{"report_id":"8f2416e6-09ee-4008-b4d4-189c752d3ef2","version":6,"status":"done","tags":[],"date":"2026-05-27T16:49:55Z","url":{"schema":"http","addr":"mega-usdm.com","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"172.67.201.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"title":"Mega — Supplemental USDM Distribution","dom":{"size":40701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6994)","md5":"f079060903a3407601868d5edae3aa81","sha1":"733614fdffef72b65630fb61fd7d3fabbd6f090d","sha256":"30d3b2e73552d590a9a8fb47587206f91ef48348972c653afc627b9fc9d065ea","sha512":"d9737e5adfe8bee174bf5c62ac3c327d24e64a7a0e56a7ba7285154ddc5ac4c27103800ed08389aa888c4cd4a353fa6cf1c7bc9732ee3d6c1d27d7fcd9989f71","ssdeep":"768:zYvzqahjiLeWkxJ0lGHRvU2s5Q/lcyLdlNRVOVi1L0:zYeMgdKvU2s5acy3NGVi1L0","tlshash":"1a0309b1b1f260327933a5816b9b276f2490e407c416ca54b6ed5268cfc7de3edd3609","dom_hash":"domhashf3c20bd6d0871ab854f8d1f2572cf366","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mega-usdm.com","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"172.67.201.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T16:49:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"mega-usdm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts-css2-sans.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.513377Z","last_seen":"2026-05-21T05:01:08.198142Z","alert_count":0,"request_count":3,"received_data":2799198,"sent_data":1315,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"data-image-svg--base64.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.516492Z","last_seen":"2026-05-21T05:01:09.304063Z","alert_count":0,"request_count":24,"received_data":7075550,"sent_data":11643,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-05-21T05:01:09.213464Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":616,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mega-usdm.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":606467,"sent_data":3029,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":23265,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-05-21T05:01:14.51183Z","alert_count":0,"request_count":2,"received_data":460,"sent_data":1198,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-24T22:42:04.857446Z","alert_count":0,"request_count":3,"received_data":606672,"sent_data":1304,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":8,"received_data":326536,"sent_data":4544,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cca-lite.coinbase.com","ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":2742073,"first_seen":"2023-08-12T20:47:03Z","last_seen":"2026-05-26T01:09:42.265787Z","alert_count":0,"request_count":2,"received_data":3148,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"meowrpc-mainnet.com","ip":{"addr":"104.21.1.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-08","domain_rank":0,"first_seen":"2026-04-01T13:58:11.866207Z","last_seen":"2026-05-21T05:01:08.256938Z","alert_count":0,"request_count":2,"received_data":2105,"sent_data":1293,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"64.31.51.141","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-05-21T05:01:08.457195Z","alert_count":0,"request_count":1,"received_data":129,"sent_data":620,"comment":"","tags":null,"fingerprints":null},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"104.20.29.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-05-21T05:01:09.318649Z","alert_count":0,"request_count":1,"received_data":673,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f85cbc2f1ae20d4745e3c3175e98d7b7","sha1":"c3bac10181d0f2e899da3d50b2ee21569f2ca5b0","sha256":"496648facda276bb0a133714287dc97011e0a06f91566cac443c5df9a568d6a9","sha512":"c4960a7ddd03014e5f70783a15ebd0b1d92395ae1bb05c9642eebcb51511f69feb0e3b7e2cfd5092dafce6e28156d95bf3809377ad083be084bfaf96ad3b1ff8","ssdeep":"6144:b1GCLE/jl+LrcEczXuMNbVBjDSt+Pd+/3:b0uE/ALrcEczi+Pd+P","tlshash":"a9558ca71bd19e29b2aee9019c344cbd10fa86517f812267f61bfdc7d91c3b48984b4c","size":1319901,"data":"","first_seen":"2026-05-12T17:14:33.840027Z","last_seen":"2026-06-01T18:51:08.779802Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3ebeq329.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6010b0bd3b5a08c4cc1699f2fddb84c","sha1":"4f6a84e2ca8f31cadee404f5dc077f52ce795789","sha256":"aaeb60736ebd580fa8844ea01c631d7083e73ca6749f06eb9cc15a7e6bde6ec0","sha512":"1296ba6589f49df1f0f5f9ddc2534ecdf21f70fb4be3de60ebe57a7cc11103be31fdec369295ce8750a95c17133ff9c79ac0d32f56e097de496cbabc36a472d2","ssdeep":"24576:VRZ7P7+KyPqtxIt6RiVi6vmCBDm4/fD8DYAnsCc3dGenYZbcErZ7:VRZ7PnMt6RKoc3dGenYZbcErZ7","tlshash":"14251f9df682103a4d735b0adfa798a460647a2115067737eea5b30cdedf3e0b4e52c8","size":1002573,"data":"","first_seen":"2026-05-23T13:23:30.154017Z","last_seen":"2026-05-28T18:29:53.611111Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-65381a41.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cae21ba2cdd2d231ead4d6635a5744b9","sha1":"e59210db8e72dee5a0da1d3fa72d22f0f0ea22ba","sha256":"076d07907a0b9019b581390d0e9768fb2873748461b5dc35ad840112bf9e0211","sha512":"43ad5f4597b849d5740e2538db915806bde5b274c186f8f43a5c784e32c47e0a94e952a63a8e279d06aef5915e73bb9ef277ed4f0856f8f48c492528870ca474","ssdeep":"3072:65f2h9QO6wounrtsfQyfy071/U7N95IXHV/wxMDP2zj0ZoaIsez4xXE2KzofM:02wknpsfQya071/U7N92XHexMDP2dPsE","tlshash":"71f36dd5325ab57583d615c8201b1201e23858a8b80d90b4b7accde6bdefe4896f7f3d","size":168881,"data":"","first_seen":"2026-05-12T17:14:33.816147Z","last_seen":"2026-06-07T04:19:30.108759Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/vanilla-a524d433.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","size":5617,"data":"","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-06-07T04:19:30.107621Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hooks.module-dd6ad649.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","size":15357,"data":"","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-06-07T04:19:30.101674Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe939cf3f0791aa4393c2e098237378a","sha1":"45a838d73a4c606d484413fc4cd18f297f525b78","sha256":"373bcdaea9398c1f586404f0a39045e09a11949d361ec9c58a46ca5e010f75a4","sha512":"b37d1247e638dc4a9390521e286cb785b14762697361c79d70d05afad9cf8b920e149817aa036b409f55b7ab888684589b5fb98bab250946a3e15d01ee8e9a74","ssdeep":"1536:vKoxoAlcC30xcdayrkrWkhAW87hPsrRET6kjOWDWX:y94c80adayQrW9mdX","tlshash":"d883289cf385b23543f75075e52f2602773b1e09e849c4a4e166eac52cb94ce6223b7e","size":83300,"data":"","first_seen":"2025-07-30T09:26:14.123327Z","last_seen":"2026-06-07T13:12:31.30486Z","times_seen":1858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-1aoGusm.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81fcf38cbbd7e422117fb8fe8a5d269","sha1":"1eca5be43c24439251f7c8f8cc4d2c5333d3dcd1","sha256":"22b29345dc7a3c521a80a87783487961e267cfbc7591cf1cdd5250a2673be866","sha512":"c068b3141d69300cdcb864e034c07f9c11bbd1a57930e22816b9266e76fdc15f07eb3c35b26e894b8726ad1ea69e8fca4259e46de41dd3d08c772fb2d4f851be","ssdeep":"12288:DDHmHESE6N7QOYSuEyK2qOFrN4gyWWBN+:DDmHnxQOUTqMyve","tlshash":"22a4ffef05c33e234e24d345dcf65fac9996c9324e84ad7672e3e8e7b59929241c6380","size":473855,"data":"","first_seen":"2026-05-12T17:14:33.786146Z","last_seen":"2026-06-01T18:51:08.758537Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"613164cb908a94fef66965cf482fc91f","sha1":"5155a6675511f52103a9f532a604e5fc1c9d10ab","sha256":"d0e80072637e0036a4d7ca72afc26f1ef83a3a8ac7418928afeb81194f8d6bdc","sha512":"da93fc262d848da92164b7157ae7da72654c71d8c6f44f8a5d22dcf1c77a31777bf86a7b4fcf70500b59f5def94be5d969a43ec5eeeec6f3796cb14eadfd1bfd","ssdeep":"49152:Cieh7jQTrNtZXp+mO2Z2WqDpffzyyAPBFgXN098iEUaf97B5TDLCbOELesjAxojW:vHNApfmyqbgXN09JLPs","tlshash":"92d55ca0725964ac4fa355d4446f2002f234ac93608dc099f79ceaf76fe58c589bbb3d","size":2873022,"data":"","first_seen":"2026-05-12T17:14:33.831236Z","last_seen":"2026-06-07T04:19:30.116644Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hashTypedData-8194bb83.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4b7ac05b8531436116eeb0c7e81cca55","sha1":"a952a0fa626aef9d78deb774798c61e688a62668","sha256":"2c52581fe6c914245c13dbcee7187ea8213c973b1d6b6e4d1f2a197cf8e5d653","sha512":"8e8baecb09261a746091d5f519bdc61c3c3966a9d5c7b8758a51bf59f3d87b53f73ae29c21865306aaa6e3df188ae63d921a91a29910fccc544a8eb53fc8cd35","ssdeep":"96:sBV/EknhWyp2xv8KtEZkFUz5oeKeKkKhSTlWtEhsLvXL46sGoWyPw:sr/9nh3SvMz5oex9DlWtEhIXLrszY","tlshash":"1e91238c71a5f1b42ec909e8e0e72101e6e4ac11f47488e3f1ec64f334a296ca57a72c","size":4290,"data":"","first_seen":"2026-05-12T17:14:33.778186Z","last_seen":"2026-06-07T04:19:30.11048Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/localBatchGatewayRequest-67d3b9fa.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e48c53f166d2984de394c6de464f477c","sha1":"8f55478ff132d0c9529939eb18ca867fe946a4a9","sha256":"6facfd5edbe7658d2e5055a71202a63f155954024af5568265575df49aac0f03","sha512":"98c3b21f0d404fc4a6906125766afb096407acef4b944488509e93fc775b5eff8514d0fffed059160c4a947efab19edfb8ff4781d2fea76ed909f02c80030338","ssdeep":"","tlshash":"fe3171c8b609da32d4af2932640ff45090312945b82d80b1d90f30f39f305c4aaafd0c","size":1781,"data":"","first_seen":"2026-05-12T17:14:33.809283Z","last_seen":"2026-06-07T04:19:30.111019Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/secp256k1-e313781b.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9396674f0307715f7a19ae45515db869","sha1":"b1bef3376cb51b33b53e4c1363a8c6667e801229","sha256":"abda17e7e460aea577ca9d2be0cf579f5b1c05fdd030be174d3ac925b49348e9","sha512":"7b5b6239e994bec283b811c092781a37333b4a7e48e4200d4a0d4e530b1dd103854541744e1480b6f06d54dc65a3aba56057d933ce3a5a8914318b2c0d7b627d","ssdeep":"768:6+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:ll9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"b7f2e84422d1747293fa28d005725102f679ec64b5cf8c90e59c8dbb3ef34a98ab6e3d","size":35157,"data":"","first_seen":"2026-05-12T17:14:33.792388Z","last_seen":"2026-06-07T04:19:30.103057Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/WebCryptoP256-75947b09.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a5feffbcac020bf864c25ad8eba39311","sha1":"c88751cfb6b9d164f416b29413b91fff2b51e65e","sha256":"0acd1bfc4ca717b00d6bcf0ac59bda01c3b4c028a257c3183363cfecd6c820c2","sha512":"0669109d9876b501e2d66f2727d1fc8a062f87586dd8b15a983b3348043231c96fa3bf171a59926bc75208e0459d8759ca5ca69a038dfaef95bb0848f51d2918","ssdeep":"3072:c+d4Zd4nd4Dd4Dd4PpuE0pKVTsEfndAk2B4uJF0ccsjo1o8D:0pf0pKVTsEfnF2qAF0Cjoi8D","tlshash":"36a30a806196b4a94ef375e955138001f470ec6174dd8481b2ecd9bb3eee88987ebf39","size":101110,"data":"","first_seen":"2026-05-12T17:14:33.807348Z","last_seen":"2026-06-07T04:19:30.106471Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/waitForCallsStatus-469a6eba.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3305e655a66e9995e30737e549208367","sha1":"a614489cad7d0c7921aad08dc492f9817b13f92a","sha256":"1bcb2d7f8e29803693290fc8a6dec7ddbb7b380545137859337e19b66a5de3f8","sha512":"a176b316bdc23fd34b13be260edd64825320455502813fd76c2490c22bb666692ec8f7d52e4fded53c75854bfa4f927e0848a16955648fa14e6c016b9bfa6d19","ssdeep":"768:MsFJm34YSu7vFmzqwECaEJbn8QwMBuqDgi3LDwT9LvAjW7s3hOl/dPzL7WnUaF9A:Ms3mopEwBE+k8wVlUo","tlshash":"d613f96573d570a18782b5f820a70001f5386dd5b84d90ecb2ace9973eebc18d6e7e39","size":41670,"data":"","first_seen":"2026-05-12T17:14:33.77898Z","last_seen":"2026-06-07T04:19:30.109911Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/LPG9epbANB.js","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6be6da703acdbbc7a74072c08825a123","sha1":"d427f54db168986bb6593b43c3a8f6f67bab68eb","sha256":"ff556fffacf35d49997435ffe4aa0932d767703f02613a45e0e993b1c4b9f104","sha512":"4af88547d0e9b8acf3064639b0eef0a76c595165878c068920d4dd2df1340b0c19734c052d5e83e86c53135551f05c77f29e53d848020d37995b88db7aeafeea","ssdeep":"3072:6z0Usp3z0UsfEBLBbM0OOalwXYoX5EK0EI+5iSPFErgim/h07lcJhB9jmGJbTWAz:NnM0VyrBS9ErNwZPJTF","tlshash":"6d9441f966c2550ed3cf85c6bdf28dccd871487eeb012636aa02e595ec6cdf048c2a95","size":440892,"data":"","first_seen":"2026-05-21T05:01:14.132301Z","last_seen":"2026-06-07T04:19:30.105104Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"baca58b29e4b3428bfc28d603aee1497","sha1":"1db79e36488ffd2384903ba2e6e938d213c2399c","sha256":"9f668439553064bb71157f679cfb79ef9ed7c3d8ab88fd08dbd72a54ec020858","sha512":"4c4729383373ea8856f8a96f5a65179048b81de767dc75035c440e80c1fe27f170406db4f6633e160e53653b3fa4c334d74ac20a287b5d0684f65f297592d76d","ssdeep":"","tlshash":"cc21e0aff4a22871427371b263bf5f5165e921039811c610fdbc95108fb5b807997fda","size":1434,"data":"","first_seen":"2026-05-27T16:50:08.50278Z","last_seen":"2026-05-27T16:50:43.925904Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-07T04:19:30.115201Z","times_seen":4375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/compat-2f292440.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"883756e440545144df8b161567792b82","sha1":"f70349b55bc3cef4f3adf0a0421e26529a791ef9","sha256":"05e01c1560b6129f0c218d2dac941098577604ec3744b633d1aec15a939adde2","sha512":"00b7f0efc24835e755b6acb8ebfed61536ee32ab27cd697bc5ec0f092b9c8f82d6bbaef8a6b9bb4ac406aa32958af9eee6a8904697930b8b9a352e860f4e6ea3","ssdeep":"","tlshash":"b171e9d96b7ad5b2d2d663e0402e231163357b613d1ac871a23cf8d02d256408d72fc7","size":3740,"data":"","first_seen":"2026-05-12T17:14:33.799885Z","last_seen":"2026-06-07T04:19:30.114095Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-9aad6a44.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7330f5262a85c8680236d664b6d2e54","sha1":"1d1ec8ebaa9a274240cb7eb5c9a9800847aee6a3","sha256":"afa8a44f7a6df4f95a16614192068f0a266f9852bd984f5439f17947a824e909","sha512":"45b0fecb842b168f32e1de16877f491be6ee3ff5c4ca120c915e09783ed7cd53aa7dada12caff0d3310d7e296bd44be9ea4b4c02093ebebb05b2d9bcb9138241","ssdeep":"6144:r5Iqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:VIa4qDDNBcCbGc","tlshash":"c8346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","size":239581,"data":"","first_seen":"2026-05-12T17:14:33.808349Z","last_seen":"2026-06-07T04:19:30.109313Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-06-07T04:19:30.114661Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-06-07T04:19:30.105837Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c94c75a6b1eeb364f943fbfe30586994","sha1":"2a11ca912e699f10d57ba53709cdeb97ad923fca","sha256":"a25612cc45d21de9992d6c13a8e4a98df606ae31cecdf50b4e20b50ca9c2b1e1","sha512":"f69ac2310ec503753393c1059e1ef9def264ff66fe05a99dabb24a216877d209dbdde186e1de852972c85bc519fd3fed6a0650bae6de5d47e5f2da63c2e3604b","ssdeep":"6144:EVXEgEHPJkXMgdUrcEqL/oINbVBxPSF+Ptklx:EV2ZrcEqLy+PtkH","tlshash":"ce3521f263e59f3b469e59069d352d8d10ba2923878a617eb02ff748c83c1a647d4f4c","size":1154637,"data":"","first_seen":"2026-05-12T17:14:33.832509Z","last_seen":"2026-06-01T18:51:08.780989Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0a0d9979a8f05b1c98ce23d629585218","sha1":"9466b476fa47db53d734f3568dd9df24471f94df","sha256":"43313df78206c42c8c4bf9972e78f18c6fc903dadbadcd49c86dad3123272697","sha512":"ddaec7b76501536b62df4e9422cc1c82b3d49b20571a67c6a418f15b1753d5a1c46a164bf4135a3cd5a30bcd0808487579397c8f82bfda78995c1ccd154152ed","ssdeep":"24576:IdlJNq9Ei7Utx+P81iV2IVKC7Dm4/fD8DYAnsia/JQmL2ZbyErdi:IdlJNq9ASP816sa/JQmL2ZbyErdi","tlshash":"c515db9df282147a4d735b0adf9790a460687a611106377beea6730cdeef2d0b0f52c9","size":934438,"data":"","first_seen":"2026-05-23T13:23:30.214842Z","last_seen":"2026-05-28T18:29:53.624986Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/parseSignature-edf243f0.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b539a1c365180cff94f4dd729b08d1c5","sha1":"9f3dafee17f80546c013e2a3430be45e27b55080","sha256":"29f416ca74d4b1319e4923d4a2db8c0518547e4c2290e3bd9ea88f75d6f3a9f3","sha512":"97f453397458785f7943a86af49de97f2ffa6622077f36716134295b140612ac606839b00ee3af76887e557394df908eb94d995e623b0df2c00973abd1249e76","ssdeep":"768:+JPPndqOMYbr4og+vxQg+hUD7fnaDRJDOkPYXHmyN9KuTS5HiDwf3LXwMwp4Ys0v:+fNEogBL4G10Pu+hcnXb11a","tlshash":"04f22b88b5b9b07193546894d05b6202a228f9ddf40e80d1f36ecd7b2ff944cd9e5a3e","size":36106,"data":"","first_seen":"2026-05-12T17:14:33.793181Z","last_seen":"2026-06-07T04:19:30.10229Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b4020bebf4d53ae3bdbe908114b38fd","sha1":"be27935df3138e5d531b745cc5a728b4a7c20dd6","sha256":"4d363f44eea8055c88910fad06d90036bd97662a886644a7ea2624c89ac6de67","sha512":"6ffac162ee647b39e2167d434d1d23912fad3c8259cd26c2f2a6aa3e28e54206365838bad412f470c76fc1c2666be1f05a711384dad94058bfaa3cf2be2d8b00","ssdeep":"3072:Lz0Usp3z0UsfKJvtwkH5E40EisJFItE2SjTEZSo/e1h07lcJhB9jmGJbTWA5rNUi:v5SvEZPsnpJT9","tlshash":"609443f8a2c7550fc7cf05c6bdf289c8d871487ed305263aaa03e695ecacce158d2995","size":418610,"data":"","first_seen":"2026-05-12T17:14:33.828157Z","last_seen":"2026-06-07T04:19:30.117246Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43e77fa8344a4b072191d2a0607cfc28","sha1":"a8a1cd0d5094975307de110083aefc9ff2d56d8d","sha256":"c74e743354dc6215bec0916f6557d6f992978e07cf7b339b46c05028d51cfd0e","sha512":"48080400dbe9a9749e013ee3d2a35a9b6f789adcf2958b0a06c9956302b224407cb52d4da10c08bd4094fb2c25636b2d82e70ffa41b50c7721b6c60cff1aa927","ssdeep":"6144:YQavxK9AOEWNuVRv4wJKTy4wcw9rN4g9QQsvvJ:Yx52VEWNu/Awyy4wcw9rN4giQsvvJ","tlshash":"049402ef45c73e234d24c305dce65bacaa9bc4334b84ed7a71d369aab4ad2d341c5680","size":427528,"data":"","first_seen":"2026-05-12T17:14:33.834568Z","last_seen":"2026-06-01T18:51:08.775721Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-lwodi2u88.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:33.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-lwodi2u88.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:33 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a01694e-1423dd\"\r\nlast-modified: Mon, 11 May 2026 05:29:50 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 083c59698a03b538e7be63b8d1c5c013\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1319901,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"093ebf50dc87c958437c0f749b4d178c","sha1":"8c105e0c2452954cfa97d33e0a9edb342b143640","sha256":"b32c28d731e6ed31ce2c89c803725ca8b0ecc3ada5b1618acb1223bd1ad06fc8","sha512":"a08695d79675324511df8a362a97b04414e2a551c977064941cc7b971f2d2c63fc62ebaabd000b5ea6527de0b5d48f77c56c2cff016fe545dbbab801958b4aa4","ssdeep":"3072:b12FPM2Gjdtonzh6QLjACSfYg/pMarcEc3TyGFGIpVTLuMNbVBiPxf8QGS0G0HPO:b1GCLE/jl+LrcEczXuMNbVBe","tlshash":"f12537e70bd19e2db2aee9419c354cbd10f686513e812257e617fdcbda1c3b48e44b88","first_seen":"2026-05-12T17:14:33.789245Z","last_seen":"2026-06-01T18:51:08.691483Z","times_seen":68,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:33.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-b637b742.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:33 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014dba-2bd6be\"\r\nlast-modified: Mon, 11 May 2026 03:32:10 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f45890181e4a2777347d99beb8f4a5d6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2873022,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37695)","md5":"849741a6bc846f187893ca06e5bcbadf","sha1":"9d42a22be7be2916c34b8b19aff4cef68ce0f07b","sha256":"49c14d0463110a058d5b3cfeff7525dcbd034e0795222b9ede522fee7caa2ef6","sha512":"f39a2f14d7020dd230ef5528ebd21b435f8ef56d8dd7c2adccff3a8fda0f703484b3f20a2558754773871dc2e246236fe44a125d32a3a5914dd8887b4426e30c","ssdeep":"24576:Cieh7jQTrNzRZT7p+mO2Z2iVPxQDpf4YzCLyAPBFT:Cieh7jQTrNtZXp+mO2Z2WqDpffzyyAPf","tlshash":"3d256c9472a5b07543e755d8502b1102f138ac51700d80e8f7acedfb6eb988a86bff79","first_seen":"2026-05-12T17:14:33.795822Z","last_seen":"2026-06-07T04:19:30.112186Z","times_seen":65,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":1,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:33.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/disable-devtool HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 16:49:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230179-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 23820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3worfE5RhRgpbP%2BWX0%2Fr2qOz879b7vBTVFVF7z6iNe8dvJOnJQT9JNcQmo%2FSk82SMfNOFvoq70TV46iFXU%2B%2FEbpZoBzp0Hqm8i9uNgAGnUCiZ60yi%2FVB0NgUEt37ALb4Q8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a02683782a56b4ff-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-07T04:19:30.115201Z","times_seen":4375,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-3ebeq329.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:33.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-3ebeq329.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:33 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a0f4b14-f4c4d\"\r\nlast-modified: Thu, 21 May 2026 18:12:36 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 68d731b2c2cc519c21db7829483ed73c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1002573,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d6010b0bd3b5a08c4cc1699f2fddb84c","sha1":"4f6a84e2ca8f31cadee404f5dc077f52ce795789","sha256":"aaeb60736ebd580fa8844ea01c631d7083e73ca6749f06eb9cc15a7e6bde6ec0","sha512":"1296ba6589f49df1f0f5f9ddc2534ecdf21f70fb4be3de60ebe57a7cc11103be31fdec369295ce8750a95c17133ff9c79ac0d32f56e097de496cbabc36a472d2","ssdeep":"24576:VRZ7P7+KyPqtxIt6RiVi6vmCBDm4/fD8DYAnsCc3dGenYZbcErZ7:VRZ7PnMt6RKoc3dGenYZbcErZ7","tlshash":"14251f9df682103a4d735b0adfa798a460647a2115067737eea5b30cdedf3e0b4e52c8","first_seen":"2026-05-23T13:23:30.154017Z","last_seen":"2026-05-28T18:29:53.611111Z","times_seen":39,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/WebCryptoP256-75947b09.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/WebCryptoP256-75947b09.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014ffd-18af6\"\r\nlast-modified: Mon, 11 May 2026 03:41:49 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d0249300b6b3cbc8fb5a3550218148e0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":101110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (25222)","md5":"a5feffbcac020bf864c25ad8eba39311","sha1":"c88751cfb6b9d164f416b29413b91fff2b51e65e","sha256":"0acd1bfc4ca717b00d6bcf0ac59bda01c3b4c028a257c3183363cfecd6c820c2","sha512":"0669109d9876b501e2d66f2727d1fc8a062f87586dd8b15a983b3348043231c96fa3bf171a59926bc75208e0459d8759ca5ca69a038dfaef95bb0848f51d2918","ssdeep":"3072:c+d4Zd4nd4Dd4Dd4PpuE0pKVTsEfndAk2B4uJF0ccsjo1o8D:0pf0pKVTsEfnF2qAF0Cjoi8D","tlshash":"36a30a806196b4a94ef375e955138001f470ec6174dd8481b2ecd9bb3eee88987ebf39","first_seen":"2026-05-12T17:14:33.807348Z","last_seen":"2026-06-07T04:19:30.106471Z","times_seen":65,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/WebCryptoP256-75947b09.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/WebCryptoP256-75947b09.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014ffd-18af6\"\r\nlast-modified: Mon, 11 May 2026 03:41:49 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d2f30e5e6af13efa7ed88149d3890766\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":101110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (25222)","md5":"a5feffbcac020bf864c25ad8eba39311","sha1":"c88751cfb6b9d164f416b29413b91fff2b51e65e","sha256":"0acd1bfc4ca717b00d6bcf0ac59bda01c3b4c028a257c3183363cfecd6c820c2","sha512":"0669109d9876b501e2d66f2727d1fc8a062f87586dd8b15a983b3348043231c96fa3bf171a59926bc75208e0459d8759ca5ca69a038dfaef95bb0848f51d2918","ssdeep":"3072:c+d4Zd4nd4Dd4Dd4PpuE0pKVTsEfndAk2B4uJF0ccsjo1o8D:0pf0pKVTsEfnF2qAF0Cjoi8D","tlshash":"36a30a806196b4a94ef375e955138001f470ec6174dd8481b2ecd9bb3eee88987ebf39","first_seen":"2026-05-12T17:14:33.807348Z","last_seen":"2026-06-07T04:19:30.106471Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hashTypedData-8194bb83.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hashTypedData-8194bb83.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014db0-10c2\"\r\nlast-modified: Mon, 11 May 2026 03:32:00 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e2a41a99bac450471e6272142a9e65ab\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4290,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"4b7ac05b8531436116eeb0c7e81cca55","sha1":"a952a0fa626aef9d78deb774798c61e688a62668","sha256":"2c52581fe6c914245c13dbcee7187ea8213c973b1d6b6e4d1f2a197cf8e5d653","sha512":"8e8baecb09261a746091d5f519bdc61c3c3966a9d5c7b8758a51bf59f3d87b53f73ae29c21865306aaa6e3df188ae63d921a91a29910fccc544a8eb53fc8cd35","ssdeep":"96:sBV/EknhWyp2xv8KtEZkFUz5oeKeKkKhSTlWtEhsLvXL46sGoWyPw:sr/9nh3SvMz5oex9DlWtEhIXLrszY","tlshash":"1e91238c71a5f1b42ec909e8e0e72101e6e4ac11f47488e3f1ec64f334a296ca57a72c","first_seen":"2026-05-12T17:14:33.778186Z","last_seen":"2026-06-07T04:19:30.11048Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:00:01 GMT\r\nexpires: Sat, 22 May 2027 14:00:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 442171\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":72,"dns":0,"connect":31,"send":0,"wait":46,"receive":8,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:00:01 GMT\r\nexpires: Sat, 22 May 2027 14:00:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 442171\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":73,"dns":1,"connect":14,"send":0,"wait":16,"receive":20,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:00:01 GMT\r\nexpires: Sat, 22 May 2027 14:00:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 442171\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":81,"dns":1,"connect":15,"send":0,"wait":48,"receive":5,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sei-pacific.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 20:08:32 GMT","end":"Wed, 19 Aug 2026 20:08:31 GMT"},"fingerprint":{"sha1":"81:A8:2C:BA:5E:9B:1C:0F:5B:E4:1C:EE:54:08:DE:00:B4:DB:EF:C1","sha256":"7F:81:39:68:7E:41:01:03:CE:63:BD:EF:42:A9:76:DE:E0:38:1C:D9:86:E0:E9:11:24:1E:DC:9B:E8:E2:1F:E8"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mega-usdm.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: lLtjEJPqbCWa4yTV/p2/xg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: g4DM4VT8zY38bxxdDaVU2E3ZAAw=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":97,"connect":118,"send":0,"wait":19,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:33.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 16:49:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23305\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220089-FRA, cache-ber1080035-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1149035\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkL8Z3HqmWfTfMvZaodL9cYscbV%2FkEBml4MMQSJIlo6kbzF8x7sxEpH%2FfmWdEHNgJth1FM%2BEUJhdjeXidnvlWA3ukw%2Fru8OQMuBFcjb9A%2FE5fC%2Ba2Q%2BKGDV%2BjM4HNNXZ3O4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0268375ef1db4ff-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-06-07T04:19:30.105837Z","times_seen":314,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:35.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-usdm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 14:09:26 GMT","end":"Sun, 23 Aug 2026 14:09:25 GMT"},"fingerprint":{"sha1":"91:DF:60:C2:D2:AF:89:C3:B4:A8:B4:29:EC:2A:DF:2A:0E:A4:4C:45","sha256":"ED:35:CB:78:97:74:DF:74:E8:67:2F:8A:B0:64:2A:29:29:A5:23:E6:48:7E:49:E6:48:FF:70:B8:48:ED:5E:1C"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: mega-usdm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 16:49:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 25 May 2026 15:05:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 147771\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tg2iQa4KdF599FhYEfHKE5LG0IjxAjYRaGmMxIZ5VZiVFF2YjI4ouaBBFfGKfYrJSy15Ox0fTHAn9XJ7f1dlIFjt4%2FeZI0ld7H1bn5zCFSA2VG3HjZFr8j16k5270c6n\"}]}\r\ncontent-encoding: br\r\ncf-ray: a02683820c4e56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"mega-usdm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:40.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 03:56:51 GMT","end":"Sat, 15 Aug 2026 04:56:49 GMT"},"fingerprint":{"sha1":"8B:9E:B5:5F:87:EB:1B:7D:0C:57:42:9F:46:3F:31:3C:74:5D:BD:DF","sha256":"9B:AC:83:89:C1:84:1D:3C:9B:E7:80:80:B0:23:CB:AA:F3:F2:3F:A9:6A:58:76:B1:06:05:A6:7F:5A:B6:50:C2"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 4458\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4458,"data":"e=%5B%7B%22device_id%22%3A%22f561e737-cd02-40e8-8600-10e14a9574af%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1779900575100%2C%22event_id%22%3A1%2C%22session_id%22%3A1779900580125%2C%22event_type%22%3A%22perf_time_to_first_byte%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A102%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1779900575056%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22d8eca9f3-835e-4036-bbc4-b21c3d30263b%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22794bddc6-d12d-41a9-acd9-8c1b8ab997de%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A1%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%22f561e737-cd02-40e8-8600-10e14a9574af%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1779900575100%2C%22event_id%22%3A2%2C%22session_id%22%3A1779900580125%2C%22event_type%22%3A%22perf_first_contentful_paint%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A781%2C%22vitalsScore%22%3A%22good%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1779900575056%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22d8eca9f3-835e-4036-bbc4-b21c3d30263b%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%221abef7e4-abf8-430d-bb2a-6f7e8f742e03%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A2%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%22f561e737-cd02-40e8-8600-10e14a9574af%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1779900575114%2C%22event_id%22%3A3%2C%22session_id%22%3A1779900580125%2C%22event_type%22%3A%22perf_storage_estimate%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22quota%22%3A6016.7793%2C%22usage%22%3A0%2C%22caches%22%3Anull%2C%22indexedDB%22%3Anull%2C%22serviceWorker%22%3Anull%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A48%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22unsupported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1779900575056%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%22d8eca9f3-835e-4036-bbc4-b21c3d30263b%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%228a9458ee-f0ec-4b65-8e6b-a0e46541616b%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A3%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1779900580130\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=7074c6354971120d1b836536cd0c9a40"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:40 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 8593421139370272175\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFICGP%2BZ1LTH8Xm6owSpEtr9H7rINs%2Fc61MTaCQe0PNw7VVm6blvwoCIPDWy2ZagGWm%2BycYFyqZPHew0tMNOO3qD26CxOQ3v8K%2FtZdN%2BjwlJ4vNffc4o2%2FjxyNTYFmOx4ElRx5CCrA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=ad28b022-98c2-49f7-bebb-122645701645; Path=/; Domain=coinbase.com; Expires=Tue, 27 May 2036 16:49:40 GMT; HttpOnly; Secure\n__cf_bm=uo16tgpGmz3J4mVSdBPGy6K9eJ2n9wr0gyVHS8W1ISU-1779900580.1657052-1.0.1.1-qSCKgHVr.l9QGzLz22bb8A_mgdJ5OgvKRd2tNuSjdq6jkUgiosNE0Y2hIjA5CPl4GQs0aLZ0fEO_NPYEoTYBy7EE9HHBFTWFzu3XX4qBnOrhoaWaGRqwB0MtdjfxVstR; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Wed, 27 May 2026 17:19:40 GMT\r\ncf-ray: a02683a20835c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":120,"receive":24,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:59:39 GMT\r\nexpires: Sat, 22 May 2027 13:59:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 442193\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-06-07T08:12:55.061261Z","times_seen":7095,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":79,"dns":0,"connect":32,"send":0,"wait":50,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:59:39 GMT\r\nexpires: Sat, 22 May 2027 13:59:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 442193\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-06-07T08:12:55.061261Z","times_seen":7095,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":41,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/favicon.svg","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-usdm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 14:09:26 GMT","end":"Sun, 23 Aug 2026 14:09:25 GMT"},"fingerprint":{"sha1":"91:DF:60:C2:D2:AF:89:C3:B4:A8:B4:29:EC:2A:DF:2A:0E:A4:4C:45","sha256":"ED:35:CB:78:97:74:DF:74:E8:67:2F:8A:B0:64:2A:29:29:A5:23:E6:48:7E:49:E6:48:FF:70:B8:48:ED:5E:1C"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: mega-usdm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 16:49:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 25 May 2026 15:05:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Zd5b%2BZHgpgUV76K4T0BBs%2F%2Fbv%2FiWFHOp8qERl3RIbSHUpk92Pc9zDyfzzGL3Y7AYrlFqX3YThPZ6dFb4PxKnKx8KUU%2FytezDhhVzfIpjcnpjp%2BpqZRL%2BOke31nXWoF%2B\"}]}\r\netag: W/\"6a146527-1f5\"\r\ncontent-encoding: br\r\ncf-ray: a02683721b0d56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2822fbc68f5a2c37d861ab28e70caaba","sha1":"f7037d64b40e372fb337028e7b5a63f6cdca0c5c","sha256":"a828a40199c52d08d32addc478376b8b109dcf10c30097c6f3848ecbbb143fbc","sha512":"ee8eed15b49bbc152b1c2b8bfba3975050ac6a458ebaf90a10040e29fce109ef81e63ff97f8b5c2876ee6a4f134fb37230a2a7eb71fe9bdf9fe9a2885588decc","ssdeep":"","tlshash":"66f0b4a0d20f58026c1ce5a54fae74e2224ec7eb09083254983f4d6d60cd7eaae1a8d4","first_seen":"2026-05-27T16:50:08.470211Z","last_seen":"2026-05-27T16:50:43.913715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"mega-usdm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-css2-sans.b-cdn.net/index-1aoGusm.js","fqdn":"fonts-css2-sans.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /index-1aoGusm.js HTTP/1.1\r\nHost: fonts-css2-sans.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:32 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5833071\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a023642-73aff\"\r\nlast-modified: Mon, 11 May 2026 20:04:18 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:50\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f367ed548c812ced918efb799cd82c78\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":473855,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a81fcf38cbbd7e422117fb8fe8a5d269","sha1":"1eca5be43c24439251f7c8f8cc4d2c5333d3dcd1","sha256":"22b29345dc7a3c521a80a87783487961e267cfbc7591cf1cdd5250a2673be866","sha512":"c068b3141d69300cdcb864e034c07f9c11bbd1a57930e22816b9266e76fdc15f07eb3c35b26e894b8726ad1ea69e8fca4259e46de41dd3d08c772fb2d4f851be","ssdeep":"12288:DDHmHESE6N7QOYSuEyK2qOFrN4gyWWBN+:DDmHnxQOUTqMyve","tlshash":"22a4ffef05c33e234e24d345dcf65fac9996c9324e84ad7672e3e8e7b59929241c6380","first_seen":"2026-05-12T17:14:33.786146Z","last_seen":"2026-06-01T18:51:08.758537Z","times_seen":68,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":46,"dns":0,"connect":1,"send":0,"wait":2,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/vanilla-a524d433.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/vanilla-a524d433.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014f7f-15f1\"\r\nlast-modified: Mon, 11 May 2026 03:39:43 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 839bd02ed610b291b09abd3410719806\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3750)","md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-06-07T04:19:30.107621Z","times_seen":155,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/localBatchGatewayRequest-67d3b9fa.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/localBatchGatewayRequest-67d3b9fa.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014dbd-6f5\"\r\nlast-modified: Mon, 11 May 2026 03:32:13 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9bd8109d36fa1939128403c68f12f278\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"e48c53f166d2984de394c6de464f477c","sha1":"8f55478ff132d0c9529939eb18ca867fe946a4a9","sha256":"6facfd5edbe7658d2e5055a71202a63f155954024af5568265575df49aac0f03","sha512":"98c3b21f0d404fc4a6906125766afb096407acef4b944488509e93fc775b5eff8514d0fffed059160c4a947efab19edfb8ff4781d2fea76ed909f02c80030338","ssdeep":"","tlshash":"fe3171c8b609da32d4af2932640ff45090312945b82d80b1d90f30f39f305c4aaafd0c","first_seen":"2026-05-12T17:14:33.809283Z","last_seen":"2026-06-07T04:19:30.111019Z","times_seen":65,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/waitForCallsStatus-469a6eba.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/waitForCallsStatus-469a6eba.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014ff9-a2c6\"\r\nlast-modified: Mon, 11 May 2026 03:41:45 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d7d2c00f87d41eee485b8bdd96e7164e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23600)","md5":"3305e655a66e9995e30737e549208367","sha1":"a614489cad7d0c7921aad08dc492f9817b13f92a","sha256":"1bcb2d7f8e29803693290fc8a6dec7ddbb7b380545137859337e19b66a5de3f8","sha512":"a176b316bdc23fd34b13be260edd64825320455502813fd76c2490c22bb666692ec8f7d52e4fded53c75854bfa4f927e0848a16955648fa14e6c016b9bfa6d19","ssdeep":"768:MsFJm34YSu7vFmzqwECaEJbn8QwMBuqDgi3LDwT9LvAjW7s3hOl/dPzL7WnUaF9A:Ms3mopEwBE+k8wVlUo","tlshash":"d613f96573d570a18782b5f820a70001f5386dd5b84d90ecb2ace9973eebc18d6e7e39","first_seen":"2026-05-12T17:14:33.77898Z","last_seen":"2026-06-07T04:19:30.109911Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:59:39 GMT\r\nexpires: Sat, 22 May 2027 13:59:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 442193\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-06-07T08:12:55.061261Z","times_seen":7095,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":36,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700\u0026family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:31.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600;700\u0026family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 27 May 2026 16:49:31 GMT\r\ndate: Wed, 27 May 2026 16:49:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22579,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5d8cc665b32c9d8e88e2de3920e98bff","sha1":"ecda86e41e3cd533e94c3758421d0784b69c7e3f","sha256":"8295ab9f938da66d56c2ce64b203c291d33e10572e870454ce26a1db4093cafb","sha512":"89970a08d159218953160c26f07b886adec9272c079e6724bcc7c64620fbc33e7d12f0ab4ae68ba85399d1a983177359fdc64f941545e33b9c135b64b01e5481","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHgG+7p3ZAt:vXuM0p2+g7rOGC6CmOW","tlshash":"6fa2eb91002ba400ab471cc673cf7e3abdce504a6085d5b99ffe0d899ceac66537475d","first_seen":"2025-12-19T05:16:15.847388Z","last_seen":"2026-06-07T13:44:23.779263Z","times_seen":24,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":76,"dns":1,"connect":15,"send":0,"wait":19,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-65381a41.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-65381a41.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014db6-293b1\"\r\nlast-modified: Mon, 11 May 2026 03:32:06 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7f762af2ecbd1f0833924f544448c0cb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":168881,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25980)","md5":"cae21ba2cdd2d231ead4d6635a5744b9","sha1":"e59210db8e72dee5a0da1d3fa72d22f0f0ea22ba","sha256":"076d07907a0b9019b581390d0e9768fb2873748461b5dc35ad840112bf9e0211","sha512":"43ad5f4597b849d5740e2538db915806bde5b274c186f8f43a5c784e32c47e0a94e952a63a8e279d06aef5915e73bb9ef277ed4f0856f8f48c492528870ca474","ssdeep":"3072:65f2h9QO6wounrtsfQyfy071/U7N95IXHV/wxMDP2zj0ZoaIsez4xXE2KzofM:02wknpsfQya071/U7N92XHexMDP2dPsE","tlshash":"71f36dd5325ab57583d615c8201b1201e23858a8b80d90b4b7accde6bdefe4896f7f3d","first_seen":"2026-05-12T17:14:33.816147Z","last_seen":"2026-06-07T04:19:30.108759Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-65381a41.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-65381a41.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014db6-293b1\"\r\nlast-modified: Mon, 11 May 2026 03:32:06 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0720ab6b1fcad72dc919d84adcfcaa1b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":168881,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25980)","md5":"cae21ba2cdd2d231ead4d6635a5744b9","sha1":"e59210db8e72dee5a0da1d3fa72d22f0f0ea22ba","sha256":"076d07907a0b9019b581390d0e9768fb2873748461b5dc35ad840112bf9e0211","sha512":"43ad5f4597b849d5740e2538db915806bde5b274c186f8f43a5c784e32c47e0a94e952a63a8e279d06aef5915e73bb9ef277ed4f0856f8f48c492528870ca474","ssdeep":"3072:65f2h9QO6wounrtsfQyfy071/U7N95IXHV/wxMDP2zj0ZoaIsez4xXE2KzofM:02wknpsfQya071/U7N92XHexMDP2dPsE","tlshash":"71f36dd5325ab57583d615c8201b1201e23858a8b80d90b4b7accde6bdefe4896f7f3d","first_seen":"2026-05-12T17:14:33.816147Z","last_seen":"2026-06-07T04:19:30.108759Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hooks.module-dd6ad649.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hooks.module-dd6ad649.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014db1-3bfd\"\r\nlast-modified: Mon, 11 May 2026 03:32:01 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f6da9bac63bb5362fb4ac28fae75dc31\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15356)","md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-06-07T04:19:30.101674Z","times_seen":160,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-b637b742.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-b637b742.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014dba-2bd6be\"\r\nlast-modified: Mon, 11 May 2026 03:32:10 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7b5fc3a44498aa9d789950edaf6d618a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2873022,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37695)","md5":"849741a6bc846f187893ca06e5bcbadf","sha1":"9d42a22be7be2916c34b8b19aff4cef68ce0f07b","sha256":"49c14d0463110a058d5b3cfeff7525dcbd034e0795222b9ede522fee7caa2ef6","sha512":"f39a2f14d7020dd230ef5528ebd21b435f8ef56d8dd7c2adccff3a8fda0f703484b3f20a2558754773871dc2e246236fe44a125d32a3a5914dd8887b4426e30c","ssdeep":"24576:Cieh7jQTrNzRZT7p+mO2Z2iVPxQDpf4YzCLyAPBFT:Cieh7jQTrNtZXp+mO2Z2WqDpffzyyAPf","tlshash":"3d256c9472a5b07543e755d8502b1102f138ac51700d80e8f7acedfb6eb988a86bff79","first_seen":"2026-05-12T17:14:33.795822Z","last_seen":"2026-06-07T04:19:30.112186Z","times_seen":65,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-9aad6a44.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-9aad6a44.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014db9-3a7dd\"\r\nlast-modified: Mon, 11 May 2026 03:32:09 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7e6493f78be3ffde5666046f46d35e25\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":239581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7330f5262a85c8680236d664b6d2e54","sha1":"1d1ec8ebaa9a274240cb7eb5c9a9800847aee6a3","sha256":"afa8a44f7a6df4f95a16614192068f0a266f9852bd984f5439f17947a824e909","sha512":"45b0fecb842b168f32e1de16877f491be6ee3ff5c4ca120c915e09783ed7cd53aa7dada12caff0d3310d7e296bd44be9ea4b4c02093ebebb05b2d9bcb9138241","ssdeep":"6144:r5Iqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:VIa4qDDNBcCbGc","tlshash":"c8346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","first_seen":"2026-05-12T17:14:33.808349Z","last_seen":"2026-06-07T04:19:30.109313Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/vanilla-a524d433.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/vanilla-a524d433.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014f7f-15f1\"\r\nlast-modified: Mon, 11 May 2026 03:39:43 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: acad1e71067aa7b203819d5ebee4de70\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3750)","md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-06-07T04:19:30.107621Z","times_seen":155,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/logo.png","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-usdm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 14:09:26 GMT","end":"Sun, 23 Aug 2026 14:09:25 GMT"},"fingerprint":{"sha1":"91:DF:60:C2:D2:AF:89:C3:B4:A8:B4:29:EC:2A:DF:2A:0E:A4:4C:45","sha256":"ED:35:CB:78:97:74:DF:74:E8:67:2F:8A:B0:64:2A:29:29:A5:23:E6:48:7E:49:E6:48:FF:70:B8:48:ED:5E:1C"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: mega-usdm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 16:49:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 60335\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 25 May 2026 15:05:11 GMT\r\netag: \"6a146527-ebaf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wCJ%2FUsV%2BdBdwNe2VZyr9k4whCk9Z8YtTBbsi6rlkdZoLt6V9Gdhu3aF5R%2Bw%2FS03%2BqR%2BMs4iOVEGgBv288iOVnx01XNZM3QTtpxISG3ocg6lcWM1SAPpgvsv56fRAvd7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a02683721b0756bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"27927edcdf63ffec888db821f122d363","sha1":"5d3170351e3300b89a02bf522f14ae2616df798a","sha256":"f2213c71a823969803820b8964c593911700b8d7b136345278ff8154e7492678","sha512":"d6d8352f6743a37e22174dd8ba85d46519966870ccecc465e4e5629d10f75d7716273d284b471e4d83b4a314b02be7ba17e44fc053de57ba1b88a4baeea934de","ssdeep":"1536:O9VcnGg5NZlxsSQuXHAcmjZLfoAMeZ6Xm3E:OnMGg/xJTXHZwZLo3swt","tlshash":"e443f1f3c2dda9b2ce6400880482a175e4dd7109666eb62d013acee14337bc72d7dec9","first_seen":"2026-05-27T16:50:08.486721Z","last_seen":"2026-06-06T23:47:10.992604Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"mega-usdm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/compat-2f292440.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/compat-2f292440.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014da6-e9c\"\r\nlast-modified: Mon, 11 May 2026 03:31:50 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:09\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 59f11b8f0ed63098b610be12a2e2f2d8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3739)","md5":"883756e440545144df8b161567792b82","sha1":"f70349b55bc3cef4f3adf0a0421e26529a791ef9","sha256":"05e01c1560b6129f0c218d2dac941098577604ec3744b633d1aec15a939adde2","sha512":"00b7f0efc24835e755b6acb8ebfed61536ee32ab27cd697bc5ec0f092b9c8f82d6bbaef8a6b9bb4ac406aa32958af9eee6a8904697930b8b9a352e860f4e6ea3","ssdeep":"","tlshash":"b171e9d96b7ad5b2d2d663e0402e231163357b613d1ac871a23cf8d02d256408d72fc7","first_seen":"2026-05-12T17:14:33.799885Z","last_seen":"2026-06-07T04:19:30.114095Z","times_seen":65,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/secp256k1-e313781b.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/secp256k1-e313781b.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014de3-8955\"\r\nlast-modified: Mon, 11 May 2026 03:32:51 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c1277e1685889fb3f78a6f477bd45ba1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":35157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35156)","md5":"9396674f0307715f7a19ae45515db869","sha1":"b1bef3376cb51b33b53e4c1363a8c6667e801229","sha256":"abda17e7e460aea577ca9d2be0cf579f5b1c05fdd030be174d3ac925b49348e9","sha512":"7b5b6239e994bec283b811c092781a37333b4a7e48e4200d4a0d4e530b1dd103854541744e1480b6f06d54dc65a3aba56057d933ce3a5a8914318b2c0d7b627d","ssdeep":"768:6+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:ll9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"b7f2e84422d1747293fa28d005725102f679ec64b5cf8c90e59c8dbb3ef34a98ab6e3d","first_seen":"2026-05-12T17:14:33.792388Z","last_seen":"2026-06-07T04:19:30.103057Z","times_seen":65,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/waitForCallsStatus-469a6eba.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/waitForCallsStatus-469a6eba.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014ff9-a2c6\"\r\nlast-modified: Mon, 11 May 2026 03:41:45 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a0ff89135c96d0585ca7fc9c3fb893fa\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23600)","md5":"3305e655a66e9995e30737e549208367","sha1":"a614489cad7d0c7921aad08dc492f9817b13f92a","sha256":"1bcb2d7f8e29803693290fc8a6dec7ddbb7b380545137859337e19b66a5de3f8","sha512":"a176b316bdc23fd34b13be260edd64825320455502813fd76c2490c22bb666692ec8f7d52e4fded53c75854bfa4f927e0848a16955648fa14e6c016b9bfa6d19","ssdeep":"768:MsFJm34YSu7vFmzqwECaEJbn8QwMBuqDgi3LDwT9LvAjW7s3hOl/dPzL7WnUaF9A:Ms3mopEwBE+k8wVlUo","tlshash":"d613f96573d570a18782b5f820a70001f5386dd5b84d90ecb2ace9973eebc18d6e7e39","first_seen":"2026-05-12T17:14:33.77898Z","last_seen":"2026-06-07T04:19:30.109911Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/secp256k1-e313781b.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/secp256k1-e313781b.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014de3-8955\"\r\nlast-modified: Mon, 11 May 2026 03:32:51 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: acc147daca2b6b0adf227796f593997e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":35157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35156)","md5":"9396674f0307715f7a19ae45515db869","sha1":"b1bef3376cb51b33b53e4c1363a8c6667e801229","sha256":"abda17e7e460aea577ca9d2be0cf579f5b1c05fdd030be174d3ac925b49348e9","sha512":"7b5b6239e994bec283b811c092781a37333b4a7e48e4200d4a0d4e530b1dd103854541744e1480b6f06d54dc65a3aba56057d933ce3a5a8914318b2c0d7b627d","ssdeep":"768:6+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:ll9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"b7f2e84422d1747293fa28d005725102f679ec64b5cf8c90e59c8dbb3ef34a98ab6e3d","first_seen":"2026-05-12T17:14:33.792388Z","last_seen":"2026-06-07T04:19:30.103057Z","times_seen":65,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:35.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-usdm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 14:09:26 GMT","end":"Sun, 23 Aug 2026 14:09:25 GMT"},"fingerprint":{"sha1":"91:DF:60:C2:D2:AF:89:C3:B4:A8:B4:29:EC:2A:DF:2A:0E:A4:4C:45","sha256":"ED:35:CB:78:97:74:DF:74:E8:67:2F:8A:B0:64:2A:29:29:A5:23:E6:48:7E:49:E6:48:FF:70:B8:48:ED:5E:1C"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: mega-usdm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visited=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 16:49:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 25 May 2026 15:05:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 147771\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFtQ81dIDV6AlHuitcJso6LMedVvvKBuXBv7wIiVSulfUv28vhfqwotHQgLE8RkcU5N6HKFiFJQyTjDzPUWODt7Ls8WBSWOYXAfB98JsO0dDTQp65DS2PZABVd9FparD\"}]}\r\ncontent-encoding: br\r\ncf-ray: a02683822c7656bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"mega-usdm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meowrpc-mainnet.com/","fqdn":"meowrpc-mainnet.com","domain":"meowrpc-mainnet.com","tld":"com"},"ip":{"addr":"104.21.1.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:35.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc-mainnet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 19:04:02 GMT","end":"Tue, 04 Aug 2026 19:04:01 GMT"},"fingerprint":{"sha1":"3F:11:26:B4:85:5D:FD:62:B7:C3:98:E7:0C:3A:C3:CC:00:57:DC:E9","sha256":"71:45:85:81:55:87:95:95:F8:70:68:B5:49:B6:12:32:D7:AA:F9:76:C1:0A:FD:B5:53:D9:0F:EF:12:F1:E4:F9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: meowrpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nX-Client-Transaction-ID: iFezAWge5tHijuBtSs+QfIxGmNFclin/ciwBqUZOIKbnq0Z2TnVE3Rr3oNGPSyoMFE/kBx/L4GTcB/VyKzLEllgwi+JnhUle\r\nX-HMAC-Signature: 1779900574ieh\r\nX-Nonce: aA6CGRuodOMEgO10\r\nX-Payload-Hash: siteVisit\r\nContent-Type: application/json\r\nContent-Length: 2218\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2218,"data":"{\"jsonrpc\":\"2.0\",\"id\":617,\"method\":\"eth_estimateGas\",\"params\":[{\"data\":\"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\",\"from\":\"0x8435b5bed6524b3905f784e0b1e9ce105dee0434\",\"to\":\"0x374cc09825e50cdfffa942961e52964fc483be25\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:35 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-expose-headers: \"\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache, Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmW%2BpnPKids%2FrqEMXs8BFeodHGu8fJvKnrkBFRaHJa0rQzzpXd3oETCY6UJTDudELJSlytaJXwTNJbzZEDVSqB3jIrHQZpEnwtci2MbAe9LE4NOwBs%2BD289TYQf6haMtCb1mVObk\"}]}\r\ncf-ray: a0268382acf5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"be5e9d0196b8fba447b70173030ce76e","sha1":"8c9118acc1dd0672652ecafedea74a560b2fe574","sha256":"9c8fd76608fddf8a7fb7fe573cfdc93c691156b5121fded9088bd334dfc4234c","sha512":"8681fd3d4fd6ed19101a7a52d0c8a447a736e98e4b3c4003f2a5eabe78b55cbdcdca317e2ded2c2bb4c12ffeab3b1545d80556af63e312a054999653ff85bb0b","ssdeep":"","tlshash":"15a012e874400e480221005d3602332058114212c4901502403cc04042f490dd21728b","first_seen":"2026-05-27T16:50:08.492277Z","last_seen":"2026-05-27T16:50:08.492277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/metrics","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:40.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 03:56:51 GMT","end":"Sat, 15 Aug 2026 04:56:49 GMT"},"fingerprint":{"sha1":"8B:9E:B5:5F:87:EB:1B:7D:0C:57:42:9F:46:3F:31:3C:74:5D:BD:DF","sha256":"9B:AC:83:89:C1:84:1D:3C:9B:E7:80:80:B0:23:CB:AA:F3:F2:3F:A9:6A:58:76:B1:06:05:A6:7F:5A:B6:50:C2"}}},"request":{"raw":"POST /metrics HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1999\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1999,"data":"{\"metrics\":[{\"metric_name\":\"perf_redirect_time\",\"page_path\":null,\"value\":0,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_time_to_first_byte\",\"page_path\":null,\"value\":102,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_web_vitals_ttfb_good\",\"page_path\":null,\"value\":1,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"count\"},{\"metric_name\":\"perf_web_vitals_fcp_good\",\"page_path\":null,\"value\":1,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"count\"},{\"metric_name\":\"perf_storage_estimate_caches\",\"page_path\":null,\"value\":null,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"},{\"metric_name\":\"perf_storage_estimate_indexed_db\",\"page_path\":null,\"value\":null,\"tags\":{\"authed\":\"false\",\"platform\":\"web\",\"is_low_end_device\":false,\"is_low_end_experience\":false,\"page_key\":\"\",\"save_data\":false,\"service_worker\":\"unsupported\",\"is_perf_metric\":true,\"project_name\":\"base_account_sdk\",\"version_name\":\"1.0.0\"},\"type\":\"histogram\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:40 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 2722592280978502465\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=sdHjFHLY4FQaq3nf.NKjB2xTEHcD6Kmu718o01MrqvY-1779900580.1319149-1.0.1.1-ftvTuTu.IWKMHYttiSII7jIVa47Lui3yxxGkvHmcO.pQd1EO9jKAvypTJQsX0EqjmOkhtHtvE2Lr8LnIKYmCZxTEuVez0KFsACDFBiZ9OVFjlsUYYZhMxwsi6GVcdsXUhahY6.3J1DUSDKdfR6IhF2ZhW2iEZvR8XL.3DIMWrQbxJPf5_pS3PWZC9Unesy05; report-to cf-csp-endpoint\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=d39e5b33-10d4-485a-9413-4c41ffc0d0bc; Path=/; Domain=coinbase.com; Expires=Tue, 27 May 2036 16:49:40 GMT; HttpOnly; Secure\n__cf_bm=1VBSxY_5ufIoIVRC4TjdC3kypDzYPykwzzTeisBfgc8-1779900580.1319149-1.0.1.1-gI5.cqT8fV5Nppt_6gaAZILblJK7DF4W6lvrC3InMZWE9wJDL8lVu4eJjxxYGBKsvchAzjwdDX4bmEuYeIx80JVLlplDFIR7neRQCH.qpIP9b8VNQFsWhphu9EVJ1kj1; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Wed, 27 May 2026 17:19:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5oTM3yZcABP1LQZLR4di4j8JVsy%2BU%2B9CYCjS6ve6iDYXlMPx969iuk%2FPC7mE0z0Yi3A7K06lVGheGGvTTmTKyV19U8imngbZtQ3ZLe0xql6RmDCtA5tea5waD5tT9J51jWkx38%2BRg%3D%3D\"}]}, {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=sdHjFHLY4FQaq3nf.NKjB2xTEHcD6Kmu718o01MrqvY-1779900580.1319149-1.0.1.1-ftvTuTu.IWKMHYttiSII7jIVa47Lui3yxxGkvHmcO.pQd1EO9jKAvypTJQsX0EqjmOkhtHtvE2Lr8LnIKYmCZxTEuVez0KFsACDFBiZ9OVFjlsUYYZhMxwsi6GVcdsXUhahY6.3J1DUSDKdfR6IhF2ZhW2iEZvR8XL.3DIMWrQbxJPf5_pS3PWZC9Unesy05\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a02683a1c92d5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":125,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T16:49:31.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-usdm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 14:09:26 GMT","end":"Sun, 23 Aug 2026 14:09:25 GMT"},"fingerprint":{"sha1":"91:DF:60:C2:D2:AF:89:C3:B4:A8:B4:29:EC:2A:DF:2A:0E:A4:4C:45","sha256":"ED:35:CB:78:97:74:DF:74:E8:67:2F:8A:B0:64:2A:29:29:A5:23:E6:48:7E:49:E6:48:FF:70:B8:48:ED:5E:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mega-usdm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 25 May 2026 15:05:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyjVbqLPNCbqSyh4IIeLQmx1mLmZzA8A%2BYSc%2BU%2FMBDq9TsvyP1zytqZVs59rhN58zWuzYhIEsAnJnp%2FUVdavAwUCi5YQDMr5jyhOZc%2BGZGMLdHZMpmuUKSAuTOYb9WDf\"}]}\r\nage: 147767\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a026836bc8bf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38075,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6889)","md5":"c7693e3aa948a4b3ed0f94bc383388a9","sha1":"90de1343e5ccf6cc5435b660ba3503727d9474d6","sha256":"fa2ea049a1633f3f68bc167c76eb84d8093681611d5c78b121851a47006eac15","sha512":"6c57d12b5d5e41bfc2500236115b51ab45c554545d37aaae52062efac022815918d8d791cce5aee0b27b2f13f5daf19a3168ce66e5f33e9520d4f1d3dafe7115","ssdeep":"768:tYvzqahjiL0NxJ0lGHRvU2s5Q/lcyLdlNOuimLx:tYeMgHKvU2s5acy3NOuimLx","tlshash":"8603e8b5e1f221327933a5922b5b276f2490e407c4168a54b6ed5258cfcbde3eed3608","first_seen":"2026-05-27T16:50:08.494067Z","last_seen":"2026-05-27T16:50:43.919282Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":30,"dns":5,"connect":1,"send":0,"wait":38,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"mega-usdm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:59:39 GMT\r\nexpires: Sat, 22 May 2027 13:59:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 442193\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-06-07T08:12:55.061261Z","times_seen":7095,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":114,"dns":0,"connect":28,"send":0,"wait":25,"receive":2,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mega-usdm.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: mApOPNpYghdV2o7EtzPFqQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 27 May 2026 16:49:32 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: IaShvYSY2o9lqNCtJEBs86du/Io=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":153,"connect":175,"send":0,"wait":23,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/compat-2f292440.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/compat-2f292440.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014da6-e9c\"\r\nlast-modified: Mon, 11 May 2026 03:31:50 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:09\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 50eb500d4814b9482981039706a3857a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3739)","md5":"883756e440545144df8b161567792b82","sha1":"f70349b55bc3cef4f3adf0a0421e26529a791ef9","sha256":"05e01c1560b6129f0c218d2dac941098577604ec3744b633d1aec15a939adde2","sha512":"00b7f0efc24835e755b6acb8ebfed61536ee32ab27cd697bc5ec0f092b9c8f82d6bbaef8a6b9bb4ac406aa32958af9eee6a8904697930b8b9a352e860f4e6ea3","ssdeep":"","tlshash":"b171e9d96b7ad5b2d2d663e0402e231163357b613d1ac871a23cf8d02d256408d72fc7","first_seen":"2026-05-12T17:14:33.799885Z","last_seen":"2026-06-07T04:19:30.114095Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-9aad6a44.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-9aad6a44.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014db9-3a7dd\"\r\nlast-modified: Mon, 11 May 2026 03:32:09 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a521c3c2118c001283a67bbde005963f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":239581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a7330f5262a85c8680236d664b6d2e54","sha1":"1d1ec8ebaa9a274240cb7eb5c9a9800847aee6a3","sha256":"afa8a44f7a6df4f95a16614192068f0a266f9852bd984f5439f17947a824e909","sha512":"45b0fecb842b168f32e1de16877f491be6ee3ff5c4ca120c915e09783ed7cd53aa7dada12caff0d3310d7e296bd44be9ea4b4c02093ebebb05b2d9bcb9138241","ssdeep":"6144:r5Iqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:VIa4qDDNBcCbGc","tlshash":"c8346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","first_seen":"2026-05-12T17:14:33.808349Z","last_seen":"2026-06-07T04:19:30.109313Z","times_seen":65,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/parseSignature-edf243f0.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/parseSignature-edf243f0.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014dc2-8d0a\"\r\nlast-modified: Mon, 11 May 2026 03:32:18 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 91811a87dec45f39def2d9542d13eafa\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36106,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32522)","md5":"b539a1c365180cff94f4dd729b08d1c5","sha1":"9f3dafee17f80546c013e2a3430be45e27b55080","sha256":"29f416ca74d4b1319e4923d4a2db8c0518547e4c2290e3bd9ea88f75d6f3a9f3","sha512":"97f453397458785f7943a86af49de97f2ffa6622077f36716134295b140612ac606839b00ee3af76887e557394df908eb94d995e623b0df2c00973abd1249e76","ssdeep":"768:+JPPndqOMYbr4og+vxQg+hUD7fnaDRJDOkPYXHmyN9KuTS5HiDwf3LXwMwp4Ys0v:+fNEogBL4G10Pu+hcnXb11a","tlshash":"04f22b88b5b9b07193546894d05b6202a228f9ddf40e80d1f36ecd7b2ff944cd9e5a3e","first_seen":"2026-05-12T17:14:33.793181Z","last_seen":"2026-06-07T04:19:30.10229Z","times_seen":65,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/parseSignature-edf243f0.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/parseSignature-edf243f0.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014dc2-8d0a\"\r\nlast-modified: Mon, 11 May 2026 03:32:18 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 71d73d10067b8059d2aede552a135470\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36106,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32522)","md5":"b539a1c365180cff94f4dd729b08d1c5","sha1":"9f3dafee17f80546c013e2a3430be45e27b55080","sha256":"29f416ca74d4b1319e4923d4a2db8c0518547e4c2290e3bd9ea88f75d6f3a9f3","sha512":"97f453397458785f7943a86af49de97f2ffa6622077f36716134295b140612ac606839b00ee3af76887e557394df908eb94d995e623b0df2c00973abd1249e76","ssdeep":"768:+JPPndqOMYbr4og+vxQg+hUD7fnaDRJDOkPYXHmyN9KuTS5HiDwf3LXwMwp4Ys0v:+fNEogBL4G10Pu+hcnXb11a","tlshash":"04f22b88b5b9b07193546894d05b6202a228f9ddf40e80d1f36ecd7b2ff944cd9e5a3e","first_seen":"2026-05-12T17:14:33.793181Z","last_seen":"2026-06-07T04:19:30.10229Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/localBatchGatewayRequest-67d3b9fa.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/localBatchGatewayRequest-67d3b9fa.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014dbd-6f5\"\r\nlast-modified: Mon, 11 May 2026 03:32:13 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/26/2026 17:56:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 87968f6d0b98f40ecb7821a9191fabba\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"e48c53f166d2984de394c6de464f477c","sha1":"8f55478ff132d0c9529939eb18ca867fe946a4a9","sha256":"6facfd5edbe7658d2e5055a71202a63f155954024af5568265575df49aac0f03","sha512":"98c3b21f0d404fc4a6906125766afb096407acef4b944488509e93fc775b5eff8514d0fffed059160c4a947efab19edfb8ff4781d2fea76ed909f02c80030338","ssdeep":"","tlshash":"fe3171c8b609da32d4af2932640ff45090312945b82d80b1d90f30f39f305c4aaafd0c","first_seen":"2026-05-12T17:14:33.809283Z","last_seen":"2026-06-07T04:19:30.111019Z","times_seen":65,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"64.31.51.141","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaeth-mainnet.quiknode.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:03:24 GMT","end":"Sun, 09 Aug 2026 07:03:23 GMT"},"fingerprint":{"sha1":"8D:E1:FE:F0:FA:BA:70:B9:6E:F9:36:61:5C:4E:D9:2E:16:39:40:CD","sha256":"BB:DF:85:3A:9F:F9:99:C8:62:B3:D9:52:16:FA:9D:4D:7A:88:62:75:36:87:33:DC:A6:D9:85:4B:DE:2F:80:3D"}}},"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mega-usdm.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zgNb+GwPggqjTnsIYPjuow==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: UgF3SE+8HlfnWA0uOwwFpu8KaMA=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":2652,"timings":{"blocked":-1,"dns":886,"connect":1174,"send":0,"wait":289,"receive":0,"ssl":1185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:00:01 GMT\r\nexpires: Sat, 22 May 2027 14:00:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 442171\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:20:47.227313Z","times_seen":205648,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":78,"dns":0,"connect":32,"send":0,"wait":51,"receive":5,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/LPG9epbANB.js","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:31.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-usdm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 14:09:26 GMT","end":"Sun, 23 Aug 2026 14:09:25 GMT"},"fingerprint":{"sha1":"91:DF:60:C2:D2:AF:89:C3:B4:A8:B4:29:EC:2A:DF:2A:0E:A4:4C:45","sha256":"ED:35:CB:78:97:74:DF:74:E8:67:2F:8A:B0:64:2A:29:29:A5:23:E6:48:7E:49:E6:48:FF:70:B8:48:ED:5E:1C"}}},"request":{"raw":"GET /LPG9epbANB.js HTTP/1.1\r\nHost: mega-usdm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 16:49:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 25 May 2026 15:05:11 GMT\r\netag: W/\"6a146527-6ba3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZiIZFiPwiw8tN4xfdbtUVz8jUGKVyNemQ4pz3V5ZI8fWB9kF36Eim509KQkVrJVKrGCsNe03%2FK1JYNX9dn%2B8Hx2wTwRy%2BVzoDnkcUVHu%2FJNflYRmdMBWw%2FWaE3p9bV1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a026836d9c9256bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":440892,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6be6da703acdbbc7a74072c08825a123","sha1":"d427f54db168986bb6593b43c3a8f6f67bab68eb","sha256":"ff556fffacf35d49997435ffe4aa0932d767703f02613a45e0e993b1c4b9f104","sha512":"4af88547d0e9b8acf3064639b0eef0a76c595165878c068920d4dd2df1340b0c19734c052d5e83e86c53135551f05c77f29e53d848020d37995b88db7aeafeea","ssdeep":"3072:6z0Usp3z0UsfEBLBbM0OOalwXYoX5EK0EI+5iSPFErgim/h07lcJhB9jmGJbTWAz:NnM0VyrBS9ErNwZPJTF","tlshash":"6d9441f966c2550ed3cf85c6bdf28dccd871487eeb012636aa02e595ec6cdf048c2a95","first_seen":"2026-05-21T05:01:14.132301Z","last_seen":"2026-06-07T04:19:30.105104Z","times_seen":61,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"mega-usdm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-usdm.com/logo.png","fqdn":"mega-usdm.com","domain":"mega-usdm.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:31.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-usdm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 14:09:26 GMT","end":"Sun, 23 Aug 2026 14:09:25 GMT"},"fingerprint":{"sha1":"91:DF:60:C2:D2:AF:89:C3:B4:A8:B4:29:EC:2A:DF:2A:0E:A4:4C:45","sha256":"ED:35:CB:78:97:74:DF:74:E8:67:2F:8A:B0:64:2A:29:29:A5:23:E6:48:7E:49:E6:48:FF:70:B8:48:ED:5E:1C"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: mega-usdm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 16:49:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 60335\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 25 May 2026 15:05:11 GMT\r\netag: \"6a146527-ebaf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=untrQd2uC2xf7zdgvYMdlxlyhsCZvLiIm9%2FEs2A5LB3OjVulC5wTOlkfeyj3zfI6nEJB%2FNSd%2BVjBoDCtwVt4CcF5psiCw9%2BmIcOjYc6i6yf%2F1gdRxvS8t1PmmYHvdqDX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a026836d9c9556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"27927edcdf63ffec888db821f122d363","sha1":"5d3170351e3300b89a02bf522f14ae2616df798a","sha256":"f2213c71a823969803820b8964c593911700b8d7b136345278ff8154e7492678","sha512":"d6d8352f6743a37e22174dd8ba85d46519966870ccecc465e4e5629d10f75d7716273d284b471e4d83b4a314b02be7ba17e44fc053de57ba1b88a4baeea934de","ssdeep":"1536:O9VcnGg5NZlxsSQuXHAcmjZLfoAMeZ6Xm3E:OnMGg/xJTXHZwZLo3swt","tlshash":"e443f1f3c2dda9b2ce6400880482a175e4dd7109666eb62d013acee14337bc72d7dec9","first_seen":"2026-05-27T16:50:08.486721Z","last_seen":"2026-06-06T23:47:10.992604Z","times_seen":6,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-27","alert":"Sinkholed","trigger":"mega-usdm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-usdm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270023-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 782300\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnLfcOLPJRdEeJ7NRThcR3dy%2BJ5s5R55bRngXDd5xeB021rAegBO8BIjZ2admmR7mBuvnQeL4n5wfeUX3Kp8OHzmv6B%2FfaECjdsEifRFzRswg6QP0Ces2%2BUtKibm0tltnr4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a026836feb4956c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522095,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-06-07T04:19:30.114661Z","times_seen":187,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":10,"receive":6,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"104.20.29.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sei-apis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 14:28:17 GMT","end":"Mon, 20 Jul 2026 15:28:14 GMT"},"fingerprint":{"sha1":"B9:16:06:AD:D9:EA:77:D9:27:01:80:37:57:87:F9:F6:9C:CB:04:68","sha256":"D3:0F:2B:8F:1A:2E:4F:3E:B0:28:48:27:E6:4C:F4:1A:54:C1:76:67:CC:39:98:16:65:25:1D:75:69:A8:3E:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mega-usdm.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: QVKZSCB6IrwwOLKTVU6ncw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 27 May 2026 16:49:32 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: EUhhOfK3nF04JYtL/K9Y2ogCPDY=\r\nx-via: ovh-fra-31750947\r\nx-servername: ovh-fra-31750947\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cflb=0H28ux4xzBpPxFMeuxpGcinCDB9VHKF4vH1uGPJyEXm; SameSite=None; Secure; path=/; expires=Wed, 27-May-26 17:49:32 GMT; HttpOnly\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: POST, GET, PUT, HEAD, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nServer: cloudflare\r\nCF-RAY: a026837298ee56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":30,"connect":30,"send":0,"wait":171,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meowrpc-mainnet.com/","fqdn":"meowrpc-mainnet.com","domain":"meowrpc-mainnet.com","tld":"com"},"ip":{"addr":"104.21.1.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc-mainnet.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 19:04:02 GMT","end":"Tue, 04 Aug 2026 19:04:01 GMT"},"fingerprint":{"sha1":"3F:11:26:B4:85:5D:FD:62:B7:C3:98:E7:0C:3A:C3:CC:00:57:DC:E9","sha256":"71:45:85:81:55:87:95:95:F8:70:68:B5:49:B6:12:32:D7:AA:F9:76:C1:0A:FD:B5:53:D9:0F:EF:12:F1:E4:F9"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: meowrpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,user-agent,x-client-transaction-id,x-hmac-signature,x-nonce,x-payload-hash\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 27 May 2026 16:49:35 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvHZelGrPjNwWHqZqaR4gT3AymFduW2HqjLesXZzjCk36S9V4uqswPyjCb47wpCTPjJ%2Fq5sVpbPBP7KMqn2mtgwgXqFAmHJ5tmfRKr8QpQsCit25rEoobxJ4FXN5MF6HzreYU%2BT4\"}]}\r\ncf-ray: a026837ec9a2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":614,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hashTypedData-8194bb83.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hashTypedData-8194bb83.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-usdm.com/\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014db0-10c2\"\r\nlast-modified: Mon, 11 May 2026 03:32:00 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bc23d66fc5485368a37cf24a679ad339\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4290,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"4b7ac05b8531436116eeb0c7e81cca55","sha1":"a952a0fa626aef9d78deb774798c61e688a62668","sha256":"2c52581fe6c914245c13dbcee7187ea8213c973b1d6b6e4d1f2a197cf8e5d653","sha512":"8e8baecb09261a746091d5f519bdc61c3c3966a9d5c7b8758a51bf59f3d87b53f73ae29c21865306aaa6e3df188ae63d921a91a29910fccc544a8eb53fc8cd35","ssdeep":"96:sBV/EknhWyp2xv8KtEZkFUz5oeKeKkKhSTlWtEhsLvXL46sGoWyPw:sr/9nh3SvMz5oex9DlWtEhIXLrszY","tlshash":"1e91238c71a5f1b42ec909e8e0e72101e6e4ac11f47488e3f1ec64f334a296ca57a72c","first_seen":"2026-05-12T17:14:33.778186Z","last_seen":"2026-06-07T04:19:30.11048Z","times_seen":65,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hooks.module-dd6ad649.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:34.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hooks.module-dd6ad649.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mega-usdm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 16:49:34 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"6a014db1-3bfd\"\r\nlast-modified: Mon, 11 May 2026 03:32:01 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/27/2026 16:49:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5736982b79e35182bc1db037afdb308f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15356)","md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-06-07T04:19:30.101674Z","times_seen":160,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"lb.drpc.live/megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mega-usdm.com/","date":"2026-05-27T16:49:32.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.drpc.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:CC:CB:80:17:FE:C1:17:2E:DA:C3:DF:4D:57:DD:44:BB:C7:75:7D","sha256":"43:B9:8E:E0:9E:BC:DA:26:35:3B:5B:06:7C:11:C8:98:F9:61:9C:63:4C:61:6A:4C:5C:47:7D:36:65:71:56:17"}}},"request":{"raw":"GET /megaeth/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mega-usdm.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Wv74m79JFVLH5MQ9WHCdNA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 27 May 2026 16:49:32 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: VkHGe3d4JDIF2UFx/BblyhSGQt0=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T14:09:50.338313Z","times_seen":16213654,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":1,"connect":22,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}