{"report_id":"881d4bb3-4258-4f27-9d4c-0ed1c6b459bc","version":6,"status":"done","tags":[],"date":"2026-03-07T23:39:35Z","url":{"schema":"https","addr":"hidemega.com","fqdn":"hidemega.com","domain":"hidemega.com","tld":"com"},"ip":{"addr":"172.67.164.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hidemega.to/","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"title":"MEGA","dom":{"size":4877,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9b0cadafe1d33a2ee9a379b0c0aa3544","sha1":"537e4f9fc934250cef0df95c96c89db44174c6f0","sha256":"8167aca54b2a6e13c705e6707bf72a6f3132fa008653fec78ec978f688fa45c2","sha512":"475a437cf5b8d0f247fadf848cd504a4b2e9514239b11c47d11b26fa3661c213c1a75ecc1d76354ed6593da8bd04abf358d9d65f93c2288ed417db999002b617","ssdeep":"48:nUHLX5xDEEOIR+lsTjwOqSwHOxQuSJIW9it4IR+ltPujBWC2:nUHLJxDhls2BqTuxQKW9UsHEWZ","tlshash":"79a1c9205df244270192e046bd205f1abec5d5bbda5e460032ec0eda6fe3c81ce6f60a","dom_hash":"domhash0e9ac134ed034d384add9b9331b92272","first_seen":"2026-03-07T23:39:40.200551Z","last_seen":"2026-03-07T23:39:40.200551Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hidemega.com","fqdn":"hidemega.com","domain":"hidemega.com","tld":"com"},"ip":{"addr":"172.67.164.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T23:39:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hidemega.to","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":592828,"first_seen":"No data","last_seen":"No data","alert_count":17,"request_count":17,"received_data":567692,"sent_data":7575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}]},{"fqdn":"hidemega.com","ip":{"addr":"172.67.164.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-19","domain_rank":6096205,"first_seen":"2024-11-18T20:16:59.418481Z","last_seen":"2024-11-18T20:16:59.418481Z","alert_count":2,"request_count":1,"received_data":5349,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hidemega.to/static/js/set-height.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c57f3814c8ffa7131a43c3811325c052","sha1":"c3c337ede2e45cf5f4d4a4f4fd059156156ea520","sha256":"6d4ad04bbdcba838097dfae4e68a319d1fe958024b5abf9fd8dce399c12075d6","sha512":"f1aa6b3fd32158d3cc332176715880e7cfb48e701eb99c1bea9b552d46ec66a8854c3b9af76515f8568daf12447f43c5fb952d4d0102e7272b56d87170fd5704","ssdeep":"","tlshash":"e1410d2d9f40325043171fdb342fb5c8ee63c8e97a8e0c5e520468b87e94a5dc7e6a75","size":1968,"data":"","first_seen":"2024-11-18T20:17:01.512473Z","last_seen":"2026-03-07T23:39:40.210703Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/auto-toggle-content.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c1f2eb431dce77b2df8dbca54f6a3d2","sha1":"869c8ed22dc85e0bf03872b9759982486b2d6b5b","sha256":"df5a2fd08343f4b7b776abd55d3157a269c9c223855d76ba6e10e4c51011d426","sha512":"ccf9212b0224d4cd625473d873290c6feb4f66f91c9dc7cd6701bc9fb7d51b40a65f1b97d1fbea85be25fafd45fbc8b1b99f0275fd6a221f8e9a59390f8e706a","ssdeep":"","tlshash":"2b4170883ff02651235b1697769b5095f86786eb23b30405e3049ca6fc0293bf4baf74","size":2407,"data":"","first_seen":"2024-11-18T20:17:01.502233Z","last_seen":"2026-03-07T23:39:40.24009Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/index.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f62ccd753d08d334148d3f37dfda8b3","sha1":"66ad2909cad9befc869bdc337e7f7f5ca1a1339a","sha256":"a0cdb796f47bfe3bdbf7927c1e987bc9027715b720734c3ad25e7dfd70cbba73","sha512":"1c8ef8fba16ef2420d167b6a27dce94df5dd3ec93b56730b181594921dc653d98f51d44927579017db9d7e715efec5de01a800ac7d7ede7549be33017c19c83f","ssdeep":"","tlshash":"b7410eb22f8477d1f34a9fe37123308de866c8c9b6d21846445c44a43e50f16cbd2e75","size":2294,"data":"","first_seen":"2024-11-18T20:17:01.500594Z","last_seen":"2026-03-07T23:39:40.230136Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/row-buttons.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f33cf9587826e78e2a041ac43ba3c4ec","sha1":"08c0e349301f37c7b0c29c3d5989d6ef9ddad18c","sha256":"fbbc7055f2c0d2eb138160399cac760ff51d2091093634dfba580952014fd7e2","sha512":"d6d7b1ed9134193026290c6005dab55251d4fda85c9f45f19215cf6b00160ffe26fc7787d06767e392c9e2cf763c9065061961be1bb032bf2007658817a15071","ssdeep":"","tlshash":"2a41bd582f8067a0e34a06a7453f28f4ef15cea931c102d6e0345ce9bd784b5f2e7674","size":1878,"data":"","first_seen":"2024-11-18T20:17:01.516867Z","last_seen":"2026-03-07T23:39:40.225372Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/alpine.min.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d071f85b077a8857cce20d680899d4f3","sha1":"3db68a8db1c668641445b9ce88a789ccc7973e9c","sha256":"bc8bd07548bba9730a458627491724389e0bbe46c6398af0a5e76842686c7cc2","sha512":"2deb816aa3788620a8600f768bf2203428c95b95709520711ea7c46cde99bcd2074e66fdc284ebfee69d398224a809b9eb205598c88f22c9b2ff2823c746d642","ssdeep":"3072:NiqQxnR34V61naU7SiRnYcmXxbTJteGNIsKk1Ev8qC8IetanecKPBTyOhnnPY/5s:YxnRh1nVWiRnYcmXxbTJNIsKk1Ev8qCO","tlshash":"68a364447bc02a59274b8ffb7327f4e4f42b086f3854498fd114bd5429a6a2beaf1931","size":101589,"data":"","first_seen":"2024-11-18T20:17:01.504078Z","last_seen":"2026-03-07T23:39:40.218177Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hidemega.to/static/fonts/inter/Inter-Regular.woff2","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:14.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/fonts/inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/static/fonts/inter/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98868\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=Inter-Regular.woff2\r\netag: \"1761071977.0-98868-1646268436\"\r\nlast-modified: Tue, 21 Oct 2025 18:39:37 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2cRmIWW5%2FVj7IHtXlfMpPjaHYb5NYgdOAdpUYIYIXBrNn40bvsY5qlPq8U171yZ%2FbxyBHi9HVMK7zwvQ3qeAD99DhskDsKwHZIO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70355ae0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98868, version 1.0","md5":"dc131113894217b5031000575d9de002","sha1":"f96348260751ea78b1d23e9557db297290bdaf28","sha256":"d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6","sha512":"0aa4420c7b7dcc70238371f9d21d521d0673caf4c1883eeb2d3254c5a1dad941f4569f418350ffc61e93303466c504179b90ba0acf008250dc9c2c6ddf6f850b","ssdeep":"1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH","tlshash":"70a312ac58ffdf34aa65a9fcd27856761094223d83edc0ac90a200c6c7b65794fdcd98","first_seen":"2023-04-05T14:51:38Z","last_seen":"2026-08-11T02:40:37.052272Z","times_seen":28219,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/fonts/inter/Inter-Bold.woff2","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:14.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/fonts/inter/Inter-Bold.woff2 HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/static/fonts/inter/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106140\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=Inter-Bold.woff2\r\netag: \"1761071983.0-106140-827330243\"\r\nlast-modified: Tue, 21 Oct 2025 18:39:43 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glZmnNl8DUnqeCQQvLlfsvUPIx84I0x6U3rywBrXPFRiSvd%2BZ0fKBNKA5Jdq8PKRjfQpAog7vttaV1y95MpLaWGQbuwq8%2BCcCnvg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70355ae8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106140, version 1.0","md5":"444a7284663a3bc886683eb81450b294","sha1":"1e94a0dfac8bab0947ea9b0b6fb663ebad5cceb5","sha256":"c63158babcb7902203ed73476ccf901db34825ea524d4a36a52b5e5f97e1abf7","sha512":"7be12803aab99ac90dcb4d56ebdb682612f8ecfaca95a2b60a9b5b06f461ed2222ccf757280e40cf1d4860e67bc35d5391ae5479d6b7282ea075f7ee56bf53d1","ssdeep":"3072:JNQdKgDRY2QEdOWASkVB09yzqr4hP7a/lR8A:IdKgDRHcDsbt/rh","tlshash":"18a312068bebe92f2e8715e71c34396bcc410b26cbb46ae657727d785e40764b04f21d","first_seen":"2023-04-11T10:20:42Z","last_seen":"2026-08-11T04:22:25.337365Z","times_seen":7950,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/css/structure.css","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/css/structure.css HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=structure.css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 18:42:02 GMT\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Gccnvq8CYurKnjRhptNJTDwVAATIsJbWTgqFHu1Xj%2Bxg23gxF%2Fu%2B%2BSZ765bPC62wgrbP1WWJORDyDEpziUxF6dX6jpaC7pVflz4\"}]}\r\netag: W/\"1761072122.0-1864-2746878775\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70342eb2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1864,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1864), with no line terminators","md5":"a02e3a59756f858ce63da1967bcbd01d","sha1":"8c471a5b874eccc4fea53ed516573a846494404f","sha256":"297ce35880c5eae111329aa3ee41ee5a0fb196c934a7d5f51242d398f30aea73","sha512":"003f1dd5a6ba94647c09a7f08338e27b432912e31261b4d54030d35f4c246fe611ca0453ef9db1f2f84e5e3ff31a7e7f9cc2635284976973ac02669218af890f","ssdeep":"","tlshash":"623158d611212d3cf02b86362da0619d3502ee29afb7b1ebbc23d630c5cb7a64639954","first_seen":"2026-03-07T23:39:40.205953Z","last_seen":"2026-03-07T23:39:40.205953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/css/style.css","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=style.css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 18:42:01 GMT\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1suxfO4Hg96Ix8V3NhMh4oH0xxhHrKnX4TQfNlUQw0byBmbDZpBxBOvTOVR7a6gN0h6B5omvSAG9dpxnXx9zt1nJJJRq%2F33d4G3\"}]}\r\netag: W/\"1761072121.0-4049-2017921399\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70342eb5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4049,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4049), with no line terminators","md5":"89bc6d4af3905d1dd75608bdf9c08a33","sha1":"15398aef7ee98e66e2b0177fa14248991a9f2094","sha256":"ff0e883448c4d8eee3f83d3b295919de99315e37f3d356e51270ba061b2cbb1e","sha512":"c6e9c1ca1f174202a2eb45421a1a24c95f86c4f957c4f649bc87d9ec5f97ea9745cf008cd5074f63fc8a34755626d25515016e666d9be6d35563b62792836f87","ssdeep":"","tlshash":"488132a3d34f12167517857c61d8feea2115a2f3c4918b74fda874b4cac21bb3967702","first_seen":"2024-11-18T20:17:01.506989Z","last_seen":"2026-03-07T23:39:40.208165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/set-height.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/js/set-height.js HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=set-height.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 18:42:09 GMT\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJ9LJPVEifrOeqQPpNgZ86gnvDLSWy1ZneWiPMWrFZxGn%2Bx3eaX0UToCJQ859ZdXEvzHlLjzHEzRW83lsZp973uVD6l9Q0qylntm\"}]}\r\netag: W/\"1761072129.0-1968-2489780832\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70343edac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1968), with no line terminators","md5":"c57f3814c8ffa7131a43c3811325c052","sha1":"c3c337ede2e45cf5f4d4a4f4fd059156156ea520","sha256":"6d4ad04bbdcba838097dfae4e68a319d1fe958024b5abf9fd8dce399c12075d6","sha512":"f1aa6b3fd32158d3cc332176715880e7cfb48e701eb99c1bea9b552d46ec66a8854c3b9af76515f8568daf12447f43c5fb952d4d0102e7272b56d87170fd5704","ssdeep":"","tlshash":"e1410d2d9f40325043171fdb342fb5c8ee63c8e97a8e0c5e520468b87e94a5dc7e6a75","first_seen":"2024-11-18T20:17:01.512473Z","last_seen":"2026-03-07T23:39:40.210703Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/fonts/inter/stylesheet.css","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/fonts/inter/stylesheet.css HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=stylesheet.css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 18:39:35 GMT\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0I2b5HYOt8e2yFS6AGijbaKRj2y%2FGqCcRT3QTMhP3wRItKL%2BJCYTnVNffzooXb9xmv%2F4klKO3BmLjntJTnBBBeDEQDP940nUu2nY\"}]}\r\netag: W/\"1761071975.0-2191-435949250\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70342eafc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2191,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8de309e42a1bfd9376400f56b4480dcf","sha1":"a96210c3fc622a1714eac99162f1ff4f11c1c6e6","sha256":"1879a3ddd0bc64b14ab3c6259203485749d447decf219227bdbbe96b2731b605","sha512":"d93eb201e4ba61ca0b522d47ca1526caf045b589f2f3b3b60f29b975844f7b9b515557baa65eb33422ca04c3093367073e058515883f4d802468ac110fb85aae","ssdeep":"","tlshash":"0e418270046f6900da251d497bcf6f266d6d286e2045cabc5bbf089cbcef9668384f5c","first_seen":"2024-11-18T20:17:01.498839Z","last_seen":"2026-03-07T23:39:40.21363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/img/icon-mob.png","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/img/icon-mob.png HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1306\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=icon-mob.png\r\netag: \"1761072043.0-1306-2481982026\"\r\nlast-modified: Tue, 21 Oct 2025 18:40:43 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7nmDCxEGIosbm4NDGqd4pEqwzYSgpDrLkm030ZYgvF7n2xRQ3zpzMM3H2RVQgEk9sGYN0hOyWuSQkM03bT7A3aZaShDYF0zcPdhj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70343ed6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"e199ca5095b026ae2250da107516cc54","sha1":"fc4a560f7156a5380250e744c679010925737f18","sha256":"0d52fb678c7b4b7d14602845b10138dd74fde87072e24895315729bb5f0e1c97","sha512":"9f55cfb5096426f588d1f622da958534b875ffd367ad6eb1360ee545f1136bce9fdcf5f9af79b5ff23c16948b754e3d0ee8b48e71bc188c3bac243b551601a5f","ssdeep":"","tlshash":"4c211ae000838cbd6d5d4828a180848edc372e505d25bbc990343eaf79b4ff1550bccb","first_seen":"2024-11-18T20:17:01.491567Z","last_seen":"2026-03-07T23:39:40.216087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/alpine.min.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/js/alpine.min.js HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=alpine.min.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 18:42:08 GMT\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYTm0bH5TIxarlgGddTg%2BCDun1Owdpy1twRrc33Lu0YucHpDhF6%2FSQSwqI%2BHKae%2FKBFTsquGj094oMMZb7fTXPhc7D8vvUhuesiD\"}]}\r\netag: W/\"1761072128.0-101589-2493975129\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70343edfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101589,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d071f85b077a8857cce20d680899d4f3","sha1":"3db68a8db1c668641445b9ce88a789ccc7973e9c","sha256":"bc8bd07548bba9730a458627491724389e0bbe46c6398af0a5e76842686c7cc2","sha512":"2deb816aa3788620a8600f768bf2203428c95b95709520711ea7c46cde99bcd2074e66fdc284ebfee69d398224a809b9eb205598c88f22c9b2ff2823c746d642","ssdeep":"3072:NiqQxnR34V61naU7SiRnYcmXxbTJteGNIsKk1Ev8qC8IetanecKPBTyOhnnPY/5s:YxnRh1nVWiRnYcmXxbTJNIsKk1Ev8qCO","tlshash":"68a364447bc02a59274b8ffb7327f4e4f42b086f3854498fd114bd5429a6a2beaf1931","first_seen":"2024-11-18T20:17:01.504078Z","last_seen":"2026-03-07T23:39:40.218177Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/favicon.png","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:14.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/favicon.png HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 3662\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=favicon.png\r\netag: \"1761072032.0-3662-1712064688\"\r\nlast-modified: Tue, 21 Oct 2025 18:40:32 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6o4tHGzVWYULPrzKhhPELy9H9pQ5aSgP9UT6l9y8rZzzjBynoEtocvHJjJLKLSc8iq6se4wyszxHGK3lS54ZuRnFY617D5S%2Fzcme\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70365e36c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 32, 8-bit/color RGBA, non-interlaced","md5":"56209adcfb505906e424f9a6c7f2def1","sha1":"1d7ecdba1b00382c0c9b35745efc23b86171f3f5","sha256":"20e7aabcc7a8eccf38002bfb282b2b6624089f8a0d5159441c054799daafde4a","sha512":"6535d4c0137d0f0b4fdfc63f88db01d13226f1a088e03ab71e9ef4381258be39e49500478b25003abe70d9b2068a847244ec667654c83fb5d74623bfeb7ca52d","ssdeep":"","tlshash":"0d712ac14eb068a0c29913399ced290a9d7bca825044ea4cf79cdddb1f91ace4297359","first_seen":"2024-11-18T20:17:01.510238Z","last_seen":"2026-03-07T23:39:40.220666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/img/ozon-icon.png","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/img/ozon-icon.png HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 20508\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=ozon-icon.png\r\netag: \"1761072052.0-20508-2687044306\"\r\nlast-modified: Tue, 21 Oct 2025 18:40:52 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmU6Y470%2Bmo9oek6xB6FbINY8oFQqcc3MoHqAJWTFP2UoKeCMOaZd4XERAHfqXF87C9bqJ4a5hpr%2F%2FG4rV8b8yU15hTPD84e6ysq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70342ebac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"d33b05941d4c438aae80af2d3e1efbb6","sha1":"81157d5c5bb9f617309d299b30a4fd2978258547","sha256":"ed0a7c26eff4c264a5c5439359b70a1ae76ea989b77859c9c4f2f3a9cf256782","sha512":"9ea814f3e4a57dd3d20062e6998c47b00676c47f3695b3d3dd3888c74689e7cc3d372ff7755698a47146c350324f4aa3e418aac8adf8309f818a2af866a64c88","ssdeep":"384:n011Z5d2rEp2z1y2A98rh3EEpRmRUqFBcys/n49x9x5/GjR+dq74YATAO:0LHd2vU2AGN3XR2U5yWR+dq7g/","tlshash":"40929df7c6760d87d67026b728ab1b4a84700edd95fe340946c97c44873fecdb0aa628","first_seen":"2024-11-18T20:17:01.494141Z","last_seen":"2026-03-07T23:39:40.223348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/row-buttons.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/js/row-buttons.js HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=row-buttons.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 18:42:13 GMT\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sATtSgDTexa5P3ktsSMQ%2Bhugib6Iqky7%2FwhBD8CSMum1PjVvDP0OUSiR5Ov9pc2ogbS5obFW2PEdqWy8Ga3O1ELDToGELL7enRAT\"}]}\r\netag: W/\"1761072133.0-1878-2704476930\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70343eedc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1878,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1878), with no line terminators","md5":"f33cf9587826e78e2a041ac43ba3c4ec","sha1":"08c0e349301f37c7b0c29c3d5989d6ef9ddad18c","sha256":"fbbc7055f2c0d2eb138160399cac760ff51d2091093634dfba580952014fd7e2","sha512":"d6d7b1ed9134193026290c6005dab55251d4fda85c9f45f19215cf6b00160ffe26fc7787d06767e392c9e2cf763c9065061961be1bb032bf2007658817a15071","ssdeep":"","tlshash":"2a41bd582f8067a0e34a06a7453f28f4ef15cea931c102d6e0345ce9bd784b5f2e7674","first_seen":"2024-11-18T20:17:01.516867Z","last_seen":"2026-03-07T23:39:40.225372Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/img/Logo-dark.png","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:14.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/img/Logo-dark.png HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 43641\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=Logo-dark.png\r\netag: \"1761072034.0-43641-2640120470\"\r\nlast-modified: Tue, 21 Oct 2025 18:40:34 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Piy%2FqqTvp1E0csVOtQtyaspRS3506fSkjEd%2B40ImlEUxLfa7ZoNHaskWCJxLzWogH74iacDdLUQYAEwIFFWn8b3cYM10fbKgTWE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70365e32c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5894441b776b01188c6cc2bfa3fd363a","sha1":"093cecf8ece37ccd32633e25972df77c3927d038","sha256":"68dd06ac83162ffd4bf804a5505ff1ebe70808d8e4bb0d09b8933bbe716c31c2","sha512":"299e6e4578c1b45bad77f6cbc2d3989d72e10cbfce3e4dcd7d02323b9a2738ecb4d30378b2b7bcb89aa713af91403e3c02ca14432c0c6542f5159d3b6e70970e","ssdeep":"768:jFXTSkQ7lYAsJ621mZCnxpgqNZgHpviJ9TCjUw3xag3roOI1RG5A2/Z6Iv4kSS:ddQ5QJ62YCnxpJ0y96zn7dIvGD7v4kV","tlshash":"8a13e1d6f57cc3f268cb45358de0005fb826ac92b119b938f35ed0db925b58294a72ec","first_seen":"2024-11-18T20:17:01.508903Z","last_seen":"2026-03-07T23:39:40.227296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3408,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3404,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/index.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/js/index.js HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=index.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 18:42:05 GMT\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ihy19rGxhXfzfjrecMeHKp8tH7veHpwaD3R1Zs%2BWh5%2FBHnwIbcdIMNzRvpzfyAzL0tpALIuNokg5iFNTKyihdrWdTtJPwGBhS1is\"}]}\r\netag: W/\"1761072125.0-2294-1689323654\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70343ef0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2294,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2294), with no line terminators","md5":"4f62ccd753d08d334148d3f37dfda8b3","sha1":"66ad2909cad9befc869bdc337e7f7f5ca1a1339a","sha256":"a0cdb796f47bfe3bdbf7927c1e987bc9027715b720734c3ad25e7dfd70cbba73","sha512":"1c8ef8fba16ef2420d167b6a27dce94df5dd3ec93b56730b181594921dc653d98f51d44927579017db9d7e715efec5de01a800ac7d7ede7549be33017c19c83f","ssdeep":"","tlshash":"b7410eb22f8477d1f34a9fe37123308de866c8c9b6d21846445c44a43e50f16cbd2e75","first_seen":"2024-11-18T20:17:01.500594Z","last_seen":"2026-03-07T23:39:40.230136Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.com/","fqdn":"hidemega.com","domain":"hidemega.com","tld":"com"},"ip":{"addr":"172.67.164.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T23:39:13.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hidemega.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 04:08:21 GMT","end":"Sun, 26 Apr 2026 05:07:02 GMT"},"fingerprint":{"sha1":"38:CE:D3:2D:D7:D4:D9:C2:2D:C2:C1:E5:4E:94:F8:74:C4:D5:D6:60","sha256":"2E:3D:AB:8D:35:82:D7:E4:1A:B0:2A:43:FD:0A:7E:C5:EB:9A:F0:95:9C:A8:94:B6:EF:8A:97:BF:6A:D0:60:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hidemega.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 07 Mar 2026 23:39:13 GMT\r\ncontent-length: 0\r\nlocation: https://hidemega.to\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=me0IvlTk3vbsDFgJVE7Lit82hnErpy%2FVT%2F2IVpu49Kf1IzRZVskT4vcszG1%2Fi2I20gl%2B4Sst7GLBW3d9FP30Oer%2BArbKUJgoLvZrjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70319f254e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":55,"dns":25,"connect":4,"send":0,"wait":4,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T23:39:13.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omD5l3euxBGoJ4LZbseaMz%2BPvLgNosaCR0JujKca1hPhg8FW6NeRxIub4DreB%2Fm6eAnox0OFpHSNChwvm%2BKxFX9lfHlZrFH0pEew\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70323cc05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}],"data":{"size":4829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8356cfad576ca0518b3e977511d80c9b","sha1":"237acacfc4c0e38b7ad0f5054b6d9bcc9c43cf23","sha256":"cc02e025aaa03e7f65e1021b752d02fbd663a27ad976491b6521455dc5391047","sha512":"3b45880e16a5e8f50a2c79eccd93216bfdaaaad45e3602c7c73f027b265bc17cb7f1ab6db23ac48d8477314b471c83b9b429326463d740b26f0d1071225b3fa5","ssdeep":"48:GHLtGxDEEOIR+lsTjwOqSwHOx3uSFZW9it4IR+ltPIKl/VBxHS8U:GHLUxDhls2BqTux3rW9UsHIo/HxHSp","tlshash":"6fa1bb505df645230192e486bd245f0afec5d5bbda5f460132ec0ada6fe3c81ce6f60a","first_seen":"2026-03-07T23:39:40.233349Z","last_seen":"2026-03-07T23:39:40.233349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":95,"dns":68,"connect":3,"send":0,"wait":159,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/img/yandex-icon.png","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/img/yandex-icon.png HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 146919\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=yandex-icon.png\r\netag: \"1761072048.0-146919-3069512597\"\r\nlast-modified: Tue, 21 Oct 2025 18:40:48 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYE2WbOO8vOrUyZ%2FOxwFZklqBxseY4DQ96uecFCc9fW%2B4By%2Bd0KtSVCfUd0Gcx5ExZqIcC7gUr4%2FnpAeSZYI4gvGeRHw98fERUek\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70342ec3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146919,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"fddbcaa0b271897f6d8a58cdbdb7b68b","sha1":"8d446fe6b7939eddae663d112a15c58b2217ef4e","sha256":"5c966cdef4604f85f66f14cd258cd25e2ce2b0553b5c10a393fac7ce497e5f4f","sha512":"b5208b35d7216cff39bcf94727200a04acdbc83d8c7df47380d0f56e52ac82cd1805c3921579a0d99739629fb8082ac7740203251cc1d5a25e6ebfc2c043a131","ssdeep":"3072:CcBSvB0lrL+KotQmsYMrPlQ0h3RpvP++fkt8svxuACqWdJ5IzB:3N+DQ/TpvP/yXWd4","tlshash":"6ae312dd677e1a38a2f26688f720397f2a37b3b51d86e04c1ce30a75e510f845b6b590","first_seen":"2024-11-18T20:17:01.496318Z","last_seen":"2026-03-07T23:39:40.2356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/img/wallet-icon.png","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/img/wallet-icon.png HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 11358\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=wallet-icon.png\r\netag: \"1761072047.0-11358-3069512597\"\r\nlast-modified: Tue, 21 Oct 2025 18:40:47 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZgQ9BSkL4a%2FabD4b8ayxKIu%2BXDclu5cMyRI53xlzlaTpt1EuhV%2B8xz%2FxUB1s0BYjufLxTJQZQablzj8fnXw8ymKtkDwr%2FiARwHI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d8d70342ec6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced","md5":"c470c773444a1faad258a5d50b68732a","sha1":"f869baf4d4510e072682265edda0c83216b38b4f","sha256":"ce0da57b0d579a63a049aaa56a6b94dd0e82919d3d8cb7640bed9a18b2782601","sha512":"c85f61dd686c61fbe4e2cad5f4cf964234dcd27309fdf452ee748ff6593bb46f3c052f2e8e1fa3f2305511af36e8c00fc3696bd7a5f72f41c3881af494ac83dd","ssdeep":"192:JMEXK66qoG9UH5NpmjlyPkUQheKcv1vg+OVnOgs7rVLq/tyUILGk+fZE0WVDNC:yYUr5NpnhdNIlXYLrikKE0MQ","tlshash":"8632c0fdfb382853bee60173eca4f1f3715963181107a715ae7564b321585447c8d42a","first_seen":"2024-11-18T20:17:01.488579Z","last_seen":"2026-03-07T23:39:40.2378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hidemega.to/static/js/auto-toggle-content.js","fqdn":"hidemega.to","domain":"hidemega.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hidemega.to/","date":"2026-03-07T23:39:13.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hidemega.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 05:00:29 GMT","end":"Mon, 01 Jun 2026 05:56:59 GMT"},"fingerprint":{"sha1":"51:F2:C3:D5:65:8C:14:4C:F8:33:ED:E2:C3:23:C1:B0:26:34:A4:FF","sha256":"F6:6F:05:96:BB:5A:D8:92:FA:5B:3A:28:03:34:A0:D9:21:CC:AD:71:C0:45:AF:22:0F:68:79:44:9C:F2:80:DC"}}},"request":{"raw":"GET /static/js/auto-toggle-content.js HTTP/1.1\r\nHost: hidemega.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hidemega.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 23:39:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=14400\r\ncontent-disposition: inline; filename=auto-toggle-content.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 21 Oct 2025 18:42:06 GMT\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McRK3ZDJMiPbOajoi4LZpTmj%2F4HE2WYjPgafhKm3zDdArCTst51QDYoWtc%2FiKyGuG1TD4rwp9nNXt1Nr0DamqglHhY59tM3oQM6n\"}]}\r\netag: W/\"1761072126.0-2407-88083966\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d8d70343eeac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2407,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2407), with no line terminators","md5":"8c1f2eb431dce77b2df8dbca54f6a3d2","sha1":"869c8ed22dc85e0bf03872b9759982486b2d6b5b","sha256":"df5a2fd08343f4b7b776abd55d3157a269c9c223855d76ba6e10e4c51011d426","sha512":"ccf9212b0224d4cd625473d873290c6feb4f66f91c9dc7cd6701bc9fb7d51b40a65f1b97d1fbea85be25fafd45fbc8b1b99f0275fd6a221f8e9a59390f8e706a","ssdeep":"","tlshash":"2b4170883ff02651235b1697769b5095f86786eb23b30405e3049ca6fc0293bf4baf74","first_seen":"2024-11-18T20:17:01.502233Z","last_seen":"2026-03-07T23:39:40.24009Z","times_seen":2,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"hidemega.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}