{"report_id":"908f1328-533d-47ed-beb7-0df425798698","version":6,"status":"done","tags":[],"date":"2023-09-10T16:53:29Z","url":{"schema":"http","addr":"download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"104.21.57.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"title":"Ghosts.n.Goblins.Resurrection-CODEX.part1.rar - MegaUp"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T07:37:15Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"a.magsrv.com","ip":{"addr":"205.185.216.42","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"domain_registered":"2023-08-01","domain_rank":0,"first_seen":"2023-08-04 18:18:00","last_seen":"2023-09-09 20:47:46","alert_count":0,"request_count":1,"received_data":34186,"sent_data":398,"comment":"","tags":null,"fingerprints":null},{"fqdn":"empafnyfiexpectt.info","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2023-08-27","domain_rank":0,"first_seen":"2023-09-04 12:22:49","last_seen":"2023-09-04 12:22:49","alert_count":6,"request_count":6,"received_data":3489,"sent_data":3282,"comment":"","tags":null,"fingerprints":null},{"fqdn":"theharityhild.buzz","ip":{"addr":"34.195.224.242","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2022-09-19","domain_rank":0,"first_seen":"2022-10-20 09:00:21","last_seen":"2023-09-09 21:54:36","alert_count":0,"request_count":1,"received_data":1216,"sent_data":562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2016-03-20 13:44:49","last_seen":"2023-09-09 22:25:59","alert_count":0,"request_count":4,"received_data":6856,"sent_data":2442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.adtng.com","ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"domain_registered":"2018-07-20","domain_rank":15165,"first_seen":"2018-07-26 21:17:41","last_seen":"2023-09-09 20:47:47","alert_count":0,"request_count":2,"received_data":23225,"sent_data":1961,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.a-ads.com","ip":{"addr":"178.63.97.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-07-07","domain_rank":34827,"first_seen":"2013-06-01 18:47:05","last_seen":"2023-09-09 19:01:41","alert_count":0,"request_count":1,"received_data":420022,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"megaup.net","ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"domain_registered":"2004-06-24","domain_rank":179052,"first_seen":"2017-09-01 20:45:15","last_seen":"2023-09-09 14:32:39","alert_count":0,"request_count":44,"received_data":1666962,"sent_data":29803,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-09-09 22:31:21","alert_count":0,"request_count":1,"received_data":68964,"sent_data":421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.r2m02.amazontrust.com","ip":{"addr":"143.204.48.16","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-05-11","domain_rank":0,"first_seen":"2022-10-12 16:01:39","last_seen":"2023-09-09 20:41:04","alert_count":0,"request_count":1,"received_data":941,"sent_data":340,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hw-cdn2.adtng.com","ip":{"addr":"209.197.3.25","port":0,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"domain_registered":"2018-07-20","domain_rank":11917,"first_seen":"2020-02-20 17:50:17","last_seen":"2023-09-09 20:47:48","alert_count":0,"request_count":1,"received_data":17258,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pogothere.xyz","ip":{"addr":"172.64.96.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-08-22","domain_rank":0,"first_seen":"2022-09-04 21:11:25","last_seen":"2023-09-09 21:31:41","alert_count":0,"request_count":4,"received_data":209815,"sent_data":1674,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.servingserved.com","ip":{"addr":"151.139.128.10","port":0,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"domain_registered":"2023-07-05","domain_rank":0,"first_seen":"2023-07-11 16:07:12","last_seen":"2023-09-09 22:29:07","alert_count":0,"request_count":1,"received_data":6695,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"download.megaup.net","ip":{"addr":"172.67.192.50","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2004-06-24","domain_rank":973735,"first_seen":"2018-08-22 23:42:27","last_seen":"2023-09-01 19:11:33","alert_count":0,"request_count":9,"received_data":188514,"sent_data":6421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20 07:02:03","last_seen":"2023-09-09 19:41:54","alert_count":0,"request_count":4,"received_data":107921,"sent_data":2280,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dmmzkfd82wayn.cloudfront.net","ip":{"addr":"143.204.42.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2021-03-18 18:00:47","last_seen":"2023-09-09 21:54:36","alert_count":0,"request_count":7,"received_data":196024,"sent_data":4187,"comment":"","tags":null,"fingerprints":null},{"fqdn":"keydawnawe.com","ip":{"addr":"142.91.159.89","port":0,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"domain_registered":"2020-10-08","domain_rank":586690,"first_seen":"2020-10-08 16:33:32","last_seen":"2023-09-09 21:54:36","alert_count":0,"request_count":1,"received_data":1457,"sent_data":404,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aticalfelixstownrus.info","ip":{"addr":"108.157.214.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-08-27","domain_rank":0,"first_seen":"2023-09-04 10:20:31","last_seen":"2023-09-04 11:42:41","alert_count":0,"request_count":10,"received_data":16588,"sent_data":7486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-09-09 18:12:06","alert_count":0,"request_count":3,"received_data":2099,"sent_data":999,"comment":"","tags":null,"fingerprints":null},{"fqdn":"parrecleftne.xyz","ip":{"addr":"52.85.242.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-11-18","domain_rank":0,"first_seen":"2022-12-18 10:40:16","last_seen":"2023-09-09 21:54:37","alert_count":0,"request_count":1,"received_data":736,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.sectigo.com","ip":{"addr":"104.18.15.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-16","domain_rank":487,"first_seen":"2019-11-29 12:50:24","last_seen":"2023-09-09 20:35:37","alert_count":0,"request_count":2,"received_data":1737,"sent_data":660,"comment":"","tags":null,"fingerprints":null},{"fqdn":"altowriestwispy.com","ip":{"addr":"172.255.6.123","port":0,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"domain_registered":"2021-02-24","domain_rank":951913,"first_seen":"2021-02-24 11:44:10","last_seen":"2023-09-09 21:54:36","alert_count":0,"request_count":1,"received_data":1456,"sent_data":409,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.248","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":0,"first_seen":"2023-08-04 14:48:00","last_seen":"2023-09-09 20:47:47","alert_count":0,"request_count":1,"received_data":1407,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hw-cdn2.ang-content.com","ip":{"addr":"205.185.208.20","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"domain_registered":"2018-11-15","domain_rank":165651,"first_seen":"2019-03-25 23:41:04","last_seen":"2023-09-09 20:47:48","alert_count":0,"request_count":2,"received_data":21362,"sent_data":903,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imp9.bidgear.com","ip":{"addr":"104.26.3.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2011-08-30","domain_rank":34078,"first_seen":"2021-03-15 12:09:09","last_seen":"2023-09-09 20:47:46","alert_count":0,"request_count":1,"received_data":1119,"sent_data":505,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ad.a-ads.com","ip":{"addr":"178.63.97.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2012-07-07","domain_rank":26970,"first_seen":"2013-04-19 23:54:57","last_seen":"2023-09-09 22:48:00","alert_count":0,"request_count":1,"received_data":12804,"sent_data":519,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/?kzmmd=761186","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fcb6e6d736e900fe41c643a3d5f2974","sha1":"87e78c3ec5f5e0aed5f96fd249fc3abdfd1e07e1","sha256":"0d3f40381617f67bdf39144881257bf67883d89243724e7965c20d34b46cbad2","sha512":"ff73b5c4fb50efc579e281655de685bfcc052b8451447b9117ab67708770de141119bf46d4a76ce9f6f1d722ba21f907dc74e4c37ccc04600a24dc29ea0dad88","ssdeep":"12288:Wi0yYh7Vuo6n04cuhvT8ThyF8Ep0omOmJuZg0wi0yYh7Ve:Wi0dJVuo6n008ThyF8Ep0omO6og0wi0E","tlshash":"e0d46d59ba523529836374f540bf134eb23e466af80449d4b49ad8d06ef8e4503bffac","size":620792,"data":"","first_seen":"2023-09-10T18:47:42Z","last_seen":"2023-09-10T18:53:31Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee8dc81feee7d814fa552fdaf04b50e2","sha1":"b65b136a141dfae39fb0f0f65108708681c1a7fb","sha256":"f3f0a2caa1f4e1835c6ffcc98c47d05c4873659ebc1231e488c7e7ac616245c2","sha512":"0889158e3aa7c246d4922eb1b7046017d3404b86fd088cea08e7ff6e1ac4f4429a30673f6519dd8033c1459673601c83af509b9362afd0500f1475de148b9c45","ssdeep":"768:yf5ADJryRurmWLctQZCwc2e49Ctna3sA3g1/AYb60SMmesa9aDvAxTIUxX8GucXA:huurzCZN4xsPyYxmuUAdIO8Gugpif","tlshash":"d043f73f97185c7b0fd2e6d47c462ad376d0909883819c0dbcb8c62d32eede5699b492","size":58931,"data":"","first_seen":"2023-08-13T11:08:31Z","last_seen":"2024-08-21T08:52:15.956352Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d31e0426a59b32581835680633809ea3","sha1":"98caf983b9349fcf2a32d6512f998ea9a557a90e","sha256":"c7fe89a030ea54a29616f0a473366e07d109dfb775f2afa050c2de82e3606fba","sha512":"49edd2ac8f4e60397a150b5b033a9096cb9702a4d81f2456a39870ad60cd2f3d7268c755130cef05254e3a448180a153882cbcdb8ed93ab272975da0f0b13774","ssdeep":"384:hl+ANBtIu13EPgC/5l3IkOxteCYMKtpfhtw7gD7ml7D0Qg0ONj8yegeiOpR8yeHF:/BOu13EPgC/5l3TOxteCVKnfhtw7gDSg","tlshash":"0f622d087afa197bd147703e4b5f600c3638815ba648dd44bc9ceae02f64d24a5fbf98","size":15314,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-06T19:29:55.550775Z","times_seen":2889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"38c5167c8052d0c73892c3742b16e903","sha1":"213ef9210b4a5c4e73a242e832a08f4abef69a74","sha256":"743b919a337dfbb6d1e8648d0793532d47f8af48059e17f7e32ae8738c7614a7","sha512":"a2846b069959c3f7ef7d045ab897be48909c077a5e93ad8e012a41826df33e0d4385d844597f44bb3af13e2716ddee76adcc9bc4fd89f84b2e83b3d4dcd7a138","ssdeep":"384:1NeN/o4+J2jv0pLWu4A9kvpB8SgDC1aEPtc7RPajcw:hJ2jan9kvpCB7w","tlshash":"1772838d738133218187b2a141bf110f7137aaf66a468cacb63bc5daae7550d2077e7d","size":16045,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-06T04:02:43.714907Z","times_seen":2959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/clipboardjs/clipboard.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"55db0ff82a3b6b247844ae0d07d85fc6","sha1":"9bc5c7dc92ef0b31d212a66bbdff591e484f427c","sha256":"404b016f5c9a369726eec56a280c93478da17a52ed0f1fee116838330772ec70","sha512":"1629c5ce3ffa898e5354079549676595161bb73eca975b76a6af4ecb992eedca31184848c704c6e8ac6c6efc7c0b96ed44ab00ef3b2dde6a61374d4c058b0b82","ssdeep":"192:K0Gfh/1JmtuV6qDpOJ4GQUrAg9fvsx1tkvcRIIS7e1t:nGZ+kV6Kh8E2fot+Iaef","tlshash":"df128688f290b1b1929b607b417f420fb372d45da02e50a4b65de4f5ad78aad4227f3c","size":8854,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-08T21:01:51.153843Z","times_seen":3674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-process.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f27159561d43ede851b9b84f63cd727","sha1":"c4672cc17326d35d092741dad007ee72b2c13095","sha256":"f6626568ee243b737cdfc12efc464eb97d786bdcce590a0326427e11f360293f","sha512":"63dc471e42c751f05753b4e182fa9fa3a6c17154de71e8cfa5725d87371fa6761a6237adf4113068c107a8457bde35fae6a3d8e95872f0012e9dc06d003adb5e","ssdeep":"48:mvMZsCDY/dHZC8hiXjuFI7v06svN9/IkQIQxqb8ZMqCDLARk1al8lc5MQOFqK4Ms:v7YjtQ8aIb81Cn0QXlVgt","tlshash":"76b1dd0bb51e113246db3ae1a7be414b7aa8f22d0332c5343d6cd7c64f5446692d2aef","size":5302,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.844619Z","times_seen":2733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"205.185.208.20","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e5817bcf4c82c7c85d1d88636d221ce","sha1":"b5c32cc6c931c33c1297884016e13d3b9a5bf261","sha256":"6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c","sha512":"08176e8fd06443f72738a279e22a28b4fd340e22d1abbf9a04f131286598cf1be98a79cbe776b37380fa3d6d396e431e3d8ba38f0b73fb0f3261b8753dccf706","ssdeep":"96:gfMHxJ7yWjtnYajBoq972unh1CzeOQ0es7rh69C2b4GhO78mslpUsvc:Pj7yunVLZs7rK4PVujvc","tlshash":"2cb17812167264361ef82561815f3e2e169246614b8b6ca1c3c5fe4cfdf6e23144bef3","size":5027,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-08T22:57:54.0595Z","times_seen":2374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/global.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b62957c3c4788544cad00a761303b836","sha1":"0436c4efedfe2075b24a87ff969034b2e258e609","sha256":"ef8a1ff709899584c91496da397de0b0fcab774e3b6d258ccca9997e592e84d3","sha512":"e04864ea59a92688ac5cd2eaaf92a75e9b5fe0a98cd9235afac14ee54dec2ebd2f14f2538708726b852b6b5e7b2e69b5bf8e3acc0b9d3b3ffcea1b34a03d2703","ssdeep":"","tlshash":"bf611008a9f292a18a37a86e07cf961971599503000cdc557c8cabf4afd553acdfbcf4","size":3417,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2025-04-01T17:36:27.456224Z","times_seen":2491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"e9fabede7e9d799ca35d72f186e38f23","sha1":"be59bb31e389891c47ddbaca6ceec3b0e58a89dc","sha256":"22bd245d99fdbbb851b614ac2c888e658be2ec4394cac1564daf888d39f33227","sha512":"7962692bc1c6b83bb1378138a3eeb02c11b4d150b64906b140255a919b0eb6b7efd760041745d7322228f009b9e15a4dda47a2304e9304be60ec7db979ae8534","ssdeep":"","tlshash":"52c0000cc0c0f330c000c030000003030c300000c000030ccc3cc0c0000f00f0cc0030","size":148,"data":"","first_seen":"2023-04-15T12:15:51Z","last_seen":"2024-08-21T07:35:29.273019Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/gauge.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"aafe893df6f86140460a76d58dcecfe2","sha1":"fe1a74890dc8f040f5f681041663b96d983163f6","sha256":"2d9574ce1b6890bd6ccf1ef3d04fe1328f35c5bbced7b6b331459119ef4fe480","sha512":"0af0c5d095719622b6555f20180eea104c913dc391440da688fbe90e15ef95fc344e96c6026a101cc9843f67b38b028bb0dcfc3daa0d7ece328e795ca67e04df","ssdeep":"384:2YOQ4fji+TgW3nFcnwNUsLyrqK9dVSK9fa/cZ+O45wIh1CX4:2YR+EKvYJ9Z+twIh1CX4","tlshash":"f182a38a726b1629dbc796ea101f035d933bf669044951acb570d2fb187ee01823fbf4","size":17848,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-04T01:05:04.172186Z","times_seen":2708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ec8c820ff45305a7b04aad827b761d2","sha1":"c047c301824ee4b197bc4d2bd1d51f17efde9026","sha256":"b670357679792925767158a737daa9b9a7a19212624d162d9e4e2bc81f2d4944","sha512":"25de24fdc3925d23587d4f82c4fc1fcfa7c50b1ba889e842292fd3365de6d2d4b13377f5982865a03514082686d50b37f69a35f004a089a5b6d725e0c1834d4b","ssdeep":"","tlshash":"63010229ff27687153d656fed1bbb104d8917151d411d00a40cedc18aa3cd99d83440a","size":774,"data":"","first_seen":"2023-09-03T02:31:54Z","last_seen":"2024-08-21T07:35:29.273747Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery-ui.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec9758d9508e2fd22ddbdc6d5a28f214","sha1":"0ed7df6cc32be8f9687cda3cd6e109e5de44339e","sha256":"ba0103f765802f299bc7dca5c35d9a00359a0abb10cac136f43caf9c0bf98b7c","sha512":"eb1c05921adc80474acf15d80c04344236031d6de5f05a36c0d03663fba22da3ae31cf07bba7f3b048d3ca9154d3e995202378ce8defb83a294a2ad3f06d6ad4","ssdeep":"6144:HH8aL8lYTUdtP5u5R5x56BHHWi/Jn3qnj9Pj3iEXPW6l/plqEp4lH8aciVAbsuBD:PTStP5u5R5x56Bnj/Jn3Ej9Pjg5y","tlshash":"2994a689f39c266a867a325d5c2e02cd723c8076d601587fbc5d59dc29d883c42bbfb9","size":435844,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-08T19:55:09.965432Z","times_seen":6618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2474adb496ade0e96aa9400a3974307","sha1":"9ab48147ecad83275d147a61dea8df8a968e5a0e","sha256":"fa77538239ff2758ff9fa8ef646cad3e9ca818dd13fbf15ff3ca8a8bee173c69","sha512":"06206b23a91b29c1cd11541ae21c8a4562066fc197cdc3ff3f9e0cdb693697dd9f6fd2a8c533d2c05a494eb268820e701107d3e0302a9e8a55a4e0e9cd6e878b","ssdeep":"","tlshash":"7e3112aa34db3e6647f7712f7a1fb2462121943b16829082d9eade3c3df2c417813e14","size":1478,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-09T02:36:09.100598Z","times_seen":3892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/sandbox%20eval%20code","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-09T02:37:04.51835Z","times_seen":856835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"48d40988c629057f932cff26e09be78f","sha1":"5e4df07274b8131d5956c909e6ea878b6e2690af","sha256":"230c181f68eb015fac89edaa4f71723c8006e4bb73a42f7994044a993dcbcda6","sha512":"fca83e74bbed9bf52a6d82316c3b0af8158fc4fe2053cb8c3c35124f970067ce2530cf3bc6a13a88657695d482040081489c6f5967add603d3ad8d5c544985a4","ssdeep":"6144:qUXKN5Gyldd1lSHgzZ11a6wod1neNUb9aIg:X85Gylx3wA1nef","tlshash":"232407d9b3c2706682a6f4b5503f014ba57b6ca2b85cccd8f189c9d02eb4a994177f7c","size":226490,"data":"","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T22:58:52Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.tmpl.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"411df7e2bc659d35015f7fdb7432b331","sha1":"848575bfa595b60987cf60ce9efca64ede45a20b","sha256":"9509c1e67bedbaded059d0aa8d5cee65cee3c9e3f43a5952a7a233cbc10810ae","sha512":"b0cebabb6b349bef206566c5c3bdb0671a63e37f2614d8e400050a16a649c80bdecf68f4fe39bec93a5e6e1b6221c7d91234c057da31daae294b078f42a26c7d","ssdeep":"","tlshash":"6911adca3465e086c1d57d20607fcc2970aa58ebe2995628c286c7a83e314be9037fb4","size":971,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.869257Z","times_seen":2751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"altowriestwispy.com/tysaSHG1FMaM/18410","fqdn":"altowriestwispy.com","domain":"altowriestwispy.com","tld":"com"},"ip":{"addr":"172.255.6.123","port":0,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"5340000c00300000000000000000f000000c00000c000300c000000c00030c000c0000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-08T23:25:20.06134Z","times_seen":14294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba847811448ef90d98d272aeccef2a95","sha1":"5814e91bb6276f4de8b7951c965f2f190a03978d","sha256":"898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1","sha512":"bced99d9331614757643273441a2b8921103382949ab0e510f386c453ec2a2359da39680d8a169e6bcbe7531844eaf5f598560f0d133d3fa3a9f6c7502b148df","ssdeep":"768:jryxMjJYkskKzykVtCb+9C8agZMdyKHfivbOCtFKH:3HbjZC7w","tlshash":"f1d26506b2303161079fb2f5515f020b733a6a7ee906907c38b99ae63d79c587167f39","size":29110,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-09T01:58:30.965264Z","times_seen":27684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js","fqdn":"hw-cdn2.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"209.197.3.25","port":0,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c80c7c28b5b00a8b4ff94a22b72fe3","sha1":"d57303c2ad2fd5cedc5cb20f264a6965a7819cee","sha256":"6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356","sha512":"c7381e462c72900fdbb82b5c365080efa009287273eb5109ef25c8d0a5df33dd07664fd1aed6eb0d132fa6a3cb6a3ff6b784bffeeca9a2313b1e6eb6e32ab658","ssdeep":"192:/u+H3An7ybVSpBjen6K1GegJjgF+TDg91wTr1PH3kV/LQB3OJIuq/Y4RBF4B3ve:/vAvUxEtkmZZY4RBF4hve","tlshash":"4572954c7250f0f743c39522413f120ff3369898b15a90687369d8fa6cb889e6267f79","size":16885,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-05-08T22:57:54.071982Z","times_seen":2392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"2fedc852e7d51f8a2ceddbb0225550d6","sha1":"9189e8f10ae2208e7f57c5a06593b2dec60d6452","sha256":"2577a2ec04e553ea92b5c74f9ef7f69631c906111e6ce6e5722318cfa31ce9b8","sha512":"667d010f8444e110c57bcbb01d1db662569bf3884978a668cf7858c37ad41af6b5ce28d7ba3e7ba3f5b353d90486c1b95b296c36a8bd4ba6d4e4105d102eec0b","ssdeep":"","tlshash":"e161a8ab1e98fab743450e5b3b3c911dc714c60e2651790827c47878ac52e61ffb9ab4","size":3337,"data":"","first_seen":"2023-09-09T06:34:48Z","last_seen":"2024-08-21T07:14:56.227722Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-09T02:37:04.530585Z","times_seen":855165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-validate.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e083d9e4a3e014b760d70ad0f1e85cb","sha1":"dbc0b1b973f8f77b74baadc0a696e001234f8ac5","sha256":"217bffe44b964e10fe120949b9a143b665a8c03a57ab348713de7d8b2878345e","sha512":"df2c351d5c58319f68b1b276e6e87c0a1b166e01038187842e1bf670bc72a5c6b6ef3bbf4f92a6a6cbe473d7e26bb8888649d2e25e4bcde0f06ef7f0add78687","ssdeep":"48:mtMZNCDY/dvZ7k8hk9KCTU54t8wudDXTUwKlpPkALcrnk5KyR74BalGhy:yMUYDhaTU5OQPKl2AAr6plQy","tlshash":"e281388f761651b14e9327e99b9ca0456174f3196034d268bc0cd3d93b8b4b6a1d1bf8","size":4074,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.874226Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ebf524053e3259b38cd33a44bff9685","sha1":"4b073458bfd8526583eaca302f5d21bd1d8b31f5","sha256":"10815e9b5addf60315886f7216b0530fd58fa8580ca6a81687f14ffee517c619","sha512":"eb10aca3c7f790fb2f061689c584271a05ce56b0c0f0877cfe7ddd32dff156433cda84c780bec7b47694c04cba33aaabce5e4523818a1fd1c1c8bfea24516abb","ssdeep":"192:FIZRWftohx7HRDYAEUvOE64occ6tXS6LCRH5:FIZgfuHHRDnEI64rc6tXS6Le","tlshash":"70d11236663e3631ccab2b3da4179285363b9d5bb00d113239b57c80e4dde29e263e65","size":5447,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-01T20:07:09.06894Z","times_seen":2672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b9e96903d0445defb78878f584aea6a","sha1":"0b6df7c2bb4b662a784db6941c7773a14f496d89","sha256":"c9f2f900b0dd732e91a61917e323c201fada295dadf4a6cda8b850e042767e50","sha512":"735d0f0c8b716fa88e909ac94e565498dd7ccca34b1f5788f19b5742aaca238ddc52816b288c5318bcddeac5b64361edcd6903641c443638f99cf1ca7e8f19bf","ssdeep":"","tlshash":"e901c01e60f5d8404273797343af27445ab7d90ba40ecd20be8e14e0af65418850d38f","size":806,"data":"","first_seen":"2024-08-21T07:07:56.684434Z","last_seen":"2024-08-21T07:07:56.684434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"32b877ce91cb6ec0da746bbb78289340","sha1":"53b76e03f4c11bcf201daa086ab80af5c04cdae6","sha256":"4e203fca68fb538525a6becc21237e2985ac55a295fc4ff3c4d75478874d7658","sha512":"b9f7f96b8d7a0c7a4df2cd289d7b0c90ec7c4c820ce49b6302a40a65f30826afc70efccd43c30a390baadfdd56ffe75447e32506bd8b92732b2a0e3b62434df3","ssdeep":"","tlshash":"1f5000f3030c0f000003fc0000000000000300c0f03000000000000000000000000000","size":8,"data":"","first_seen":"2023-04-10T17:50:31Z","last_seen":"2026-05-08T22:57:54.084514Z","times_seen":2146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/gUGtuNm4zBABQUSQCCgtWYl5XB192AR1ZACBWGE8pG1MoWl8oLioQGioPUwZIPAoAUVN2DgBVU2FND1IMbV9IQh4/AFNDADQOCF8ANQ9IQw9tBgFMBzwHDxNcFl5ABktiW0ZOX2FOXXRLYlsCXwAlE0sEXihTWGlYZE5ddEtiWxxAS2MqXwZXfltHE1xgDA-tVBT9OXHBcYFpeBl9gWksEXjYCHFMIPxNLBChhWl8YXnYeUwc","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"870292601c93e937bec580c73fe25647","sha1":"c0f52cdde6146d658f2543f6241c829b9d8d9879","sha256":"432705a9fd18b67ef359e26d196289e398e761474a9b0c5118efe7d3dd098e99","sha512":"ef09da9ff6b85a3e78edb7a90bb566b303c3fc2984aa4aef9d0a8e8ea00fae4880ba46210c3a32802b811cdbedb6e203a6d0cfb2ec6e3cf3f9d59541cfa9525a","ssdeep":"","tlshash":"b4f095e12614d8d9dc26eaa67158f4d7ba9e62cd15405f04511a09d98f1990fd445510","size":487,"data":"","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/custom/custom.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d40e9899d9667475ee4a7d5d9731311","sha1":"6e3b230480bc36ce2e9b0622a48af5924535a72b","sha256":"a72e6ce7c10983fcd6773f0db77f049b7a85039d3e7212a12ad56fbb8d70a6e6","sha512":"853026bb54a8884baa86d039bef045bcb24de596df4c4defc060dc8a4628cdd0274b8a0aae821b3b378b1775f4772ee332113fb62b21a78bceeb69cf99c352e2","ssdeep":"48:IjcnEj1+HNc2ozMpcwkPoM2dXFsGNMkapisii1iMwGCKQEqh9O2lwmbKtxCKR5EF:1Zd1uqAtGwAs6Vp","tlshash":"e5b1fe7c6e1f7cb90993253b683e94c015af3c4a240242217d4db858d3deb28ca7ade5","size":5152,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-01T20:07:09.15513Z","times_seen":2670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012456?time=1614803572912\u0026apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6WzjiqyyyqiuqzXibbi6i6zeibOWjXam50rv9.czijBuZznSuldK6V0rpXSuldK6au6mium2WVwfY-","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"70706313fb93351e8f1040eaabd75e27","sha1":"ced0e6419eeb845fec13844780ee3431cbe6b63c","sha256":"3c3f577d6cf858ea89de2dfdecbefc739187b49010823b1b6ed1b5a5ae304a50","sha512":"d7ad5720d402fbfe9b48320728b80f2ba7daac7f857b41e3ef02edd3dff7736a318c3da3c95e23ed1d03e7f83ab7399c6e493b3456c984bcdb43bd5c2e36550e","ssdeep":"192:0rMA8yf+yXDvqzaFASuxeCUMyyX8H9t3JqysSCbSzlM+isWDs7ObNw:0rMA8yf+c6sAOCeVoysUz7Oby","tlshash":"9272d6be7243b851a66b296280ef210e3f3599a3b81cc84084d6d5d57d34dbd937be2c","size":16188,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2024-08-21T09:44:32.264328Z","times_seen":922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b85ba9fdc07788f5208002e4588c1e2a","sha1":"f4a5b283e901f573f1237b6a096da4c295e8a65b","sha256":"f809de94a782db6c7c5bc85db8bc8f6b05b1a473f736080b3ea8377fd6ed35cc","sha512":"7bb50a5b8a823b51badfba73950f0337d1b44e15306ee1c89ad60e3a71ebce0330668ab05faad288541dca0d02902b3a89a599a437f1b789e063944654ad387e","ssdeep":"768:vch0r9GOvPOhSF7pzC89Na9UNdO3gDe2VOk4:U4v0SDzC19OXDe2VE","tlshash":"9a43430d3ee7221584a771e89b9f64057634e42f290add153c4d87c4ef48938e2f2bea","size":56276,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.818133Z","times_seen":2724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery-1.11.0.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-09T02:37:12.612242Z","times_seen":25146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.iframe-transport.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbf8d80f1841d07cbee13abcfe0a5ba2","sha1":"a69ad62ab8a001e0ea8ea106ac404ac0af88984c","sha256":"4f3f67c68965b4076cc7bc531f648c3a15aa30c1b9cede0486afd4eb4353f8c1","sha512":"459a3691a039e0ad04bd5711823e0ef579ddb7b7e603f802fad21134ed993194ad7e6f83acd00b70b3eaf57e9be01fd6677570cde9635ec1284e5cedc8875e3b","ssdeep":"96:uQYCMNvKUWO38itw7rg8LJfNm/7qZ57Jo0463x:uzMUtJts88Nwqr3x","tlshash":"261213872c2213310aa37bd91beaa0587639b3247125cb70bdee17861785506d2e17ee","size":9255,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.806064Z","times_seen":2934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"72e348954c20cc27df3e9d9bd3a4905f","sha1":"e50ad79ab0949f7e40e8d0dc4ed38476220f79f0","sha256":"9c9f251d98edd1208a6c45aee90ff4011ed964e87e8bb622ae7a45249f1dae43","sha512":"45dbedd4c37e7d9add86523f5203f885f7c5801100beaec34068d0d78baddd3d421990f8e35a84437913263b3b99227b4af95628ffffb5d2ed82d241bed43606","ssdeep":"96:+gRWOQ8nCGOYOx6TOkDFChbkXUWV/QFEfhMpWF:hAOfXOYq6TOkDFChbkXUlFEpVF","tlshash":"76916747b3226035465faaee9ff9938c32673291d27399147d1d8a460357bb280f0bf5","size":4249,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-01T20:07:09.244278Z","times_seen":2678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/sw.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee51131e416458b88d6da4e6e6959ca","sha1":"a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4","sha256":"db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734","sha512":"c15181f56e6a1d9644315da37a99789bd77c9bca734094caf065e54d9b525fc5d1268821e707398529a616c78140e6bd4c594cbc3618335d40b757214b4b1c58","ssdeep":"1536:vSpw5PMhOhJ6ZbaL7l65oQ668X4BtmG9vpjthaoytu/W:vSpwVJ6EXX4rvttkbtuu","tlshash":"31a309497252389617d7e03e177fa5cb6d7a4a09bc698d974051c3c02d2a0cec6e3fba","size":103036,"data":"","first_seen":"2023-03-09T23:12:43Z","last_seen":"2026-05-09T01:44:56.458457Z","times_seen":6658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"35045d45f7d1dde1f90457c5d73700c5","sha1":"a7fcee0ab1da615e828e51967c474ae91d768569","sha256":"d72616e59f2ba832c54a0e734cdf0a79cb8730f81a07b5de43864c15a240e221","sha512":"6845d70397a4fb6d9a75c0d6f066270b91566f134cfdf2fcd44d1c9a598592a00581f1a8dccbc7147c53aa7f5da397b8a16d716ae4e88e805fecdddd52b46d8c","ssdeep":"3072:7hXjjqv/V7QCpOgV7TOwSV7T/reUo+oPXaGZ6ZgsvOqnG3csrj/SZA4:xjjqnV7ggV7DSV7/e0nG3cs3aH","tlshash":"dc14d6c8774f2c2f8aa7330b697d18ccd03cd576811251b6b6e6f46967cc448a3a6adc","size":197554,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-01T20:07:09.065586Z","times_seen":2662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-resize.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"23a8f0c0a8e9febbf563aef9fb28f2b0","sha1":"a0d188d6535c31b9bce7d874e4731f3a0bd2a220","sha256":"2d6f1126fbf381ae50f1264f82d5d2c55c400067557abf21387ab4c72af624cf","sha512":"f6a0152781a6771d5a14b620708277d488378b10d45ebf7af3d811dca57e09423fd04e7be323e76ecb34cf03cd7db697cdabaed0f8e7699a41423f2b680feb31","ssdeep":"96:oUYxqdjVr2mk6d6/Ln+HtNkiD2m31vPtVRb7VBQYJdUdAZ5g1e5+uoPrrqF:oPiymOLn+cM33RbTJdU2Z5yeguoiF","tlshash":"2202341e3a66317a496321c87fee60c8b659726d1132c710bd4c538e376b927e0e67ec","size":8063,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.873526Z","times_seen":2732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e4ba2a9c6f022f7c920cd2e76d95bd4","sha1":"f15cbf023a4a1e1c810eff679cc9b35b81a6f2c2","sha256":"afff7cdd8f6f0ca43b26573840f5ec5d3302dc1fc2b2209a1163e3978c9d012c","sha512":"972050054ab1c3c8f4e6ea8edeb48800fc6a9f90cd736b35fbba35bd9a42856a55be6c539a4dde51cb9a97efa5a156009af8fc57263dfb34e27b92de601c73b2","ssdeep":"","tlshash":"a55197947159310443d6b89a31ab6709ba7c69e7b01b6e506008c8d9ad38777053bfbd","size":2433,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-08T09:00:46.628999Z","times_seen":2919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/retina/retina.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3e2d6e7887add1872c197bab95a16b7","sha1":"fe996175492409ca9e5b4f42911c5a69e8b2698c","sha256":"4b75d94f66a12f86bb0c238861680cc589c4463ba29be6889ed6dbeb5594aa19","sha512":"63f81f4ec4fee992eadeddc42815c3a5df5e67cdefbb60993528354c78219462b6fc1b9cb0d11333df87a453f34248e89a8ef5980789a912a88ffcb96f0a2178","ssdeep":"","tlshash":"db215069b69131370142a911403f6da27b36b0fd12834178bb0dc9e7ec31e38966efa9","size":1326,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-08T07:08:33.987355Z","times_seen":2996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/load-image.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"29c8a390a6c8038b015af4fda1af1c38","sha1":"516b1c42416ad647530192872785a5b3b35bd471","sha256":"b49885ee9e161e5595dfe428642255234d8d557c85699bb8bba72499717498c5","sha512":"c90051dfe89e0e643f8bc0244b55682c267c0fb9eb6c58d86cb5198b2bb2b4d9ad5cd6357aff66f39b207e9f461a216c91919e8fcad4dbc23e5638d140e384c6","ssdeep":"","tlshash":"b051db6c725874e522250993226f8649f518f4a6574f74205714d4ccb4becef837ef09","size":2546,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.823827Z","times_seen":2742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keydawnawe.com/gwZ1U5hjA8ii/32575","fqdn":"keydawnawe.com","domain":"keydawnawe.com","tld":"com"},"ip":{"addr":"142.91.159.89","port":0,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"4350003303c00000cc300000300300000000000000000c00c000000000000000000303","size":6,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-05-08T21:44:28.670536Z","times_seen":10644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee618c67e37ba00c51dd0f8a15fadd0f","sha1":"744bfd9a50c3bd7720efbf479f82ff8993347a47","sha256":"3f8490eea2419103d5ce0c44a77dd106e27711f78862b516beda6b08c17cd185","sha512":"0aaa2616d72d4291ac79a70cb6d038d5041f054711bdefdd509041e5f5cd1a66cd8a95f0947495119ee7e3d879a1f56b7147e2bd94dfd3637c1bb7e0c98dbb1f","ssdeep":"","tlshash":"64e001262002903e282618557f6e6a0af84f9c29aa98a1520f064131d0a781be900cda","size":238,"data":"","first_seen":"2023-09-03T02:31:54Z","last_seen":"2024-08-21T07:35:29.283379Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6096ea93da6ec531ec81c8acaf77ebf","sha1":"810f3bf61851063ec1162938e7ca55b512fc537c","sha256":"b37b9a8b330d400b682e4eeec2c10a326aa384766815b355cdb472263abd00d6","sha512":"b92584a3479f4e978b8b1251760af9d09fea7237bf19eacc56ffadb9cf98c844c87ce5a0b1449ec21ba0f11df458bf60bc38033f5d6206ba2419f936d2179b7e","ssdeep":"1536:XhmLghNU9aMDoGgqYp3ygubrRn0mQcg+40nDenFtv3Wf5rKevn:XhmchNUjDoGgqYp33ubrNvQcg+40nDMK","tlshash":"c2532ad8a1436078cd8ad190546fb80bb0663697c4faef586cb2fe456cbc1478096ff9","size":63744,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2024-08-21T09:37:42.901797Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-ui.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d74ec0b03e02825fef8093d64629489","sha1":"de746f1c7aeb0927541e1d55bdea4672bb47aa73","sha256":"5d4a5378ed9f8bf68dbfb6246761e6d44e2b11fa626d8b4f8d1d6a779f037cd2","sha512":"a61efb4485d6107a74edf5dd6f3cf66d3e7cdb2c7469a3e5fddb3a1005133fbe7b2d4cbc15eabf7cd10e25bf9a344287530701d712bafccbdbade6d114b2ae42","ssdeep":"192:jherScJi1x5JyGKvJKmaAiWCfK4hsaMCSC/N2aoItnEiu7x8MKWpKuTKErCmE+N9:Naqb2aLhsapa5iTDwwYwpGJ","tlshash":"02b2ff0d7aa7a114826770bedbaf540a3225e42f190acd193c5c53c4df9493ca2f6bf9","size":25071,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.811008Z","times_seen":2726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"08a72ecd78e05b8ae48c7f4d49f72807","sha1":"fd2fc992454dd3f4fa504e1d079539dd24056950","sha256":"fc158b597b54f1c32d11ede2d269a63fc51a8fd3ac173c20e38953982e0071d1","sha512":"d7f75bbb1a93e7b7c0bedd3fa4e5dc38224d741ba0c4388d9e35d999ea7118bb49aff8fb00d009882c6c1563327a8a8035addb0157a599e812f2b104bdd4a0a8","ssdeep":"","tlshash":"b1418c7a1c2447f2039243f3f73a28cddf43c696b5148897dc246c96586092dfa63eb2","size":2204,"data":"","first_seen":"2023-04-15T12:15:51Z","last_seen":"2024-08-21T09:37:42.905556Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"76cff321a3da409f04f1b9d25319ab78","sha1":"f9de6b54f2eeeb85ea43693bee32dc930a252649","sha256":"9930043ffb4753c135a12f6be97e24ef56fdfd5aaf1af6a204d99937a7ba8ef2","sha512":"b256243244379bc8bd3d2496a71ac10a98b496bfad598e8b20cffc2d583a4915137f92208c08a82e011442d36279b0a699aed67edffe1b854ffaf2ba24f978de","ssdeep":"","tlshash":"dd419b597c0e37302e9330fd1e4b90885a79f6639106c896bd8ecbc4f7e400dd166e9a","size":1821,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-01T20:07:09.302132Z","times_seen":2672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-108868042-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46cb2db147a75df40628cf09e8349621","sha1":"0b843e7ea38bde26aca6b0cdbe68634348c7223b","sha256":"3f76412f22de5cb0e4fcf7a02e4fea9c7dbf97f4257f3ac3d455514fa8868831","sha512":"2ce305bd80721470cacec7e051800fa84c6dc7daab613a70e2a5ee837f036ab940fc65fa2274d3592f267f71f02ce95f5201dbf635cea39d96e6c95a6bc9743d","ssdeep":"3072:y069zayXPCB6FFiKp0nUm4k05oHgzZXFWsX9eBvlPsMaBHUp:3UXKkCt16oHgzZ1BX9Yas","tlshash":"5d04e5d8b393b16682a3b4b4503f010bb17a6d92f85cccd4e189d5d42eb8a99417bf7c","size":187301,"data":"","first_seen":"2023-09-10T15:53:01Z","last_seen":"2023-09-10T19:53:35Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012456?time=1614803572912\u0026apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6WzjiqyyyqiuqzXibbi6i6zeibOWjXam50rv9.czijBuZznSuldK6V0rpXSuldK6au6mium2WVwfY-","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4af1d5c10045336aac1e3de9ee58d9cd","sha1":"1a3e5151d591baf774372eb8c24438ee9654b815","sha256":"c840226deb8b6b53ffffd187bb8485fbe97b4f55d7928fda9a027ebbae2d6c61","sha512":"f6842b0348ea82d1e7bbdc65396a2ace5fd7f928cfee8a33800e5e900b2b663ff7e1f42168b6d4e2a642871af0d2c295617dd6ddbb10ea566a477a8f99c09d61","ssdeep":"","tlshash":"7f210cfb250280fd713726c5cf1b3f8471a9a305ad58d540c41eeeb6ba0689bf5326e9","size":1293,"data":"","first_seen":"2024-08-21T07:07:56.692313Z","last_seen":"2024-08-21T07:07:56.692313Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c5344f3c45196fa90087fa5091fe077","sha1":"87ccb6407143d5f6e903e8ca63433d19b62d3dca","sha256":"b3d346aab31b4ed5487d72996581dbff3bb212be0b8cb54e141d3b6204757375","sha512":"e229c1739e508f9d2b1fa910a74f48afbc5c8da8182950fb8d24153cb54e745f7f5cf2be9695f07dfb2c30d7eb69d3a40cf070bd063e8232f231bb66ae225168","ssdeep":"","tlshash":"f4f0262750aa44d0d9372c769b7e431d6123e2037e5bb8007b4daa581f1f01f42ba3dc","size":544,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-01T20:07:09.355941Z","times_seen":2566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"205.185.216.42","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d65d2af9888847a0995c06bffbb6f1f","sha1":"bdcd31715ffc48a61b59a8337502d174e1fb81a7","sha256":"93e8a7072d356d288d3ea294046246618c560100f528f062c64be7f504151991","sha512":"4aff66898432c3fadeff8e08fe348467dd80fc1bc3d56cbdbed5a02a6cd2ca0a6e9fe2b993c643dd9bd427f42af6c32c076e7abf8b7119ba39655254c597f93a","ssdeep":"1536:EO6Z8AzEToR5L4xFG7kKZcxOxw8hwMjNOKVhMfhcgAHZ1Z8r1Z1AdOpkCOZkMD+J:LVyp28VOkPD+Y38C02KV3Q4Ql485I","tlshash":"3ea34b892b92703452d3a12d69ff57093331407ee90e4894bf4ee8a427aded65173bbc","size":107304,"data":"","first_seen":"2023-09-07T20:08:23Z","last_seen":"2023-09-18T13:24:01Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbc6f821e8ff7c4828576a426ee2d4e8","sha1":"f043b3149f201934cfc9ff603023868202ac2141","sha256":"68db8c28a54f45ff784d9386fb96e04dc8131f033f5f68307876dc2f1652ea59","sha512":"52367de364d9ace4ac9b8153c94f9d61db6f3321d48cc988a69c63c3bafb68fb828cac5e6545e80bb98ff384186877f11fcc5a7863a32eefa7f466ab29aaeafb","ssdeep":"","tlshash":"06c02bc8350a0cb185f727008b3ffb00f406325498d05d33480973085d20f03d754800","size":155,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-09T01:44:56.475403Z","times_seen":5377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.bidgear.com/ads.php?domainid=5593\u0026sizeid=12\u0026zoneid=6192","fqdn":"platform.bidgear.com","domain":"bidgear.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9da2ee7fb553fa4ca3a29570dc22f4","sha1":"f6dc9de6c90f5ab87799a411d470b71b6a9b6015","sha256":"011c83aaeceab63d1d75dee7bfb393e0da667a97d2d5a54fd9a97bd16499a2bc","sha512":"046c29e746af8009f503c57716c9844a1f08dcc8479c7a1e344b9782457359d3c2149393479e7c97950a242f93cb77e4b844801ba72b241e9e0eadc61d8cd28e","ssdeep":"","tlshash":"bd2153107e23da3a42fb66ea9576f72c9452b129cd26d48600df8535f914ee85d2088c","size":1330,"data":"","first_seen":"2024-08-21T07:07:56.694606Z","last_seen":"2024-08-21T07:07:56.694606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"04426bc66c09c8881b5b329310e903e9","sha1":"ff7f2f64ed5938023a91050e27f22f77becba78c","sha256":"ebf4e570b96d611fa540bb8745ba518a1005d50c4589a2c2cf3a60a97151a184","sha512":"9c87ee7ad099489801e0d6f8b241b7b6e77a7acd612cc5102716fe80e22a70f12181f927bd75c1bf145256de3eb56165878b28a2b45665231cb0b1848121275f","ssdeep":"1536:ItIeDCPRC0ebI00ZH1sWwTSww1fZbls9prC8BfTGnKDFtWm88:IWEIC9I0gH1s5TSww1pm9p2CtWY","tlshash":"778319ce7261702006e720e6553f0a47b237a999b40d456cf258c9ce3d7c98a62bff76","size":85185,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-08T10:01:03.974344Z","times_seen":3055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.dataTables.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"737f853e9fd6a31d62f5028e88663c9f","sha1":"cf144f2ab49f53a69fbfe10d3588fc23437d2736","sha256":"6c3ca64b7acfdd29b3ca6f1b9b46696369abd462d4546182085c347f72211841","sha512":"c148b09fba278ea4a75f57817a8be87abd06f9a6d9a46a23619a32a4bcd4ca4ac89e73d969ecd359bfb2b6b09c7a25e6f5bec05b9435928f585847c47026d91c","ssdeep":"1536:9Wbx6yktBJR6wIsJLl8Td/7oHfCkYQJtpG3:EOMoa","tlshash":"7763ea1923043e2ecbef70d401af8e5e647069719a895070a169f8be2d76d7910fee7c","size":69604,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-08T19:52:04.452651Z","times_seen":5614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/canvas-to-blob.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1b353d74742a0d0d8dba4a82f07c050","sha1":"a1b03792ee014e57e16a27cf343aaad13af08666","sha256":"233a048b5eab2ecc75e2f72bf9a65de6ac06e697746156ade5b144305d76ca3a","sha512":"07d8a774ffbf52cf7f90c03b3b8d615d331235c7ccf4f750dd9aeec8a935addfd8fba582d795a97c9b9010c37d1710dfdc1ed8c86342e9a80335ee7149c6b3e0","ssdeep":"","tlshash":"86110084f1922461919b225c40ef4cc9f2b68d2146c414a0c2599fcc5b74efea3faf58","size":1032,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.853596Z","times_seen":2741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/SVp2TzUoOBUiCihnFGlAOzZLagcPf0QJUSQ3DCRTLWJEOFQwNFgsWSYvEilHJjQCYVssLlN9cy4PMTtABzdCNXcIGCcaZhgZNShBHgMaem0La099dBtrLA52Cw0xCg05HUcCWh42TiB5IDUnCFwmCiM4bwAKNyB0HAw4fXEuGCAaBw8UMn58BDggdnwYMkJqBw8bMAFxCB4nAHYPYjcBZHATJzgMPRgRCXgLIAEHcTEUFQlZfBs0JEEgDUYVehFoMABtEQg6Flk6GS44dCUfRjxwETMeG2IONi8VcHw+EgpBIA0ON3QaaDs+bT4ALilZPRIzfk0uHjdiQR8YInZ6ERI0LGwPKhMNWXA9ISRGDAIcFnYBHDsGZTEUOg12ITIhIw0QAhgWUBwtFWlfOjUYPwg/IzEEDQ82RzdwDQ","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d9f61f9c3dddd1b0a726607af7a7a68","sha1":"e41340e946d123a2108d473b586f212a85de6dd7","sha256":"d3920f10a60797e0c971554c03d1d9deca7b15d800cac73dd3cd61820503339c","sha512":"6067867e835a8a9152577f0f358fab7a2d7ca8f3ec9d65c7883f5e9bece66e63befeebbee0a381648d30406ccae41ffe16567ec0628b2a4475677d483870437c","ssdeep":"","tlshash":"a651c18d34f3608282b2a025553bb856fa285a90834cda14873d97bcbd715ed6357f4c","size":2971,"data":"","first_seen":"2024-08-21T07:07:56.697056Z","last_seen":"2024-08-21T07:07:56.697056Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012456?time=1614803572912\u0026apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6WzjiqyyyqiuqzXibbi6i6zeibOWjXam50rv9.czijBuZznSuldK6V0rpXSuldK6au6mium2WVwfY-","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ad4d038726ac1294a5b66c5d580a61c","sha1":"6ed3715419f0665200218024017a49743ae1d847","sha256":"c15d81df53d7512bdd7a44c70d96fa3cdb01fb07dadb55bdcaf5c28d41e22070","sha512":"36b1b73d94f7c53342a037f9c96225e203894ea211b616142206f053ce46bbf998d45dcd014264eace683263062cc757520534cdb98d6fdbc1492261b5be2cc6","ssdeep":"","tlshash":"e9114f5228846a68b03b16b37e1d5ba4535206d72cc340f6a6c3c98f18600fbe85467b","size":1054,"data":"","first_seen":"2024-08-21T07:07:56.698201Z","last_seen":"2024-08-21T07:07:56.698201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffa5849037af7c5e6fc1971877859645","sha1":"deb7c1eca1d4ed43dfbf33442047136d5a5f41a9","sha256":"8fa669071ed5fb03e9954ba360885e7ba95fb77ae5448dfc313c3c01202b46aa","sha512":"0aa82ab0804da9c2cc5df51b5a46fecea2cad1fcdefac18130bb910c2ad4eb5ba68df54cc34f7a8b893d01e0b256839d657aef8f8318e32433c0929d1a8dfec1","ssdeep":"192:ZqaMynq1A7BP8HdC6ibNlko/io/pbhZE2o:vFqOlgdC6ilxG2o","tlshash":"66f1247bb912207596177faa07ee811a3576314001a7ea6b3d0cc45b1b58b70a2f6ffc","size":7391,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-28T03:31:18.073783Z","times_seen":2693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"57143c38ff308b700bda81d33fffdc1c","sha1":"7a4357101b77e5e514797ea16df9f31d0c1711df","sha256":"0f13250dac3eba96683a13d9c0c14c812448cc2f499a6ad6637a17adf094884d","sha512":"e56a943392cc582280091998b2b17c234ed1f5211742ac0bf7527e10611334a1b65ab69c121b7cea349e8b4f147cb8ae6aeaf6c3b8ab702baa8a53257924a41c","ssdeep":"","tlshash":"ab900254a7941457d4642115524a3152752441488911a1d8124555782109a1319402a5","size":47,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-06T11:28:49.297701Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-05-09T02:36:55.301964Z","times_seen":700325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"d3a3d345aa783315c4a8ce48d94e687c","sha1":"cf4ab4c12fef02a8964e8179bda5b22e7f9473ba","sha256":"62ec70e8ff9b126da43a490195dced9de8a75c03d3e75316655c191b3e8f1741","sha512":"c98a360cd42581692ede73b510adf477a7b98f878a9c1db2232e34a657f834764a67d3b5ca6e7726af96828b7f0c7d04f5b01874b8caf7407ab1c70497d6d0aa","ssdeep":"","tlshash":"f571c064acf3509185cbd30cbbe0ed861be0b1a3919a5656bb4c874ec7857ec895bf02","size":3575,"data":"","first_seen":"2023-09-07T20:40:19Z","last_seen":"2024-08-21T07:20:43.478561Z","times_seen":1405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b1eb948c9f4423d4b40f7d3f19f295aa","sha1":"a36d0ad60a990a1af1938990f7d885ac2e72200e","sha256":"3522a9fedd3e044011386be0e6012ec8898a5840648157e9c9f303b26489de02","sha512":"297935b2ffa7f26f6e4b335bc3d0729b02d819baf489a1e6a8bf3ad234afef0a34babcc2910f6ac81408aa980846e05fd7b75dc35200550dc403f0fe435a012d","ssdeep":"","tlshash":"782195117e13d83a82f775ebd5b6f61cd456b228c962c44a00dfc531f668de94c2084c","size":1294,"data":"","first_seen":"2024-08-21T07:07:56.701631Z","last_seen":"2024-08-21T07:07:56.701631Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a63e4af7fe6cadaa6be683ef86883c6e","sha1":"ffb829124b1ebfd512416a28af8bc6bc031fab2b","sha256":"2da21ba84f40d8ed01cbcdd800d31aff4cddbdc2a054fcbba32e91a918d7b4f6","sha512":"3ea39c294ced07f2937e10576c0c44dd2667db4168db939e7cc81b9b47af208b2825e0628843e49d036004d243a55ef163a7f11b0b04366202501444761762c4","ssdeep":"","tlshash":"6de023a96316b80ef3028114b8d4449cba20588db3c4d70352ecf230b1d814f0d751cf","size":431,"data":"","first_seen":"2024-08-21T07:07:56.70269Z","last_seen":"2024-08-21T07:07:56.70269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b8ca12a46f861f7d39bdabfe930fdda0","sha1":"9ff563f584a759d1cfd1c3300f309ff5fbb015e9","sha256":"e54e7d7ed4caf0730d3b629673c377f5ca57ed96c3b2fff76a538f7686e0e435","sha512":"943940777268a71ec735ea679898a873e9c921e18bab06c4f178c145b244a73afd655ba8b33ba2d56bccee6cdef9dc1316fa0f6cbeb5c80127aef1ca9e0da8aa","ssdeep":"48:MX6clUAZWCRcGYqY9pC/Z/KJlStAR4b7eMrxpqYhUKOahgrXMSxJJseKzwSAVvfg:MX6cKAwR+9KJlSPTU7r8SLuHAV6v","tlshash":"799195a39160320565238e44f7c8ab99232e856262228feff7913144cf87b55279e27f","size":4362,"data":"","first_seen":"2024-08-21T07:07:56.703852Z","last_seen":"2024-08-21T07:07:56.703852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-09-10T16:53:09.851Z","timestamp":1694364789851,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 10 Sep 2023 16:53:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=aLw09K2h8x1jSTZNR6tM2IXjtK0g2s9blLNGIIIYzDy5be1tzJYmMlXys8Daaq49D4kJ8ZfNtd%2Bfa3V%2Fi4nVc3HMmr5DrA2%2FUx4tKBGCvwjpsYaO%2BCWOfQKe1UCGTUlCuZLoz%2FyN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 80492f804b2d56ae-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":3924,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (6130), with no line terminators","md5":"3f13704ee1878cfe8dcf97162d2d1eea","sha1":"c54ba875e2852c2115bca704e93f69af73beca49","sha256":"60b3a2b4f68ea87749a699bd13370c593c23e81728cbe3c289859a3dd7f3a117","sha512":"51f301917d94e416eb7f8927a90c0a4e6bd45c2bff6ae34b87155aa085b0da9626f2c6c8668d6933aa66e5fdb6ede4afeb0f85e714130e58fabf8d056e1f32f8","ssdeep":"96:PNysDsl2f89IuFmf8/bQ8GKAszfnlqwshzyZGTiKWvATYvy+Xf0PQZ+teNyYzueo:PN1Yl2osfQQkAifnlqlzyIAvthXrZ+sm","tlshash":"92c15cd6c651642ae3f2436515b762142e73a1064d8da930ace5b0097eebecb8e44399","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"download.megaup.net/cdn-cgi/styles/challenges.css","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:11.320812803Z","timestamp":1694364791320,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/styles/challenges.css HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 10 Sep 2023 16:53:11 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 05 Sep 2023 14:34:37 GMT\r\nETag: W/\"64f73c7d-19c8\"\r\nServer: cloudflare\r\nCF-RAY: 80492f895d0c0b49-OSL\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nExpires: Sun, 10 Sep 2023 18:53:11 GMT\r\nCache-Control: max-age=7200, public\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2624,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (6600), with no line terminators","md5":"2c78b7f8fa496092bf41d5edd51611e7","sha1":"8b0b1b276e8194b0a5497db478ec2ea9b4f83c42","sha256":"2b0bd09c1cc7119d27e45353a59bf6c2721563e1689853ff704057a7439508d2","sha512":"53a7750ea46082968c2ec557857ad3975cddb0b45595259f0f3e9fc16360b87c5f257e058489ecaf80e61a97f92f1c5e34fa2f6fcfe922f4ae22392ffd75b4da","ssdeep":"96:NXePtxfXAQ+QagfBUoh2dflSxdY8FNqrEspOLJkmFAQtag:UPnIy9h21lS0tESwJkmWa","tlshash":"05d1963be741310d38278bbe38e5fb8e0434a454a51247bdfe67fa504ac611a3e63789","first_seen":"2023-04-05T03:38:18Z","last_seen":"2026-03-26T07:55:10.8523Z","times_seen":5576,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"download.megaup.net/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=80492f804b2d56ae","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:11.373545341Z","timestamp":1694364791373,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=80492f804b2d56ae HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\u0026__cf_chl_rt_tk=_PshUwVKRgeoea0xAi7EWsGnKzHgRbk_n9xQxeq8Uwc-1694364789-0-gaNycGzNCBA\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 10 Sep 2023 16:53:11 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=r1GXIvyYLGhVcmkTiZ1SNELOJskdO%2FXVIOQJjBzx%2FF8YNN8KjHd1GgZvAfDz%2BG9sMGvwknp%2BBn0wfR%2B4wGeDNtxn41aTGLHnV1rNNkhPdubIWnrk0i%2F6juZ9lTeyqnUFncYcUPrn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 80492f898d250b49-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":56755,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"de466db0f475666e26eabb19c2b6a8a0","sha1":"2c1a36eaaf532915eadcdec7ab85258d7efaadaa","sha256":"1eff60b80203584bc3a909679969f1cf7d017eb4018c0bdd9c0b65bc7fb099be","sha512":"67145434e6ccd269f9ecf95707ff1c5932d305f5f243dfd0affd14a7cb55e38032a023da0e06d2e389c513ea4b88fc66db8436dd966687feb3b33f03e472fd29","ssdeep":"3072:5ktL2Nfg8KsbikQJ3Rpa4NzJYqJ4nkngLR:eGg8xbiJJa4PJZn6","tlshash":"27f362cc779bbd5535233d78b0232217b09b1d496c3c18d9fa00b4d92af921a92d66ef","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"download.megaup.net/favicon.ico","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:11.384845337Z","timestamp":1694364791384,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 10 Sep 2023 16:53:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=gFTEnL7IawW46%2F4W1FhhV3bc7lKZKeuenEnev211mvAjXPIYFQGUDwdT0Zf3KQBhznp1tv5AjUqCWJYowNpay8%2FZb6Eq58LeEvcNlBBooLmZOju7k8E4JeZSO7CF%2Fg8geeWC9GMP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 80492f89bd370b49-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":3275,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (4918), with no line terminators","md5":"4103ac4dd0ccf910e7f6cd8fdc6270b1","sha1":"ca8408c0d6db5fc595cee5e02baa8136be264861","sha256":"a330854cdb9daee88401a854bf04dfffe37eaf9ffec0c39929b4e912f3d4039e","sha512":"324748c4cb13bf62daaca6dcdab15a3c4226301bdbe89e07f6b9adef0a3fff2d9a3eaf5713cb3d2e77ddc91bf3629311537877f8601eadcda0194207ec41a044","ssdeep":"96:PNysDsl2f89IH6kvgFMNpTtb4ohCC6ZgRJaQ+XfeSTM2ajeN1Yzueh8DWzN:PN1Yl2oupgFgpTtb4oegR0XFTM2aCSyo","tlshash":"b3a16ef7d8b20039a3a30799ceb673115376b81d5f43609041b6b82d9afef0f8585b81","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"download.megaup.net/favicon.ico","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:11.424150843Z","timestamp":1694364791424,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 10 Sep 2023 16:53:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCross-Origin-Embedder-Policy: require-corp\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nPermissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\ncf-mitigated: challenge\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=QnotpPPdCPBmcuwus3rIy%2FoaFbcahehvhOPdRBK2yl6qaDaUFF4Zm8ILxGpHJMxsCBvkgKZ%2Bm8S8lgufg3IEsklDALbQSjCplMhuqsZZEmXd5YF9ar4WSZjGZMHGgip6zDGQA7ke\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 80492f89fac156cc-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":3273,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (4919), with no line terminators","md5":"18aeb50bc1f9fa96a11c292167d65ae9","sha1":"70f1907da6ccfa894db372b3810badb2fedc9d21","sha256":"2a1260939f2bd026451a60d03b6a4f9b57aa526822dbe5463083a250963b1c53","sha512":"47bcb3ec75c1f6874faa1560b537baf8a6254f8ac6591953f73366581c74cc602e935112176dc049a7d2aa04cecdf71c8fb85f1f1255f214fdd0bf6fd0e4ee04","ssdeep":"96:PNysDsl2f89I+HkwNWc0E5Alny6/7vT+LT+XfAuu87cYeNoYzueh8DWzN:PN1Yl2olNWyAlnN//+LSX4uu87c9pyGN","tlshash":"98a13be3e8110119d3ba2768cae6b7286376227a5f00245024f9d40c9afdf4f96493e4","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/b/8827f912/api.js?onload=barZ0\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:11.582893778Z","timestamp":1694364791582,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/b/8827f912/api.js?onload=barZ0\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://download.megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 80492f8a6c43b51d-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":18101,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (30570)","md5":"82ff7b44850d3d60762a933105f09e85","sha1":"9f835c50d66839c6584031580895cb1aa3ced43d","sha256":"bca2f8c54941086a530fdb19a3cf7cf753f3056066a7c665936810286937f421","sha512":"43fdae2c5eea5edab33c974271f539908e0e8c86b90f838b93fd103a50a38d78458c2640e92b66b4e0b31fc1d27628aef63218768ed1a59aab1f658b17e15913","ssdeep":"768:ACXFga2znctrGmtKvIqUqun0u+AHTpFFqMa7Odpvont:v2zaGmt0v","tlshash":"6ed229d83187743147eb45e0216b6747b329ae35e98c8880d847c97539bcd8ad23bf99","first_seen":"2023-09-07T21:20:52Z","last_seen":"2023-09-13T15:14:56Z","times_seen":364,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"download.megaup.net/cdn-cgi/challenge-platform/h/b/flow/ov1/752029868:1694362077:8SU-1eZlo8R5K32Zz0wVVIskliEuIjOuluPEpkLsXJQ/80492f804b2d56ae/cb2f325ee43fe8c","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:14.17585773Z","timestamp":1694364794175,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/752029868:1694362077:8SU-1eZlo8R5K32Zz0wVVIskliEuIjOuluPEpkLsXJQ/80492f804b2d56ae/cb2f325ee43fe8c HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\r\nContent-type: application/x-www-form-urlencoded\r\nCF-Challenge: cb2f325ee43fe8c\r\nContent-Length: 3275\r\nOrigin: http://download.megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 10 Sep 2023 16:53:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nset-cookie: cf_chl_rc_ni=;Expires=Sat, 09 Sep 2023 16:53:14 GMT;SameSite=Strict\r\ncf-chl-out: 8rvHXSoTtCEE3DODqgr2XzEzPt3QA3ITEGy1lOP1NCatlBXjJXBU9QpW0kVWbHM+s45iS445HEnkQtTHQTpuLgc5eXg3lco2pC7Ui41SXutngln68wtvmf+qK0wXCYY/$VyD2JrQY8V5UGeyNCHupCw==\r\ncf-chl-out-s: B53iXwG8UM7QTHLYQw3oFN8gsjc9RyQyzyJMYtS/pj6zAc5iVIR/yhDc1KqknK+WnHzfuZLiaZGsTKUQtkPFtNasX1ooCcXFzfIIdDUXRKO9Be2DgqZzaWt5uoruhpodUuaMXBA0vGkKtml0aAk2oIHnndpgWjB6LUCuL477BZA=$Wex2EVVyCT+5MFoKb7KT3w==\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=7JBcTr49skoJ%2BOG%2B5NE4%2F%2FO2Wwvw8bXlVaQV1XcOnIhRj1BmcXyBfR8Q3meHijHPSPqliHZ0L%2FhfpVzxg2aXSLwd4GNzDxkUipAUnv9NZicofqqELb0LO5xRWtYmvPpZGUktWewj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 80492f9a8cdd569c-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2044,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (2652), with no line terminators","md5":"57a5948a0cfc5ffd782c2a4138cecd1a","sha1":"d5a403cf3ae0e33635be68a04d3afef3c3382b4d","sha256":"74f1cdb71228f9fb7407db220cca16fe12271e784d777b4546d28a8b47ac0af9","sha512":"92211511ed7956dec23e4bd62504377d1db264733f24127a4d0d41b7f4f2f4edf3a67e5f1b72843a2d6da20276bde988b89bb5abea99dbd979ee39165e90f801","ssdeep":"","tlshash":"50513c352bb87fd4716b3986105476a35fd6f36acd77821088305066ae6ce4ac24ce77","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-09-10T16:53:09.851Z","timestamp":1694364789851,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\u0026__cf_chl_tk=_PshUwVKRgeoea0xAi7EWsGnKzHgRbk_n9xQxeq8Uwc-1694364789-0-gaNycGzNCBA\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2138\r\nOrigin: http://download.megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 10 Sep 2023 16:53:14 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: cf_clearance=RrZYZjtG.QZFf2y8ogSiTozGXOyMymR6tcoRTzVDSpk-1694364789-0-1-32b3bbaf.6b0d8b6b.3eb1b0e5-150.0.0; path=/; expires=Mon, 09-Sep-24 16:53:14 GMT; domain=.megaup.net; HttpOnly; SameSite=None\r\nLocation: https://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\r\nX-Frame-Options: SAMEORIGIN\r\nX-Xss-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer, strict-origin-when-cross-origin\r\nX-Download-Options: noopen\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=x%2FD0qrvMZRm7fgTMepVgNOI7tEHwOc4h9LkPeI6pmoLPa0nd9mU2KK3DgztVHYQUyewIqtFv0MYYQFkk7jkMyyvi337QMZkmDCdnTWeSgwoUkvOpk1qHSdTcAOTv2iNURDJBryqA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 80492f9badcf569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":162,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with CRLF line terminators","md5":"4f8e702cc244ec5d4de32740c0ecbd97","sha1":"3adb1f02d5b6054de0046e367c1d687b6cdf7aff","sha256":"9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a","sha512":"21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f","ssdeep":"","tlshash":"0bc08cadab022cc8b8a73b3861c36160e2ec80701699451101b04a07f1cf1979ec23d1","first_seen":"2023-04-05T03:07:27Z","last_seen":"2026-05-02T03:40:17.493644Z","times_seen":131103,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"download.megaup.net/images/main_logo_inverted.png","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:17.394899334Z","timestamp":1694364797394,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/main_logo_inverted.png HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 7137\r\nlast-modified: Tue, 19 Jan 2021 21:02:46 GMT\r\nvary: Accept-Encoding\r\netag: \"600748f6-1be1\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4984\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=09cAHZCWtoMbICsrvz4hew7IYhktQfsEpnr89Rjs23fbIsdQTegOVrrltklJBxzPHwljoNs%2BIzDbLXcrhs4dQZ%2BUrbfZhqlsjFv72Tv2Llqgp16IrlmwzAnqVTjoQoH8D6KlFn6V\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492faf6cb8b529-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":7137,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"5d15526be10b904a6b48d1af04a10cc3","sha1":"c09b6874359ac6d71db95593618a9acb55baa984","sha256":"894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018","sha512":"a54311ad6980495f4f4084489b5e78ceed681f810c75c33dcf062ad2cbe9d78758e4dc45d8a69eec3d1e3d6ba555f205c217900f01a228a4fb51d299133d6aa5","ssdeep":"192:JS0tKg9E05T7QszTovb+0BPQF0NHdvo6nD4F:3XE05paTPusHtouD4F","tlshash":"f8e19d5b04316098f7dea8818fcd7417af68d16dc8933578c0d0a4ef8479d29a7b9497","first_seen":"2023-04-07T01:23:06Z","last_seen":"2026-05-09T01:44:56.461217Z","times_seen":7695,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.sectigo.com/","fqdn":"ocsp.sectigo.com","domain":"sectigo.com","tld":"com"},"ip":{"addr":"104.18.15.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:19.526770351Z","timestamp":1694364799526,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.sectigo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 10 Sep 2023 16:53:19 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 471\r\nConnection: keep-alive\r\nLast-Modified: Fri, 08 Sep 2023 11:25:47 GMT\r\nExpires: Fri, 15 Sep 2023 11:25:46 GMT\r\nEtag: \"52d9791efec987c6186b5f408baad2a2aa5454d1\"\r\nCache-Control: max-age=413106,s-maxage=1800,public,no-transform,must-revalidate\r\nX-CCACDN-Proxy-ID: mcdpinlb3\r\nX-Frame-Options: SAMEORIGIN\r\nCF-Cache-Status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 80492fbc7aec5694-OSL\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"b792399de8f3acb71b02281612e6bfcd","sha1":"52d9791efec987c6186b5f408baad2a2aa5454d1","sha256":"f4bf0f64844b5fc10c923c460e60f34905669c695c47a0871a10e15f19863e5d","sha512":"ecea1aeae5d9d67fb1a9d649713a4edddb6299bb1d2aaeb0ad5fc145cbdde87c75d6a57c0b299995bffd8c877d46e503518428878ff1bc5f6d26f870c70d8732","ssdeep":"","tlshash":"fcf0dc2afd945b961d89ef1a03faff593825e22c34e5542b24a9a24985392386838478","first_seen":"2023-09-08T14:29:26Z","last_seen":"2023-09-11T04:26:07Z","times_seen":38,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/images/main_logo_inverted.png","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.824Z","timestamp":1694364799824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/images/main_logo_inverted.png HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 7137\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-1be1\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7137,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"5d15526be10b904a6b48d1af04a10cc3","sha1":"c09b6874359ac6d71db95593618a9acb55baa984","sha256":"894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018","sha512":"a54311ad6980495f4f4084489b5e78ceed681f810c75c33dcf062ad2cbe9d78758e4dc45d8a69eec3d1e3d6ba555f205c217900f01a228a4fb51d299133d6aa5","ssdeep":"192:JS0tKg9E05T7QszTovb+0BPQF0NHdvo6nD4F:3XE05paTPusHtouD4F","tlshash":"f8e19d5b04316098f7dea8818fcd7417af68d16dc8933578c0d0a4ef8479d29a7b9497","first_seen":"2023-04-07T01:23:06Z","last_seen":"2026-05-09T01:44:56.461217Z","times_seen":7695,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/images/loading_small.gif","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.839Z","timestamp":1694364799839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/images/loading_small.gif HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 184355\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-2d023\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":184355,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64\\012- data","md5":"b0dd5b3af9c4c0644d7bddee83716209","sha1":"30002468d0266b893b3559b8d0d260c6cbf0ad7c","sha256":"2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d","sha512":"30b979509dab0ca3482c9d04909d7465ec88d94e0da8b1315554e593307d44f69d06343962ea7ece20ca5cd85515689d92e31702a0e5904a97e5137425da54f0","ssdeep":"3072:UqFI6Jsdc/zx61e5900tjC5erRJK5H7F6/8ULb6xU/6q214ycwuKQUKn2FA:TtJsdcbx6c5EerRU9J6kUncgH2QAFA","tlshash":"4604df6fa009936a053d62f130f31f463b7d99f295c1c51799aebf9e3c1078e2085aa7","first_seen":"2023-04-07T18:32:22Z","last_seen":"2025-04-01T17:36:27.429361Z","times_seen":2486,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/?kzmmd=761186","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.825Z","timestamp":1694364799825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /?kzmmd=761186 HTTP/1.1\r\nHost: dmmzkfd82wayn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 190806\r\ndate: Sun, 10 Sep 2023 16:47:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: zImAJoh1nm3XU-2NafsfJ8uROvEsMh9GmHjuZOPGZWtGTXB-9IXhog==\r\nage: 360\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190806,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (15948)","md5":"3fcb6e6d736e900fe41c643a3d5f2974","sha1":"87e78c3ec5f5e0aed5f96fd249fc3abdfd1e07e1","sha256":"0d3f40381617f67bdf39144881257bf67883d89243724e7965c20d34b46cbad2","sha512":"ff73b5c4fb50efc579e281655de685bfcc052b8451447b9117ab67708770de141119bf46d4a76ce9f6f1d722ba21f907dc74e4c37ccc04600a24dc29ea0dad88","ssdeep":"12288:Wi0yYh7Vuo6n04cuhvT8ThyF8Ep0omOmJuZg0wi0yYh7Ve:Wi0dJVuo6n008ThyF8Ep0omO6og0wi0E","tlshash":"e0d46d59ba523529836374f540bf134eb23e466af80449d4b49ad8d06ef8e4503bffac","first_seen":"2023-09-10T18:47:42Z","last_seen":"2023-09-10T18:53:31Z","times_seen":2,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":1,"dns":57,"connect":2,"send":0,"wait":25,"receive":23,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/80492f8b6ce956ba/1694364791872/SlJEPiOQPuGWYYL","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:19.999133415Z","timestamp":1694364799999,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/i/80492f8b6ce956ba/1694364791872/SlJEPiOQPuGWYYL HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pfpt5/0x4AAAAAAADnOjc0PNeA8qVm/light/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:13 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-ray: 80492f989a0d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":37698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 72, 8-bit/color RGB, non-interlaced\\012- data","md5":"19bb6a160208dc97c1b82ad533c51403","sha1":"52166ef148378a4bf815b89a12348a39ce95e313","sha256":"e00a1f61eb333d139e6c03f978c22a4a50f0be8c4e30f594182e29843e58eb8b","sha512":"839d03dd8fcaeefdc9c4b5e926074fbc66a788243298942e1222a16d0623290cb0925e8c13b86d9a1f3325eb13bbf705c411d84d99dd2c39555270b714707721","ssdeep":"768:zIsrmPEpg23//emoVDSDtnT2vzqXcMcUlod3qRfw:zPQf+/hoVDSDtnTSa9qd3gI","tlshash":"a103f1c597bbd28893d9b3b4728733790ba6402cce757962757b788681200fba2b6058","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.iframe-transport.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.050424022Z","timestamp":1694364800050,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/jquery.iframe-transport.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-2427\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2878,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"bbf8d80f1841d07cbee13abcfe0a5ba2","sha1":"a69ad62ab8a001e0ea8ea106ac404ac0af88984c","sha256":"4f3f67c68965b4076cc7bc531f648c3a15aa30c1b9cede0486afd4eb4353f8c1","sha512":"459a3691a039e0ad04bd5711823e0ef579ddb7b7e603f802fad21134ed993194ad7e6f83acd00b70b3eaf57e9be01fd6677570cde9635ec1284e5cedc8875e3b","ssdeep":"96:uQYCMNvKUWO38itw7rg8LJfNm/7qZ57Jo0463x:uzMUtJts88Nwqr3x","tlshash":"261213872c2213310aa37bd91beaa0587639b3247125cb70bdee17861785506d2e17ee","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.806064Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-process.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.129379865Z","timestamp":1694364800129,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload-process.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-14b6\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2039,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8f27159561d43ede851b9b84f63cd727","sha1":"c4672cc17326d35d092741dad007ee72b2c13095","sha256":"f6626568ee243b737cdfc12efc464eb97d786bdcce590a0326427e11f360293f","sha512":"63dc471e42c751f05753b4e182fa9fa3a6c17154de71e8cfa5725d87371fa6761a6237adf4113068c107a8457bde35fae6a3d8e95872f0012e9dc06d003adb5e","ssdeep":"48:mvMZsCDY/dHZC8hiXjuFI7v06svN9/IkQIQxqb8ZMqCDLARk1al8lc5MQOFqK4Ms:v7YjtQ8aIb81Cn0QXlVgt","tlshash":"76b1dd0bb51e113246db3ae1a7be414b7aa8f22d0332c5343d6cd7c64f5446692d2aef","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.844619Z","times_seen":2733,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-108868042-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.859Z","timestamp":1694364799859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"E6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12","sha256":"31:8C:88:B2:F2:3A:CA:89:46:6A:03:A1:A7:BF:E0:54:61:71:D0:11:D9:00:D5:2A:60:78:1D:A2:83:16:9D:FC"}}},"request":{"raw":"GET /gtag/js?id=UA-108868042-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\nexpires: Sun, 10 Sep 2023 16:53:20 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 10 Sep 2023 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 68317\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68317,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"46cb2db147a75df40628cf09e8349621","sha1":"0b843e7ea38bde26aca6b0cdbe68634348c7223b","sha256":"3f76412f22de5cb0e4fcf7a02e4fea9c7dbf97f4257f3ac3d455514fa8868831","sha512":"2ce305bd80721470cacec7e051800fa84c6dc7daab613a70e2a5ee837f036ab940fc65fa2274d3592f267f71f02ce95f5201dbf635cea39d96e6c95a6bc9743d","ssdeep":"3072:y069zayXPCB6FFiKp0nUm4k05oHgzZXFWsX9eBvlPsMaBHUp:3UXKkCt16oHgzZ1BX9Yas","tlshash":"5d04e5d8b393b16682a3b4b4503f010bb17a6d92f85cccd4e189d5d42eb8a99417bf7c","first_seen":"2023-09-10T15:53:01Z","last_seen":"2023-09-10T19:53:35Z","times_seen":5,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":269,"dns":0,"connect":8,"send":0,"wait":28,"receive":15,"ssl":373},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"keydawnawe.com/gwZ1U5hjA8ii/32575","fqdn":"keydawnawe.com","domain":"keydawnawe.com","tld":"com"},"ip":{"addr":"142.91.159.89","port":0,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.200845253Z","timestamp":1694364800200,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /gwZ1U5hjA8ii/32575 HTTP/1.1\r\nHost: keydawnawe.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 Sep 2023 16:53:20 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://megaup.net\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Mon, 11-Sep-2023 16:53:20 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjAC%2FAKJi1buM2WoQuvwDRiYJgjztjP3WeLd%2FG8SilOE7CdkFSFqXJTHk1xLkFPcNOCBw%2FdyPzuv6AZnJ%2FAs8euDU6yWhYf1z9g8zfIYn9x9pN14pZoxQfw2rbu7%2B5xuHY30KQJHEUzOIypAr00fl7rHdA%3D; expires=Mon, 11-Sep-2023 16:53:20 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":26,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"4350003303c00000cc300000300300000000000000000c00c000000000000000000303","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-05-08T21:44:28.670536Z","times_seen":10644,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"altowriestwispy.com/tysaSHG1FMaM/18410","fqdn":"altowriestwispy.com","domain":"altowriestwispy.com","tld":"com"},"ip":{"addr":"172.255.6.123","port":0,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.206261086Z","timestamp":1694364800206,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tysaSHG1FMaM/18410 HTTP/1.1\r\nHost: altowriestwispy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 Sep 2023 16:53:20 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://megaup.net\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Mon, 11-Sep-2023 16:53:20 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjAC%2FAKJi1buM2WoQuvwDRiYJgjztjP3WeLd%2FG8SilOE7CdkFSFqXJTHk1xLkFPcNOCBw%2FdyPzuv6AZnJ%2FAs8euDU6yWhYf1z9g8zfIYn9x9pN14pZoxQfw2rbu7%2B5xuHY30KQJHEUzOIypAr00fl7rHdA%3D; expires=Mon, 11-Sep-2023 16:53:20 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":25,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"5340000c00300000000000000000f000000c00000c000300c000000c00030c000c0000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-08T23:25:20.06134Z","times_seen":14294,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/retina/retina.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.852Z","timestamp":1694364799852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-52e\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5390,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1249)","md5":"d3e2d6e7887add1872c197bab95a16b7","sha1":"fe996175492409ca9e5b4f42911c5a69e8b2698c","sha256":"4b75d94f66a12f86bb0c238861680cc589c4463ba29be6889ed6dbeb5594aa19","sha512":"63f81f4ec4fee992eadeddc42815c3a5df5e67cdefbb60993528354c78219462b6fc1b9cb0d11333df87a453f34248e89a8ef5980789a912a88ffcb96f0a2178","ssdeep":"","tlshash":"db215069b69131370142a911403f6da27b36b0fd12834178bb0dc9e7ec31e38966efa9","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-08T07:08:33.987355Z","times_seen":2996,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"download.megaup.net/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=80492f9c3ce7b529","fqdn":"download.megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"172.67.192.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.386930985Z","timestamp":1694364800386,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=80492f9c3ce7b529 HTTP/1.1\r\nHost: download.megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbejeG/Thj2PY2F0ZJDD00v4WnGhjhZmHy27TmlWWSzpmym2W4cGqKLmrHFtOGXgWk/+pbtzfg/Y+KdFBRPlh2fpRExdj5i1F9JR/T7JeHu1CZ\u0026idfilename=Ghosts.n.Goblins.Resurrectio+n-CODEX.part1.rar\u0026idfilesize=4.99+GB\u0026__cf_chl_rt_tk=UPz_mO3ylJBf60LVNAiGoWAyaHtFM9jhI8NX9eWsgwE-1694364794-0-gaNycGzNDKU\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:14 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=yjrfO6eJFtUDchMUZMD6JlLUf8KUDqv1eVa5ivY%2B9PMA9WJ9Xy4LUkdZ82ffqKeZfuSqO04u4vw%2BiK1HqNRXW3tnxhhwDpKqUrONE1URtroJM9nc8How2%2FbFmWJmrn%2FCb4aQ3PK2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492f9d2daab529-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":100696,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"df27fb95448bf3bfb16e5beb3883adc8","sha1":"2e12e86905d50b8f9ea9d6c46eba89b8a80af2b9","sha256":"159e3e89c31da15c4cc499c8861ad96e04a8de63d6443c26654826b9837b5e4a","sha512":"1fbe2231f2d781022c8e858f1f71af6f74ebc586ba26c705cdade5b6fd5ae588d9d0c7c10c226eeef7418a040e63f1f6392d100f840f3a699e8b719b623adb96","ssdeep":"3072:EZ+qCcpFGbJSdKYaCgBhh4agjWe6Yab6wY00DM2wYoXO4FV:E0Kq4Mb6wYzO+4FV","tlshash":"fc0474cc779bad9961333d7c70273216b09b1d496c3c089dea01b1d929f930a92d76ee","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/colors/flow.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.398660651Z","timestamp":1694364800398,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/colors/flow.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-a83\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":51131,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"b0043a6c7a7969f6d9d76e9684005150","sha1":"38c6010b1a1110baf5efb78b05d4b99784aa2836","sha256":"91e4749e45a517ca4168cf9573eef0ee72fa93a9b7b96892844e9935afc832af","sha512":"8800742c5787053b695845e3ab5200f6aeb85b25ee7978ef0d2f1ef02f9f1935b88a4e598a4e94178c7ab93e82d582a768cfe387521d67462eabae1d13105ff4","ssdeep":"","tlshash":"9d51b199e74a0e8eb31b9b2936b5c5509b6931f5cc2c7f3cb1b5916a133d4643e3a880","first_seen":"2023-04-05T18:40:54Z","last_seen":"2025-03-01T07:52:06.641948Z","times_seen":612,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.402086714Z","timestamp":1694364800402,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31980\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7cec\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":31980,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31980, version 1.1\\012- data","md5":"99ac81a158028ac2023fb3350d2497e7","sha1":"f08c12c91ab29282a616c3ba8e533f49b5b433ca","sha256":"92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d","sha512":"7b26310ce2f53a3bb3f5a4701a9c945e3190263b17add279c0c26ffa18d5ad15048140c3576be49de5c54f8156073e62c362d2de70ee9efc75bc297ae6c67e17","ssdeep":"768:rusBBeUhRWvnas0lc/4auhvv67p/1ehu9t7EPmRy6VXZthd:rusbeUhRWvnt0mmxO/Qhu9GuXZl","tlshash":"30e2f1470d4c23a5c7c46134e046959e0afa1989bbb338c8269b98d636aff31f415f3a","first_seen":"2023-04-11T18:08:40Z","last_seen":"2026-04-01T20:07:09.049151Z","times_seen":2677,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/9wv98/0x4AAAAAAADnOjc0PNeA8qVm/light/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.414304392Z","timestamp":1694364800414,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/9wv98/0x4AAAAAAADnOjc0PNeA8qVm/light/normal HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndocument-policy: js-profiling\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 80492f9eccdbb518-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":42616,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (10420)","md5":"73f298259619b00e0edf804a008b24c0","sha1":"97b72ff97f44a9cb310a124d1ee20f1e89be3863","sha256":"16f0ae5f89ab5a66431c2206770b30bf067008f66bf06149268e3b46fbb33ce4","sha512":"29e70c127bd3621d64caf6c42d63e4353a6e5307567db763ab52e8344dee5f7d8d6893eb7aff3fe12f9dfb2c0b9b7108e6cbbbf0a69f004daf5fcf263ddd9281","ssdeep":"384:QY21nb9ugAHLg6Okw+urmG/XkQzzt4GxwXbzHuXmalWxRY5ptyQ:a4E3SG/XfzzJxwXHsmalWU","tlshash":"1fb2092341e405b9b012c3b997aa7499b5320547af92b067f29d4af1cfd84ef1763bc8","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.562168102Z","timestamp":1694364800562,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-71d\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":165843,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"76cff321a3da409f04f1b9d25319ab78","sha1":"f9de6b54f2eeeb85ea43693bee32dc930a252649","sha256":"9930043ffb4753c135a12f6be97e24ef56fdfd5aaf1af6a204d99937a7ba8ef2","sha512":"b256243244379bc8bd3d2496a71ac10a98b496bfad598e8b20cffc2d583a4915137f92208c08a82e011442d36279b0a699aed67edffe1b854ffaf2ba24f978de","ssdeep":"","tlshash":"dd419b597c0e37302e9330fd1e4b90885a79f6639106c896bd8ecbc4f7e400dd166e9a","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-01T20:07:09.302132Z","times_seen":2672,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"205.185.216.42","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.511Z","timestamp":1694364800511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Aug 2023 11:24:30 GMT","end":"Mon, 30 Oct 2023 11:24:29 GMT"},"fingerprint":{"sha1":"9C:9C:8C:15:3B:65:AB:34:94:B5:CD:26:D6:67:61:2A:99:F9:0A:7B","sha256":"48:D6:80:BB:F9:53:15:E5:CC:4E:D0:1D:E5:17:D8:97:9A:82:18:5E:67:B8:40:31:EA:4A:1B:3F:BF:C7:3A:65"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-encoding: gzip\r\ncontent-length: 33767\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\nserver: nginx\r\netag: W/\"bdcd31715ffc48a61b59a833750\"\r\naccept-ch: \r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-hw: 1694364800.dop203.sk1.t,1694364800.cds225.sk1.hn,1694364800.cds257.sk1.c\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33767,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32336)","md5":"0d65d2af9888847a0995c06bffbb6f1f","sha1":"bdcd31715ffc48a61b59a8337502d174e1fb81a7","sha256":"93e8a7072d356d288d3ea294046246618c560100f528f062c64be7f504151991","sha512":"4aff66898432c3fadeff8e08fe348467dd80fc1bc3d56cbdbed5a02a6cd2ca0a6e9fe2b993c643dd9bd427f42af6c32c076e7abf8b7119ba39655254c597f93a","ssdeep":"1536:EO6Z8AzEToR5L4xFG7kKZcxOxw8hwMjNOKVhMfhcgAHZ1Z8r1Z1AdOpkCOZkMD+J:LVyp28VOkPD+Y38C02KV3Q4Ql485I","tlshash":"3ea34b892b92703452d3a12d69ff57093331407ee90e4894bf4ee8a427aded65173bbc","first_seen":"2023-09-07T20:08:23Z","last_seen":"2023-09-18T13:24:01Z","times_seen":181,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":49,"dns":20,"connect":7,"send":0,"wait":12,"receive":10,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"empafnyfiexpectt.info/MEpKeFUfdSkLaFQmAwIEShgFGTJmMgsTbFoIEgsQYg05OjZxA2wMPFR3ck9jA3tyXiVZLndKbBY5PhkhRTl3SXNZJCwXaBY8d0l7AGR8SHsDbD9FZBY+OhkyDXtsCCFEJndJYwl+eU5hCHp6S20J","fqdn":"empafnyfiexpectt.info","domain":"empafnyfiexpectt.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.476Z","timestamp":1694364800476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"empafnyfiexpectt.info","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 06:52:14 GMT","end":"Sun, 03 Dec 2023 06:52:13 GMT"},"fingerprint":{"sha1":"0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B","sha256":"5F:9A:16:59:88:60:2D:52:9B:35:E6:62:13:A5:4B:F3:32:68:E5:50:28:88:C7:1B:B6:C6:AE:BB:07:D1:C6:93"}}},"request":{"raw":"GET /MEpKeFUfdSkLaFQmAwIEShgFGTJmMgsTbFoIEgsQYg05OjZxA2wMPFR3ck9jA3tyXiVZLndKbBY5PhkhRTl3SXNZJCwXaBY8d0l7AGR8SHsDbD9FZBY+OhkyDXtsCCFEJndJYwl+eU5hCHp6S20J HTTP/1.1\r\nHost: empafnyfiexpectt.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=LarwCPcTUwmc9%2BLmUBJ0Rp7jo%2Fe%2BhIhcsnUI%2BfOASRSEjYnAvUro40GUnvNpj2b2iadJxy39R78Fh7SyXvvxW%2Fn1sIx8FAaA%2FundexJA7yZh1O0xbk%2BIXiW9tyXSWD6ZVWprYAV2lFg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492fc2b8085685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/stylesheet.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.612627001Z","timestamp":1694364800612,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/stylesheet.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-6c82\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":4589,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"8568ee885222fb5ef651a99221bfd347","sha1":"0dc1b30d1a58c3cdafab8b38da04f3fc2462ee46","sha256":"3b35d09fae892be2b76a67f47bbbcbe289b05a2850e02295f70f9c2e537d927a","sha512":"d159e454bf53515e1d2754614188caee87965fa7aff4e01829ae3d0c6bc8575d795611c2251b771890d15f6db7b1c952f37eb667ea616561c21672c5e972272a","ssdeep":"192:B9JmhRI4JiXOEuDMCKDO3rynaTVZze91nJASlR4XELsFAHH1OMDwYatvrzYeileO:B9JmwCMr/J+IkKHjdWs","tlshash":"e6c20b5cee012049623bebb9abf75350fa2c50939e0241a87be96250cf7509c563efdd","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-01T17:36:27.445357Z","times_seen":2436,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/clipboardjs/clipboard.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.856Z","timestamp":1694364799856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-2296\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3835,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (8746)","md5":"55db0ff82a3b6b247844ae0d07d85fc6","sha1":"9bc5c7dc92ef0b31d212a66bbdff591e484f427c","sha256":"404b016f5c9a369726eec56a280c93478da17a52ed0f1fee116838330772ec70","sha512":"1629c5ce3ffa898e5354079549676595161bb73eca975b76a6af4ecb992eedca31184848c704c6e8ac6c6efc7c0b96ed44ab00ef3b2dde6a61374d4c058b0b82","ssdeep":"192:K0Gfh/1JmtuV6qDpOJ4GQUrAg9fvsx1tkvcRIIS7e1t:nGZ+kV6Kh8E2fot+Iaef","tlshash":"df128688f290b1b1929b607b417f420fb372d45da02e50a4b65de4f5ad78aad4227f3c","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-08T21:01:51.153843Z","times_seen":3674,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"empafnyfiexpectt.info/bGhsR1BDVw80bSEvD3QBNCklEgEqWD4WHjkqJCMULi49BDRcOUozOQhVW3FkXVxdYSAFDFF2dh8cDTMlH1VdYTkCDgN6dhpVXWljWEZfc35cThl6YUocHCY3UVlKNyQYBFF2ZlVcX3FkVFhcc2Fd","fqdn":"empafnyfiexpectt.info","domain":"empafnyfiexpectt.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.491Z","timestamp":1694364800491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"empafnyfiexpectt.info","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 06:52:14 GMT","end":"Sun, 03 Dec 2023 06:52:13 GMT"},"fingerprint":{"sha1":"0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B","sha256":"5F:9A:16:59:88:60:2D:52:9B:35:E6:62:13:A5:4B:F3:32:68:E5:50:28:88:C7:1B:B6:C6:AE:BB:07:D1:C6:93"}}},"request":{"raw":"GET /bGhsR1BDVw80bSEvD3QBNCklEgEqWD4WHjkqJCMULi49BDRcOUozOQhVW3FkXVxdYSAFDFF2dh8cDTMlH1VdYTkCDgN6dhpVXWljWEZfc35cThl6YUocHCY3UVlKNyQYBFF2ZlVcX3FkVFhcc2Fd HTTP/1.1\r\nHost: empafnyfiexpectt.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=RuILo1CKhUnrHMZyfjPP08LGAOPIdrEZC7rp03nEuGRYGahWDEoi3WiBT7xLko2k%2FjKUiUeS34myfw4xXCoCMt4GjRIMqjIbgKwBHzYWM7%2FQkJcLSpYotvdoIHyM37LbcdRTTHPw7cE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492fc2c8175685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"empafnyfiexpectt.info/azBuZ0JEDw0UfwoAFg4UW0ANAQQ9VwsLKl9mXDFnWXI2LzYKaiYqZB9ZClp6WQVXVnNNQAcDf1gCSBQ2CkQbFH9aFgcJJAQNSBF/Wx5XSXBFBUgSf1oWGhcjDA1fQTIfRAJac10JWlR0XwheV3FcBg","fqdn":"empafnyfiexpectt.info","domain":"empafnyfiexpectt.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.467Z","timestamp":1694364800467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"empafnyfiexpectt.info","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 06:52:14 GMT","end":"Sun, 03 Dec 2023 06:52:13 GMT"},"fingerprint":{"sha1":"0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B","sha256":"5F:9A:16:59:88:60:2D:52:9B:35:E6:62:13:A5:4B:F3:32:68:E5:50:28:88:C7:1B:B6:C6:AE:BB:07:D1:C6:93"}}},"request":{"raw":"GET /azBuZ0JEDw0UfwoAFg4UW0ANAQQ9VwsLKl9mXDFnWXI2LzYKaiYqZB9ZClp6WQVXVnNNQAcDf1gCSBQ2CkQbFH9aFgcJJAQNSBF/Wx5XSXBFBUgSf1oWGhcjDA1fQTIfRAJac10JWlR0XwheV3FcBg HTTP/1.1\r\nHost: empafnyfiexpectt.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=n%2BdEP2LBlTRCSFKg%2B6%2Bo0m%2Fc8SYfJ8GuUv4y6nSqgBPGTLZ2tYUWCU5wIxhEOfUAWdj5rgRppBEljVUFwl6hCN%2FVnEE8eX%2F2J4qasWSXZuoCNOADW7TCsMRhxr1wruuiPoX1Ibee1P4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492fc2d8215685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":120,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.853Z","timestamp":1694364799853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1cdf\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3455,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ffa5849037af7c5e6fc1971877859645","sha1":"deb7c1eca1d4ed43dfbf33442047136d5a5f41a9","sha256":"8fa669071ed5fb03e9954ba360885e7ba95fb77ae5448dfc313c3c01202b46aa","sha512":"0aa82ab0804da9c2cc5df51b5a46fecea2cad1fcdefac18130bb910c2ad4eb5ba68df54cc34f7a8b893d01e0b256839d657aef8f8318e32433c0929d1a8dfec1","ssdeep":"192:ZqaMynq1A7BP8HdC6ibNlko/io/pbhZE2o:vFqOlgdC6ilxG2o","tlshash":"66f1247bb912207596177faa07ee811a3576314001a7ea6b3d0cc45b1b58b70a2f6ffc","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-28T03:31:18.073783Z","times_seen":2693,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.163Z","timestamp":1694364800163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-ce4b\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7641,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"ed12cc46f06e67ca636a1ad8a717a7fd","sha1":"570b3588ff8e186929233b93a6ecb0d7a76adbcb","sha256":"aed2be655d20468968674662b26c808a995b7288e82168ada025531738e766ba","sha512":"bc83d976ebcf0f5cfa86d51791cd82773e65ae7b065c948a0689e0fe58e216d6ef119bd3cdc83f1fff8c03504cbb8d84df68c8667dce1efff555d24221790b2a","ssdeep":"768:zdyu2R25Azpk2nv78KKK4+tF/W0LcIwhf9TY5a/AK6zOZiAuuuU+xvNmrDJ4jQg8:B2R2yU+gJfzrDJgJ1E","tlshash":"bf33e868dd559c86b343ba5873b25fe06f2902669e07856cf073396cc38d9ac2d723d2","first_seen":"2023-04-05T23:50:12Z","last_seen":"2025-03-02T00:32:27.073898Z","times_seen":383,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/bUczVnEMJVA7Tgx6UXAEHysOc0MrYgEQFQAqST0XCX8BIRAUKR01HQIyVzADAilHeB8IMxZkNwEddQA9CS1+Hj4EEmISMyx/f2YCJhJ0Lgs8BlcVIRcgaQ4jPyh6BDMJBGQTMiB3fhg5BChEAzQkL34EOCIRexsfK3YDEhAqd2cOIAkoVjozPgZ3MkM8L2YEPyUeUQ4zWX95LgE+FmQ1Pzw/AgMSJSt0EQkVLFY6PCwNXRREPysLGD4Xc3wQHTcrfmZFKwgBGFRfAWYhMAAkezo2PBV5IRQpJHAANhUrYT4BLx0AJSM7IFBzQy8NdRszJCpXYSMaCWYMOUAzexAdNyt/BEgvBmcbGikvaQE0Xjd7FxodK1EHPCIRYnAbHihdJkwHIV07RSQCQz86DAFQ","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.475Z","timestamp":1694364800475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /bUczVnEMJVA7Tgx6UXAEHysOc0MrYgEQFQAqST0XCX8BIRAUKR01HQIyVzADAilHeB8IMxZkNwEddQA9CS1+Hj4EEmISMyx/f2YCJhJ0Lgs8BlcVIRcgaQ4jPyh6BDMJBGQTMiB3fhg5BChEAzQkL34EOCIRexsfK3YDEhAqd2cOIAkoVjozPgZ3MkM8L2YEPyUeUQ4zWX95LgE+FmQ1Pzw/AgMSJSt0EQkVLFY6PCwNXRREPysLGD4Xc3wQHTcrfmZFKwgBGFRfAWYhMAAkezo2PBV5IRQpJHAANhUrYT4BLx0AJSM7IFBzQy8NdRszJCpXYSMaCWYMOUAzexAdNyt/BEgvBmcbGikvaQE0Xjd7FxodK1EHPCIRYnAbHihdJkwHIV07RSQCQz86DAFQ HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1159\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: ffpjK_kX7e1GU2Z0BVXQ69rNO9s4N2RCfLrspNl7gnpanEaZrhjq5A==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1159,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3001), with no line terminators","md5":"e2ac28e1acdc2ba8d51284cb435af11c","sha1":"951078f6a601f7b8b36fe1c781804468240901d5","sha256":"ce2b9a4160180d24026a5550163f164bbaf0d3aa386cbf98b2a9b17869cf1d2a","sha512":"673820aa84144b9bd28c1394e56dd731026621c4107ed0c12021f3bd706071f707bf0ef4806325724e0d4d6f7d0df0a9dac286d04444b13da57ee53e05de17fe","ssdeep":"","tlshash":"5c51e08d34f3a082c2f26064057bb59afa389a91834cda18863c96bcbc715e96357f4c","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/RE9sR0IlLQ8qfSVyDmE3NiNRYnACal4BJikiFiwkIHdeMCM9IUIkLis6CCEwKyEYaSwhO0l1BDQBFg0xIBpZEhoVBjgkFwotLwIqcQ49CSYQFwsVFQZ3DQ4HJx8nL3d2LVwOGBQOLh4XPncVCQACCCovBD4NFBYDAgwuFgZ0ID0OBBUfNBEPMhpdBRAVGAQDEyMCCSRyFhgtBhd9Fzp3FwY2CxUQM34lDnMsBi4VKS0ZBCMnCXwfHQMvIyQhKn0ENBIQNg0kBQgWfFklFTMGLQkqDQ40BnN2Djt2IxUYHwIhASMkISkSCj8SGxQNCw0UE3xYIgR1YlkBCRIFPgU6ND0uHxAhHTR/CgUjXQEkPAYtHwAJIT4RIQ8IBh4RBQwcAiQzFg8fBAl4LyAPYiUfKCw0ciosehw/GQ4MKy4/ADg","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.661611269Z","timestamp":1694364800661,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /RE9sR0IlLQ8qfSVyDmE3NiNRYnACal4BJikiFiwkIHdeMCM9IUIkLis6CCEwKyEYaSwhO0l1BDQBFg0xIBpZEhoVBjgkFwotLwIqcQ49CSYQFwsVFQZ3DQ4HJx8nL3d2LVwOGBQOLh4XPncVCQACCCovBD4NFBYDAgwuFgZ0ID0OBBUfNBEPMhpdBRAVGAQDEyMCCSRyFhgtBhd9Fzp3FwY2CxUQM34lDnMsBi4VKS0ZBCMnCXwfHQMvIyQhKn0ENBIQNg0kBQgWfFklFTMGLQkqDQ40BnN2Djt2IxUYHwIhASMkISkSCj8SGxQNCw0UE3xYIgR1YlkBCRIFPgU6ND0uHxAhHTR/CgUjXQEkPAYtHwAJIT4RIQ8IBh4RBQwcAiQzFg8fBAl4LyAPYiUfKCw0ciosehw/GQ4MKy4/ADg HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1177\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: PhbH8jrrWS2bJiAIiGRTl58h4stJrve9jeROdzOQ6AwSRiFEiBV4CA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1177,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3022), with no line terminators","md5":"7cefbae76e3f926f35332465fef9d71f","sha1":"7f04412cee0da6ddd31d64a3d175f5c694c39154","sha256":"e6be7e5f083396af215abecd78cbd94d7246449e44b29b29a1a9cc0ef9a069de","sha512":"454f04af2e6de90c5ca94252566be3c9327fc212f9f9c73879df2c4fb9a56ed275feaadcc30c2596c0b5ab1d4c13af3799f0f7358385e42246c660a428964e3d","ssdeep":"","tlshash":"6f51118d34f360c282b27064443bb59afa285ea1934cdb14467d96bcbc756eda317f4c","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/M2I2RHhSAFUpR1JfVGINQQ4LYUp1RwQCHF4PTC8eV1oEMxlKDBgnFFwXUiIKXAxCahZWFhN2PlgtYS8AUFJGJTpfWmAgLQMjYBFNSiZafDtiDH8iOQMrVQ49XzdXMwtqNncBP3Ixbw85AhVUADkGMmQVE0YgcC8gextCHDxUGmAISVApcgEyQDV3dSxnDAIiMGYnVQ0pYgNgFkAFMVEKHXAYXiIsAzNlIEliJWU8F140ZyMtYjNBCSpEJGEhOV8gZREyBCpwNAJlDFEOOmUFUhRIdS93dDVKI2B9DWE6AicvXSxhITlYAGR1IgYHcCM6YA9nDilxT2QGHV9WexEQVA5+AgwAM24rMWQzcAcdVAp7BUh+EWMGDGYkZRI6ZyN7dR1ECm8MSH0RYgIpckRcNxddEgseAGEXXnMKX1FcKRB1VQ","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.66868583Z","timestamp":1694364800668,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /M2I2RHhSAFUpR1JfVGINQQ4LYUp1RwQCHF4PTC8eV1oEMxlKDBgnFFwXUiIKXAxCahZWFhN2PlgtYS8AUFJGJTpfWmAgLQMjYBFNSiZafDtiDH8iOQMrVQ49XzdXMwtqNncBP3Ixbw85AhVUADkGMmQVE0YgcC8gextCHDxUGmAISVApcgEyQDV3dSxnDAIiMGYnVQ0pYgNgFkAFMVEKHXAYXiIsAzNlIEliJWU8F140ZyMtYjNBCSpEJGEhOV8gZREyBCpwNAJlDFEOOmUFUhRIdS93dDVKI2B9DWE6AicvXSxhITlYAGR1IgYHcCM6YA9nDilxT2QGHV9WexEQVA5+AgwAM24rMWQzcAcdVAp7BUh+EWMGDGYkZRI6ZyN7dR1ECm8MSH0RYgIpckRcNxddEgseAGEXXnMKX1FcKRB1VQ HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1176\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: til1yoQGfAZ3FumFRV5CrhSdn8xFPuLMadc4sPaGwuehd0r_cZiv2Q==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1176,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3024), with no line terminators","md5":"d02570f8e4818ffd09d63882ced2a761","sha1":"a7d4f0b8bb0b6787e232f5e1da754ca0ab6ee1b5","sha256":"26a1496e52a47c10325c14df950c4ec63ec463f21426595057631f9784fdc25a","sha512":"0f4cb44956b084dbd4d19c3f371ac6d459030e6ba7c8bc1ce6d9765f269e325d57760364bc11ad009f19b9f1e7c9e77ba7be75aeebe283d8d9951813efdd83e1","ssdeep":"","tlshash":"1a51f18d34f3608282b66064447bb99afe384a91834cdb14873d96bcbc715ed6357f4c","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:31Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-validate.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.801Z","timestamp":1694364799801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-fea\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1885,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"9e083d9e4a3e014b760d70ad0f1e85cb","sha1":"dbc0b1b973f8f77b74baadc0a696e001234f8ac5","sha256":"217bffe44b964e10fe120949b9a143b665a8c03a57ab348713de7d8b2878345e","sha512":"df2c351d5c58319f68b1b276e6e87c0a1b166e01038187842e1bf670bc72a5c6b6ef3bbf4f92a6a6cbe473d7e26bb8888649d2e25e4bcde0f06ef7f0add78687","ssdeep":"48:mtMZNCDY/dvZ7k8hk9KCTU54t8wudDXTUwKlpPkALcrnk5KyR74BalGhy:yMUYDhaTU5OQPKl2AAr6plQy","tlshash":"e281388f761651b14e9327e99b9ca0456174f3196034d268bc0cd3d93b8b4b6a1d1bf8","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.874226Z","times_seen":2934,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/NVBocDFUMgsdDlRtClZERzxVVQNzdVo2VVg9EhtXUWhaB1BMPkYTXVolDBZDWj4cXl9QJE1Cd1Q1AhxBYxYpKmdSMxESRgABLCddWwQpQWhsFy4TZE0/XyBWWhUsCFJiGwQ9SWU9MSN5TWAdPnRWGjwKVk0WLkVkVjo9JWZZAgQUWUE0K0JdXggtQGt6Khw4YlJgXDlwWQQqGUZcGCpIUnsHWChnXR1RIHNvCTw3aGIEEBRrVgciO3RnFgQpZw0bI0N3XAMEJXB6OT0zeXMkAzt0fAAmHXteCB8fQ1YHIjtiTWkQKUtGGT8nABBiKiNZdx0yHXBRCCldXhBiLiAADRwkQmtSAx8ca28HKjx5cyQDPll7HCw0eBBiLjFZTTItHXd5Ey0UWlE3UDVmdHYCA15bIFUWcnMAAihbAzg","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.483Z","timestamp":1694364800483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /NVBocDFUMgsdDlRtClZERzxVVQNzdVo2VVg9EhtXUWhaB1BMPkYTXVolDBZDWj4cXl9QJE1Cd1Q1AhxBYxYpKmdSMxESRgABLCddWwQpQWhsFy4TZE0/XyBWWhUsCFJiGwQ9SWU9MSN5TWAdPnRWGjwKVk0WLkVkVjo9JWZZAgQUWUE0K0JdXggtQGt6Khw4YlJgXDlwWQQqGUZcGCpIUnsHWChnXR1RIHNvCTw3aGIEEBRrVgciO3RnFgQpZw0bI0N3XAMEJXB6OT0zeXMkAzt0fAAmHXteCB8fQ1YHIjtiTWkQKUtGGT8nABBiKiNZdx0yHXBRCCldXhBiLiAADRwkQmtSAx8ca28HKjx5cyQDPll7HCw0eBBiLjFZTTItHXd5Ey0UWlE3UDVmdHYCA15bIFUWcnMAAihbAzg HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1168\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: BkvRUSiEYp2ZB5Ktmyd4mAMxN6L4ZDDCgEDFCC1IoLogL-ptAqgeMg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1168,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3013), with no line terminators","md5":"de146502e66dd46b5fe0984d5e0d9f1c","sha1":"7b99135487388e77112008a9398a6137a92fd4b0","sha256":"ff14b068d0a84b96f0566a0136cf9d4267810b90c047c8fc8881c69d618756a1","sha512":"30027ca520aa35c767761e4580b7236bb345f7a9a63ecafeaf2a2005937aa28f4d12a8848f62b242a9b847e2fe9cc747a84a34a0a49e0e7379def9cf5d01de54","ssdeep":"","tlshash":"8e51148d34f360c282b2a064043bb996fa388a94974ccf14863d96bcbc715ed6317f4c","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/gauge.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.882235305Z","timestamp":1694364800882,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-45b8\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":5397,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (1259)","md5":"aafe893df6f86140460a76d58dcecfe2","sha1":"fe1a74890dc8f040f5f681041663b96d983163f6","sha256":"2d9574ce1b6890bd6ccf1ef3d04fe1328f35c5bbced7b6b331459119ef4fe480","sha512":"0af0c5d095719622b6555f20180eea104c913dc391440da688fbe90e15ef95fc344e96c6026a101cc9843f67b38b028bb0dcfc3daa0d7ece328e795ca67e04df","ssdeep":"384:2YOQ4fji+TgW3nFcnwNUsLyrqK9dVSK9fa/cZ+O45wIh1CX4:2YR+EKvYJ9Z+twIh1CX4","tlshash":"f182a38a726b1629dbc796ea101f035d933bf669044951acb570d2fb187ee01823fbf4","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-04T01:05:04.172186Z","times_seen":2708,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.sectigo.com/","fqdn":"ocsp.sectigo.com","domain":"sectigo.com","tld":"com"},"ip":{"addr":"104.18.15.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.901015375Z","timestamp":1694364800901,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.sectigo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 10 Sep 2023 16:53:20 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 282\r\nConnection: keep-alive\r\nLast-Modified: Thu, 07 Sep 2023 05:05:11 GMT\r\nExpires: Thu, 14 Sep 2023 05:05:10 GMT\r\nEtag: \"216e90b7bd10ee235fab0ed743d48549689256f4\"\r\nCache-Control: max-age=303656,s-maxage=1800,public,no-transform,must-revalidate\r\nX-CCACDN-Proxy-ID: mcdpinlb6\r\nX-Frame-Options: SAMEORIGIN\r\nCF-Cache-Status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 80492fc4fad85694-OSL\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":282,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"4b48fffb2959995d503def0dd5940ec2","sha1":"216e90b7bd10ee235fab0ed743d48549689256f4","sha256":"001deca3c41f73da16cbb12ac7c885cb32140258852edf9534201de1182ebd5b","sha512":"58a0c58d8920e3c1a4de81c64d6fca2e7464b7a2ddfe07cd760cee5dae170557645cd8d13473ec1628bf95523e10d4b7009bb0728785d7b6588c0f7dac1edc8b","ssdeep":"","tlshash":"94d02bf1d4b310510c05be314df4f1b4781b489f1486526af47d2db32149e15859d779","first_seen":"2023-09-07T08:47:15Z","last_seen":"2023-09-10T18:53:32Z","times_seen":38,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-ui.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:20.942798301Z","timestamp":1694364800942,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-61ef\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":85503,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6d74ec0b03e02825fef8093d64629489","sha1":"de746f1c7aeb0927541e1d55bdea4672bb47aa73","sha256":"5d4a5378ed9f8bf68dbfb6246761e6d44e2b11fa626d8b4f8d1d6a779f037cd2","sha512":"a61efb4485d6107a74edf5dd6f3cf66d3e7cdb2c7469a3e5fddb3a1005133fbe7b2d4cbc15eabf7cd10e25bf9a344287530701d712bafccbdbade6d114b2ae42","ssdeep":"192:jherScJi1x5JyGKvJKmaAiWCfK4hsaMCSC/N2aoItnEiu7x8MKWpKuTKErCmE+N9:Naqb2aLhsapa5iTDwwYwpGJ","tlshash":"02b2ff0d7aa7a114826770bedbaf540a3225e42f190acd193c5c53c4df9493ca2f6bf9","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.811008Z","times_seen":2726,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.019904084Z","timestamp":1694364801019,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nContent-Type: text/plain\r\nContent-Length: 320\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 10 Sep 2023 16:53:20 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://megaup.net\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2264fdf480e6dd23.507997342240419835%22%3B%7D; expires=Tue, 09-Sep-2025 16:53:20 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nAccept-CH: \r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":801,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON data\\012- , ASCII text, with very long lines (1118), with no line terminators","md5":"f111447d9f72678a578f897343eb4535","sha1":"35fbdfcbfad0aad98f1fc2333a43b2c151f66db8","sha256":"9a3d0322b30463066435d61c5ce096835af4d8fb73b11f4c257922e60875e720","sha512":"df21261fccc8ae314dbb0bc3e99254b1dc8f6b360e492854a8acb36a4a0ee6a42b217045d248f3fdeed3f645323d9f41ab3711e0550b380e27463bc3186642ff","ssdeep":"","tlshash":"282193b47b90d43c778442ca199c28bc6d15799b6bce990301ecf83191fd368190631f","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.077889762Z","timestamp":1694364801077,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dmmzkfd82wayn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 73\r\ndate: Sun, 10 Sep 2023 16:47:20 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: YzQ17orXAIFZCFystORD7xmVJ1oVuRBb_ERWzQYq7edmNGI5gJTYwA==\r\nage: 361\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":73,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"57143c38ff308b700bda81d33fffdc1c","sha1":"7a4357101b77e5e514797ea16df9f31d0c1711df","sha256":"0f13250dac3eba96683a13d9c0c14c812448cc2f499a6ad6637a17adf094884d","sha512":"e56a943392cc582280091998b2b17c234ed1f5211742ac0bf7527e10611334a1b65ab69c121b7cea349e8b4f147cb8ae6aeaf6c3b8ab702baa8a53257924a41c","ssdeep":"","tlshash":"ab900254a7941457d4642115524a3152752441488911a1d8124555782109a1319402a5","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-06T11:28:49.297701Z","times_seen":169,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theharityhild.buzz/djlsTzcNGx84aANLAG0NVFEYO0cFA0NgWhNeDTpHWFcJOxgFTkIlRFQVTjxaEBtWfhtUSgE5FUwbWGEEVBVOO1YRZgUrFUwbVHwFQApfbRtUShktaB9dXm0NVF9UfAQVCVgtGkBcXC0aQl0OfxpPDVR4GhAPCSpSFVwPLFQVXE4y","fqdn":"theharityhild.buzz","domain":"theharityhild.buzz","tld":"buzz"},"ip":{"addr":"34.195.224.242","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.508Z","timestamp":1694364800508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"theharityhild.buzz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Aug 2023 05:42:34 GMT","end":"Thu, 16 Nov 2023 05:42:33 GMT"},"fingerprint":{"sha1":"7D:00:38:EE:5B:C3:39:01:54:E3:13:F3:81:30:B0:42:58:39:7F:4E","sha256":"E2:09:FB:2A:3F:B5:67:F2:7D:19:31:90:14:68:B1:92:22:C0:55:2F:F1:BF:FF:6B:E8:FB:88:FC:5B:9B:11:9B"}}},"request":{"raw":"GET /djlsTzcNGx84aANLAG0NVFEYO0cFA0NgWhNeDTpHWFcJOxgFTkIlRFQVTjxaEBtWfhtUSgE5FUwbWGEEVBVOO1YRZgUrFUwbVHwFQApfbRtUShktaB9dXm0NVF9UfAQVCVgtGkBcXC0aQl0OfxpPDVR4GhAPCSpSFVwPLFQVXE4y HTTP/1.1\r\nHost: theharityhild.buzz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\nset-cookie: 80a887206db39ba389948069e9647ea3=1; Max-Age=604800\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: X-Requested-With,content-type\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":null,"data":{"size":951,"size_decoded":0,"mime_type":"text/plain","magic":"PNG image data, 114 x 114, 8-bit colormap, non-interlaced\\012- data","md5":"76852bc6b2c028db97322a74e85bd020","sha1":"ed52fb4de0d51f93277bbaae42fa80ba5f92c31e","sha256":"8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884","sha512":"6c75f46be72c52a9e4eb3998ff3e93df48db13f2dff3c8dbfded4d86fbc5efdbe06ed023528202f7c93a9f8a5fdd918df0670f79634777ef2542ff6df04d5502","ssdeep":"","tlshash":"fa119496663a5c92c90ba7fec1e3e23c18a43f6a02ac04032c814a8f252405dc2c2897","first_seen":"2023-04-06T19:03:00Z","last_seen":"2025-04-01T17:36:27.421256Z","times_seen":2480,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":386,"dns":29,"connect":106,"send":0,"wait":102,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/gUGtuNm4zBABQUSQCCgtWYl5XB192AR1ZACBWGE8pG1MoWl8oLioQGioPUwZIPAoAUVN2DgBVU2FND1IMbV9IQh4/AFNDADQOCF8ANQ9IQw9tBgFMBzwHDxNcFl5ABktiW0ZOX2FOXXRLYlsCXwAlE0sEXihTWGlYZE5ddEtiWxxAS2MqXwZXfltHE1xgDA-tVBT9OXHBcYFpeBl9gWksEXjYCHFMIPxNLBChhWl8YXnYeUwc","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aticalfelixstownrus.info/SVp2TzUoOBUiCihnFGlAOzZLagcPf0QJUSQ3DCRTLWJEOFQwNFgsWSYvEilHJjQCYVssLlN9cy4PMTtABzdCNXcIGCcaZhgZNShBHgMaem0La099dBtrLA52Cw0xCg05HUcCWh42TiB5IDUnCFwmCiM4bwAKNyB0HAw4fXEuGCAaBw8UMn58BDggdnwYMkJqBw8bMAFxCB4nAHYPYjcBZHATJzgMPRgRCXgLIAEHcTEUFQlZfBs0JEEgDUYVehFoMABtEQg6Flk6GS44dCUfRjxwETMeG2IONi8VcHw+EgpBIA0ON3QaaDs+bT4ALilZPRIzfk0uHjdiQR8YInZ6ERI0LGwPKhMNWXA9ISRGDAIcFnYBHDsGZTEUOg12ITIhIw0QAhgWUBwtFWlfOjUYPwg/IzEEDQ82RzdwDQ","date":"2023-09-10T16:53:20.971Z","timestamp":1694364800971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /gUGtuNm4zBABQUSQCCgtWYl5XB192AR1ZACBWGE8pG1MoWl8oLioQGioPUwZIPAoAUVN2DgBVU2FND1IMbV9IQh4/AFNDADQOCF8ANQ9IQw9tBgFMBzwHDxNcFl5ABktiW0ZOX2FOXXRLYlsCXwAlE0sEXihTWGlYZE5ddEtiWxxAS2MqXwZXfltHE1xgDA-tVBT9OXHBcYFpeBl9gWksEXjYCHFMIPxNLBChhWl8YXnYeUwc HTTP/1.1\r\nHost: dmmzkfd82wayn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aticalfelixstownrus.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 373\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: HDXlgcezRXjYHYrDAp2iB5uuY1-pE6sTDLqZipHxsa1MY0FSmvFhUg==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":373,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (487), with no line terminators","md5":"870292601c93e937bec580c73fe25647","sha1":"c0f52cdde6146d658f2543f6241c829b9d8d9879","sha256":"432705a9fd18b67ef359e26d196289e398e761474a9b0c5118efe7d3dd098e99","sha512":"ef09da9ff6b85a3e78edb7a90bb566b303c3fc2984aa4aef9d0a8e8ea00fae4880ba46210c3a32802b811cdbedb6e203a6d0cfb2ec6e3cf3f9d59541cfa9525a","ssdeep":"","tlshash":"b4f095e12614d8d9dc26eaa67158f4d7ba9e62cd15405f04511a09d98f1990fd445510","first_seen":"2023-09-10T18:53:31Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.182613678Z","timestamp":1694364801182,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sun, 10 Sep 2023 16:53:21 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"43d1b0c36a3cd563b001b3f3be1823ba","sha1":"08772d005eba2778e63f84b02ade416dfbd81eaa","sha256":"be2785faa89e68455b5f2786bbce579a6768bffb835e1cb73a40aef764932bd6","sha512":"7b946bf753bae3da111913e00bf542a3def422a90639f2426ae3aad863b8e14bfd92ca2cc5bebf0ff2c19f0199fac342423755de21559b971ee12270ad136931","ssdeep":"","tlshash":"b2f054619cf52620dc837de43f621de4f54133190e9c06c4766d90864313197b6a601d","first_seen":"2023-09-09T19:31:17Z","last_seen":"2023-09-10T23:52:58Z","times_seen":439,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/utx?cb=Vkk1w9LZiNXu\u0026top=megaup.net\u0026tid=761186","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.126Z","timestamp":1694364801126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /utx?cb=Vkk1w9LZiNXu\u0026top=megaup.net\u0026tid=761186 HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Sun, 10 Sep 2023 16:54:21 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: yzg9Vt5RvNROxElDEHFU8SIh9M-lLnclueYM5fATeUxdI57Nm1Z-lA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/lZFVLdjMHOiUQDBA8L0sKUGxzQAdCPzgZXRRoIRBdCWECM0MNHiowUEIhMRIOVHMnF10DaG0TXQdoelBSADd2QhURNHYbXB48JxpSQWcNQx1UcHlGGxxkelMAJnB5Rl8NOz4OFlZlM04FO2N/UwAmcHlGQRJweDcCVGxlRhpBZ3sRVgc+JFMBImd7RwNUZH-tHFlZlLR9BATMkDhZWE3pHAkplbQMOVQ","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.203399991Z","timestamp":1694364801203,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /lZFVLdjMHOiUQDBA8L0sKUGxzQAdCPzgZXRRoIRBdCWECM0MNHiowUEIhMRIOVHMnF10DaG0TXQdoelBSADd2QhURNHYbXB48JxpSQWcNQx1UcHlGGxxkelMAJnB5Rl8NOz4OFlZlM04FO2N/UwAmcHlGQRJweDcCVGxlRhpBZ3sRVgc+JFMBImd7RwNUZH-tHFlZlLR9BATMkDhZWE3pHAkplbQMOVQ HTTP/1.1\r\nHost: dmmzkfd82wayn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aticalfelixstownrus.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 199\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: 3JKXWMjOy9l6u_a28Co6yhxgT7yQgLEl0hvRrnLiDLuBGGqkkcMlrA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":199,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"33eff158e3a5c6d07f9d67a63a534a3d","sha1":"ddbf5334b6d77bfa7ee9b45ba45fde3d0d5a23ca","sha256":"e17a17b438394d292223e4cb5d7b85eb7b716172b1aa0ba4ecbea6056867fad4","sha512":"d3581efd63afd977e5b8be4d34802a7f16aaa7cfed57a02c45de6b49095ed53d6064f2593a7274e1f007e9228b8529eb42b767cd6619b2e3caa9f8d9f99b3d39","ssdeep":"","tlshash":"bbd0236b785013511cfd1401b524b99703fed7cd0d8955f57f935dd15944d4ddc05709","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/utx?cb=CtZsZj38vBy8\u0026top=megaup.net\u0026tid=825911","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.133Z","timestamp":1694364801133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /utx?cb=CtZsZj38vBy8\u0026top=megaup.net\u0026tid=825911 HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Sun, 10 Sep 2023 16:54:21 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: pqaqdiEVjiO17PQKuJkwu_Vx-Icpo_bPLntMnu_zWe7M35S2Fcuf6A==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/kOWkxc0paBl8VdU0AVU5yDl8CQnIfA0IcJElUawsYTAEGASYKA1wbDA5PRQkuBFkXHytXDgxVL1cKDEJsWA1TTn4fHUEcIQQaVR86SgNeCzhfT0QSd1QGSxomVQgUQQwMRwFWeAlBSUJ7HFpzVngJBVgdP0FMA0MyAV9uRX4cWnNWeAkbR1Z5eFgBSmQJQB-RBel4MUhglHFt3QXoIWQFCeghMA0MsUBtUFSVBTAM1ewhYH0NsTFQA","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.215681052Z","timestamp":1694364801215,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /kOWkxc0paBl8VdU0AVU5yDl8CQnIfA0IcJElUawsYTAEGASYKA1wbDA5PRQkuBFkXHytXDgxVL1cKDEJsWA1TTn4fHUEcIQQaVR86SgNeCzhfT0QSd1QGSxomVQgUQQwMRwFWeAlBSUJ7HFpzVngJBVgdP0FMA0MyAV9uRX4cWnNWeAkbR1Z5eFgBSmQJQB-RBel4MUhglHFt3QXoIWQFCeghMA0MsUBtUFSVBTAM1ewhYH0NsTFQA HTTP/1.1\r\nHost: dmmzkfd82wayn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aticalfelixstownrus.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 460\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: Hh37TptqJNewivlGStOOSDIEJAUJ9Ecaoj7U4PVTtQzZvLICjLvznQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":460,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (606), with no line terminators","md5":"179757f0e1b70aef94afd75bee95ecdb","sha1":"0733ed8fee6870e300cf01d32766f6ed56b3f710","sha256":"65ac729417f66c7133016fbf21aa8b8382b5fb803acbf5b25bad9edb9df018c6","sha512":"9313f3c3752ab7b89fd4f4303eca5ab4b51e376db6347d1383752d31adb3a184e02db61f7098c22db05317631c68195e8f4eb6ce682ada3ad3b4b0f19fb0cd80","ssdeep":"","tlshash":"92f002a22955d8500c2a363e88d6e870db6621de46557f3018512f96ad1d3bfdb70088","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/aejlpVFAZVgcybw5QDWlnTA1YYGFcUxo7PgoEDxcWKlMxPmYSHx0uNEcJTzgxFF5UcjUUWlRldhtdC2lkXE0ZOztHSg04IAlTBiwiHB8cNW0XVhM9PBZYTGYWTxdZcWJKERFlYV8KK3FiSlUAOiUCHFtkKEIPNmJkXworcWJKSx9xYzsIWW1+ShBMZmAdXA-o/P18LL2ZgSwlZZWBLHFtkNhNLDDI/AhxbEmFLCEdkdg8EWA","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.223680352Z","timestamp":1694364801223,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /aejlpVFAZVgcybw5QDWlnTA1YYGFcUxo7PgoEDxcWKlMxPmYSHx0uNEcJTzgxFF5UcjUUWlRldhtdC2lkXE0ZOztHSg04IAlTBiwiHB8cNW0XVhM9PBZYTGYWTxdZcWJKERFlYV8KK3FiSlUAOiUCHFtkKEIPNmJkXworcWJKSx9xYzsIWW1+ShBMZmAdXA-o/P18LL2ZgSwlZZWBLHFtkNhNLDDI/AhxbEmFLCEdkdg8EWA HTTP/1.1\r\nHost: dmmzkfd82wayn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aticalfelixstownrus.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 619\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: gGA-Y_ZkqJ6N6Z46mGyOtbrpJ_hRvr83bYMswmun5uAZZ1MKMelNqw==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":619,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (853), with no line terminators","md5":"1006f3f4725484e8ef5b9dd392542656","sha1":"7a3abc9be23ca897a3ffb041d15435a53d81ddee","sha256":"06efedb644df2db3ec7aea665e2dcb52278d99071cfabd5a34cb1451797ac69e","sha512":"fa7bf6b011e6d20382a466998e5bd33de96e980cdb6dd6706416f0353bce4dbed12104946dce910d2757d536faeb73344f79d6e9e32f2b75e9ae79bfc7f22ad1","ssdeep":"","tlshash":"0401162915444a6218bff03227a0f09d43c8a0af69a5176d59521fd3e60df5f4ea4719","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.224441095Z","timestamp":1694364801224,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sun, 10 Sep 2023 16:53:21 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"43d1b0c36a3cd563b001b3f3be1823ba","sha1":"08772d005eba2778e63f84b02ade416dfbd81eaa","sha256":"be2785faa89e68455b5f2786bbce579a6768bffb835e1cb73a40aef764932bd6","sha512":"7b946bf753bae3da111913e00bf542a3def422a90639f2426ae3aad863b8e14bfd92ca2cc5bebf0ff2c19f0199fac342423755de21559b971ee12270ad136931","ssdeep":"","tlshash":"b2f054619cf52620dc837de43f621de4f54133190e9c06c4766d90864313197b6a601d","first_seen":"2023-09-09T19:31:17Z","last_seen":"2023-09-10T23:52:58Z","times_seen":439,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.254785374Z","timestamp":1694364801254,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-303b2\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":39275,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (464), with CRLF line terminators","md5":"35045d45f7d1dde1f90457c5d73700c5","sha1":"a7fcee0ab1da615e828e51967c474ae91d768569","sha256":"d72616e59f2ba832c54a0e734cdf0a79cb8730f81a07b5de43864c15a240e221","sha512":"6845d70397a4fb6d9a75c0d6f066270b91566f134cfdf2fcd44d1c9a598592a00581f1a8dccbc7147c53aa7f5da397b8a16d716ae4e88e805fecdddd52b46d8c","ssdeep":"3072:7hXjjqv/V7QCpOgV7TOwSV7T/reUo+oPXaGZ6ZgsvOqnG3csrj/SZA4:xjjqnV7ggV7DSV7/e0nG3cs3aH","tlshash":"dc14d6c8774f2c2f8aa7330b697d18ccd03cd576811251b6b6e6f46967cc448a3a6adc","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-01T20:07:09.065586Z","times_seen":2662,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmmzkfd82wayn.cloudfront.net/pNzJsdU5UXQITcUNbCEh5AQNdTXgRWB8aIEcPKh52b0IZPABYUz8yNBFGFhFzBxQAFCBQD0oQIFQPXVMvU1BRQWhDQgMec0RWAAU9XV0UBygRRw1II1hIBRkiVhdeM3sZAklHfh9KXURrBHBJR35bWwIANhIAXA12AW1aQWsEcElHfkVESUYPBgJVW34eF1-5FKVJRBxprBXReRX8HAl1FfxIAXBMnRVcKGjYSACpEfwYcXFM7CgM","fqdn":"dmmzkfd82wayn.cloudfront.net","domain":"dmmzkfd82wayn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"143.204.42.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.26868594Z","timestamp":1694364801268,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 08 Dec 2022 00:00:00 GMT","end":"Thu, 07 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"BA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB","sha256":"0E:61:DC:91:28:A6:D0:1C:35:83:E4:6C:B8:71:E9:59:0C:A7:63:6F:3B:39:4E:60:B9:10:FD:B2:49:E9:04:65"}}},"request":{"raw":"GET /pNzJsdU5UXQITcUNbCEh5AQNdTXgRWB8aIEcPKh52b0IZPABYUz8yNBFGFhFzBxQAFCBQD0oQIFQPXVMvU1BRQWhDQgMec0RWAAU9XV0UBygRRw1II1hIBRkiVhdeM3sZAklHfh9KXURrBHBJR35bWwIANhIAXA12AW1aQWsEcElHfkVESUYPBgJVW34eF1-5FKVJRBxprBXReRX8HAl1FfxIAXBMnRVcKGjYSACpEfwYcXFM7CgM HTTP/1.1\r\nHost: dmmzkfd82wayn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aticalfelixstownrus.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 608\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: dKTRp62hbUM5Tllq4c3NimTGHPw5YtYcFufQN56hHH41nN_ASpTNJA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":608,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (861), with no line terminators","md5":"41e99da66522b2767fb22fadbeed96c3","sha1":"f9195a0af55e18b9efaadcde59bb2dcaeec3a0d1","sha256":"fffdaff97bf485a66e278a3845c10bbb56722578064850b217cf5ad23dbaab00","sha512":"20b1258dcf9c9167b48071dd46e8a258ad6e04d2a37575baa682eb0bda8158e742b5c4aa36af6c30bb48cc562c6233c5e1ce77f0b4bdb1a6fcca6333f7c08e91","ssdeep":"","tlshash":"881123d59a60085a5c97a27b23e4f4fd9cca71cb247223765a534363fb4e60ac2c6228","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pfpt5/0x4AAAAAAADnOjc0PNeA8qVm/light/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.29169238Z","timestamp":1694364801291,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pfpt5/0x4AAAAAAADnOjc0PNeA8qVm/light/normal HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndocument-policy: js-profiling\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 80492f8b6ce956ba-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":7300,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (10420)","md5":"5946946e2d021dd32e0b10d062c900c6","sha1":"f72660b45ffd829da0235a5269941d2a09da2d17","sha256":"bc866ce1728deaba7411d5238453682a750689cc3be6cb73d4a3be9350fabacc","sha512":"c3ed99fb50024a39430441c5f80f68c384c2d8966685ed4dc23f355e5dc5c315402fd4dac2e79bae92b8bcde43ae64a6e33a47a974818278808f001b8622ffb2","ssdeep":"384:QY21nb9ugAHLg6Okw+urm+AXApJnGxwXbzHuXmalWxRY5ptyQ:a4E3SdXHxwXHsmalWU","tlshash":"71b2092341e405b9b002c3a997aa7499b5320547af92b067f29d4af1dfd84ef1763bc8","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.052Z","timestamp":1694364801052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:23:05 GMT","end":"Mon, 06 Nov 2023 08:23:04 GMT"},"fingerprint":{"sha1":"75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D","sha256":"36:E2:44:19:D9:3E:F0:E9:93:5D:3F:17:21:9F:57:11:A5:68:F6:2D:C6:24:D2:68:12:21:E7:6F:0E:8F:84:75"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:2aqy7vml8-gwhX9wRsxlzNv8uYbBmQ:5oCfe9Oh4RXWdP7y; Expires=Tue, 09-Sep-2025 16:53:21 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AYZoVhfakTselycNvorB-JvS-TpGFekQHQXMhD2TQzycAS2EnzYWuPCxfiV8nH1xWphE1m5rEUO4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-5G0RKtLGf6oPP5EU4qgIMA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":196,"dns":0,"connect":18,"send":0,"wait":30,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/utx?cb=sbk6nV9t42j1\u0026top=megaup.net\u0026tid=876318","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.139Z","timestamp":1694364801139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /utx?cb=sbk6nV9t42j1\u0026top=megaup.net\u0026tid=876318 HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Sun, 10 Sep 2023 16:54:21 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: maWepUAsKIoAwBaDIfrnBbiQmoLfPcfhXcjUgrNsrTkdSUjIj0Iggw==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.338117383Z","timestamp":1694364801338,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sun, 10 Sep 2023 16:53:21 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"2493dac4863c9b8db5f23a37692ef71b","sha1":"cca29fa30ba8ee3a86a1ef6a7151244908dba399","sha256":"00b54431d117fc86713b52c9e0962a39b970d33e163f5551bc770ede78ab5efb","sha512":"f7553b2579e20fa8273d5f3c939a1fbae4d5ad9ec675fa604d6560e610058a755dd7978db963390acf90dcec9a24b375be2664048f3a7e21ec7a24764fbf0307","ssdeep":"","tlshash":"46f0d45655fc5173987e0d5c03cea70cb8c2b0ad15348627347c43d482959f8a37972c","first_seen":"2023-09-09T19:16:56Z","last_seen":"2023-09-11T00:01:21Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/utx?cb=eW6ssCVAZhbl\u0026top=megaup.net\u0026tid=764141","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.339075834Z","timestamp":1694364801339,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /utx?cb=eW6ssCVAZhbl\u0026top=megaup.net\u0026tid=764141 HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Sun, 10 Sep 2023 16:54:21 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: USYBVzXisEDnbddWyYn440JhdyRRedrQQw_obo2Vqn8JD-NVvIBH_g==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.r2m02.amazontrust.com/","fqdn":"ocsp.r2m02.amazontrust.com","domain":"amazontrust.com","tld":"com"},"ip":{"addr":"143.204.48.16","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.353592306Z","timestamp":1694364801353,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.r2m02.amazontrust.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nContent-Length: 471\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=7200\r\nDate: Sun, 10 Sep 2023 16:53:21 GMT\r\nLast-Modified: Sun, 10 Sep 2023 16:42:41 GMT\r\nServer: ECAcc (amb/6B6A)\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-C1\r\nX-Amz-Cf-Id: I9MG1B30lppgihAfHFg4IpaetAtrVyLpoLV8gR-BEV8xQzMf47rRuA==\r\nAge: 640\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"6e223aabc160a63820353e496ed5a733","sha1":"1441411ed4d1d2ec3b0109f013d9b380ee0122be","sha256":"01fa3fd3e1eb03063f4ccc6a4203c7f1a458e2e056ab70d07185fdc7510cd960","sha512":"dfde387b2e6496b5f8566c596b3cf6abcd4591e476b4b9cce576a01d60aec3270b5f50bf10bb1c7b925b282686b0d7aeeb7cdb213fa9188ecda51644c5376a2b","ssdeep":"","tlshash":"b2f0dc116c23a80ca41eeee696b8e0293305e58808be68473c5a57a90140d778e4de22","first_seen":"2023-09-10T15:53:01Z","last_seen":"2023-09-11T04:26:07Z","times_seen":10,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parrecleftne.xyz/utx?tid=832633\u0026top=megaup.net\u0026cb=SwXtxeEp9B4v","fqdn":"parrecleftne.xyz","domain":"parrecleftne.xyz","tld":"xyz"},"ip":{"addr":"52.85.242.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.204Z","timestamp":1694364801204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parrecleftne.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 18 Dec 2022 00:00:00 GMT","end":"Tue, 16 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"36:D5:D9:43:13:F4:FE:83:A7:9F:01:89:96:60:5B:AD:CB:A5:27:B7","sha256":"E9:74:12:66:CE:37:DC:7B:5C:0D:46:48:BE:D4:FB:08:9E:6A:34:3F:2E:C0:E6:D0:6C:78:EF:E8:5A:FB:2F:34"}}},"request":{"raw":"GET /utx?tid=832633\u0026top=megaup.net\u0026cb=SwXtxeEp9B4v HTTP/1.1\r\nHost: parrecleftne.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: ut=x; Expires=Sun, 10 Sep 2023 16:54:21 GMT; Max-Age=60\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 844de3d616579278fb702fc6b9b5c9a2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN1-C1\r\nx-amz-cf-id: 0QICQY6l9Aq1i41qG5g7tnA0M23LiyUdniNmurDuF3tEGPJBWK-bdQ==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":175,"dns":21,"connect":9,"send":0,"wait":121,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"empafnyfiexpectt.info/cUtqUVJedAkibxQDJAkcHA06AGAwCT8EJjkSDQMEJXs4JxAnLEwlOxV2UmNnSHpbdyIYL1diYFc4HjAmBDhXY2JBfEw4PBckV2N0B3Zaf2tfeURkdAR2W3cmASoNbGNXOx4lPkx6XGhmQn1eaWJAeFto","fqdn":"empafnyfiexpectt.info","domain":"empafnyfiexpectt.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.524816503Z","timestamp":1694364801524,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"empafnyfiexpectt.info","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 06:52:14 GMT","end":"Sun, 03 Dec 2023 06:52:13 GMT"},"fingerprint":{"sha1":"0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B","sha256":"5F:9A:16:59:88:60:2D:52:9B:35:E6:62:13:A5:4B:F3:32:68:E5:50:28:88:C7:1B:B6:C6:AE:BB:07:D1:C6:93"}}},"request":{"raw":"POST /cUtqUVJedAkibxQDJAkcHA06AGAwCT8EJjkSDQMEJXs4JxAnLEwlOxV2UmNnSHpbdyIYL1diYFc4HjAmBDhXY2JBfEw4PBckV2N0B3Zaf2tfeURkdAR2W3cmASoNbGNXOx4lPkx6XGhmQn1eaWJAeFto HTTP/1.1\r\nHost: empafnyfiexpectt.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=eoJUwVB0PSE1ORMcUwoX84atCudXju7Qdh2ZUplt0PgVnLuKe2mF3aUrkTdUhGE7A5XVsnEit7FVLNS89wBp2eZl%2FPKCVJsiJQNVC6vKEpcOWY6I2aA00NPx8sa%2F%2FBt1hwfdRLlZIIw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492fc8883e56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AYZoVhcG7M6CMtunXm01Gjwf_9VOSqE-w00ddjMpaXvY9viY_0nZ9CZCL71gxR8qAbv_7My6JQOz","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.566194019Z","timestamp":1694364801566,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:23:05 GMT","end":"Mon, 06 Nov 2023 08:23:04 GMT"},"fingerprint":{"sha1":"75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D","sha256":"36:E2:44:19:D9:3E:F0:E9:93:5D:3F:17:21:9F:57:11:A5:68:F6:2D:C6:24:D2:68:12:21:E7:6F:0E:8F:84:75"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AYZoVhcG7M6CMtunXm01Gjwf_9VOSqE-w00ddjMpaXvY9viY_0nZ9CZCL71gxR8qAbv_7My6JQOz HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:QNI_KhcPvyyZiazUiocfvqcdHGAGjQ:9fEb6SXHX0-8573o;Path=/;Expires=Tue, 09-Sep-2025 16:53:21 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhc-YPVBCDtvKv1zU9Pfb1B7Gah04E-5ae4MxPG4BGnH31uvvjq_PErujchx6yHiBiCfQ2hDGQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1594875373%3A1694364801486790\u0026theme=glif\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: script-src 'nonce-cgeo8u777hN5ZmhkHY-ALQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 402\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":402,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (395)","md5":"82b1ac866a1d0608a130235b510c1bba","sha1":"1ee54e6648e7b127c75e6ce6826c426353f85154","sha256":"68c01d3416b57e14474a26c577202baec0b90bb44a2b7f01257e87906c07d1ae","sha512":"057125e12f145367cebb05ec7bdb6217cfbed16acb9c667b4592be6984576e7931c40cf0823c9bae2871f4fd7a7408b88656604acfbde0d971442962560b425d","ssdeep":"","tlshash":"fef0057e598906a9a5932cf6d01860cc453474683dd9eda9f4f6970440d4d37200a3f3","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AYZoVhfakTselycNvorB-JvS-TpGFekQHQXMhD2TQzycAS2EnzYWuPCxfiV8nH1xWphE1m5rEUO4","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.498Z","timestamp":1694364801498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E","sha256":"44:0C:58:51:4C:73:7C:67:DA:A2:72:29:81:68:CD:FC:51:B5:79:65:66:F0:55:FA:55:C4:45:30:BB:DD:09:82"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AYZoVhfakTselycNvorB-JvS-TpGFekQHQXMhD2TQzycAS2EnzYWuPCxfiV8nH1xWphE1m5rEUO4 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:Kox3R9OLNdfwTY0idkDUc2iuRCmolQ:Q9aYI7Ne6ck0VTA1;Path=/;Expires=Tue, 09-Sep-2025 16:53:21 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhfABEkCEn6LRjTP9henfLgprZX96ojAeXetk7LUWvu0RqDdIQPC_gL-SRrn_zzaOz4JyVvPfw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1527626943%3A1694364801499524\u0026theme=glif\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-bUlmVXNp1-YtsVG_ic9BiA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 407\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":407,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document, ASCII text, with very long lines (399)","md5":"ec786be4ab1858544b400484842f584b","sha1":"24e788ba8744c8d95e52bcf696090ed36913ab96","sha256":"5968cd97b155939d695436dc2940181b9e0f62353f8f8f5f367658f6f60577ea","sha512":"446fb84643e33eacbf0fa5c1373cc01a92897a366180a467f3f623a08b874a3e6f53d819e17c3279e74436a538c9ba1382ab6d46a569a0036ec49736650557fe","ssdeep":"","tlshash":"bff0c0aa584904de58a338f69418649c4c3874683de6a87cb1f7e30641a9c2751512f2","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.582Z","timestamp":1694364801582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95; _ga_Z9TE2LW16Q=GS1.1.1694364801.1.0.1694364801.0.0.0; _ga=GA1.1.1523129716.1694364801\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31568\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7b50\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31568,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31568, version 1.1\\012- data","md5":"e0c4ac0e73196bd0469c5c33304b7773","sha1":"bb071565f82907d117b0732dca8013409162c67d","sha256":"ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af","sha512":"850bd12cc28459f01f0d398edf8d58e834dd0ce890cf7bd9bd3c237f574847832c3b841f8bdbe063d302e95edf06d464a63dbc7f44c6312b165f858e8eacd984","ssdeep":"768:AbAx6BRjYvG7fvoufxOXPHxcBn+xVwcjhYMoK5r1M9Fq:Abs8R6G71xAP2Bn+nwcjaTirSFq","tlshash":"5ce2e1d85908d707c3567d385918eb9ca995fdc0cb126f9b52921258361cefc083a37e","first_seen":"2023-04-07T14:26:10Z","last_seen":"2026-04-25T06:01:44.297166Z","times_seen":2673,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/delivery/vortex/vortex-simple-1.0.0.js","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"205.185.208.20","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://a.adtng.com/get/10012456?time=1614803572912\u0026apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6WzjiqyyyqiuqzXibbi6i6zeibOWjXam50rv9.czijBuZznSuldK6V0rpXSuldK6au6mium2WVwfY-","date":"2023-09-10T16:53:21.549Z","timestamp":1694364801549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ang-content.com","organization":"MG Premium Ltd"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 25 Oct 2022 00:00:00 GMT","end":"Sat, 25 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"51:DB:5E:DC:4B:47:52:13:46:14:6B:21:A1:A9:FB:FD:A5:78:DC:A6","sha256":"87:31:B8:1F:E1:35:51:23:9B:99:26:B3:9D:53:54:50:A2:5A:26:AF:8B:AA:FA:1D:ED:84:D3:96:B9:41:5B:8F"}}},"request":{"raw":"GET /delivery/vortex/vortex-simple-1.0.0.js HTTP/1.1\r\nHost: hw-cdn2.ang-content.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 10 Sep 2023 16:53:21 GMT\r\nConnection: Keep-Alive\r\nETag: \"1541168231\"\r\nContent-Length: 5027\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 02 Nov 2018 14:17:11 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=10793923\r\nX-HW: 1694364801.dop213.sk1.t,1694364801.cds022.sk1.shn,1694364801.cds022.sk1.c\r\nAccess-Control-Allow-Origin: *\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5027,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5027), with no line terminators","md5":"5e5817bcf4c82c7c85d1d88636d221ce","sha1":"b5c32cc6c931c33c1297884016e13d3b9a5bf261","sha256":"6f0e50ac39121175ca0427c4e87cdfa2520b526c8497e23cffbca726eb6ca42c","sha512":"08176e8fd06443f72738a279e22a28b4fd340e22d1abbf9a04f131286598cf1be98a79cbe776b37380fa3d6d396e431e3d8ba38f0b73fb0f3261b8753dccf706","ssdeep":"96:gfMHxJ7yWjtnYajBoq972unh1CzeOQ0es7rh69C2b4GhO78mslpUsvc:Pj7yunVLZs7rK4PVujvc","tlshash":"2cb17812167264361ef82561815f3e2e169246614b8b6ca1c3c5fe4cfdf6e23144bef3","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-08T22:57:54.0595Z","times_seen":2374,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":67,"dns":2,"connect":7,"send":0,"wait":10,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hw-cdn2.adtng.com/delivery/intersection_observer/IntersectionObserver.js","fqdn":"hw-cdn2.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"209.197.3.25","port":0,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.647650534Z","timestamp":1694364801647,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /delivery/intersection_observer/IntersectionObserver.js HTTP/1.1\r\nHost: hw-cdn2.adtng.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 10 Sep 2023 16:53:21 GMT\r\nConnection: Keep-Alive\r\nETag: \"1649192094\"\r\nContent-Length: 16885\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 05 Apr 2022 20:54:54 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=10446142\r\nX-HW: 1694364801.dop230.sk1.t,1694364801.cds009.sk1.shn,1694364801.cds009.sk1.c\r\nAccess-Control-Allow-Origin: *\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":16885,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (16885), with no line terminators","md5":"48c80c7c28b5b00a8b4ff94a22b72fe3","sha1":"d57303c2ad2fd5cedc5cb20f264a6965a7819cee","sha256":"6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356","sha512":"c7381e462c72900fdbb82b5c365080efa009287273eb5109ef25c8d0a5df33dd07664fd1aed6eb0d132fa6a3cb6a3ff6b784bffeeca9a2313b1e6eb6e32ab658","ssdeep":"192:/u+H3An7ybVSpBjen6K1GegJjgF+TDg91wTr1PH3kV/LQB3OJIuq/Y4RBF4B3ve:/vAvUxEtkmZZY4RBF4hve","tlshash":"4572954c7250f0f743c39522413f120ff3369898b15a90687369d8fa6cb889e6267f79","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-05-08T22:57:54.071982Z","times_seen":2392,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.ang-content.com/a7/creatives/39/1187/805702/1030390/1030390_logo.png","fqdn":"hw-cdn2.ang-content.com","domain":"ang-content.com","tld":"com"},"ip":{"addr":"205.185.208.20","port":0,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.649570463Z","timestamp":1694364801649,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ang-content.com","organization":"MG Premium Ltd"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 25 Oct 2022 00:00:00 GMT","end":"Sat, 25 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"51:DB:5E:DC:4B:47:52:13:46:14:6B:21:A1:A9:FB:FD:A5:78:DC:A6","sha256":"87:31:B8:1F:E1:35:51:23:9B:99:26:B3:9D:53:54:50:A2:5A:26:AF:8B:AA:FA:1D:ED:84:D3:96:B9:41:5B:8F"}}},"request":{"raw":"GET /a7/creatives/39/1187/805702/1030390/1030390_logo.png HTTP/1.1\r\nHost: hw-cdn2.ang-content.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 10 Sep 2023 16:53:21 GMT\r\nConnection: Keep-Alive\r\nETag: \"1651515015\"\r\nContent-Length: 15603\r\nContent-Type: image/png\r\nLast-Modified: Mon, 02 May 2022 18:10:15 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=10522390\r\nX-HW: 1694364801.dop003.sk1.t,1694364801.cds237.sk1.shn,1694364801.cds237.sk1.c\r\nAccess-Control-Allow-Origin: *\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":15603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\\012- data","md5":"2aaacb14c0816c811151f7e5ad369e9f","sha1":"2b51b630dcbbdcd9cb0e9c298a5d4323de0f19f5","sha256":"c6f084bf2cbf871312c3c508455dfeff2bb11dc8909d98ab1a43897b16bedf4e","sha512":"45f30cf46bf21fe131b4a497d42ce6c21f967a74d1db6fa5da078a495d5f0de1962685e1a5bf96cbcfa252bc1786a0ea9371e677214d739acc4d4050c43d7026","ssdeep":"96:7SPkEWmYwzmSxNX7sc5Boa0a0a0a0a0a0a0a0T:7SPk6jmQga0a0a0a0a0a0a0a0T","tlshash":"4262a924a8f637dcd4c581721ca494025c3aa683e8c19d49b7de4c276fca7da6c0f07b","first_seen":"2023-04-23T00:15:16Z","last_seen":"2026-04-15T17:54:08.862268Z","times_seen":155,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.843Z","timestamp":1694364799843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-14cc1\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":449169,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23470)","md5":"04426bc66c09c8881b5b329310e903e9","sha1":"ff7f2f64ed5938023a91050e27f22f77becba78c","sha256":"ebf4e570b96d611fa540bb8745ba518a1005d50c4589a2c2cf3a60a97151a184","sha512":"9c87ee7ad099489801e0d6f8b241b7b6e77a7acd612cc5102716fe80e22a70f12181f927bd75c1bf145256de3eb56165878b28a2b45665231cb0b1848121275f","ssdeep":"1536:ItIeDCPRC0ebI00ZH1sWwTSww1fZbls9prC8BfTGnKDFtWm88:IWEIC9I0gH1s5TSww1pm9p2CtWY","tlshash":"778319ce7261702006e720e6553f0a47b237a999b40d456cf258c9ce3d7c98a62bff76","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-08T10:01:03.974344Z","times_seen":3055,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"172.64.96.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:21.735329197Z","timestamp":1694364801735,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=301846576051961@1@1694364801; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=n2wImdZE3vyrHHhlj%2FbylER%2BWTpWkAhnYXB0XoqU9LeuZZ5fTIkIEBq%2Fv1lBanVGv%2FDhCoI7cx2oLmyC%2FeSZeZE1n0TqppeYjmlhRAHgGNg2Z7h9whwDISi8ZsUiDsq6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492fc77f762508-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1686,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"34a7ef1204ac2b7845b2c277e1dc1b6c","sha1":"775a91d8f21679ffd1187560016b36d28de8adaa","sha256":"40ffe65cb6fc9582c104feaf5bf8a006565aa68bd4b6c2e78eb8a4f1d19f5bce","sha512":"ee626dfeecedb59ccaa13a58ba308e3f5dcdd6510187d68f5952ac9d25a269a4565572992403e23c53c1230846c678f65f8bdcff517c174daec994079175efdf","ssdeep":"","tlshash":"0d800030a2238a830a2a20230203882a80a80a2c3aa2200a02008008023883080020b8","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/floater?cs=ZE85QVdTfw52Z1d7DHNjU3gBcm4\u0026abt=0\u0026red=1\u0026sm=83\u0026k=download%20file%20ghosts%20goblins%20resurrection%20codex%20part1\u0026v=0.9.2.5\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=825911\u0026rxy=1280_1024\u0026fs=1\u0026t=600\u0026m=2\u0026ns=1\u0026ndp=1\u0026asi=1\u0026ref=https%3A%2F%2Fmegaup.net%2F2j8nt%3Fpt%3D7i%252B4AOG7smKKnT0%252Fjju7l%252FENgp06hpZI1S3CqqWXH40%253D\u0026osr=download.megaup.net\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026aa=oi1_\u0026_Z15P=1694364801320\u0026crc=1","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:22.044920154Z","timestamp":1694364802044,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /floater?cs=ZE85QVdTfw52Z1d7DHNjU3gBcm4\u0026abt=0\u0026red=1\u0026sm=83\u0026k=download%20file%20ghosts%20goblins%20resurrection%20codex%20part1\u0026v=0.9.2.5\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=825911\u0026rxy=1280_1024\u0026fs=1\u0026t=600\u0026m=2\u0026ns=1\u0026ndp=1\u0026asi=1\u0026ref=https%3A%2F%2Fmegaup.net%2F2j8nt%3Fpt%3D7i%252B4AOG7smKKnT0%252Fjju7l%252FENgp06hpZI1S3CqqWXH40%253D\u0026osr=download.megaup.net\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026aa=oi1_\u0026_Z15P=1694364801320\u0026crc=1 HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1368\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=1c5db71e-76b3-41ac-a0cb-a0bc09d59a62\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: WnaKl9lbA1QKpBRe9L0Y7cGwj4gtYf-PKj4em-2OAhuCEcDMxGwhkA==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1368,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (2043), with no line terminators","md5":"e7ad8e61d4c871cc5b36f060f179f40f","sha1":"08525e3c8f1b5e2ffc03e435513aa90df47e09ec","sha256":"800335631f7735e56faa72aee8626c4f0ddee4149a6aecde7ccbbbec8994252d","sha512":"e4ec5b88f84023fe01cfbdc1312290f4fc9b487d82b6ef96e43e36aec22ffe2e7d34c0f0bcf622f17fe62c09728687c61044d5cb7fbc310078858ff1e93f480c","ssdeep":"","tlshash":"10411a3e294b597738e637c4ba13af491ed0a2d88161743e2e5d320163c4a7b0ec985d","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"empafnyfiexpectt.info/popunder.gif","fqdn":"empafnyfiexpectt.info","domain":"empafnyfiexpectt.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:24.344500464Z","timestamp":1694364804344,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"empafnyfiexpectt.info","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 06:52:14 GMT","end":"Sun, 03 Dec 2023 06:52:13 GMT"},"fingerprint":{"sha1":"0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B","sha256":"5F:9A:16:59:88:60:2D:52:9B:35:E6:62:13:A5:4B:F3:32:68:E5:50:28:88:C7:1B:B6:C6:AE:BB:07:D1:C6:93"}}},"request":{"raw":"GET /popunder.gif HTTP/1.1\r\nHost: empafnyfiexpectt.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: image/gif\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=604800, immutable\r\ncf-cache-status: HIT\r\nage: 16803\r\nlast-modified: Sun, 10 Sep 2023 12:13:18 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=cCfJsZbZS1IB%2FNQ06hP64%2BYu5kqtkX10o4tkHvIQlkov0pVv%2BO4mQ5W71%2BD8Zl621afhDK%2Fse%2FGotLhp9GEEP%2FezYKh%2FzyFtZp06btwUOpp4IXSNQ0aFjUEUCYVyVb9uh4Jfzg62Kos%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 80492fc79fa756b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-05-09T02:31:56.683263Z","times_seen":46984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:24.553392564Z","timestamp":1694364804553,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95; _ga_Z9TE2LW16Q=GS1.1.1694364801.1.0.1694364801.0.0.0; _ga=GA1.1.1523129716.1694364801\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31836\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7c5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":31836,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31836, version 1.1\\012- data","md5":"4514fa5a5b3d1e0b14aa32a7d068124a","sha1":"e634977bfabc20ed15fe7ed03d3876cf68834b93","sha256":"5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861","sha512":"5688e1ee21dc661d8bbd6db76821b29789043f5f9528dd7ce40954e0f0cbae6d1153ab430f9ae70b31f6c8cf72247b918f84747d608c94a6147eeee80b41621c","ssdeep":"768:2Fdq5E8aIKvbTEuK4hMMyIVZXpIElYjuXy:2FI5EHPDwuKGuwsEejuC","tlshash":"a0e2f286486d0f1ace28b7beffe732d064a85272cb72cdddd4642453da5d5075022d47","first_seen":"2023-04-11T18:08:40Z","last_seen":"2026-04-30T05:07:14.172385Z","times_seen":2705,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:24.555848945Z","timestamp":1694364804555,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95; _ga_Z9TE2LW16Q=GS1.1.1694364801.1.0.1694364801.0.0.0; _ga=GA1.1.1523129716.1694364801\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31344\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7a70\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":31344,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31344, version 1.1\\012- data","md5":"21f79e4c0fbe54a555170aa70bb4c8b7","sha1":"9d4aaf2016cd21f16bc45089a48de84dba951fa7","sha256":"2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42","sha512":"1e968a5936efcb3f6372b047354027600abae6aee5b059e91caf035b3b488689dbdc6af3c2e2316833a90d59530eb00b90705780504ed8574d20f2163cbbc244","ssdeep":"768:FR+RRH9jpYBsGvNjWpgHY/02Jvb1veXNnXyUnl:FYZpYBbWpgvGmNnHnl","tlshash":"b0e2e04d2dea6e1bf68001ba18fb7b2066c16545df844f0ff20dbc13ac97aa22967457","first_seen":"2023-04-11T18:10:15Z","last_seen":"2026-04-01T20:07:09.044891Z","times_seen":2565,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.582Z","timestamp":1694364801582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95; _ga_Z9TE2LW16Q=GS1.1.1694364801.1.0.1694364801.0.0.0; _ga=GA1.1.1523129716.1694364801\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31568\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7b50\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31568,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31568, version 1.1\\012- data","md5":"e0c4ac0e73196bd0469c5c33304b7773","sha1":"bb071565f82907d117b0732dca8013409162c67d","sha256":"ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af","sha512":"850bd12cc28459f01f0d398edf8d58e834dd0ce890cf7bd9bd3c237f574847832c3b841f8bdbe063d302e95edf06d464a63dbc7f44c6312b165f858e8eacd984","ssdeep":"768:AbAx6BRjYvG7fvoufxOXPHxcBn+xVwcjhYMoK5r1M9Fq:Abs8R6G71xAP2Bn+nwcjaTirSFq","tlshash":"5ce2e1d85908d707c3567d385918eb9ca995fdc0cb126f9b52921258361cefc083a37e","first_seen":"2023-04-07T14:26:10Z","last_seen":"2026-04-25T06:01:44.297166Z","times_seen":2673,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:24.562824465Z","timestamp":1694364804562,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95; _ga_Z9TE2LW16Q=GS1.1.1694364801.1.0.1694364801.0.0.0; _ga=GA1.1.1523129716.1694364801\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:24 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31980\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7cec\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":31980,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31980, version 1.1\\012- data","md5":"99ac81a158028ac2023fb3350d2497e7","sha1":"f08c12c91ab29282a616c3ba8e533f49b5b433ca","sha256":"92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d","sha512":"7b26310ce2f53a3bb3f5a4701a9c945e3190263b17add279c0c26ffa18d5ad15048140c3576be49de5c54f8156073e62c362d2de70ee9efc75bc297ae6c67e17","ssdeep":"768:rusBBeUhRWvnas0lc/4auhvv67p/1ehu9t7EPmRy6VXZthd:rusbeUhRWvnt0mmxO/Qhu9GuXZl","tlshash":"30e2f1470d4c23a5c7c46134e046959e0afa1989bbb338c8269b98d636aff31f415f3a","first_seen":"2023-04-11T18:08:40Z","last_seen":"2026-04-01T20:07:09.049151Z","times_seen":2677,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"172.64.96.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:24.77283383Z","timestamp":1694364804772,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: text/plain\r\nset-cookie: csu=1275601468174936@1@1694364801; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=9NHiwL30NTPjUh9fNz1apxB%2BjqzgD8rYXAGEXcxYa302BdwcklJE7tuhH6hBumLOeZKqVuZQ%2BGWRZzmRK%2F95yfpZoZ7APsgMVVyI8fd1FeLmuv0GLbV%2FcegK46kv0TPg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492fc75f432508-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"709a6bb0f15b77b41d0bf59b3df7a096","sha1":"ce1677d59c68653c1d2cf728d7d2b1f3732548a8","sha256":"2a03820aa064861d14dac2f2960b1aec9be7d996f9cf4cf08545d84b41eca5ea","sha512":"d72fd2e427f80f696b1514d075c18eaefb68e9d1017a7ff48ce4fdcaf30b82bb447f58f3956b144bd644c8b01da51bf43177b9c5f1ffdd9f3352c29d5dec3713","ssdeep":"","tlshash":"9d8000c082330f8a0ab003222a228803b00082af2c8822208000c200202023082000aa","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.servingserved.com/n337/ad/192x192_hpbo3YohsfFJjjTRWsB9.jpeg","fqdn":"static.servingserved.com","domain":"servingserved.com","tld":"com"},"ip":{"addr":"151.139.128.10","port":0,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:24.776Z","timestamp":1694364804776,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"servingserved.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 06:51:39 GMT","end":"Sun, 03 Dec 2023 06:51:38 GMT"},"fingerprint":{"sha1":"52:93:27:F9:89:4A:E6:16:52:73:66:6D:41:30:09:8A:03:75:54:F7","sha256":"16:B0:84:5E:8B:ED:55:91:05:B4:7E:6C:05:38:61:3E:1D:84:EC:99:47:7C:6C:67:22:8B:F6:9F:E9:0D:0F:FC"}}},"request":{"raw":"GET /n337/ad/192x192_hpbo3YohsfFJjjTRWsB9.jpeg HTTP/1.1\r\nHost: static.servingserved.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:24 GMT\r\ncontent-length: 6353\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 07 Apr 2023 23:13:51 GMT\r\naccept-ranges: bytes\r\netag: \"6430a3af-18d1\"\r\ncache-control: max-age=86400\r\nserver: fbs\r\nx-hw: 1694364804.cds222.sk1.hn,1694364804.cds257.sk1.c\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":6353,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\\012- data","md5":"760e083b0199dcf36cfadd363d72dbf6","sha1":"6469a8818e2991ddee3eb5e1261f27d0bebc13f7","sha256":"d4f6e490f7ce250a7f89d2b15391bc6e41eebf134ad92e220e6cdb863693c6d7","sha512":"da66f621907cc0ae8aeaa074475897f143947f7500137f336ceab4a645c49cd8fdff6663ea249eabe53d873bdaf3e30b44a9a71177774ff590ede007dbecdb1f","ssdeep":"","tlshash":"","first_seen":"2023-05-01T01:44:14Z","last_seen":"2023-12-08T18:07:52Z","times_seen":115,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":68,"dns":46,"connect":8,"send":0,"wait":10,"receive":2,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":0,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T16:53:26.60391705Z","timestamp":1694364806603,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95; _ga_Z9TE2LW16Q=GS1.1.1694364801.1.0.1694364801.0.0.0; _ga=GA1.1.1523129716.1694364801\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31900\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-7c9c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":31900,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31900, version 1.1\\012- data","md5":"1b285c8e5b7445a8e434b2cdf036bab2","sha1":"c97d4772fbb5c5637d466b5f991bc7ec28830b32","sha256":"09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825","sha512":"ae6596215b6708cbf90265c55c799a895e506bdef539c7cd71b19a6679c0b6ac43f9da0011850912e4a559fa7b54e4cc0518bec9db524e2c8914f06a86c1b470","ssdeep":"768:OKbIXZML2+rggwHCFj7lDaTRyMQsVPHDajmk:OMYDnElDInQ6Pejmk","tlshash":"09e2f15a3962c9ebd41c62b3d471c3f536e4c022469a3a91fdc3b45caa4572d14fb362","first_seen":"2023-04-07T18:32:22Z","last_seen":"2026-04-01T20:07:09.003138Z","times_seen":2670,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imp9.bidgear.com/rec?t=1\u0026z=6192\u0026uuid=18d5ad2e412247628d58773cf7436426\u0026p=28\u0026g=NO\u0026token=4a44335432\u0026tbg=1694364799","fqdn":"imp9.bidgear.com","domain":"bidgear.com","tld":"com"},"ip":{"addr":"104.26.3.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.512Z","timestamp":1694364800512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 01 May 2023 00:00:00 GMT","end":"Tue, 30 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B","sha256":"8E:33:A6:A8:55:B7:FD:60:51:2F:C8:3B:62:DB:24:47:9D:CE:3D:1F:1D:23:E7:49:65:DB:77:53:DB:00:99:96"}}},"request":{"raw":"GET /rec?t=1\u0026z=6192\u0026uuid=18d5ad2e412247628d58773cf7436426\u0026p=28\u0026g=NO\u0026token=4a44335432\u0026tbg=1694364799 HTTP/1.1\r\nHost: imp9.bidgear.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 599\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=QI7vuUuCLTDGfY0eGLf1oyd65Q0qXsbZeGuZ5BR7zYNIGS3vh0Or9vBrrtUCDcK5c88FGeLYD3huIwqjkFZWZE3yYG7T3NNchJ3WyO%2FbswhJHhaOSC6Ps%2BLfZJBdzXD1Yg8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492fc31e2056a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1x1, components 3\\012- data","md5":"ca49a7e783b806a4e8576ea80346203d","sha1":"6fe9d083221dae98f6c76f7121c37bc884b02d82","sha256":"3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28","sha512":"b564eb9ab87f42e8ec4794647a1ccb84972b435062a81569ce543c3a6e2252125c2c966a35885d0269635212e1f7d44ee64eb0a2378f7ad849e704aecfa48651","ssdeep":"","tlshash":"e9f0202aab132610df1395be040a24b3a1db45823d603a312db186a5c620cf48449708","first_seen":"2023-04-05T02:54:02Z","last_seen":"2024-08-21T09:44:12.864116Z","times_seen":1585,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":116,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.744Z","timestamp":1694364799744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-8d4b\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36171,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aticalfelixstownrus.info/multi?cs=ekxocHZCdF5CQEN9XkhGSHVaQ0A\u0026abt=0\u0026red=1\u0026sm=76\u0026k=download%20file%20ghosts%20goblins%20resurrection%20codex%20part1\u0026v=1.0.60.3\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=876318\u0026rxy=1280_1024\u0026fs=1\u0026ref=https%3A%2F%2Fmegaup.net%2F2j8nt%3Fpt%3D7i%252B4AOG7smKKnT0%252Fjju7l%252FENgp06hpZI1S3CqqWXH40%253D\u0026osr=download.megaup.net\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_azJ3=1694364801315\u0026crc=1","fqdn":"aticalfelixstownrus.info","domain":"aticalfelixstownrus.info","tld":"info"},"ip":{"addr":"108.157.214.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.492Z","timestamp":1694364801492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aticalfelixstownrus.info","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 04 Sep 2023 00:00:00 GMT","end":"Wed, 02 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB","sha256":"A6:CE:5F:30:DA:CD:2F:45:50:3A:70:0A:4F:07:42:A1:49:96:E5:CD:F8:7C:A2:D1:57:22:4D:67:CB:F3:49:AD"}}},"request":{"raw":"GET /multi?cs=ekxocHZCdF5CQEN9XkhGSHVaQ0A\u0026abt=0\u0026red=1\u0026sm=76\u0026k=download%20file%20ghosts%20goblins%20resurrection%20codex%20part1\u0026v=1.0.60.3\u0026sts=0\u0026prn=0\u0026emb=0\u0026tid=876318\u0026rxy=1280_1024\u0026fs=1\u0026ref=https%3A%2F%2Fmegaup.net%2F2j8nt%3Fpt%3D7i%252B4AOG7smKKnT0%252Fjju7l%252FENgp06hpZI1S3CqqWXH40%253D\u0026osr=download.megaup.net\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_azJ3=1694364801315\u0026crc=1 HTTP/1.1\r\nHost: aticalfelixstownrus.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\ncontent-length: 1658\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://megaup.net\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nset-cookie: csu=d84ce8f7-bdbf-4b64-875e-b8af2646265a\r\ncontent-encoding: gzip\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: 16qNbMyoL-gsUWEoxCr3sOLYFIYIluC79QPLSpN8Cv6ajOZECJoSUw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3435,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (3435), with no line terminators","md5":"ccb02789dccbf57cc4bd8caea07a90c7","sha1":"22ff6c402048f5aa18fd9bbc7b3765cc951f5ec7","sha256":"eedc0f71c0d677444d7bc7685041b1944a2cc47c7dad3a02278de1defa91a91f","sha512":"5341f6ff7ae5698984545c48583eefe2ace6d4192b172105caf2ce22124105a18e11596bd18065de7e7be783aea9329803d9ce48870d67cc0f906b8745e557ca","ssdeep":"","tlshash":"13618785154f916f50fef22089aa8dbbec25af0a215f8ccedd2f61e11c625743632a21","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/track/adviews/eyJleHRfemlkIjoiIiwiZXh0X2MiOiIiLCJleHRfYWlkIjoiIiwicGlkIjoiMTE4NyIsInNpZCI6IjEwMDEyNDU2IiwibmlkcyI6IjU5MTUxIiwiZHluX2RtbiI6IiIsImNyaWQiOiIxMDMwMzkwIiwic3YiOiI1NjU3IiwicmVmX2RtbiI6Im1lZ2F1cC5uZXQiLCJleHRfY2lkIjoiIiwidHNuYW1lIjoiTUIiLCJjcmMiOiIyIiwiY24iOiIzMDBYMjUwX1BDX05US19UR1BUUzVfU0ZXIiwibmlkIjoiNTkxNTEiLCJleHRfcHViIjoiIiwiY3JwIjoiNzUuNDgiLCJ0aWQiOiIxIiwiaXQiOiIxMFwvU2VwXC8yMDIzOjE2OjUzOjIxICswMDAwIiwiY2MiOiI0Iiwic25jaWQiOiIxMDI3NjgiLCJjaWQiOiIzODA3MSIsImV4dF91aWQiOiIiLCJjcCI6IjE1LjQ4Iiwic25jY2lkIjoiMTg5MDk2MCIsImlpZCI6Ijk4Y2I5MzRjMGViOGViMTI1OWNmZDY5MGUxNTIxYzAxIiwiZXh0X2lpZCI6IiJ9?unique_view=1","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://a.adtng.com/get/10012456?time=1614803572912\u0026apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6WzjiqyyyqiuqzXibbi6i6zeibOWjXam50rv9.czijBuZznSuldK6V0rpXSuldK6au6mium2WVwfY-","date":"2023-09-10T16:53:22.225Z","timestamp":1694364802225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adtng.com","organization":"MG Premium Ltd"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 09 Jun 2023 00:00:00 GMT","end":"Tue, 09 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CB:23:30:19:D2:93:98:35:02:A3:6A:C1:70:5D:B7:1F:C6:E8:1F:0E","sha256":"18:2B:57:9F:EB:56:B1:A6:BC:8E:5F:12:8A:17:26:98:45:2F:4D:7D:45:48:F9:E9:B1:F9:0B:5F:95:5D:B0:2D"}}},"request":{"raw":"GET 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?unique_view=1 HTTP/1.1\r\nHost: a.adtng.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://a.adtng.com/get/10012456?time=1614803572912\u0026apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6WzjiqyyyqiuqzXibbi6i6zeibOWjXam50rv9.czijBuZznSuldK6V0rpXSuldK6au6mium2WVwfY-\r\nCookie: LBSERVERID=ded6974\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 10 Sep 2023 16:53:22 GMT\r\ncontent-type: text/html\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncontent-encoding: gzip\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.755Z","timestamp":1694364799755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-45f5\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17909,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.a-ads.com/1811811?size=300x250","fqdn":"ad.a-ads.com","domain":"a-ads.com","tld":"com"},"ip":{"addr":"178.63.97.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.501Z","timestamp":1694364800501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-ads.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Dec 2022 00:00:00 GMT","end":"Sun, 21 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE","sha256":"85:E2:97:73:6B:81:B2:27:F1:BA:24:7D:D1:BA:31:FA:30:FD:D0:D5:46:DF:CE:3A:2C:F4:FC:42:14:E9:AB:D8"}}},"request":{"raw":"GET /1811811?size=300x250 HTTP/1.1\r\nHost: ad.a-ads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstatus: 200 OK\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-powered-by: Phusion Passenger(R)\r\nx-original-referer: https://megaup.net/\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12398,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (11122)","md5":"99717b59d1f648a00cf2e3bc1f60e2df","sha1":"e854ebd28812628719bb05dc0bf285e89a28b61c","sha256":"9721a27c0bbc27159c8b0663b40fa6312f1f511cf38351d1f701e6fc88ab588b","sha512":"663de69648e926631771fb9151be016becc848360912d61122464b32db47cf026375a4645568a262fb8465f14f580def46368bd27f9e9d7f44eb522efe6eb0ff","ssdeep":"192:ciiwHw6/6Nw2Q9kkNZZiTnPHbI1v5qe5XMeRjfU+bKAKn/I18XqjrTAKAV8XS9Eq:cGkmZQnT5YMGbKAYhn","tlshash":"4d42d7b32298a0f8301f6e5dfc1268ea7026b8bdfff916e4b1a4df64d1550e99c41e50","first_seen":"2023-09-07T06:45:33Z","last_seen":"2023-09-17T18:23:59Z","times_seen":17,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":412,"dns":54,"connect":44,"send":0,"wait":57,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.842Z","timestamp":1694364799842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-5c6\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1478,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1485), with no line terminators","md5":"81e829f6440dd7da485221dc6c313a11","sha1":"b6530a173b945abda1e8bae3da825189ffd9efc3","sha256":"d526eb464ff9722d6639269b69f241cb5816452149e5a89acd866fbcda382102","sha512":"5f12d5b5479ab4235dddaa2ebeee65a2a59f111b36fad068dbeca92bedce7d448d882aff8315bac7a4af4e07a726994a316d9b58fcbd47a9070bebe9ed839cae","ssdeep":"","tlshash":"1b3112aa34db3e6647f7712f7a1fb2462121943b16829082d9eade3c3df2c417813e14","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T11:52:44.327342Z","times_seen":2105,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.821Z","timestamp":1694364799821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-3bd2\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15314,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1288)","md5":"d31e0426a59b32581835680633809ea3","sha1":"98caf983b9349fcf2a32d6512f998ea9a557a90e","sha256":"c7fe89a030ea54a29616f0a473366e07d109dfb775f2afa050c2de82e3606fba","sha512":"49edd2ac8f4e60397a150b5b033a9096cb9702a4d81f2456a39870ad60cd2f3d7268c755130cef05254e3a448180a153882cbcdb8ed93ab272975da0f0b13774","ssdeep":"384:hl+ANBtIu13EPgC/5l3IkOxteCYMKtpfhtw7gD7ml7D0Qg0ONj8yegeiOpR8yeHF:/BOu13EPgC/5l3TOxteCVKnfhtw7gDSg","tlshash":"0f622d087afa197bd147703e4b5f600c3638815ba648dd44bc9ceae02f64d24a5fbf98","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-06T19:29:55.550775Z","times_seen":2889,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.105Z","timestamp":1694364801105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/images/icons/favicon/favicon.ico HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-47e\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\\012- data","md5":"e95c130b43ef6c32b9c9459aff5706c1","sha1":"51b8b0d3ae3eabd9c31e65098acfa9ba18e9bb30","sha256":"6c3dde0843949903d807800c8d6706e357fd762d29885946bacac881d4abfb35","sha512":"f6b0075e48d33244447273996cc51f7b7626423136bc89b726467769939e2b66661ea57075cbdc716fe6f2d89b7edd941ee412bc1c14ced1e3dc3f177f96b360","ssdeep":"","tlshash":"40211a80ed82ee4ccd256e79e802daf5450bcd05d4f4860710da3e977f7407947cba82","first_seen":"2023-04-30T18:49:37Z","last_seen":"2025-04-01T17:36:27.427654Z","times_seen":2634,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload-resize.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.792Z","timestamp":1694364799792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload-resize.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1f7f\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8063,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8281), with no line terminators","md5":"fe90ec8075308aa0695b41a01faa8d7c","sha1":"9ef0157a99a6efd2a8672b699dbf4225d8fa67ad","sha256":"782f2530cd4df35901bcdba4dab3cd8769f7cebfcfa96cec776cbcdc10d66062","sha512":"b061e91ab30cdd3c00af3a948f7c0ce550d11eafea141165335d48bf2bd02383ec11abeddf33b81a5af1709d2981019ae68e376df8c18923bca0d988a05e516d","ssdeep":"96:IUYxqdjVr2mk6d6/Ln+HtNkiD2m31vPtVRb7VBQYJdUdAZ5g1e5+uoPrrqd:IPiymOLn+cM33RbTJdU2Z5yeguoid","tlshash":"7c02341e3a66317a496321c87fee60c8b659726d1132c710bd4c538e376b927e0e67ec","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.412144Z","times_seen":2086,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.846Z","timestamp":1694364799846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-981\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2433,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2449), with no line terminators","md5":"7b61bf63f1c5a5854b24046257705068","sha1":"dcac61a8cbb82440b4b09f3d391c0800eba6ee89","sha256":"15eb8a14ded6c8eaf1e4f528a77c02be72e8e3d743e44b259dc8036ef26864fb","sha512":"88b7a7f900286d4bc21c34d6b075b8941c7feae3a6f5d0d9c7c6f3a8db6ce35040cb32a0b246b6920e41fce29dd1897412160455aae20546c3a53b4ff6dc8d0a","ssdeep":"","tlshash":"fd5197947159310443d6b89a31ab6709ba7c69e7b01b6e506008c8d9ad38777053bfbd","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.425616Z","times_seen":2039,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.165Z","timestamp":1694364800165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1cc1b\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117787,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (540), with CRLF line terminators","md5":"26bfa8a47d74b90e1fc4632710026e85","sha1":"2993c7f968fb5e5be8d256d5c7271fe64c87326d","sha256":"69c6352bd7a8de550563a81b40dab2234fa30ff0ae9e90a8b5c896dea033ca3b","sha512":"1d05f55e9a55614ee20b74aa2bbe46bc549e8bb0c47402c2cdcb134fd6bf5c83b80dfe972c557fcad505abb412bce90374edb19ce7410411da515b79c689c9ab","ssdeep":"768:Z6L37fA1CW077ENcJ07WJF0JewI/JfMVJADjEzJbrxtXFepJFvM+vITxIgc/mUL7:ZJLE49rxneSUQmL","tlshash":"53b34074aa1031cd2353efd9b7b0ce435f0d62f0ee1e4d7ef156299c434b8492a62a96","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-01T17:36:27.447991Z","times_seen":2453,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhc-YPVBCDtvKv1zU9Pfb1B7Gah04E-5ae4MxPG4BGnH31uvvjq_PErujchx6yHiBiCfQ2hDGQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1594875373%3A1694364801486790\u0026theme=glif","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.109","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.568Z","timestamp":1694364801568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E","sha256":"44:0C:58:51:4C:73:7C:67:DA:A2:72:29:81:68:CD:FC:51:B5:79:65:66:F0:55:FA:55:C4:45:30:BB:DD:09:82"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AYZoVhc-YPVBCDtvKv1zU9Pfb1B7Gah04E-5ae4MxPG4BGnH31uvvjq_PErujchx6yHiBiCfQ2hDGQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1594875373%3A1694364801486790\u0026theme=glif HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-i2CDoDnkuSjwGepf-YBhyA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/global.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.823Z","timestamp":1694364799823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/global.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-d59\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3417,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3612), with no line terminators","md5":"e44702657a9e124a9ba6ba57e941d9e8","sha1":"cbfc48ed2d804918f7f97c4f1ed6ea2a4780151b","sha256":"39b318c989a0ac479bbf9196494fb1bec96cd1e54186051f5ba6225877acfd83","sha512":"cd213a55d530b80034f2c863b7c32ffc45aae921c7e4daa5702ec06652f30abaed7309948bce773a1fcaf248fb744aa3d63aea38d873e953c2961b99b83acdcb","ssdeep":"","tlshash":"3d7142463970e2b18b23afa957ef46257059b3000015d0157c8cbee92b9e979c9fbcf8","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-01T17:36:27.45001Z","times_seen":2055,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.850Z","timestamp":1694364799850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-3ead\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16045,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (15714), with CRLF line terminators","md5":"38c5167c8052d0c73892c3742b16e903","sha1":"213ef9210b4a5c4e73a242e832a08f4abef69a74","sha256":"743b919a337dfbb6d1e8648d0793532d47f8af48059e17f7e32ae8738c7614a7","sha512":"a2846b069959c3f7ef7d045ab897be48909c077a5e93ad8e012a41826df33e0d4385d844597f44bb3af13e2716ddee76adcc9bc4fd89f84b2e83b3d4dcd7a138","ssdeep":"384:1NeN/o4+J2jv0pLWu4A9kvpB8SgDC1aEPtc7RPajcw:hJ2jan9kvpCB7w","tlshash":"1772838d738133218187b2a141bf110f7137aaf66a468cacb63bc5daae7550d2077e7d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-06T04:02:43.714907Z","times_seen":2959,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/fonts.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.160Z","timestamp":1694364800160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/fonts.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-690\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1734), with no line terminators","md5":"4d22ff28e999a5c332705be886a5984b","sha1":"8f458405367020346f614bbe41d21da151fdfa87","sha256":"65e973e0ec1ed64f42a2ad48e4d02a34c9db54a7340761d86c53149a508e9b32","sha512":"d5443b62f3948396a4d97a0da57871f32e9c58a21f899be9b46bbfbfa0f47ee6f0ce0344f5f671089ee4b51df32fee3eea722d780c66973569a22abc91c0900c","ssdeep":"","tlshash":"eb318200578aa605cc631fee73ef36257e2a2b29301f52275b395c7a7ce2d2d028175e","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.428556Z","times_seen":2099,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.083Z","timestamp":1694364801083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 951\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: \"60758f34-3b7\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 114 x 114, 8-bit colormap, non-interlaced\\012- data","md5":"76852bc6b2c028db97322a74e85bd020","sha1":"ed52fb4de0d51f93277bbaae42fa80ba5f92c31e","sha256":"8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884","sha512":"6c75f46be72c52a9e4eb3998ff3e93df48db13f2dff3c8dbfded4d86fbc5efdbe06ed023528202f7c93a9f8a5fdd918df0670f79634777ef2542ff6df04d5502","ssdeep":"","tlshash":"fa119496663a5c92c90ba7fec1e3e23c18a43f6a02ac04032c814a8f252405dc2c2897","first_seen":"2023-04-06T19:03:00Z","last_seen":"2025-04-01T17:36:27.421256Z","times_seen":2480,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.849Z","timestamp":1694364799849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1099\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4249,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4394), with no line terminators","md5":"07d7abfc2a0b542f84b84f090361b81f","sha1":"ba07801dd09cbaaf882acc40f96449ea5edb878a","sha256":"57c815c1f2e67478932fca8e2311f7b9308ec3fdea93379ca7b61559fc67caaa","sha512":"ba997b6cdfa01c678356daa1c863ed406cb0c4883595b003366240b14a83e8fadd72844bb45824384012bf2bb8d8f1a343d1e057f9654bafd71d6e314cc9a301","ssdeep":"96:egRWOQ8nCGOYOx6TOkDFChbkXUWV/QFEfhMpWd:BAOfXOYq6TOkDFChbkXUlFEpVd","tlshash":"63916747b3226035465faaee9ff9938c32673291d27399147d1d8a460357bb280f0bf5","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.423035Z","times_seen":2042,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.175Z","timestamp":1694364800175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/isotope/isotope-style.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-af3\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2803,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3129), with no line terminators","md5":"51c9993916aaff91429614ae79394a6b","sha1":"51383b05a8ada15406d7eff96fc706c47cfb581b","sha256":"7c418339961aab6dec877ed3760307367e9deea17a1fbd175e611c215e48634f","sha512":"de696778adc9e30a5d3ce68d83dff482d94bab6eed6948297d26a9127acdd5e7826e039cb169fb31a975cb1e6af227b05b8e6fff21cf9f1e94f011cda349315d","ssdeep":"","tlshash":"f9518a3c6e1a78045e53a17e29c78281c23fd8a36b2255397348b546d9e3d4ced23fb1","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.407598Z","times_seen":2048,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/asd100.bin","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"172.64.96.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.106Z","timestamp":1694364801106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 28 Feb 2023 00:00:00 GMT","end":"Tue, 27 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB","sha256":"09:91:FB:E4:53:65:EC:A7:C4:6B:EB:F6:E2:94:A5:09:45:6F:FC:DC:B1:B4:E4:67:80:61:7A:EE:7F:81:DD:45"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 3154\r\nlast-modified: Sun, 10 Sep 2023 16:00:47 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=InLt9Vvh5BTVQLoyzdAFwsicG6ZRfNTdL0nEG3cg4r5RL6EW8Nx75NvAiQqGJjQzGXtjm0rWuUal0rMgYoRHy%2FVWwdgi0h%2B%2Bi%2FAFTeYdWfL%2BwKU%2BYomQvMCEkS%2Bly65w\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 80492fc77f872508-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":119,"dns":21,"connect":33,"send":0,"wait":79,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/sw.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.840Z","timestamp":1694364799840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /sw.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Dec 2022 16:15:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63a1dfa3-1927c\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9ee51131e416458b88d6da4e6e6959ca","sha1":"a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4","sha256":"db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734","sha512":"c15181f56e6a1d9644315da37a99789bd77c9bca734094caf065e54d9b525fc5d1268821e707398529a616c78140e6bd4c594cbc3618335d40b757214b4b1c58","ssdeep":"1536:vSpw5PMhOhJ6ZbaL7l65oQ668X4BtmG9vpjthaoytu/W:vSpwVJ6EXX4rvttkbtuu","tlshash":"31a309497252389617d7e03e177fa5cb6d7a4a09bc698d974051c3c02d2a0cec6e3fba","first_seen":"2023-03-09T23:12:43Z","last_seen":"2026-05-09T01:44:56.458457Z","times_seen":6658,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pogothere.xyz/asd100.bin","fqdn":"pogothere.xyz","domain":"pogothere.xyz","tld":"xyz"},"ip":{"addr":"172.64.96.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.142Z","timestamp":1694364801142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Tue, 28 Feb 2023 00:00:00 GMT","end":"Tue, 27 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB","sha256":"09:91:FB:E4:53:65:EC:A7:C4:6B:EB:F6:E2:94:A5:09:45:6F:FC:DC:B1:B4:E4:67:80:61:7A:EE:7F:81:DD:45"}}},"request":{"raw":"GET /asd100.bin HTTP/1.1\r\nHost: pogothere.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nOrigin: https://megaup.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: binary/octet-stream\r\naccess-control-allow-origin: https://megaup.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 3154\r\nlast-modified: Sun, 10 Sep 2023 16:00:47 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=bLoUdDVwMoUjULqp18S5W7WYLOHmXUDsRdXyDvBUv5Qn6ZnPeDlJWIVITv5TVKnjUU6hYvvXofkxq1gmfp%2FsR6vK%2BAEFrgK1DtqvcoeaFQ18wFzsMwvMjtrsWwIOnisA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 80492fc74f3f2508-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102400,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"data","md5":"4c6426ac7ef186464ecbb0d81cbfcb1e","sha1":"5a6918eebd9d635e8f632e3ef34e3792b1b5ec13","sha256":"f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16","sha512":"5f6dbea410beee80292b16df6fcc767ae6baf058ab4c38fa6a4fc72b7828374af42bd6da094eada2ad006d1a0754f9ff7bdd94c0ef9540e6651729b74fb9ea46","ssdeep":"3::","tlshash":"9ca3000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-04-05T04:27:22Z","last_seen":"2026-03-16T07:24:59.73574Z","times_seen":12181,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adtng.com/get/10012456?time=1614803572912\u0026apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6WzjiqyyyqiuqzXibbi6i6zeibOWjXam50rv9.czijBuZznSuldK6V0rpXSuldK6au6mium2WVwfY-","fqdn":"a.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"66.254.114.171","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:21.220Z","timestamp":1694364801220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adtng.com","organization":"MG Premium Ltd"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 09 Jun 2023 00:00:00 GMT","end":"Tue, 09 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CB:23:30:19:D2:93:98:35:02:A3:6A:C1:70:5D:B7:1F:C6:E8:1F:0E","sha256":"18:2B:57:9F:EB:56:B1:A6:BC:8E:5F:12:8A:17:26:98:45:2F:4D:7D:45:48:F9:E9:B1:F9:0B:5F:95:5D:B0:2D"}}},"request":{"raw":"GET /get/10012456?time=1614803572912\u0026apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6WzjiqyyyqiuqzXibbi6i6zeibOWjXam50rv9.czijBuZznSuldK6V0rpXSuldK6au6mium2WVwfY- HTTP/1.1\r\nHost: a.adtng.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaup.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: text/html\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncontent-encoding: gzip\r\nset-cookie: LBSERVERID=ded6974; path=/; HttpOnly; Secure; SameSite=None\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22124,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (22124), with no line terminators","md5":"01cb4412143386613caf98966f1cbfd9","sha1":"023586cefe001ddf95400438a0eba0dd31259b3f","sha256":"64f8ebf9d334d7ee799af37a615852e728a48ec6fe07948591aaf26c611c4dee","sha512":"206faefbca0f82ceca4917903a56109bc2746cfa080af661678d27396da49a55e454f5e8b73e0150467bee598750a501205bd499818e1ca3c7d51533b7285fbb","ssdeep":"384:wrMA8yf+c6sAOCeVoysUz7ObGvIzSkokXkyk+kjkgk7kzksSp+O:h2mlOCTys7baIOkokXkyk+kjkgk7kzk3","tlshash":"ffa20b7f3242f454a13719a394af260e3f358993b848c840c4d2d9e57e24d7e933baac","first_seen":"2023-09-10T18:53:32Z","last_seen":"2023-09-10T18:53:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":156,"dns":12,"connect":25,"send":0,"wait":35,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/styles/file-upload.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.756Z","timestamp":1694364799756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/styles/file-upload.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-21ec\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8684,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (9188), with no line terminators","md5":"e6aa00105765c90499065e7b4953475e","sha1":"c214db0a0c9ceda57bef567789961817554e01c9","sha256":"33af7cdbf9e003d6a268f344b7d9fd8fc39d19b0a412b9eaa4487d509a4a54b1","sha512":"9a7819645aac852a9ebd62ac1423b827ca774784b8320066434998fd033328158c4e69929745933cb0110cc378db67af3d2280b74329bd5a0787618bc3f2fa2e","ssdeep":"96:Voc4HxTk5U5Knp1NH4w99hq+RTTy5S1BsBjYF96tu6j/ASvU4k:3NK5Kpz/fy5S1BsOF96tPM4k","tlshash":"bb12ba28bc03503874359ffcf2eb5276763ef0638522506d3a8d5687cb6e5c082e66ad","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.41342Z","times_seen":1939,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/jquery.fileupload.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.769Z","timestamp":1694364799769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/jquery.fileupload.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-dbd4\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56276,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b85ba9fdc07788f5208002e4588c1e2a","sha1":"f4a5b283e901f573f1237b6a096da4c295e8a65b","sha256":"f809de94a782db6c7c5bc85db8bc8f6b05b1a473f736080b3ea8377fd6ed35cc","sha512":"7bb50a5b8a823b51badfba73950f0337d1b44e15306ee1c89ad60e3a71ebce0330668ab05faad288541dca0d02902b3a89a599a437f1b789e063944654ad387e","ssdeep":"768:vch0r9GOvPOhSF7pzC89Na9UNdO3gDe2VOk4:U4v0SDzC19OXDe2VE","tlshash":"9a43430d3ee7221584a771e89b9f64057634e42f290add153c4d87c4ef48938e2f2bea","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-05-07T21:24:52.818133Z","times_seen":2724,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.746Z","timestamp":1694364799746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-153\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":339,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (375), with no line terminators","md5":"e60adfdae6f5cf19011dbe4154390a71","sha1":"e91fc65490f58b7072d25b8edeed4b213e72ad96","sha256":"0633957c46201ad0d4143ecfcb0c12d9c400a8edadb2670026573d8f8c2ba2f2","sha512":"b02bde9b49b0aac1651af8e343f172ee95051b7010ddbf602355284c7b1a15c6778b014c322e980725cd2b5da4e318a3d63bf52ee24024fb42a25e63d0e3109c","ssdeep":"","tlshash":"4ae01a0bee0832664b83372b380902387ea0908abec0b1951a741e7ccbfdc0de111742","first_seen":"2023-04-05T06:05:36Z","last_seen":"2025-04-04T10:47:21.399716Z","times_seen":1753,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/frontend_assets/js/custom/custom.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.854Z","timestamp":1694364799854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-1420\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5152,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5537), with no line terminators","md5":"f11b915d430ce9e1d2470ce7a88c8df7","sha1":"9f1fbcd5391969567e9b0c14467d637446cb69ed","sha256":"13d1a0a149018d6e707511272a19e324ca469919e8546570cfef14f24c2219e6","sha512":"ec0f9f60886af3d134d153fdf5071f1e5e37452ff9168db3bc9cf4994a47fdfe3f6b6891f83a9e246c030bbc033b25f53dde9fc9c0802baa550f9e5fd6f6a849","ssdeep":"48:ojcnEj1+HNc2ozMpcwkPoM2dXFsGNMkapisii1iMwGCKQEqh9O2lwmbKtxCKR5Ed:VZd1uqAtGwAs6Vp","tlshash":"dcb10e7c6e1f7cb90993253b683e94c015af3c4a240242217d4db858d3deb2cca7ade5","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-04T10:47:21.383513Z","times_seen":1959,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.a-ads.com/a-ads-banners/468613/300x250?region=eu-central-1","fqdn":"static.a-ads.com","domain":"a-ads.com","tld":"com"},"ip":{"addr":"178.63.97.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ad.a-ads.com/1811811?size=300x250","date":"2023-09-10T16:53:21.226Z","timestamp":1694364801226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-ads.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Dec 2022 00:00:00 GMT","end":"Sun, 21 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE","sha256":"85:E2:97:73:6B:81:B2:27:F1:BA:24:7D:D1:BA:31:FA:30:FD:D0:D5:46:DF:CE:3A:2C:F4:FC:42:14:E9:AB:D8"}}},"request":{"raw":"GET /a-ads-banners/468613/300x250?region=eu-central-1 HTTP/1.1\r\nHost: static.a-ads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ad.a-ads.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 419447\r\nx-amz-id-2: CVCzRAerCDoYBR7vPKGhdakwlu6hUa9wS5poa4w+Vkl2TxHIULppTNhNU3xl4FCIzKNnMwc8lAc=\r\nx-amz-request-id: SH8JA6SJNMD1Z585\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 04 Jul 2023 11:01:11 GMT\r\netag: \"415d72cd769d66307391298d960a6e6b\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=315360000\r\nx-amz-version-id: 0AYj4ZTcrV.WmO4TebR_6j3olKYOJfZm\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":419447,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250\\012- data","md5":"415d72cd769d66307391298d960a6e6b","sha1":"347005d60c95df0e6fbc6c04f19439b0202dcdad","sha256":"b11edb7f06e794d1e71008ed040f2021012500d4242d6b2b0a07e327b7f36f1a","sha512":"5f479d2dfd6165235c1cc6c6888cb78361d9948e098c70ad626474ad170b6b8b5c9ec502d3e67d5f95b0246fe5b51bcd487c01f9fe21d4dffe390761d1f97baf","ssdeep":"12288:CDtC4NNQKKmClaTLMhABZv2FyrYBAdQ2xo0jUycMO:qtIliMC4Z4xj/O","tlshash":"879423b7605f1d5dfd2f797430632b508dba10e98cb2760e0229bf98616c31e28d599f","first_seen":"2023-07-05T12:49:47Z","last_seen":"2024-08-21T09:44:00.868782Z","times_seen":370,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":88,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/load-image.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.766Z","timestamp":1694364799766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/load-image.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-9f2\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2546,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2582), with no line terminators","md5":"a695bcdeef4ab1f27d01d2175ab9ddcd","sha1":"442e6298bf7092455528a2b81e721aaf7a72ef09","sha256":"ac92521ad4d3d0191d63ce8dda671b9e78c7c7e1d5f0b3fb2cf5424461f3f315","sha512":"253e7df234bc9de6b2d9022ecf6338aa1525880398bfb3fb0901e0073ad09326c5e68c93a06ad709213b8039abed7498e2dc149281ba56f6ab6101b9ce4883e5","ssdeep":"","tlshash":"5251db6c725874e522250993216f8649f518f4a6574f74205714d4ccb4becef837ef09","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-04T10:47:21.427361Z","times_seen":2058,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaup.net/themes/flow/js/canvas-to-blob.min.js","fqdn":"megaup.net","domain":"megaup.net","tld":"net"},"ip":{"addr":"91.209.70.182","port":443,"asn":43317,"as":"FNK LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:19.767Z","timestamp":1694364799767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.megaup.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 17 Sep 2022 00:00:00 GMT","end":"Wed, 18 Oct 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A","sha256":"C0:B6:6C:E4:F4:56:0F:37:D8:BE:5E:F5:3E:61:CB:65:95:B6:58:41:C8:58:15:8B:D1:78:50:E6:B1:02:09:4F"}}},"request":{"raw":"GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1\r\nHost: megaup.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=VMoTjqyMZ2wmLxU63h0n.hwd8ZLsU4HPY_gIuakWmic-1694364794-0-1-69b0ef05.6b0d8b6b.438cce4a-150.0.0; filehosting=btcib7qedlv6h682qm8rl80j95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 16:53:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Apr 2021 12:31:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60758f34-408\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\nx-download-options: noopen\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1032,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1052), with no line terminators","md5":"a6496a71738d7a150a3e065ee0e12fe3","sha1":"5312d1558e59026ae5f14cb04f8bc87248f23826","sha256":"7700f942a6370cef00334962637f3de505a110832c554efdaab8aa645b10359d","sha512":"a3c6b52bcfe622b35dc6bdb10cb344d12090cbe3628072d636128e21240dab4b8c6ee8b6aae5d9eb7d43eb287bbd95a9039b793b1cb5d7486d7a1322a7ca9624","ssdeep":"","tlshash":"0e110084f1922461919b225c40ef4cc9f2b68d2146c414a0c2599fcc5b74efea3faf58","first_seen":"2023-04-05T13:16:54Z","last_seen":"2025-04-04T10:47:21.420347Z","times_seen":2048,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"empafnyfiexpectt.info/TGVnSVljWgQ6ZAELPRsKfgImGDQaXDAIEw8/P3w6DiBSJT8gUUE9MChYXn1gdFNTbyklAVp4YWoWEygtORZaeH8lCwEmZGoTWnh3fEtVZ21qEFp4fzgVBi5kfUMXPS0gWFZ/YHhWUX1hfFVUcG4","fqdn":"empafnyfiexpectt.info","domain":"empafnyfiexpectt.info","tld":"info"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaup.net/2j8nt?pt=7i%2B4AOG7smKKnT0%2Fjju7l%2FENgp06hpZI1S3CqqWXH40%3D","date":"2023-09-10T16:53:20.481Z","timestamp":1694364800481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"empafnyfiexpectt.info","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Sep 2023 06:52:14 GMT","end":"Sun, 03 Dec 2023 06:52:13 GMT"},"fingerprint":{"sha1":"0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B","sha256":"5F:9A:16:59:88:60:2D:52:9B:35:E6:62:13:A5:4B:F3:32:68:E5:50:28:88:C7:1B:B6:C6:AE:BB:07:D1:C6:93"}}},"request":{"raw":"GET /TGVnSVljWgQ6ZAELPRsKfgImGDQaXDAIEw8/P3w6DiBSJT8gUUE9MChYXn1gdFNTbyklAVp4YWoWEygtORZaeH8lCwEmZGoTWnh3fEtVZ21qEFp4fzgVBi5kfUMXPS0gWFZ/YHhWUX1hfFVUcG4 HTTP/1.1\r\nHost: empafnyfiexpectt.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://megaup.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 10 Sep 2023 16:53:20 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=IXcCmiS5ODISOiNflSgbglGrV3BNF6FsnE4x9p1AXvpVwmm%2FTRhVE9ddo44USPOHtQrHddq7E%2BMgegXJdfZolo%2FzyNEsm5DO9ek%2BWjS0IQ7PNqPpx02k7y72iOGcHT7UZ9nvzsB%2BNzo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 80492fc2b8145685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T02:37:20.184877Z","times_seen":14869790,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"empafnyfiexpectt.info","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}