssdeep":"12288:bmk0C3GkXdKKw94e95vacdepURZctIdJnaGgoYYDcKE/6e2fjqV/bjd89pod7IPU:mQKL/5vTdepqc+OCYycIe27qjd89aO/E","tlshash":"23f43366b1e248fea9d4fc64f5ec62a29c6db30e137ad734200ab7c6c8c55a8d14c077","first_seen":"2025-04-23T10:53:33.039408Z","last_seen":"2025-04-23T10:53:33.039408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":457,"receive":375,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/decrypter.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /decrypter.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/file/I6QHVSAL\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 817\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2039,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"eb261c1b3ddafc3a78652dc6036e2a66","sha1":"e25fe9adb999932ed47d5504ee3ef6f36863b9bc","sha256":"e9f9d35c7c0906dd2aa24f1451adf7876ddfd1da5b5ac10910fb4a816d11fdf1","sha512":"80478ff3658b9015a77366789ca09b945f2b92e882403d1329b81f49bffe87fa324e8b6d3f60ab5aaae39f7a2ba1fd180d9412c943b5dcb1e041bcde952ff7b5","ssdeep":"","tlshash":"a041de219f1f482cc0261269927e270f58b6b06641c1691baa3f8c61bbfa931237df49","first_seen":"2023-06-17T20:11:14Z","last_seen":"2026-03-05T02:17:26.869293Z","times_seen":44,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/fonts/Inter-SemiBold.woff2?v=598278c73b24c2ce","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/fonts/Inter-SemiBold.woff2?v=598278c73b24c2ce HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106788\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6803916c-1a124\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106788, version 1.0","md5":"920533ddd1d6ea543f7fc3e89b4556bb","sha1":"bc11a427dcb55d1354a5ea07bbc353c57fe9cc0b","sha256":"d6d0905419e1e821c57189396db46ffe335960bd68befedddaf9e73f3f2e7a3a","sha512":"08edf9e3b3b03eb44ec7b194468eb969e72d51b0c66946ece974d0d6c1b8b738facd155c576b8dc1302b0889a5c04924c44b91cbedb6ed0c64c72c780742a571","ssdeep":"3072:uz6Qf75dUBRMxnGF/g7OVr5eaHPDwqK6wIms:O75LxnGFdVrnDc6ks","tlshash":"b7a312f67491d415f90f36f99b77a0251abd1957b4bb4214c3833cab41ee08a7bacb02","first_seen":"2023-05-21T06:58:03Z","last_seen":"2026-04-19T02:44:39.415533Z","times_seen":1036,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.api.mega.co.nz/cs?id=59074749\u0026v=3\u0026lang=en\u0026domain=meganz","fqdn":"g.api.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:45.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:92:87:B0:48:35:8B:0C:87:B6:40:CD:57:89:6E:C8:6B:7B:5B:5D","sha256":"C6:D0:8D:45:31:54:1C:DA:39:7F:1F:F7:E9:86:33:9C:94:DF:2B:F3:91:2C:9F:3F:25:B0:CE:2F:36:8C:77:9B"}}},"request":{"raw":"POST /cs?id=59074749\u0026v=3\u0026lang=en\u0026domain=meganz HTTP/1.1\r\nHost: g.api.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 97\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":97,"data":"[{\"a\":\"adf\",\"ad\":0,\"au\":[\"WEBFILINKB\"],\"ph\":\"I6QHVSAL\"},{\"a\":\"log\",\"e\":99641},{\"a\":\"gpsa\",\"n\":0}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, X-Hashcash, MEGA-Chrome-Antileak\r\nAccess-Control-Expose-Headers: Original-Content-Length, X-Hashcash\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-store\r\nOriginal-Content-Length: 200\r\nContent-Length: 200\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8076a1192f4688e0df48b781b445d6b1","sha1":"0ed203aba58965a39bffd02a38ea1f05487b5278","sha256":"1234f497fe3cbdf2683a4b5ed7a3c094b82177d43dae76e349b95b3cac20ece6","sha512":"e0a679f4931f5548bfc5fba41f15934155b04f2dc61b840617588f78a3a6979b54082004e8f8fd6bf82e8d51d173a1e0443a259cff17cc8efea6fb041621a2f9","ssdeep":"","tlshash":"f4d022f31308b030924742a6cb839c6d18c870396ac30091c34d9e6d04b2ef273805d6","first_seen":"2025-04-23T10:53:33.042321Z","last_seen":"2025-04-23T10:53:33.042321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/4718592-7864319","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/4718592-7864319 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3145728\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3145728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"64a8f9191dc50d2c889090256ce32837","sha1":"da160836a5520cc1d618a96a95fb69f2eb32e10e","sha256":"ccf286cb7f28be970067f358226e70f073f513e69001e5a4b81ebd810066180f","sha512":"fa18c02d412ff8de8b793f4146e467bd990d26512901eda130850a25d1320bb02b237b952fdc9d1f318224df8c165dcf899b264957aa7470e0afbbfb161d253d","ssdeep":"49152:oxklne6LuFWD+1219YsU/RSo5SqVpTJ63VKa/8GKjsTjnEHRVR5BGZD2GBbsFZQL:eklne6iUy1KGNd9GnEZwjn0RjGZDzBAg","tlshash":"2de533e48f0f2ca0db768c97360b25d32d5bd6a00123425388aad7d9a29dbfdd05dd8d","first_seen":"2025-04-23T10:53:33.04458Z","last_seen":"2025-04-23T10:53:33.04458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3269,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":509,"receive":2333,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/decrypter.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:49.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /decrypter.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/file/I6QHVSAL\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 817\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2039,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"eb261c1b3ddafc3a78652dc6036e2a66","sha1":"e25fe9adb999932ed47d5504ee3ef6f36863b9bc","sha256":"e9f9d35c7c0906dd2aa24f1451adf7876ddfd1da5b5ac10910fb4a816d11fdf1","sha512":"80478ff3658b9015a77366789ca09b945f2b92e882403d1329b81f49bffe87fa324e8b6d3f60ab5aaae39f7a2ba1fd180d9412c943b5dcb1e041bcde952ff7b5","ssdeep":"","tlshash":"a041de219f1f482cc0261269927e270f58b6b06641c1691baa3f8c61bbfa931237df49","first_seen":"2023-06-17T20:11:14Z","last_seen":"2026-03-05T02:17:26.869293Z","times_seen":44,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-14_c7abe90354711b3600cfc843f1e26655fcbf774f3482f83ba009d4c6c1e685a0.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-14_c7abe90354711b3600cfc843f1e26655fcbf774f3482f83ba009d4c6c1e685a0.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 95601\r\nlast-modified: Sat, 19 Apr 2025 12:11:29 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f1-17571\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":470396,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"26f51cecc5964ef0ba5cc5c1ee6132d6","sha1":"706c3c088188c117cdd6676d0ee4c2232e09a909","sha256":"c7abe90354711b3600cfc843f1e26655fcbf774f3482f83ba009d4c6c1e685a0","sha512":"f548c80bbdf5797aa7daadd9bef190d0c1e28410d14c61fbb7438c4f804a056d5824c4689905cd40cd636a8a1b2961b8b7223b9d35120863c6c9b7671680ce75","ssdeep":"3072:tfivjXTynAk/17pS5GNhidaLQb1BwIOw5lA4cogdxv3+5retohfY5Cm0u:tKvvynv/1yb1iIOvo95recfY5Cm0u","tlshash":"17a4820936fb123184b7307a9fef6084a235800ba10ade187dad53d45fd5178a6f6fe9","first_seen":"2025-04-18T20:30:15.849906Z","last_seen":"2025-04-24T10:09:10.322066Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/images/mega/contact-avatar_18cc8179fdcf896e202df0bee3a8a381667c7ab2e8206b7b157494d10beeae12.svg","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/images/mega/contact-avatar_18cc8179fdcf896e202df0bee3a8a381667c7ab2e8206b7b157494d10beeae12.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 632\r\nlast-modified: Sat, 19 Apr 2025 12:11:27 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ef-278\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3544,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b77a56614a61554062526d9cc9abe1b","sha1":"ea96f5169990d03c7e42819515b837bd33bc7e69","sha256":"18cc8179fdcf896e202df0bee3a8a381667c7ab2e8206b7b157494d10beeae12","sha512":"76ee94466793243e46b0032ba92dde4875a3876342073053d16470123dd96ce426ee6316695514fe3592e5455cef43acb8ed6a71cbdc1deb9713a225fd560ec4","ssdeep":"","tlshash":"c871ec2dd7f68e3fe526c24eca84d02857a5024b695ac365f36e7b0e1f542e2c48f354","first_seen":"2024-09-01T23:17:22Z","last_seen":"2026-04-18T23:06:06.036636Z","times_seen":1070,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-17_cb6c5dcee1f38393cc3540589814970d88bfc5cfadcdec22e2218c80557a91e2.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-17_cb6c5dcee1f38393cc3540589814970d88bfc5cfadcdec22e2218c80557a91e2.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 10910\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-2a9e\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"89f55e53dbb195b2d90750b1336edc7a","sha1":"65f4e32f886f1902d4465aa4cb4e5211bccf65a7","sha256":"cb6c5dcee1f38393cc3540589814970d88bfc5cfadcdec22e2218c80557a91e2","sha512":"fb3f4217c3b6cd6b8d3b6691dc0ce32869c940c3c8a40199289f1f70bb09e060411066e263808a0babc9903bca66c3acfa5cb810f632d19d6c9967f3700a8925","ssdeep":"1536:4bR5vWJ64MAbY6QMcGQKrV5XuB2NlQ7dY:4bR5vzAbYqcGQKrk2NlQ7dY","tlshash":"db532e6937fb1035c1b770aa8f5f52057230c047a809dd283eac97d85f914b8a9f6fa9","first_seen":"2025-04-18T20:30:15.838222Z","last_seen":"2025-04-24T10:09:10.28201Z","times_seen":9,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/aesasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/decrypter.js","date":"2025-04-23T10:52:48.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /aesasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/decrypter.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 17915\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126274,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"a60d20c0cb2ffc5058ff87d62a4f198f","sha1":"41e67c7ecfb2d648575ac8dfae68c447f10c98dd","sha256":"ef6f148ae55723b5bb5d2bde5261e4f132cf4c49267ad27cc45cfdce1c2c35b6","sha512":"2951fc47674a72ff4bc26e219f3258c0012535a41717b389ac37712a8389c413ada5f9a0d8444905a036b1ff9a308c93d0aebafce6829a78c123b540a69e7c61","ssdeep":"768:FkrRYgQWe2k5z2WGvb1G7S4bgjj+hl/6N8FyD8hz015jH3YScyfQW/vvkmd:FDgQWHk5z1Gvb1wSCgjj+hl/6LZnvsY","tlshash":"1fc358651b1f02b92963813d4f1f01020af6c1971762db15b97d9a10afdece6f6b223e","first_seen":"2023-06-17T20:11:14Z","last_seen":"2026-03-05T02:17:26.871342Z","times_seen":48,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-2_f965e4026bab7f54cedd13f0d798eeac7e323f65ab4e1a09333f9cb015560f68.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-2_f965e4026bab7f54cedd13f0d798eeac7e323f65ab4e1a09333f9cb015560f68.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 107214\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-1a2ce\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":455588,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (351)","md5":"4bd5656982ef46de3263d991427f05a5","sha1":"e99d9b8ade67fe8535465bb539a66d9acfe65e45","sha256":"f965e4026bab7f54cedd13f0d798eeac7e323f65ab4e1a09333f9cb015560f68","sha512":"da98fcdf0f15ba5e76d87dc352069121f9dd03fd325d591de10b159e72ffcba8ca0962d44ba6777453daf45454254284f1543a6ab07c6bbe1f8fe507ed03a0aa","ssdeep":"12288:LIyHCcmM5/W/EEflQRgkrVhDdR4ul28sAAg7V:LIyHCcmM5/W/EEft0hDdR4f8HV","tlshash":"a0a4c889e79d122a817b725a4d5f12cdb23d80779200d87e7c5c5adc2f9483843bafb9","first_seen":"2025-01-10T08:32:50.173962Z","last_seen":"2025-04-24T10:09:10.302379Z","times_seen":112,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-15_22c7f64bd2c9a54d551c86553c635e694cd887bd007ab79f86b938d0b9b61fe3.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-15_22c7f64bd2c9a54d551c86553c635e694cd887bd007ab79f86b938d0b9b61fe3.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 103171\r\nlast-modified: Sat, 19 Apr 2025 12:11:29 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f1-19303\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":519704,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f8e06a625fb9b71db5cb099284a4e8eb","sha1":"12003c1bbb0ca21863159c4ac0df745ec7a04b4d","sha256":"22c7f64bd2c9a54d551c86553c635e694cd887bd007ab79f86b938d0b9b61fe3","sha512":"dc7fb3125d1ec10724f35f5fde2fb483977b7cf9b118081bea782b7a6065fdc0f609444e5a83c249ce2e3c0bf9876e0e17603e88392d90276f171ad103de30ce","ssdeep":"6144:AXooBWPe8OJxpP/CZCsKobI4CfqWiHwxcIeJMwRgN:yRCZC0I4cqWiHwxcJJMB","tlshash":"ddb4d54979fb11b259a3603a5fefa084a33780176109cd687ead93841fc0674d6f2bed","first_seen":"2025-04-18T20:30:15.857303Z","last_seen":"2025-04-24T10:09:10.318843Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.megaad.nz/assets/2412/vpn/b/2.png","fqdn":"g.megaad.nz","domain":"megaad.nz","tld":"nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://g.megaad.nz/?w=728\u0026h=90\u0026ia=2412vpnb\u0026id=WEBFILINKB\u0026c=17454055658018165\u0026m=0\u0026l=en","date":"2025-04-23T10:52:46.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaad.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Apr 2025 00:21:14 GMT","end":"Tue, 22 Jul 2025 00:21:13 GMT"},"fingerprint":{"sha1":"DD:17:6B:4A:0F:8F:80:78:D7:57:4F:D5:F3:E1:27:D7:36:22:44:32","sha256":"10:79:5E:EE:98:F1:7C:00:93:E9:8C:CC:31:33:19:D1:40:F4:48:D6:4B:35:3C:BF:9D:C9:D0:A0:02:70:2C:1A"}}},"request":{"raw":"GET /assets/2412/vpn/b/2.png HTTP/1.1\r\nHost: g.megaad.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g.megaad.nz/?w=728\u0026h=90\u0026ia=2412vpnb\u0026id=WEBFILINKB\u0026c=17454055658018165\u0026m=0\u0026l=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Wed, 23 Apr 2025 10:52:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 48327\r\nlast-modified: Thu, 23 Jan 2025 01:48:51 GMT\r\netag: \"6791a003-bcc7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced","md5":"dd844aea29541b4a5e9072f8a7864f8a","sha1":"2f49d5cae99d892ac86760b4027b848264bc890b","sha256":"1790e0b4767a084f84d08d1fe4c90e167226fe7038c6af7b8de66feb8d998a0f","sha512":"84a59ab1a5e014714c89b194a9df46c7abeebecf6bc8fb940666fc96cc222353ce889ea63a16632e36f608e1eedfcbd41b02c8fd2e7578fda6b3825f6157e4bd","ssdeep":"768:ejakn0HGKIT3OTbIpjuz4C6CSFc97vDLWLe2gNltvz4b9SOYKAWvR7DXb0gZDBx/:eFniIjubIZO6QvDaLehNltRzWvygVycB","tlshash":"e223f176430d57f02dbf447d50a83e94e3e7a07e302c16e512f25aa4e845ce735b96b1","first_seen":"2025-01-17T00:34:25.491259Z","last_seen":"2025-04-23T21:08:48.699389Z","times_seen":31,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/14155776-17301503","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/14155776-17301503 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3145728\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3145728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"f35aee545a089102c968076cf6295890","sha1":"c5062b9dde5c1581a28e0c37e5eb0e9e80b66706","sha256":"6ca9f57882625870804ba4ae3c8bbca3a6daa5fc9ed41893198c42d31f5ced38","sha512":"c369aea3a65154b29f47871fe6643eb5b69d48a3590ae43f487153398bc87d8c50f5b54a9bd0b256ad4af2063c5d94b98b5a65eeb603f856afbfbf48cc6a3799","ssdeep":"49152:WGTTk8ckb+j+0JIECHGJ8jf5y28mMkv5zz9tDwHkltDKH8+dmyE/6jHl:1Tuk6j+XEc4q5ynxa5nIGDo8+dNB","tlshash":"29e533f0cd23619c84531aa9ed96bf08d638bbf1590db4452dba287245c07b07b5e2fe","first_seen":"2025-04-23T10:53:33.053566Z","last_seen":"2025-04-23T10:53:33.053566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1613,"timings":{"blocked":585,"dns":0,"connect":0,"send":0,"wait":326,"receive":702,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-mono.fdf7f4ed119c1e52.woff2?h=3640ac629","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:43.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-mono.fdf7f4ed119c1e52.woff2?h=3640ac629 HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 82284\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6803916c-1416c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82284,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 82284, version 1.0","md5":"3f312ed500adf210ee38346d93f2fd3b","sha1":"506a228ea0983fb02100c31fd04687ca1b32e21f","sha256":"d41c39f5fbf48b85c42b28dbd3dfffa5c2fef07943666d361fe820678f3c315a","sha512":"5672b4a19d6a63b616ec8fb15f3151d08e8ff4ecbc21a3c301913e58d049e338c7f13a5f2c6afcb3c7920a44fafbe0ffe83d46683c82727cc1ae4e4845e43fa4","ssdeep":"1536:57gHW7M5SK3cDhWUXvHg/9OIhGTgtDyOiOPyG6qjzr624ffN8:5U27Kn3cDYUXvHwh3t/Ptt3TmN8","tlshash":"1883027d5cc865a9fc9e41288e6a4f530b418b21747ad2e8fac54da181cc849f0a7db7","first_seen":"2025-04-18T20:30:15.840437Z","last_seen":"2025-04-24T10:09:10.319702Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg#icon-youtube","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 65894\r\nlast-modified: Sat, 19 Apr 2025 12:11:26 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ee-10166\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":235250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f60d55e80adf8da94d3e46482c69398e","sha1":"d2e5e2fec747b5b7d594710b55b6b777cb02662f","sha256":"85c3a6c15686901bd9f0925f424e719ab42a2da6492dc7ebcffbea1d55ba5671","sha512":"78c1b7791f53bc2a21c6788a9ff9f883a6fe8352bf5248daf8693b8089a44630733b66375d43f83e179a66be021c5419bf582ed8afd595da4e783c613d31e1e6","ssdeep":"1536:ImqmDroQJ8d7bGqeb5V0J8LE3KQEvR2tB+ej+yd+e3+v+v/GI94OFVfjWoEBf+et:GwzLXQhT4yxCVV75WSwKRXQDIqxBfc","tlshash":"2d34a4e1a21c518ce40b97bddb7eec51031ea0ebb4c58ca8aa8dd799601f5cff947490","first_seen":"2025-03-14T08:16:00.667407Z","last_seen":"2025-05-13T12:17:22.891864Z","times_seen":72,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/mega-5_e7a8288644537c0347ee2f7ef2c5028f9935f4d599e2f639c453775342622152.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/mega-5_e7a8288644537c0347ee2f7ef2c5028f9935f4d599e2f639c453775342622152.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 48787\r\nlast-modified: Sat, 19 Apr 2025 12:11:31 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f3-be93\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":323869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (769)","md5":"ee0510e2f214f347a32f4e1294c11ba5","sha1":"b57429a9973ab837d1801aa9c8a8d1f05237513a","sha256":"e7a8288644537c0347ee2f7ef2c5028f9935f4d599e2f639c453775342622152","sha512":"892ae2538f03331fdb7a0b8962f9b28a0b22a94b994d9de05c38c548ad649d9cba0b4050e6df2bd91fdd8195b2540379a6db7bb4eaf436c1b7d4438ad11a0dc4","ssdeep":"3072:Trq+eG6Ho8tGgcpgfQ0R2Pr7ucyo5wS+TMMLIBSK+4qQU8R8sP:pXucyo5wS+TMMLIBSzQU8R8sP","tlshash":"6664d865f9113d7ca12391adafcd264c7b15d452de0fcedef82a713c83c96e420a2619","first_seen":"2025-04-18T20:30:15.836503Z","last_seen":"2025-04-24T10:09:10.271842Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg#icon-facebook","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 65894\r\nlast-modified: Sat, 19 Apr 2025 12:11:26 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ee-10166\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":235250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f60d55e80adf8da94d3e46482c69398e","sha1":"d2e5e2fec747b5b7d594710b55b6b777cb02662f","sha256":"85c3a6c15686901bd9f0925f424e719ab42a2da6492dc7ebcffbea1d55ba5671","sha512":"78c1b7791f53bc2a21c6788a9ff9f883a6fe8352bf5248daf8693b8089a44630733b66375d43f83e179a66be021c5419bf582ed8afd595da4e783c613d31e1e6","ssdeep":"1536:ImqmDroQJ8d7bGqeb5V0J8LE3KQEvR2tB+ej+yd+e3+v+v/GI94OFVfjWoEBf+et:GwzLXQhT4yxCVV75WSwKRXQDIqxBfc","tlshash":"2d34a4e1a21c518ce40b97bddb7eec51031ea0ebb4c58ca8aa8dd799601f5cff947490","first_seen":"2025-03-14T08:16:00.667407Z","last_seen":"2025-05-13T12:17:22.891864Z","times_seen":72,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/7864320-11010047","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/7864320-11010047 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3145728\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3145728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"60032161913a8c4384ff5248bee086ac","sha1":"1f0e0b2b18ca90bf9189ca64ab51e62f8071bdff","sha256":"b832ac3be4420418c554a99965b844b67d392f4e94952e3ee2f7350b2033c3f0","sha512":"7912063a6ae95c14aa2f87ca32b91a57e7621a196f1676b1f2e3e5b3f6996f8b963310b645f189bc4259f4aa82e33ac51cb744ff8682c17f391d8df0a0355bd3","ssdeep":"49152:LYLwKuol1jlz4wt0Q7+0hBY3Igl2QuxOG8agNb5dfYXGU8ChE+g2sC3ue8q2HgCj:KwKjVHYa2NrfG8Cy92hZ8qkgCkNway7Z","tlshash":"cae5339d3406ea02182e2596d35ec95f2b2f927e5fb28e9f2270f5c563a35904d72ccc","first_seen":"2025-04-23T10:53:33.055567Z","last_seen":"2025-04-23T10:53:33.055567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2992,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":488,"receive":2056,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-23T10:52:35.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /file/I6QHVSAL HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\nContent-Length: 862\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nX-Frame-Options: DENY\r\nX-Robots-Tag: noindex\r\nSet-Cookie: geoip=NO\r\nContent-Security-Policy: default-src 'self' data: blob: *.mega.co.nz *.mega.nz *.mega.io http://*.mega.co.nz http://*.mega.nz http://*.mega.io wss://*.karere.mega.nz wss://*.sfu.mega.co.nz *.karere.mega.nz:1380 http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342; script-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob:; style-src 'self' 'unsafe-inline' *.mega.co.nz *.mega.nz *.mega.io data: blob:; frame-src 'self' *.megapay.nz ad.mega.nz mega: *.megaad.nz https://mega.nz/ https://mega.io/; img-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob: mega.nz\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2115,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"737f833ea101f65f043181786ade9c14","sha1":"cbe0642098b6ca0e57d39e92afef3554b93de7e3","sha256":"1f84917d9edc957ea92e2f83f47fbf1242732cac54a650ad56de4fe2465ae1e6","sha512":"848391df448a48e3f4975f843cf807d873540bbd640c992266bd97cef256e909a92f8c082e2b3cdd91c6527947fad6b6ff385e715a43bea6987af1d7901c2bad","ssdeep":"","tlshash":"6f415023e50484654261e585b1eab35d8023978bdb225c41a7b4b1efa0dbfe082b62e9","first_seen":"2025-04-23T10:53:33.056406Z","last_seen":"2025-04-23T10:53:33.056406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":116,"dns":1,"connect":42,"send":0,"wait":26,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/loading-sprite_light.png","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:36.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /loading-sprite_light.png HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/file/I6QHVSAL\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 2883\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 200, 8-bit colormap, non-interlaced","md5":"9921934f1bf864072da77c61020377d7","sha1":"6d17fe18447d4150fa3df4875a19e90db20c67bb","sha256":"73e10e327fb13409cf18780c1356edf4f86350643db0d098e1f476330ce7fcfe","sha512":"99b7095d14385c2cc9b9ede9ecdb6a5b3b6eb6751ae1f222ea9bb5aeeb1850c8de20f2c280b425a65de146a28b231d154b1fe8d0c38b2a3560158864484e171f","ssdeep":"","tlshash":"845129503f2ecd9c51cd9836e40759b3718eaf8c539ac28044a536bebe32b4ce24a290","first_seen":"2024-12-20T15:48:27.1462Z","last_seen":"2025-09-04T02:49:46.759122Z","times_seen":469,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/vendor/scheduler-polyfill_66da9107c97037dacd222b1f39336ce288eb8216b37b7120e81d62ee5dccf82c.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/vendor/scheduler-polyfill_66da9107c97037dacd222b1f39336ce288eb8216b37b7120e81d62ee5dccf82c.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7946\r\nlast-modified: Sat, 19 Apr 2025 12:11:29 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f1-1f0a\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a84088002ad6ca024b9e0dd76839dfc3","sha1":"757199046eb295aefcfcd40a3e9b6469dfa0a0b1","sha256":"66da9107c97037dacd222b1f39336ce288eb8216b37b7120e81d62ee5dccf82c","sha512":"5bbdbb78a6f43f1da09988645b81c27d78b990b845ca59a2069e670cb5745ba79320841095b34cb25283837fd08acedad6a7f88c61f2aefc06a862e19cad8cd0","ssdeep":"384:hXQuRXQukIW02q1qUJDI/s/yZBhC6sQul+YYkoMOaiQuP5Q+L7Utto8YWeumQuBo:hBU50v1qUJUJEi/TL7UExIJdRDL","tlshash":"1ee264992adb136349a2b6b59b5ba381e23c831f2b5dc984785dc3f41f4537043a2fe1","first_seen":"2024-12-07T06:49:13.837414Z","last_seen":"2026-04-18T23:06:06.000309Z","times_seen":1131,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/html/download.html-postbuild_46b6f9ef78fcaaf200063c6c6ed43828b27df0594b37e741e42742fc969314df.html","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/html/download.html-postbuild_46b6f9ef78fcaaf200063c6c6ed43828b27df0594b37e741e42742fc969314df.html HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: text/html\r\ncontent-length: 2424\r\nlast-modified: Sat, 19 Apr 2025 12:11:30 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f2-978\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11972,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with very long lines (11972), with no line terminators","md5":"5688741091b86aba765a4b0da887b7b0","sha1":"81e6d56ddb90686cb66241f62124c647b836c4dd","sha256":"46b6f9ef78fcaaf200063c6c6ed43828b27df0594b37e741e42742fc969314df","sha512":"a8f1e0cdecdf06e22555e274105ec36a14fa38b3f83ca361ac1081c86ad6a7de2a45a3c6a0e3f83cc91c1882dcf12d1267b6ad03abf94dca991ef8392e02403f","ssdeep":"192:MDu/II0Xfk07Qqyghxj6GjZAbjUkOIInkbZvcJYWd959E9WJQTM:M6/II0XfD7Qqyej6GjZAbjUkOIIn8vcT","tlshash":"19327cb5d1a1ea7782e3e2d455be8b1b32d2825ace93435293f8d38c9fe6c45ec05143","first_seen":"2025-04-22T06:06:20.022058Z","last_seen":"2025-05-13T12:17:22.919655Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg#icon-linkedin","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 65894\r\nlast-modified: Sat, 19 Apr 2025 12:11:26 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ee-10166\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":235250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f60d55e80adf8da94d3e46482c69398e","sha1":"d2e5e2fec747b5b7d594710b55b6b777cb02662f","sha256":"85c3a6c15686901bd9f0925f424e719ab42a2da6492dc7ebcffbea1d55ba5671","sha512":"78c1b7791f53bc2a21c6788a9ff9f883a6fe8352bf5248daf8693b8089a44630733b66375d43f83e179a66be021c5419bf582ed8afd595da4e783c613d31e1e6","ssdeep":"1536:ImqmDroQJ8d7bGqeb5V0J8LE3KQEvR2tB+ej+yd+e3+v+v/GI94OFVfjWoEBf+et:GwzLXQhT4yxCVV75WSwKRXQDIqxBfc","tlshash":"2d34a4e1a21c518ce40b97bddb7eec51031ea0ebb4c58ca8aa8dd799601f5cff947490","first_seen":"2025-03-14T08:16:00.667407Z","last_seen":"2025-05-13T12:17:22.891864Z","times_seen":72,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-mime-90-uni.6e9449b56f53a44d.svg#icon-compressed-90","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-mime-90-uni.6e9449b56f53a44d.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":304,"data":"source_url=https%3A%2F%2Fgmocrypto.net%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0\u0026user_id=e0c520f55e35dcc69a0a67ea6c82b3e4\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 11646\r\nlast-modified: Sat, 19 Apr 2025 12:11:26 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ee-2d7e\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52828,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d9663a1820b944c45f0961db2e6372e","sha1":"c6b8b98a95e5ba0f94dad23b6d9f4b0d4e7ce31f","sha256":"75cda10b8cf9d7c8eb983dd5ce640f2fcd79fe517ed9304023791a0e207abf35","sha512":"caf880f248a6fef9960fb289d1505eeb433fe84a88416ad1e8d79533c806ce34e55a9ec2a861f3b4e457dd4cba727688756faa81310376da0508d1d6234a0d40","ssdeep":"768:f6Bya7OU2Wd7shHZq4d9WbuqI2ir5G3l9QPvfy1bp:f6Aa7uWd7SHZq4dQbuqI1UVOPSL","tlshash":"33336075f11c56dfc04bd27cdb3a9c91234dd0bab4e4cc74ca9d9bad502a4caea0b5a0","first_seen":"2025-03-14T08:16:00.67177Z","last_seen":"2026-04-04T01:09:23.03584Z","times_seen":225,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/aesasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.144.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/decrypter.js","date":"2025-04-23T10:52:49.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Feb 2025 23:00:56 GMT","end":"Sun, 18 May 2025 23:00:55 GMT"},"fingerprint":{"sha1":"FD:63:4E:E0:43:E1:9B:4E:BF:92:C3:B2:33:60:EF:69:6A:BC:8A:C8","sha256":"2F:AC:02:78:9B:9B:DD:7D:17:27:BB:3D:06:2E:5B:27:C9:09:90:04:37:59:91:44:BD:BD:69:A7:5A:FF:3B:DF"}}},"request":{"raw":"GET /aesasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/decrypter.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 17915\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126274,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"a60d20c0cb2ffc5058ff87d62a4f198f","sha1":"41e67c7ecfb2d648575ac8dfae68c447f10c98dd","sha256":"ef6f148ae55723b5bb5d2bde5261e4f132cf4c49267ad27cc45cfdce1c2c35b6","sha512":"2951fc47674a72ff4bc26e219f3258c0012535a41717b389ac37712a8389c413ada5f9a0d8444905a036b1ff9a308c93d0aebafce6829a78c123b540a69e7c61","ssdeep":"768:FkrRYgQWe2k5z2WGvb1G7S4bgjj+hl/6N8FyD8hz015jH3YScyfQW/vvkmd:FDgQWHk5z1Gvb1wSCgjj+hl/6LZnvsY","tlshash":"1fc358651b1f02b92963813d4f1f01020af6c1971762db15b97d9a10afdece6f6b223e","first_seen":"2023-06-17T20:11:14Z","last_seen":"2026-03-05T02:17:26.871342Z","times_seen":48,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/lang/en_83cb0b9114fbd08beae616179a618f8fea3e798d4ad38b08aa5c56e044dabe21.json","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:36.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/lang/en_83cb0b9114fbd08beae616179a618f8fea3e798d4ad38b08aa5c56e044dabe21.json HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:36 GMT\r\ncontent-type: application/json\r\ncontent-length: 97029\r\nlast-modified: Sat, 19 Apr 2025 12:11:24 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ec-17b05\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":378590,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f5c9112c61dd8a15ddb9931fd950ea99","sha1":"80a39c2f3c8ac729f0297e8ba0fcfacdd806b24d","sha256":"83cb0b9114fbd08beae616179a618f8fea3e798d4ad38b08aa5c56e044dabe21","sha512":"90861d2e601c5d61206c9cb5c74fae021f5cd3074b2d35c79e89685417c616e6d2e1425480dbfff42f918cedc2993c8c8e602a33c4124b6e0a99cd91983c57fd","ssdeep":"6144:/VkTTcddVZrn9q4XYs1u9S6anj1BeN+M1jLsgYiVdcEsAW/SK:WE11m5LsgYgdcbAW/SK","tlshash":"de84fa4fde050da309e19242b8531697f610806b0f90b519bbb8819c1fbd96f62ff9de","first_seen":"2025-04-18T20:30:15.831569Z","last_seen":"2025-04-24T10:09:10.301341Z","times_seen":9,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":133,"dns":13,"connect":17,"send":0,"wait":35,"receive":53,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 49684\r\nlast-modified: Sat, 19 Apr 2025 12:11:30 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f2-c214\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":443062,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"057852173e958810f1de0e8adbc9d462","sha1":"bd05e51244966615a9dc2b0119f7e8cfa64f22b5","sha256":"9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7","sha512":"230ec42dfcea740b4fb37e3c7559da2289b7bf2025c465bf055db75659c7f9f05ede374792b046ffb3365f8fa5dc34e23f1312984c195c32a6d42147959efc86","ssdeep":"6144:6/BJv438PebFPmBjbNibrw7n2nfjvmIyybeVXWeK4cz4by6AsAt16BCfQYs63:65Jv5Niu2nfj+IyybeVXWeK4cu763","tlshash":"4094de9aa9eb1bb9a10aae3c4bdf800142d8d41b4f22dc9e3c4d4d714f5c9245af5b7c","first_seen":"2023-04-07T07:56:35Z","last_seen":"2026-04-18T23:06:06.00116Z","times_seen":1588,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/mega-2_b15cb3079d7ff134d729fb84746fc8e1a34da3bc1d7c8f7c904b94e58fdaf23f.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/mega-2_b15cb3079d7ff134d729fb84746fc8e1a34da3bc1d7c8f7c904b94e58fdaf23f.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":458,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHQ1SySP2RhBdH40NYVyAKhf9uwrXzvsNVbP3z%2BrdypyGcW19X%2FyAKhyh8hrQjWtazErdyiyhypyQrpPStbfQXQyAKhyh8hfQzWPXz40NYVyAK9BdH9rNH51nz%2FyAKhtAO%2FlAs%2FIdk8N5OSIeD4leljI5R9l2OhBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzGPnzAfGV8t3F%2FPQX4BqypyGX%2ByAKh2nzi1njpsCFaBA6RxuRjl2pR23V%2FtNRR0eR9N5s4MqYqtAKmIhk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5v9BA6hBdHpP9tbr3u4sCyi0qH41naVfSc%2BPN6hMhyjI5oaIe6aI2f4MeRkyGaz\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 3570\r\nlast-modified: Sat, 19 Apr 2025 12:11:30 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f2-df2\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (456)","md5":"40b5b51a00af1046d4711f3d9d45f815","sha1":"eaf88f767f95377b413328abc14199a000be47a2","sha256":"b15cb3079d7ff134d729fb84746fc8e1a34da3bc1d7c8f7c904b94e58fdaf23f","sha512":"e52c5efadabc8ef22a08b7682ef71b495f5501b4315e2b535e67e7c0f7106548ee34a1a5dda84291c77ef4abf32c840296ed9a64cc7ae548f8467236c6c7e282","ssdeep":"384:vzg5SLGgGHb/xTNZIrgZ5/wdnj1BOqmu3yYu8I/Q/VluMnLH/c/in3r4df3lIIaE:vzw7gGHb/xTNZIrgZ5/wdnj1BOqmu3y1","tlshash":"eda244fadc517f0949972a63badf15445b36cdc16f368ddeb2280c0d878c684239367a","first_seen":"2025-03-14T08:16:00.669619Z","last_seen":"2025-05-13T12:17:22.923905Z","times_seen":80,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:40.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:40 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 90132\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6803916c-16014\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 90132, version 2.655","md5":"94676e314a869cea8b70fc6698cb2c48","sha1":"c681f9ea637011a45fa30e4750098dee378880d5","sha256":"92090a2fc2ee13f67411a5e5778e3265e7401163c87beffa8e0392ccc765a8e8","sha512":"59bbfe9127e937271e5ac8443681dd48c7bfa882bdbfe3e340ea145ee8b6852d9a612d67f51252985fb0e11b37cafb42eb3a7e33b39c3af9aecdce3c5bd98e37","ssdeep":"1536:/rfP9tchGTkgdTU1GvCOsDeEJxefg7vtz0Nlm63XnMBya1VBVbmV9kgOrU9mo6bN:zfP9tchGAMU1lXnLil33cBLVBVbm68Up","tlshash":"1a93124a29a43759f2078cd2d438da40ad74c829cba787764eb1e61377c6dc0920ef5f","first_seen":"2023-05-04T20:06:27Z","last_seen":"2026-04-18T23:06:06.042031Z","times_seen":1423,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/secureboot.js?r=1745064133","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:36.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /secureboot.js?r=1745064133 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/file/I6QHVSAL\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 58136\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":198843,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24914)","md5":"ce94b5326d2d5964312fa8a008a3ab3d","sha1":"831805ea5ee9cdad317b57beef914d0736b24b62","sha256":"3fa6574287593374b26c94e2e18b948ddd3a52577684dad6e555e6a8c5a5cdeb","sha512":"578fddfb8b5ce7513280338f9d82d85a13111d2c4ee661800ed374bd83fda48a5603223c89006c30234eed622148f3e627faa2b3fa33140d43e6c70f903b0acf","ssdeep":"1536:sGh3GFBBmYuAobPMng5Hcqc8yOayERNxUmU8UaovJ4bxbIbY9uPU2w5G1bKjH7jE:sjrIgaqyEtUmU8U5vWNbI072RWLm1","tlshash":"4014f819a8ea011f8913207f579fe542b2e5c02b054cdc907acd53757fd1e2a86b2bfa","first_seen":"2025-04-19T17:33:14.17224Z","last_seen":"2025-04-24T10:09:10.257168Z","times_seen":17,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/fm/devices/ui_1866c95e26e19921d904fa9cd2360e7f55854cc86e35e4707eb9e47fdf2861d9.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/fm/devices/ui_1866c95e26e19921d904fa9cd2360e7f55854cc86e35e4707eb9e47fdf2861d9.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 15838\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-3dde\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0ca089d7f1b8473d3df2e9f99e0ee5c9","sha1":"aceef639cbaacd87ada5a1d4ebd71332e68b001f","sha256":"1866c95e26e19921d904fa9cd2360e7f55854cc86e35e4707eb9e47fdf2861d9","sha512":"f77c11cc8f59d4000cfbd434921e4360271a5556f787ebd81d597f5c56af3ac9391da39458c66520642866d55a21e367cfc03c32a80d92849f0cafd259642d66","ssdeep":"1536:myLqFKgF7Xu6zmDDe3IKga4n/ce5qWxc2x:myLGKA7+imDvpkecWD","tlshash":"e683a64b35f711224063b839af8b6444e23ad15fb169edc47d6c13b06f89364daf2b98","first_seen":"2025-04-18T20:30:15.820861Z","last_seen":"2025-04-24T10:09:10.266787Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/mega-icons-3d-icon-list-3d.1cbacc9ad7207808.png","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:43.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/mega-icons-3d-icon-list-3d.1cbacc9ad7207808.png HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 2214\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\netag: \"6803916c-8a6\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"3ccd2d9c7d0c2ed39bb9aee5697dae55","sha1":"f7e8a89bd2b7a3f22dc8b3870ee2510e1452c9b7","sha256":"7d4baf623dbd6fccb2943e8b904c7a9339bdbac35bb4ee9f55c321fe7119ea89","sha512":"50dd17df066c40e11f4f89cc249f9d97251e44e9c17fb3b3b2e8942019a5960251ed24eacf778ce453ddfd591cb810f6202cd77a80e2c81ecf147fe9135de1a6","ssdeep":"","tlshash":"a0414b2b813c3099e8a83913f562489ecd5aedad17c6e93dd0bdc0e36206d41f60c822","first_seen":"2024-10-27T18:25:40.697594Z","last_seen":"2026-03-22T22:31:44.05752Z","times_seen":1038,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg#icon-loading","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 65894\r\nlast-modified: Sat, 19 Apr 2025 12:11:26 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ee-10166\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":235250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f60d55e80adf8da94d3e46482c69398e","sha1":"d2e5e2fec747b5b7d594710b55b6b777cb02662f","sha256":"85c3a6c15686901bd9f0925f424e719ab42a2da6492dc7ebcffbea1d55ba5671","sha512":"78c1b7791f53bc2a21c6788a9ff9f883a6fe8352bf5248daf8693b8089a44630733b66375d43f83e179a66be021c5419bf582ed8afd595da4e783c613d31e1e6","ssdeep":"1536:ImqmDroQJ8d7bGqeb5V0J8LE3KQEvR2tB+ej+yd+e3+v+v/GI94OFVfjWoEBf+et:GwzLXQhT4yxCVV75WSwKRXQDIqxBfc","tlshash":"2d34a4e1a21c518ce40b97bddb7eec51031ea0ebb4c58ca8aa8dd799601f5cff947490","first_seen":"2025-03-14T08:16:00.667407Z","last_seen":"2025-05-13T12:17:22.891864Z","times_seen":72,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-11_84bbec0071b1ba9550698509747083cd58f86add6051d697cde7f48482175099.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-11_84bbec0071b1ba9550698509747083cd58f86add6051d697cde7f48482175099.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 108596\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-1a834\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":517999,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"55c07898e5ee9e2057af358378b35ac9","sha1":"91346df07b91ecfbafeb9d42d8d183af3da6e10f","sha256":"84bbec0071b1ba9550698509747083cd58f86add6051d697cde7f48482175099","sha512":"61730568862c451241b97a5d0dae56fd48588eb5ac8d2ecab0760a68e3366793b60a01b414503bb9f54a5d7d0f5e8a8e71833b3d8f5010d1c7b5b59817c17da5","ssdeep":"12288:1pS1nnP/UiYUaAuLJYrHBLkNXRhB/2MxQ1SXxyRAf:1pS1nnP/UiYUaAuLJqHBLkNXRhB/jxQq","tlshash":"10b4e609baf711315977317dabef6008a738801b6108de987e5d93901fc163c96b6bee","first_seen":"2025-04-18T20:30:15.862551Z","last_seen":"2025-04-24T10:09:10.273224Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/mega-icons-3d-icon-bucket-3d.309b7aad111304f7.png","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:43.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/mega-icons-3d-icon-bucket-3d.309b7aad111304f7.png HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 5917\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\netag: \"6803916c-171d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"829203ee3e16adc614a3152e72293751","sha1":"15c5ec593711488f65965a2517530fdcedf19fb7","sha256":"30b5b465af353f56efbb33ac6f49a9a68059719f3dc1f89f623d40b41d422657","sha512":"80676e4c9baf792a5d007fafff0f79763428b66e18f783a740fef087400912e83f672b614b729ae24d644c9fa0c49ecec04b1a58117a6d6a58dcc84863092b56","ssdeep":"96:n0O1iXhOFhhuMNLKxG+pitpq3ugCszgBzYlvSaFelxcBXfmDYiie1u8DEIK74:nz1S8HugKxG5pq+gCskBsl3clxcB+DJV","tlshash":"48c1af08f46167bffc8e6781b2b97409898d363c8492f2cce85bbb46ca3bc1c0ad0544","first_seen":"2024-10-27T18:25:40.693687Z","last_seen":"2026-04-18T23:06:06.051787Z","times_seen":1055,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-6_c736b4171fb1574decf6130f3b17fc6fa04fac3f3428af630831bfdd67274942.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-6_c736b4171fb1574decf6130f3b17fc6fa04fac3f3428af630831bfdd67274942.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 109102\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-1aa2e\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":467948,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"18698aaee63b5985e300a69b61eef9f1","sha1":"e820caff7b2cec60bacd799a395b9a48b9d867d2","sha256":"c736b4171fb1574decf6130f3b17fc6fa04fac3f3428af630831bfdd67274942","sha512":"ff1f2d178ff69715f935aee603744009d4de31bdc1d67f6d2948f53a879929ef12e62bc9f0db2d6c608e5e31018cc0298d7cfba6e412844a80a259309a33ea81","ssdeep":"6144:LY+0A3L+87xS7Hxaa6llJjUsuVHJXkZz17Fvd5ccdt7TWF90hvwzUsUaLIeg1qTB:NvdxhsUaW1qV","tlshash":"aba4b34e6af710324923707d9b9fa006b239d01b111cce947d5da394afc54389afafe9","first_seen":"2025-04-18T20:30:15.819921Z","last_seen":"2025-04-24T10:09:10.258686Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/mega-6_9989b9340ce3bf8b1314c1b5247281e76c515497a7d57afe244e111d56812e87.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/mega-6_9989b9340ce3bf8b1314c1b5247281e76c515497a7d57afe244e111d56812e87.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 8414\r\nlast-modified: Sat, 19 Apr 2025 12:11:30 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f2-20de\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53704,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d8f3bcd14b118ba2520e369ef6d1f519","sha1":"623a1c9fcaa7cd0e03ac52a6e192b254abef7de1","sha256":"9989b9340ce3bf8b1314c1b5247281e76c515497a7d57afe244e111d56812e87","sha512":"8c3bb104f6ae42509cf558e481c9a53c747b9fa606e63dbb58a82b41fe948d986187d3e5b666cbe98b936749bc888e3c3d1ba7a195f0bd1d103a45cbc588690d","ssdeep":"1536:pf+HKSkJ5rYJNIZpd4o8WZ2RfdFcCYAKUY+zVLhetT:pf+HKSk3rYJWgMCYB","tlshash":"68337355e0027afba9225cabb34e148cbf769c91cd09cddfb2ae250842c75f75061a3d","first_seen":"2025-04-11T15:35:58.559359Z","last_seen":"2025-04-24T10:09:10.290054Z","times_seen":15,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/mega-icons-3d-icon-lightbulb-3d.bd8de57b8b075f61.png","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:43.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/mega-icons-3d-icon-lightbulb-3d.bd8de57b8b075f61.png HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 3212\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\netag: \"6803916c-c8c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit colormap, non-interlaced","md5":"6c2e717caba4e6b7ba445f0c3bcc7286","sha1":"9db0868507f38f23e31690f12382d5dece715f41","sha256":"7c9916432d5de81002c7b7bec85b40fc33dd343a8cfb8e86fd85291ac79cc765","sha512":"276e396901535e3bb1e4d08f078e2c41e0ad105db96acb32511353b4277ca1c52632b96b8e44943b6f2ecc1c1cf635bd3e43d97daffa13bfd0b470047516e261","ssdeep":"","tlshash":"4d614b91da7564098ac05782c34cab69a936cb4c2452013001d77ecf529adfd9c50e1b","first_seen":"2024-10-27T18:25:40.695673Z","last_seen":"2026-03-22T22:31:44.041891Z","times_seen":1038,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg#icon-instagram","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.eaa1f3857599b439.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 65894\r\nlast-modified: Sat, 19 Apr 2025 12:11:26 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ee-10166\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":235250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f60d55e80adf8da94d3e46482c69398e","sha1":"d2e5e2fec747b5b7d594710b55b6b777cb02662f","sha256":"85c3a6c15686901bd9f0925f424e719ab42a2da6492dc7ebcffbea1d55ba5671","sha512":"78c1b7791f53bc2a21c6788a9ff9f883a6fe8352bf5248daf8693b8089a44630733b66375d43f83e179a66be021c5419bf582ed8afd595da4e783c613d31e1e6","ssdeep":"1536:ImqmDroQJ8d7bGqeb5V0J8LE3KQEvR2tB+ej+yd+e3+v+v/GI94OFVfjWoEBf+et:GwzLXQhT4yxCVV75WSwKRXQDIqxBfc","tlshash":"2d34a4e1a21c518ce40b97bddb7eec51031ea0ebb4c58ca8aa8dd799601f5cff947490","first_seen":"2025-03-14T08:16:00.667407Z","last_seen":"2025-05-13T12:17:22.891864Z","times_seen":72,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.api.mega.co.nz/cs?id=59074750\u0026v=3\u0026lang=en\u0026domain=meganz","fqdn":"g.api.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:47.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:92:87:B0:48:35:8B:0C:87:B6:40:CD:57:89:6E:C8:6B:7B:5B:5D","sha256":"C6:D0:8D:45:31:54:1C:DA:39:7F:1F:F7:E9:86:33:9C:94:DF:2B:F3:91:2C:9F:3F:25:B0:CE:2F:36:8C:77:9B"}}},"request":{"raw":"POST /cs?id=59074750\u0026v=3\u0026lang=en\u0026domain=meganz HTTP/1.1\r\nHost: g.api.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 55\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":55,"data":"[{\"a\":\"ach\"},{\"p\":[\"I6QHVSAL\"],\"n\":[],\"s\":0,\"a\":\"qbq\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, X-Hashcash, MEGA-Chrome-Antileak\r\nAccess-Control-Expose-Headers: Original-Content-Length, X-Hashcash\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-store\r\nOriginal-Content-Length: 5\r\nContent-Length: 5\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"094de253307e1ae5ee0e9f3a5668a458","sha1":"c033c9de1149661a14697d1e59cc4c947b8f4589","sha256":"5aaf1e183f1faf12c327dc2fb8c223022f04684c61fc34533bff62e7e572c776","sha512":"ed7d3c2cec89f4a723683495af5410994d178d7a59e99c1303c0259805ac0c7a7d0e4f7bb22daad083df2fd7e0bb472058fe7913cc93b329b0356631c0add602","ssdeep":"","tlshash":"3e3000000000000c000000c00000003000000000000000000000000003000000003000","first_seen":"2024-08-19T15:14:10.989909Z","last_seen":"2025-04-23T10:53:33.06806Z","times_seen":5,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/2752512-3670015","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/2752512-3670015 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 917504\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":917504,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"f082c5ed4ba9d1c50cbb0ba23291b44a","sha1":"0837fb20d74c3168749f4d4b6a50b16db36c85e2","sha256":"d5e4d038531af0e5c817ee0f16023f19ab3b5cfeee75dc932b20ef4fe2d795a1","sha512":"03a9fb0ddec0123936fc17be43515743cee5b800a370715e265baeaa67d71a02e5383f609928eacd2323d4b608849abeadce45a44e25aa8e3cf8d772ee6998c5","ssdeep":"24576:+4kXwz9N03vNSp1WOvOyZyzpImb/g9B3nmR/I5Jf3MU:oXy9N03cUOvOy4embg7yIjf3MU","tlshash":"b915236c98a16931c7b1931002abcdca7f1325c63b14f856e271679a9600fddb8b83ce","first_seen":"2025-04-23T10:53:33.068613Z","last_seen":"2025-04-23T10:53:33.068613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":431,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-4_feeebfcef0cf74cfa1d4874c6c5986bfa0f8d7b4a33d2ef6d2962491a037fc8d.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-4_feeebfcef0cf74cfa1d4874c6c5986bfa0f8d7b4a33d2ef6d2962491a037fc8d.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 93467\r\nlast-modified: Sat, 19 Apr 2025 12:11:30 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f2-16d1b\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":413576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"90470e2c4abe20632e27b36872b35ecf","sha1":"b55997aa060d1e083a30ce571b3858e9416eead5","sha256":"feeebfcef0cf74cfa1d4874c6c5986bfa0f8d7b4a33d2ef6d2962491a037fc8d","sha512":"e0e7115050b991375f907717bc2bde1d9dd9e2501836d5124b8b8e568c3f33efe1555325f5f158a55bf49b34237cdfd45da84f14b983ad7679dc63b451c530a9","ssdeep":"6144:yKwkb4pVPw6YFTGXU9SN6x9OSd+3CJOhdv+ya8aZulKCl5s:yKwkb47w6TNkOSd+3CJOhdv/lKCl5s","tlshash":"9f94c41e6af711224123b07d5f8fa009b635d017220dde587e5c9390afe59349afafe8","first_seen":"2025-04-18T20:30:15.830578Z","last_seen":"2025-04-24T10:09:10.272579Z","times_seen":9,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.api.mega.co.nz/cs?id=0","fqdn":"g.api.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:92:87:B0:48:35:8B:0C:87:B6:40:CD:57:89:6E:C8:6B:7B:5B:5D","sha256":"C6:D0:8D:45:31:54:1C:DA:39:7F:1F:F7:E9:86:33:9C:94:DF:2B:F3:91:2C:9F:3F:25:B0:CE:2F:36:8C:77:9B"}}},"request":{"raw":"POST /cs?id=0 HTTP/1.1\r\nHost: g.api.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"[{\"a\":\"gmf\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, X-Hashcash, MEGA-Chrome-Antileak\r\nAccess-Control-Expose-Headers: Original-Content-Length, X-Hashcash\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-store\r\nOriginal-Content-Length: 183\r\nContent-Length: 183\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"64265616459bec89151f73ca06d0a57f","sha1":"c2c806e96af0475e7188d6a2e48e8dce45ea8644","sha256":"2a59ea86a77fad6949745faaacbc6bcf87171f9e1e53334f9b1984e66d19ca0f","sha512":"80652bd10f7256ce19fc0cc00143b22b501144a3a62de1a7a368a3e36463da4db2379ae8d567949673b26f0157db8e6c03151dbe9181f44b69eba8450b20b111","ssdeep":"","tlshash":"0ec08c83ce2af8c4e0f43c0650a05187614d0b108cdc7b7023d3812c706f92eb21b08e","first_seen":"2025-04-06T23:16:23.043056Z","last_seen":"2025-04-29T10:02:33.564688Z","times_seen":65,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":239,"dns":50,"connect":28,"send":0,"wait":30,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/mega-1_a47af04f7c476692c6967de03459d0e103924957a2fff0f94a1cbe28621d6a50.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/mega-1_a47af04f7c476692c6967de03459d0e103924957a2fff0f94a1cbe28621d6a50.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 82821\r\nlast-modified: Sat, 19 Apr 2025 12:11:30 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f2-14385\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":515552,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (764)","md5":"2f33f06dade68f8a96099dcb6d6715cb","sha1":"b11e60b49558caa2884e9af45215d79c6d7f3a48","sha256":"a47af04f7c476692c6967de03459d0e103924957a2fff0f94a1cbe28621d6a50","sha512":"c356fa6b396780fe10d82e130bbec5f5479cc4e4118cd8d5a138553ce1d3ca507881378380fa8b2296ec83e347d827491f4a936697fe156cd9afe9ef97b82f23","ssdeep":"3072:WChXWqbPypt5PyRah87r/msbwMuqy7UKSIW0GRBXquJou:WEPBRahwr/m9Y0GRBau+u","tlshash":"62b4953269902daef21b4219f794764cab260003ef1f4fffa91a7d6ca3d50e5126271d","first_seen":"2025-04-18T20:30:15.829064Z","last_seen":"2025-05-13T12:17:22.896574Z","times_seen":35,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/images/sprites/fm-illustration-sprite-wide.svg?v=e397e234dc118de4","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/images/sprites/fm-illustration-sprite-wide.svg?v=e397e234dc118de4 HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 22129\r\nlast-modified: Sat, 19 Apr 2025 12:11:27 GMT\r\nvary: Accept-Encoding\r\netag: \"680392ef-5671\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68811,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"770b69c3df131f0ebc4b0ce308d1ef33","sha1":"67f2e3f1036b6ba9cf541175c98c7503a308a517","sha256":"a5169bc493a31b5513e7fb9357bb189e053f76a9c7d4a45232c145554bbeb075","sha512":"e0d5a259401d3eb73a344941de3cf61d809a498743f3c687a0aba50aa3fe1489b55e88c76aa756404999f0eb9f4b9de22cb00dc4dd34dbc310a3f329392108d3","ssdeep":"1536:TBzoP6z4UA5sXHeSe27qATH3UP+CMEsJXKI:qP6zlA5slUVP21","tlshash":"bf63f9c2a33811ad908757ecdf75acd8721f21fafa67458db66c9b1c02f3d15ea06824","first_seen":"2023-10-16T21:47:50Z","last_seen":"2026-04-18T23:06:06.046777Z","times_seen":1028,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/favicon.ico?v=3","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:36.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /favicon.ico?v=3 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/file/I6QHVSAL\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/x-icon\r\nContent-Length: 1029\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6518,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"72f13fa5f987ea923a68a818d38fb540","sha1":"f014620d35787fcfdef193c20bb383f5655b9e1e","sha256":"37127c1a29c164cdaa75ec72ae685094c2468fe0577f743cb1f307d23dd35ec1","sha512":"b66af0b6b95560c20584ed033547235d5188981a092131a7c1749926ba1ac208266193bd7fa8a3403a39eee23fcdd53580e9533803d7f52df5fb01d508e292b3","ssdeep":"96:EaLq5FfE6rwDDDIDDgDDDDD+CxyVqqqqqq0qqqqqq:Jq5hEtDDDIDDgDDDDD","tlshash":"71d17bbecf19d7aac091a7b571e2fb358205ec54cf11c80491b63e2a31f14c63ad5da9","first_seen":"2023-05-12T08:09:00Z","last_seen":"2026-04-18T23:06:06.025541Z","times_seen":1468,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-1_b39fd96caac37a89d3815985b6eb07f97244e21773e8aa399e7cfb4b714b2b30.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:36.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-1_b39fd96caac37a89d3815985b6eb07f97244e21773e8aa399e7cfb4b714b2b30.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 115658\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-1c3ca\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":409524,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"60a49d2550bc927366cd7893d2d9c4d2","sha1":"1b2dc9079a8353fdd95154bc01b2b9842cb86a53","sha256":"b39fd96caac37a89d3815985b6eb07f97244e21773e8aa399e7cfb4b714b2b30","sha512":"22de5d7d36ca7b612fc5c1be5958bf1bd660d1d7d3255374764ff2971718f6dc7d1631e64c65700e0acafa39f6ac14efcc0d54c32b3bbd63e1364c8a91433859","ssdeep":"12288:HSOdxMuVHSuYcYmD4/cZQ/coLGVFyCJTiPf7AqqArR:yluVYmD4/cZQ/coLGVFyCJTiPf7A8rR","tlshash":"8794c7d8bbdd112e422330669d2f518db73cd077161498aabd4d4a6c2f9483c42fafb9","first_seen":"2025-03-14T08:16:00.692515Z","last_seen":"2025-04-24T10:09:10.304262Z","times_seen":55,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":271,"dns":12,"connect":17,"send":0,"wait":18,"receive":21,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/mega-4_9765ca3e9c124a6f103dd27a4cec4865d7460f3ee98ef4687a5bb1c641f52ac1.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/mega-4_9765ca3e9c124a6f103dd27a4cec4865d7460f3ee98ef4687a5bb1c641f52ac1.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 112324\r\nlast-modified: Sat, 19 Apr 2025 12:11:31 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f3-1b6c4\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":694446,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (728)","md5":"f36883333899a1b322a6342ece2ad72c","sha1":"d9d31224a7e14820905608ce040244979d811a75","sha256":"9765ca3e9c124a6f103dd27a4cec4865d7460f3ee98ef4687a5bb1c641f52ac1","sha512":"4525705f4601afe845e9b6e77ca466752439a5e7618d11181acb58a52347f74117da5de5e461a6af29dfae7c964c5945d7da4afc0b22673a486b659e8a08b284","ssdeep":"3072:3siw791VQKVXvYy5VX0D6Yvz6cOTaVnjDTdZzzT90hM0oSqsH667v+gubK+:3siw/Oy5eD6nqsHN+guO+","tlshash":"60e4b665e7193dddb61781adda883a48eb264852dd1fcfebf83d753c82c80e4216261c","first_seen":"2025-04-18T20:30:15.860429Z","last_seen":"2025-04-24T10:09:10.316018Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-18_69e69959729c0e833f2ad0a93da5b3aa70e40ec913722a141a419014616e3f7a.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-18_69e69959729c0e833f2ad0a93da5b3aa70e40ec913722a141a419014616e3f7a.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 90452\r\nlast-modified: Sat, 19 Apr 2025 12:11:28 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f0-16154\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":397769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"dffe0d89d70a8316560bd128e9ae3b30","sha1":"4f26c45322dc6e552be44a5703bc7b2ac924bb58","sha256":"69e69959729c0e833f2ad0a93da5b3aa70e40ec913722a141a419014616e3f7a","sha512":"bfa4215674d71153a6836059f70c7fee162b6517366a6a2a051bfc9dff6b53e413f6f6ee8a69e7d9e36b777b051f562221f5dc3154b560a30a3a4d3d18cdfbc0","ssdeep":"3072:WSf7hZ4hwQxfzaiegbi17EmAoPQJgSFbCWlSBuUtr2:9Yxdeg+17EmA5JgSUl98","tlshash":"0b84914979f71135446330be8bdf9108b3398017a149de587d9c93986fc11b8aaf2fea","first_seen":"2025-04-18T20:30:15.858167Z","last_seen":"2025-04-24T10:09:10.312958Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/mega-8_d8f7a7455a1f2ecd73aee1186733126d9ffa081eb39f55c31c1f914f7919e2c8.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/mega-8_d8f7a7455a1f2ecd73aee1186733126d9ffa081eb39f55c31c1f914f7919e2c8.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 10291\r\nlast-modified: Sat, 19 Apr 2025 12:11:31 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f3-2833\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49380,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2258)","md5":"8e8c11237e76ae1e068691430027bdde","sha1":"042e2ec71483364a56e28536ad180b7c3258d6e5","sha256":"d8f7a7455a1f2ecd73aee1186733126d9ffa081eb39f55c31c1f914f7919e2c8","sha512":"2aa879d073eb1deca6fa7dd98c7a8eeb1adce3f3323a92214008994f9a992b5076b0b742ea283c9ecfd49dc49b4a8d3fd003567711b8134ed2aa45380a35d854","ssdeep":"768:vT/KXrNFw51/Uco4KsZS7lLcP3ANR5zthlhDnW4BgGK:vT/4jw3P3ANNhTbW4BgGK","tlshash":"e8237504e9103eee6a634978f24c62485b1598e3cd8bcefbf5be642847d55d52233b38","first_seen":"2025-04-11T15:35:58.578178Z","last_seen":"2025-05-08T21:11:19.288389Z","times_seen":37,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/20447232-23592959","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:49.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/20447232-23592959 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3145728\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3145728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"5f2e9bfa7d625c9f7cadee11ce2c1baf","sha1":"d168304a83bc627500d1df3778ba42399a06474d","sha256":"6e0c554abdac64b48d799fb763e7aaf291f0e712055721ef2360c23bcf8be416","sha512":"d5553f8e81c7e94604fa3744364beee7552a8089ab7123db21c04a608f698baad52e214e00fc037e1c786be98e102c4f67fbd87efc073603a86d32de4ed8a801","ssdeep":"49152:K/63b2HMtllazoTsZbe4z3KZdzWgZ0sha59FD4iw+wTDZZMy8fjSLNeWvezDn5:063bCklAzo4ZR+ZtWgKJFJw+wJaWN1vg","tlshash":"80e533a6e2a604b4ff297ac8655f9cc5a0255397a073c087ed3cc927e53d5f042df81a","first_seen":"2025-04-23T10:53:33.074982Z","last_seen":"2025-04-23T10:53:33.074982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":351,"receive":1027,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/23592960-26738687","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:49.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/23592960-26738687 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3145728\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3145728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"51b7edab5b4033b1ca916dc1fd60ae44","sha1":"ff2a34ed90ffafedf9dba8ddc479bd9951172b23","sha256":"022595110e124f4cd3299fa30ba77b47a949eafb9af83f2386d7280638ef8155","sha512":"ad1b10f5c434601573c667f8f6f42ce1885a9aacd2194f1fad7dc4e1f9873cbaeb1e019776dc722af9a4d69c738392544e30dda2c14885f4406014d7397ea80a","ssdeep":"49152:JiRu1Ft8pY1fHiBm4HfdpmNhmVSFV7/zJcCzNkJrT5W0K4b+uYLwV5a04lB:YMFt8p+fimafvmPmVuVjuCzNx4b+uYLT","tlshash":"09e53358baa86a23847edb23c7b4d3fd7c180355db4a15d30031156e5f684ebe844afe","first_seen":"2025-04-23T10:53:33.075899Z","last_seen":"2025-04-23T10:53:33.075899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2579,"timings":{"blocked":801,"dns":0,"connect":0,"send":0,"wait":643,"receive":1135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-3_cc9bb7afbec0cc4001b6b27737ec13185507bb046bfda3889e515d8d6aa56d6c.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-3_cc9bb7afbec0cc4001b6b27737ec13185507bb046bfda3889e515d8d6aa56d6c.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 85181\r\nlast-modified: Sat, 19 Apr 2025 12:11:29 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f1-14cbd\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":387983,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a4e5f4ffd8595496daf8fd9272a3c50c","sha1":"f705abd539e2ac348dc6bbfbca6da70a8be2eb9f","sha256":"cc9bb7afbec0cc4001b6b27737ec13185507bb046bfda3889e515d8d6aa56d6c","sha512":"05491a73ba4f2127576a77fcdaa801c0cb019d9e307ee21d5a2dbc3c5dd969cf35101c168c6a5f005a0fc2c493e76b224c708e241730756f295478f5dd2f98a2","ssdeep":"3072:J/G6a+XKBG94dNlpCIoyergAzbzdbZM12kSLiXY4XG6KPyEEsl4K2s6WJh83MU8s:3a+XtHrhbkl4P4+IQYHF","tlshash":"e284b44a3df700a70923b1bd9bcf5115b3349007a189ce947e5c6394af94a345afafe8","first_seen":"2025-04-19T21:10:17.115164Z","last_seen":"2025-04-24T10:09:10.283899Z","times_seen":8,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-7_e86c402ea614a2b1d17090df6f92f435dcf55b533be29088a3c710ecc089e840.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-7_e86c402ea614a2b1d17090df6f92f435dcf55b533be29088a3c710ecc089e840.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 112273\r\nlast-modified: Sat, 19 Apr 2025 12:11:29 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f1-1b691\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":518198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0995d28e5bcefdaabdaad4479191dd6f","sha1":"1fb39427ba1362e143c44493a8339dd50dd906cc","sha256":"e86c402ea614a2b1d17090df6f92f435dcf55b533be29088a3c710ecc089e840","sha512":"493a5ec1419e556329832832a0cf2f17a38c27040787477a138f3dbf91fa1defd9c1636f175d6c2ac3dae3d31f75cd7a2b1ba67cd1f5637e72f1404189335e4a","ssdeep":"3072:Wq4dhq4dX8r5BXvR+t/D0YPPFQhAbXLnrX7Lxn77M7TzeR1nCzfNoa5uG0iISMvG:WqCqo8rjoPFgAb5nfurQeKUUaCUKR/S","tlshash":"3db4d6097ef611324163b07d5bafa044f235902b1508de587e9c83942fc5a68a7fafed","first_seen":"2025-04-18T20:30:15.847284Z","last_seen":"2025-04-24T10:09:10.30505Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/mega-3_433d4f2c2463431efa69f61c7957b9ff24c262dfb488964310e849ffdf2dc377.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/mega-3_433d4f2c2463431efa69f61c7957b9ff24c262dfb488964310e849ffdf2dc377.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 33762\r\nlast-modified: Sat, 19 Apr 2025 12:11:31 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f3-83e2\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":283749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (550)","md5":"5ef5e56c3651cb56434b55a00eb4b387","sha1":"f65fc2f13c089b302ba0d5f088274effd7a114de","sha256":"433d4f2c2463431efa69f61c7957b9ff24c262dfb488964310e849ffdf2dc377","sha512":"f37a07ce9dcd94299388573025041fcfad8a174d2b505beb47adcf2780a8504e4ce98771e7869a38d27053712e02dd5305ddd241b46194ba7bf5c8487cc3c6f9","ssdeep":"1536:kE/Qb+uSxiLvRE/r01cA3LhaKoUG9/TVTuGeM3dLLlWxgo6cvAYH4sAOgm3XOvWk:G+uSxiLvRQr0SKoUCeBvAM47T","tlshash":"2f542580f0194ef6277bc24ed60ed304efaa6160ce965de7d2d7d81983f75ac22916e0","first_seen":"2025-04-18T20:30:15.846421Z","last_seen":"2025-04-24T10:09:10.279031Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/mega-13_0086d8352af60b029100d97f6286c0c5a65360f0aa96c646456af76373542aa9.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/mega-13_0086d8352af60b029100d97f6286c0c5a65360f0aa96c646456af76373542aa9.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38003\r\nlast-modified: Sat, 19 Apr 2025 12:11:29 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f1-9473\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":192348,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c10f81dc1d6480d6c068d99860b1726f","sha1":"84ebe7754af496bcad14e737eae92c002f37fc7b","sha256":"0086d8352af60b029100d97f6286c0c5a65360f0aa96c646456af76373542aa9","sha512":"978eb40a4527df8dceab9d92154900577e98e31b5a44d0769b40ff530a4649622778319fbdc944103af74fb875d6051bbd28db7aac19083f54f3b8608508650d","ssdeep":"3072:dm70Cdbv32J1fzpD32oMRnAMpNwqk7aJW+M6nHu+iB:Q7OpTIkb","tlshash":"e214634826f702269077317e5fdfa040b2369017a909de287dac4b886f91974d6f6ff8","first_seen":"2025-04-18T20:30:15.841693Z","last_seen":"2025-04-24T10:09:10.308487Z","times_seen":9,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/images/mega/dialog-sprite.png?v=57a6bd1346996955","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/images/mega/dialog-sprite.png?v=57a6bd1346996955 HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 30699\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\netag: \"6803916c-77eb\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 7432, 8-bit colormap, non-interlaced","md5":"c53c4b781f53b21562990926425abfd3","sha1":"fff91c4acd5d0c187ad634b79b2619dae9af58ad","sha256":"1692f9c36f3aaa9d3e251a92fd2615b55d6f8e8e0bb286fa87184ecb4e20525c","sha512":"85041e7dd1eff82db0355a471ed64114d214bbf5d9b6b54f5f741e7a83b56f38dd591c854dc16c748db806ffedf896076c8a31af7664429c373497f68323c7b6","ssdeep":"768:rphWmS5OEJDbSP4BvdZ0SKVCGg8lVBv8IYSqMd3rv:rTWmS7DbPfZ0XCGgqkdSqU37","tlshash":"e8d2e10da184e046ee2ddbbe80e54f6561f89a36f440e3a757d795ebf2d70e906c3140","first_seen":"2023-05-12T08:09:01Z","last_seen":"2026-01-27T06:50:04.525356Z","times_seen":811,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/images/mega/download-dialog.png?v=cf6daa0027e27782","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/images/mega/download-dialog.png?v=cf6daa0027e27782 HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 70369\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\netag: \"6803916c-112e1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 853 x 1363, 8-bit colormap, non-interlaced","md5":"d74c0efac1a9c59152b0325932d399f1","sha1":"a472eadb5b431a4ef40e78ed79eaed9bb8fc8135","sha256":"e8bedfbc203b2d09457d44a4ddfaadfb770d637e332f41487438fa9a7f5352f5","sha512":"8b54060e0a7fa219fb96ada3c4beae832727540d8872a231f71c2a0cddc3abaf061eb2687595be3f4fbfd996bbe0488f44e1e042b28c2aaa45d51f03d0b4e689","ssdeep":"1536:Y0BMBs8Wls4KmHpLfrBUGu5nel1iTIv12Tz8SpwfiQI97lW7:Y0BMulHHLfFUGynePV1YcMa","tlshash":"1263f2d216cca88ce62feabe9f2da3f6423465b147e1503c72e77454c4676b90b20277","first_seen":"2023-05-12T08:09:01Z","last_seen":"2026-01-27T06:50:04.508909Z","times_seen":805,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/fonts/Inter-Regular.woff2?v=b4e5eb92b9448cca","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/fonts/Inter-Regular.woff2?v=b4e5eb92b9448cca HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98756\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6803916c-181c4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98756, version 1.0","md5":"a90c493e75dbd61aec1195dbb9bb6b06","sha1":"a3e3ae8b6f79820b0b393a92fc613f50fb9f03c6","sha256":"ed64c5d83f5fcc357eb8afd0a7b8d9912cae97d88dd57cccb64787bb643c7c76","sha512":"4c3bda6554b08f9378fca75fb24fc9334534f365de8ab28f83228d95871d5c25ca90ba3945c390dc41ed176f4258df86bd5db1849b7d5bc09f257d309cd66cde","ssdeep":"3072:3f52dl72hKiGTrJNGZvdfJVgBz+rbFoGR0F6M:vol7gKiGPc1u6M","tlshash":"28a30217d38fbf2cc371ba7a390b245d225e9280421df6195f48c94a161dead27f368b","first_seen":"2023-04-26T21:16:46Z","last_seen":"2026-04-19T02:44:39.410889Z","times_seen":1640,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.megaad.nz/assets/2412/vpn/b/1.png","fqdn":"g.megaad.nz","domain":"megaad.nz","tld":"nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://g.megaad.nz/?w=728\u0026h=90\u0026ia=2412vpnb\u0026id=WEBFILINKB\u0026c=17454055658018165\u0026m=0\u0026l=en","date":"2025-04-23T10:52:46.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaad.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Apr 2025 00:21:14 GMT","end":"Tue, 22 Jul 2025 00:21:13 GMT"},"fingerprint":{"sha1":"DD:17:6B:4A:0F:8F:80:78:D7:57:4F:D5:F3:E1:27:D7:36:22:44:32","sha256":"10:79:5E:EE:98:F1:7C:00:93:E9:8C:CC:31:33:19:D1:40:F4:48:D6:4B:35:3C:BF:9D:C9:D0:A0:02:70:2C:1A"}}},"request":{"raw":"GET /assets/2412/vpn/b/1.png HTTP/1.1\r\nHost: g.megaad.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://g.megaad.nz/?w=728\u0026h=90\u0026ia=2412vpnb\u0026id=WEBFILINKB\u0026c=17454055658018165\u0026m=0\u0026l=en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Wed, 23 Apr 2025 10:52:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 52752\r\nlast-modified: Thu, 23 Jan 2025 01:48:51 GMT\r\netag: \"6791a003-ce10\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52752,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced","md5":"e80219fe70efd22c4676356778c3c217","sha1":"04700dce6ea54b07261076c58ae4fd506a723bc1","sha256":"6a4cb2f4dc859372974bd69a337c8c2d216f9c2c6b4484c6b17a9589225f5e48","sha512":"ab66b6324a73ca8d05a86427bae615d3c5c753835bf5bfce19deca6853a5fd7ae387e20e2acc03909e66a05ae453037a1e0acf9dcdbcc73b63c31b0d8ae42da8","ssdeep":"768:qHxPMIk5S6x5RDcgpvV1RVabEXfV/w9mOvEKR4+nB4MZWClnNvAEMGDk:qHxPT6S6x/DHvV9Xfu9BNR40BACl2VQk","tlshash":"5b33f12d0220f1f68a80d9d78dfcff9428ef9b22e95b9173541245375ba86ce05a287d","first_seen":"2025-01-17T00:34:25.489064Z","last_seen":"2025-04-23T21:08:48.69881Z","times_seen":31,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.api.mega.co.nz/cs?id=0\u0026v=2","fqdn":"g.api.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:37.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:92:87:B0:48:35:8B:0C:87:B6:40:CD:57:89:6E:C8:6B:7B:5B:5D","sha256":"C6:D0:8D:45:31:54:1C:DA:39:7F:1F:F7:E9:86:33:9C:94:DF:2B:F3:91:2C:9F:3F:25:B0:CE:2F:36:8C:77:9B"}}},"request":{"raw":"POST /cs?id=0\u0026v=2 HTTP/1.1\r\nHost: g.api.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 33\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":33,"data":"[{\"a\":\"g\",\"ad\":1,\"p\":\"I6QHVSAL\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, X-Hashcash, MEGA-Chrome-Antileak\r\nAccess-Control-Expose-Headers: Original-Content-Length, X-Hashcash\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-store\r\nOriginal-Content-Length: 147\r\nContent-Length: 147\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f1803758db1b508dca41feb18a35c08a","sha1":"769d7402eea26480fdbcb6468cec4c5a791ec25c","sha256":"eb51b97c9d41163284762017e5d1dda07ea0f35b32c76fb1f798ceff53214a10","sha512":"672e6c2f6db3bb635c67aa8d6e040f0c06aadd7e24b44b06b587226621a8760954a3b4ebc6e406e84f0b086389849cd571d0100e9ff1471a55d8ac136071f643","ssdeep":"","tlshash":"38c02be4db3b041af891b0cc0d336df678549b395fa8830cceb2893d22828495ecad04","first_seen":"2025-04-23T10:53:33.081969Z","last_seen":"2025-04-23T10:53:33.081969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":328,"dns":47,"connect":27,"send":0,"wait":32,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/html/templates_253c76ec5ddeb66875df2915b1da8ee8cdf36ec89a894f539f632e4543e9a821.json","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:38.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/html/templates_253c76ec5ddeb66875df2915b1da8ee8cdf36ec89a894f539f632e4543e9a821.json HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 102077\r\nlast-modified: Sat, 19 Apr 2025 12:11:30 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f2-18ebd\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":688061,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a511a5585d6b53806228d27e271d67ed","sha1":"b88c9891127679d672b36dd37f48e27a53d84de5","sha256":"253c76ec5ddeb66875df2915b1da8ee8cdf36ec89a894f539f632e4543e9a821","sha512":"0918d2a19effe540f9fc929f08896bec033f62ca34d3a47fb0c0185bf4d99ff9156b71f50f5fe6eded50f22c8c7afd061868acad03e19df8e543f3b85ec77d4f","ssdeep":"6144:R5LmrhKSAiPQoXgEmIZ071dShQO/kVfDhBPyrZMbqmqBWkQuF:lJ/ShQy3lmqBWkQw","tlshash":"2ae4eb70a09cda378193d2d666729b2f7766d258eeb3034253f8c38c0feac64ee56505","first_seen":"2025-04-18T20:30:15.835632Z","last_seen":"2025-04-24T10:09:10.283089Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/393216-786431","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:47.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/393216-786431 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 393216\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":393216,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"bd4c1ae999697d49baa4fcbd244d30ac","sha1":"d4c5f4062b896b25a47f4622cd704e89870eb903","sha256":"3b0dea1726346d2a60628a24f394b945944b165cf82ffa9fb5b110c376e4b928","sha512":"aae5490cf0b94a9b86c7b83f22f8ac2bda4bdae85b5a0e609295de7b464b0e23e12633615d2db723a2f8bf93a7df051a291f55297ea31cc112b58a0764688942","ssdeep":"6144:pRojsVf7f32OFh1i9NPemPXG0QCa+rZKUSjTjw8t45k63Hfvc4briwLk9i+hJv4O:pesJTpcHGmPXzNdVcT65k63HpXLk9i+p","tlshash":"3c8423ebe47d566f620b1391bfaa74d680249223325f56700af8b98f31d64e1e36c173","first_seen":"2025-04-23T10:53:33.083239Z","last_seen":"2025-04-23T10:53:33.083239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1753,"timings":{"blocked":346,"dns":9,"connect":106,"send":0,"wait":442,"receive":618,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/images/mega/icons-sprite.png?v=48528e60724d858e","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:46.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/images/mega/icons-sprite.png?v=48528e60724d858e HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 118009\r\nlast-modified: Sat, 19 Apr 2025 12:05:00 GMT\r\netag: \"6803916c-1ccf9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":118009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 262 x 2354, 8-bit/color RGBA, non-interlaced","md5":"0c84425225ce575aa5d7da38b5a448f5","sha1":"e16cfed98dcc4bbd8cecfe3c2ade5a09f392dfcb","sha256":"3f5cef20c00263dcde826647567a7b54e912c34b08f88bd5a7e1e4fecd342bd3","sha512":"cba9f8a5bfc20efd4a54665ef7392e822cc8087998295d0c80e241ea37ae3f4cc936e8f041e244dd9226ce07a9a6a838dd8b352df5ec569a6698e5cab332cf01","ssdeep":"3072:s1yQierpK9dmbIdJXzPZdXPmQflXNIer2MQd6NGzX:sZFKXmoOaXuW0I0zX","tlshash":"4db301d06856d94dcbcaa83d5710c2797f31e587f090409959fa986b2c820bccc9eefe","first_seen":"2024-08-19T15:14:10.98929Z","last_seen":"2025-04-23T10:53:33.084082Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/0-131071","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:47.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/0-131071 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 131072\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131072,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"c705e7d25275f92b84478236cea91f0b","sha1":"e5a35cc3ab3f2e393842bc921a33aadc8128f306","sha256":"3e98991dd063d97c0e06ba23ce558d3f52b408eddd26001afb13cfaa1c042933","sha512":"ca02e460b12aca84bf9408dd8fcfc47557e78834e159ec2a6a9a19a126e8ae6c8bf89794e6adb91313c70d88e2ddbbd250a301b4ee492d3a24f6432d1e706f66","ssdeep":"3072:4k4uesnup1xjQpunnL7ET/55LA6vDQ05zmrsKtk/j:4ufuZMun56nzGseq","tlshash":"62d313af1e4ce6487ec48e98c9f744a28e9a42eceee9a31f44b5d41731536c0f9641e1","first_seen":"2025-04-23T10:53:33.085269Z","last_seen":"2025-04-23T10:53:33.085269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":350,"dns":11,"connect":103,"send":0,"wait":441,"receive":312,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.megaad.nz/?w=728\u0026h=90\u0026ia=2412vpnb\u0026id=WEBFILINKB\u0026c=17454055658018165\u0026m=0\u0026l=en","fqdn":"g.megaad.nz","domain":"megaad.nz","tld":"nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:45.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"megaad.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Apr 2025 00:21:14 GMT","end":"Tue, 22 Jul 2025 00:21:13 GMT"},"fingerprint":{"sha1":"DD:17:6B:4A:0F:8F:80:78:D7:57:4F:D5:F3:E1:27:D7:36:22:44:32","sha256":"10:79:5E:EE:98:F1:7C:00:93:E9:8C:CC:31:33:19:D1:40:F4:48:D6:4B:35:3C:BF:9D:C9:D0:A0:02:70:2C:1A"}}},"request":{"raw":"GET /?w=728\u0026h=90\u0026ia=2412vpnb\u0026id=WEBFILINKB\u0026c=17454055658018165\u0026m=0\u0026l=en HTTP/1.1\r\nHost: g.megaad.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Wed, 23 Apr 2025 10:52:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 23 Jan 2025 01:48:51 GMT\r\netag: W/\"6791a003-5848\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22600,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3efc47da590cec8d7ed0a76fef9a6eb9","sha1":"13e96c9058c3f2404772cad5502385bf4ca639de","sha256":"1fd7464b57d4a3a40fff3748541ad0dc86dfcca49a634e70bfe4065da60bf868","sha512":"186c908d9fb4ac99698da793f64ca2b2fe3bff5e2781a18c57da49180855140a94ecf84dbf7b44750ff7772fab6a89a04f53397b51fc0ce71e2ced8ea62a17e5","ssdeep":"192:B9WZm1VrFn1+PcIcacNocsc+cLlOmMkw1PboZnK6ureASW7pIFgR3tgqSLQHDiJu:zn1q8ZlOfmbMr+O/8j0vP","tlshash":"8aa2edaa08a200174513526dd74f264c38a38bc75c96fe1c7e5c6128af9c93ca2f0fbd","first_seen":"2025-01-13T17:49:27.664989Z","last_seen":"2025-04-30T08:45:40.004367Z","times_seen":53,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":97,"dns":13,"connect":26,"send":0,"wait":28,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/11010048-14155775","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:48.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/11010048-14155775 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3145728\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3145728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"DOS executable (COM), maybe with interrupt 22h, start instruction 0xeb6c3639 3cd52903","md5":"868de3b9c3af7f5c6f9cda244e4ec86d","sha1":"679beafbe51ab4980378c4404570f388c25af270","sha256":"048e4319731fc9cc3421c404c7709d85db5f8e4ad25d9906de21b9ac37613fb8","sha512":"8889a16b101c2e283cec3bce394fa62545f418d77e0561ae5488f30762a5ff9e8df45206f88fc92074ca8645f17e5667b34bca093944ac8cb6951ef4103b5290","ssdeep":"49152:48uETZc9OOQ4pe5aDqFWM7vj/PH6j5dP9En8C5Xg7QsA/NDXrs8iYEazbcdFMzHy:XuEFcwPDzvj/ijA/w7DUjwU3cdFQHVk","tlshash":"fce533d36b3af7c08bf46e72b8725a63504da142b803e1c6556079a703ad0fc79f9593","first_seen":"2025-04-23T10:53:33.086926Z","last_seen":"2025-04-23T10:53:33.086926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":378,"dns":0,"connect":0,"send":0,"wait":335,"receive":667,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/decrypter.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.144.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:49.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Feb 2025 23:00:56 GMT","end":"Sun, 18 May 2025 23:00:55 GMT"},"fingerprint":{"sha1":"FD:63:4E:E0:43:E1:9B:4E:BF:92:C3:B2:33:60:EF:69:6A:BC:8A:C8","sha256":"2F:AC:02:78:9B:9B:DD:7D:17:27:BB:3D:06:2E:5B:27:C9:09:90:04:37:59:91:44:BD:BD:69:A7:5A:FF:3B:DF"}}},"request":{"raw":"GET /decrypter.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/file/I6QHVSAL\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 817\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2039,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"eb261c1b3ddafc3a78652dc6036e2a66","sha1":"e25fe9adb999932ed47d5504ee3ef6f36863b9bc","sha256":"e9f9d35c7c0906dd2aa24f1451adf7876ddfd1da5b5ac10910fb4a816d11fdf1","sha512":"80478ff3658b9015a77366789ca09b945f2b92e882403d1329b81f49bffe87fa324e8b6d3f60ab5aaae39f7a2ba1fd180d9412c943b5dcb1e041bcde952ff7b5","ssdeep":"","tlshash":"a041de219f1f482cc0261269927e270f58b6b06641c1691baa3f8c61bbfa931237df49","first_seen":"2023-06-17T20:11:14Z","last_seen":"2026-03-05T02:17:26.869293Z","times_seen":44,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfs302n110.userstorage.mega.co.nz/dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/26738688-26805049","fqdn":"gfs302n110.userstorage.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"162.208.16.20","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:49.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.userstorage.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:BA:E9:53:15:20:5D:0B:5B:80:5F:45:87:63:2F:63:B9:DE:29:A0","sha256":"CA:E9:7F:3B:99:64:6D:0E:45:EE:F7:00:79:EF:A0:A4:16:28:C9:02:E0:93:82:11:96:20:32:15:51:C3:5E:82"}}},"request":{"raw":"POST /dl/R5is5bDs-i7zAgIVf_xxpXFVVX5bXnrTzRXU_Y5JZNS1_Uhh0RVc4LRwyAhFXfRFoL4kmePVy25OHhrT6KBlYcCx_WhzT9y5CUNWr5AsuTEPWYhW6-MgQD3yntn5VQ/26738688-26805049 HTTP/1.1\r\nHost: gfs302n110.userstorage.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 66362\r\nContent-Type: application/octet-stream\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: private, no-store\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66362,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"a6f9ff3433840af923bf6e1344019381","sha1":"a04f83d35a3fee296e718a1ca7c5aac02297a964","sha256":"c67f3cfdeea3937e2db3cb0914c19e1d356f5dcc462a334b7caccff85e1be6dc","sha512":"a786a3a52b877346c157d6ea2c5f2e249f72ddeb6acb0ed2a0ab4a7ec6a1d643aaad1a7f7df846d9aacdff64adbc99e569a27115f0e9a0fc9424e1f6121ba044","ssdeep":"1536:8c66lr5CmkKyQLn4NmWOKOcbw+ZR7KbjHeAIRbr:rg5Kfb4YW9Bw+7GHeAIR","tlshash":"265302d02450ed2967eca859c263d7265b4dce295c84efbda92ca414cff6b0d31ac846","first_seen":"2025-04-23T10:53:33.087727Z","last_seen":"2025-04-23T10:53:33.087727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2585,"timings":{"blocked":1423,"dns":0,"connect":0,"send":0,"wait":407,"receive":755,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/html/js/download_9fa6bf8ecdfdc59ad0170ae78a338f43274c65cebffadd18b7a9e2b92c9aca09.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.127.13","port":443,"asn":205809,"as":"MEGA Cloud Services Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:39.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/html/js/download_9fa6bf8ecdfdc59ad0170ae78a338f43274c65cebffadd18b7a9e2b92c9aca09.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 23 Apr 2025 10:52:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8542\r\nlast-modified: Sat, 19 Apr 2025 12:11:30 GMT\r\nvary: Accept-Encoding\r\netag: \"680392f2-215e\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38564,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"545c0db9e397ffbc8c9ee0fe31a12040","sha1":"75da97b294888073c0c0b83908ae1f0d3ce9c42f","sha256":"9fa6bf8ecdfdc59ad0170ae78a338f43274c65cebffadd18b7a9e2b92c9aca09","sha512":"770807a89046d55ccc1c37b4ea621fdbb014759160f1d594ad0ce94b2767c342bd29ac8e295d7399ecc3c42ab5989f466c98920c9eb8a5180aa450d5e6c2b990","ssdeep":"384:NRvNikzCFSc96PJ3qeka5ikh0t4xTx0x81m4l0APxfPrcAXAe8PG7z:NPfc96PJP5i0t08jeaTweT","tlshash":"2a03628f25f780619577b07e5bef5088662644079109ce00bdbc8689ff90125b6e6bef","first_seen":"2025-03-28T09:15:59.095842Z","last_seen":"2025-07-24T01:04:50.038858Z","times_seen":82,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/favicon.ico","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://mega.nz/file/I6QHVSAL#-ZIwS1RwT_4siLCdWMsLFDnT3rYQ9I3to5PF21h8PGo","date":"2025-04-23T10:52:44.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Feb 2025 22:02:50 GMT","end":"Wed, 21 May 2025 22:02:49 GMT"},"fingerprint":{"sha1":"B5:82:6A:DA:97:F6:97:4D:3E:00:63:F8:08:44:A0:75:AA:91:1D:CA","sha256":"3D:AC:62:5B:FB:10:EE:41:30:95:60:96:5A:32:69:4B:A8:1E:A7:50:E7:09:20:9B:73:EB:FB:2C:95:EB:8D:3F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/file/I6QHVSAL\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/x-icon\r\nContent-Length: 1029\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6518,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"72f13fa5f987ea923a68a818d38fb540","sha1":"f014620d35787fcfdef193c20bb383f5655b9e1e","sha256":"37127c1a29c164cdaa75ec72ae685094c2468fe0577f743cb1f307d23dd35ec1","sha512":"b66af0b6b95560c20584ed033547235d5188981a092131a7c1749926ba1ac208266193bd7fa8a3403a39eee23fcdd53580e9533803d7f52df5fb01d508e292b3","ssdeep":"96:EaLq5FfE6rwDDDIDDgDDDDD+CxyVqqqqqq0qqqqqq:Jq5hEtDDDIDDgDDDDD","tlshash":"71d17bbecf19d7aac091a7b571e2fb358205ec54cf11c80491b63e2a31f14c63ad5da9","first_seen":"2023-05-12T08:09:00Z","last_seen":"2026-04-18T23:06:06.025541Z","times_seen":1468,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}