{"report_id":"9ec98b64-2737-48af-84a7-b34c96f6be08","version":6,"status":"done","tags":[],"date":"2026-02-11T15:55:26Z","url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"172.67.201.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"title":"MegaETH Airdrop - Claim $MEGA Tokens Now","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"172.67.201.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T15:55:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"mega-eth.run","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-11T14:37:48.111482Z","last_seen":"2026-02-11T14:37:48.111483Z","alert_count":12,"request_count":12,"received_data":4523841,"sent_data":5605,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-08T00:54:07.910218Z","times_seen":3401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/563bd5de-7047-4fd0-9315-0f4d03e6fae0","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"99f8ddb70f33d73a3121e9c8aa8cb0aa","sha1":"a75ee97354aa1b3fc4604f55d029a69045fbc324","sha256":"08f036189a5a6ab15ec70161c053d4c7d5851c34878203a47c1e91d97be7b962","sha512":"c6c5750f79705fa5d456a017afcc3a5dfe454266062c63b4e7197ed2af2048fb484c6a93bcd60727aaea9d73b226022aff5dd0827825ec7cd554a197df584ffc","ssdeep":"49152:G5evBuMmSuESUeacmWTiwW2QUSvhjG+EyY4bfO3xrQab4Evp3vBJqHEkGeoMh:X","tlshash":"1f1623a66e1378b68f9413a670a75c0e14980e26c89cf0dee7d8f1c6345dfd181eb92d","size":4028362,"data":"","first_seen":"2026-02-11T14:37:53.076771Z","last_seen":"2026-02-11T15:55:29.168801Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2095fddd2004c71caf58e3ecb7577109","sha1":"eaf0f72ec15ce02541e32e21ad34fdcd64413fec","sha256":"09d4a48e789c9a9de3da48976bd12b9242adbdf9f5ae4b04f3c38bdd4c43a071","sha512":"14ef33f8cf3d44492ae86fcef67e809ba75a00d2adcb517d45bf7b92f9bdd353444f0d9b77750b3d690c7f17a1cf3346280f5b6ff12f4c842eb82c7149d0bdc3","ssdeep":"768:BijdecRifHOGn8f6nmOy+5Rkgn1xulNX0RrfjNEiW8c+OzajMPau7LKrcm5U+1cw:7fu5O15t1xTH7OB+M9A","tlshash":"487373e4995bd4e88e6224cdd473e909e4284963ceadf1a3a63cddc1741df62c48723b","size":73952,"data":"","first_seen":"2026-02-11T15:55:29.16954Z","last_seen":"2026-02-11T15:55:29.16954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-07T23:31:54.168819Z","times_seen":3446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec009ae5e9e1593f2099f79671c19a4f","sha1":"b48de0c47ddb185b6f5eea8615b61eeebdfb70ad","sha256":"19abc8ae795d5c39e0e3ccbffad921e3516cc54140c759eb62b28a9f9a2658bb","sha512":"5e98c830263cf013d2acb84a984cbeb6c4062647b80b25b651d788312f681ea25d6af5c4596257349497371e73047a74d8a4be309aef1d7491cc43546d4bca1e","ssdeep":"","tlshash":"29c0120d7068656614cf686d0c4f08897f37881262080dc999ecc4547fb1e6942a084c","size":174,"data":"","first_seen":"2026-02-11T14:37:53.072427Z","last_seen":"2026-02-11T15:55:29.171293Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-08T00:54:07.912416Z","times_seen":3232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-07T23:35:22.194346Z","times_seen":3339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mega-eth.run/css2-1.css","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-eth.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 16:41:45 GMT\r\netag: W/\"697647c9-238c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 4661\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=skxKfdjcSZx4id%2B8BmThgoqCnF0xGNj556DL5FyiQeRDMx5C8dyOQPlmzQ2n0hQpnbGXFEWRMwj821ZYu%2BFqqpdAI6uH%2F2E5jMI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc507400fc59926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9100,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2697aa3ac7b847513fe0243c985c479b","sha1":"bbce27c9f7e67d54286e634b280818db09a13de8","sha256":"95575391bb55a8a178fea41d43dd09b1fddd957c6e6d49e9be9263e57092f7d6","sha512":"fd990ca8107b081bac7485242188dca4ba0549d9406fd3a0861999143da2d61ab70a65a41901e922e1a69fb4f978a2a1831675104d95d344169cafac9567d12d","ssdeep":"192:9TNSbO34o5DMTOB0O3/v581Tro9O3iS5lWTEv+O3RB5Gp:NvWsk1i6a","tlshash":"8a127b91002b6400a7a70cc277ce3f3aaedd6044a049da782ffd0d8a6cdeda953a175d","first_seen":"2025-06-02T11:49:35.475344Z","last_seen":"2026-08-07T09:24:33.808336Z","times_seen":286,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/rabit.png","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /rabit.png HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-eth.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 3527\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 16:41:45 GMT\r\netag: \"697647c9-dc7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 4661\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBWjfrmq9s40Wi50kCSPNtEVB5nUK0dp3aoZYuX1DKr7v9aJo0foYmZPACPurU43KG%2Fyx0UOl6bvHfOChlyyTXvJViH%2BDrHRDPQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc50741a9609926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 199, 8-bit/color RGBA, non-interlaced","md5":"2c33fbfb488c008ccfbbb48130cba725","sha1":"195cac5039625554ea1c60fba4b4dec5b512867a","sha256":"f8e6df2288a0fe31f89be30641a770fddf2ddd3d4c00ec7e6295c6920258417d","sha512":"57986cf037b5380ae1e8341cedac69ea44256b37609940a9e9cb6ce7376136c598e2fc8a6618d47011c8b6c348268ea7875944260df3e3a5c1e7480b6c1898c8","ssdeep":"","tlshash":"6d714cef2f734b59e048d4c6c3614ac44aaba41d80d618045ffa20eb2e527929e7a589","first_seen":"2026-01-27T10:50:14.750762Z","last_seen":"2026-05-08T08:47:03.271281Z","times_seen":14,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cc50741a96d9926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21031,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.08942429303993667:1770824002:gpuwyKyLDJq1NbHG4SvW6EZJSYFOxhOzVpKQmw2wzxs/9cc5073ecbf40a1f","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.08942429303993667:1770824002:gpuwyKyLDJq1NbHG4SvW6EZJSYFOxhOzVpKQmw2wzxs/9cc5073ecbf40a1f HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12134\r\nOrigin: https://mega-eth.run\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-eth.run/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12134,"data":"rNMSTgHG-5xUU8B8G8J8c8eS2Sr-8rSHBH$uM8zSLBxE8cJXXmDAqBxWMOa8xSXeA8pGISx$8upoH1AG3CaDa8XPaZa8-eYA-f8hw-BnSq5ozVgCNUWBNSqdOikEBFjg8-Vh+xz-qzhVgQ31N8H7J-yegoAx48STg3gHK8uL8JJqkL2klGWMX2WMh8xXg8RRKH2o8fFVGeIkhyvPnHJnN8Tvu8CN8k7vW85crTMwSqVQ+lM3LCiEXsyqN8TTk8HN12AITfP5U8qYFZ+WwkyA8-FAWB-MS8T7NwTySiJM8vc42BZObfETN8Lck5-bizJr2PL9bmHZ8-gKxLvA5B88oRAW8kotx-FxCF-8qfd8x9Dfg8HCyixtg2ykg8fyNsLLwaYmct2ctffNSkkPc+XLG6qA7hdiLkEaNC-35L8AuZnVK6A8A1VzuV2O2bh-ZvV9B2J24EYphj+H2TDcg8$Xgk8B2WPBjHARLUnWS8UFZYXXnuyXsuCHUaVIdVw7QT7OrQpreP5a8xLyyd-nLvhvTjGAhzvOqW2k-GiB+x1vgktxdG9wo8EV3NP$nbn7E-EwasiRAsyUgwLU6+$uwyjYEFW7xDZfTqux1uzPjzlJYswLIRNZdtZw8VnFThypwZgJNBS7Wcxx5xdDSEkSOkQyvqnY27lTlPVw8OaKxHPq5vKuIrBNm+onTPHBnfznmFml8iHfo84txo1mdKojB-pYC8kCV2r55qs-+yTq3uywrv7Cn$TLtY8oQK1IXCDz1vykdtMGjpEAz4hMrA8qtJTLCLWLkWzghJv1CH3v86Ym$SohUtl3hbLbu-A5b+xL9oP8GuowQlYaXHuGA918hyp8LiSO$D38JCNUoiS55lzhUHXXhyCSHCNBSE1-8MEJNHXDhM2NoJyLAoLW5AYHLxM+4kqSoCNUYyYOYC1X8iBNjMGABcgUoM18m7m1L2ASjU+TGzYtp9xLrYK18eAoFhALVk-FYOqM5o$ng9yJDyWfCuLIH7zLjz$1LdcDZ-IZlL9D7ag-GvkRoAiaJJUib84kk2RMWzbhYizgILUZfczfiCk9oyT--siSk9waAIg6cKDZT1lTY5lihNrY8uNpixzBrYNUGpPAdyt49n43azU9fS+ZhSHqWSSc8vyQxzXCzqo2z4LkxzoDN6NNBY7huvYUl7gzJh7YBjSx14nSBEMGSLV52YW8Km82vXoCSu79RiihPzZhM5HyVNRJpLyjVhZNjVfLHUHf1XUAlT77TghnzLatbjXORLNSjJLOWlhB+jc-Qs8p-X9qCRO8Moh2+hAqfdPDS$-MCdN58xnZjoohMBaMDJrAkYufl+r4LNcTuhCBcYMPsM5io-mztcyIxUHMsDJ$rdNLACx8LauyOI8CWyAXteB5o2dOUlGjK4zua8GcIf55lSG5iLd1tkHKB-uSbqQNSWhLtIHvofdxL5iexCOsI$PvoEXNvQSMzRIHSBLiox8KHOiburCdRjPtt6jJnajjZuKfuHdiCgiIQiABsZi9k8iuDiKVPI+WMXI7Ap8mFL6KmUlQBo+KtbIaS88vs385Bd-8n8vm5oLxdHSqT-9AHR+qaKl7cDrA4-b9OqdyScHM8Rihh8jSUHH-Ghal8fG8MfoPNECQJoeBcGUyXCT7v88ico5AcLpx+LuhwhSYUbHw3MhoezeSZhvjVndh5CzzH+deIeYD9G3iw3yuIXoMzGVkquRSt$512vgj25AGAGx8Yh3L$c5oAd9iPkOnB3o38Zc3xUUb8K6AcqGu6hMrlyMG7OTGudvJdSfhc6bmfAX+nLYJCGXuYBzYj8D6oT-OLu2b8lTg22e$42LAuTZSQtO9V-1+8u-ovXZ2A-CT4OA57CxKzU3r3wdgpFUaoz4AkA7nAl8cx85mjWr2L1eqo5tfuFH9cuL-j--J$GL1HxgAkU86HSeL6bFLEXzA2Y$Y4c7BSgzKnJLZrVCSMSxT$dcccC4OHV1Wxi$RjZ+nNcnuZIwASHAkPfrWYk6STo+n7TWVhqJvAmkS-YhECLF8wAxCEJM3NiwZ7dM8rXgLu3CA7-7kcYdiOuNMCwVxr4bkC$altTRWH$Y+xNuYfxgLQFjA7cz12ByyjA4Sa7-z629jpY$ezJvkpeF5Uo2MmiMSiZM$9aH1ZVpZAw6MATDSkSdH2S8dnUbZ35ZZpfftBBdMQXNScvC-aac4haH2-t7jaG2TyG4HAmxdpLVSW77ICfkzCJXuIamG4EiXKzwhMHbjLjgOqQ$ai+qittx8HyiYP-ozzkNm3WGf9SVGhuXLnGxjfAfnvAcRgtAOypSYKDO$hgXo27iq$$tBh5NTGZbZVd4U8qFlCgcYLU9hf4bxJz7JMHAiSpaQI4RSCdQ5M1zI$XGhrecQJaxCiMMCVfWd2gcvCjyHkDWaDyxBqJvHXRaZZcZsaiMTZV3LJoNATiBjSl8qb2yqyo-g8$iox$3rk6QXRWMenzAELE29B8ldWpo6JnnSgCYATTQMgDtBTgdSZQ+7ccABW-5tkOYHXGJyadl9GIPBhwJa5l-ThyC5JFOHt6EV8xhjW6UlxqIofOECeSvxkCgUblllHF6byNJ8GNIufvzFNmooMAf+wktYnd2dRVDkGOtJpfrAfZk8LdyBPTq28hYGXOCYwHWgqemPZvQuYL-oBT4Q-oURg$gCl8KuBmr3JB7Oh17OxaSYwBjAAreW-Jpei2YO8OVeIUZEsY3-+wLVjO7Ke8cL8grDyC9Z22hjKDu+F-MDwGiZIKoMzkCLUqLQlI8-fkWyGggMYzat9$OLH83BCvBTyYx3dddo4gOe6wWTfPyalOilZ7zEazkWGWLhHgMri4izSb$EiCGpM8RjdxBLutaEj2yr2+vlxNFqjwUc3zm-d+Vf1CrBq7RfICRifq$L54AgS$hHq29ro7OR55UEEIRADc82N1JvVxGr4oYHUxwavMLkS8YhHZEU+o9S75$OfAuLNI-wAIr9ggFe39ww$tnAZXLILY8bpU-B21wrqDTCVW8Bh9SySUqoqmfapnvnUp4PAHaojdjKvzsenXFV9JNKl6X+Am+NeghWDyMe8GT3aSgel1C1$LgumU3FIT$9JX+qo5uyetvc8UGMK+G7kcbof1zX+hdxFz5vmeu-keB4EjtXT7IhJPoY-HX9Z1a1sZGQ13FYG4zXf8u5pLCningU4eYILWafYo5ndAtfOzg7ip$RDWB$XfP6aJfVv5oa47Hzi8IcmiXb1eSuUZq7zVVTIfHiV4Zmwo6oXaUKcLLck8$jC-ZmLJwOtqlScgfyNB-oK-ZJ77aUb5pKmYIvUub7+64TibEhb7vXSBSH+RX7DhyrEwPQqrXm64LoRB56MaOuIERJix5AwqSXQFGyEftX92F6CQTzfl+6Sr3t9wvMPLM7lhT8FBghH7+VdYz1tSHAffGtuAI36XY---EWbp6lgpid6JkWjlc6z-WpmVkEUxIS9VHJzWyCBJ1EnzIWCpiV5CBnmVBhtJFjaVvhZwu6RwNQaYxwZu6hkQJ6MLYSuLyLz8k4-gj2A6f69hZlTnOqOHopooy3fuiEa8SE83UnhQ9lhS727dgkJHhRTgbW98QnfwRz8E98KLm6ZzOk5j82Sfq6zCGCBLa6xVVpeVYHnVndB2yqYjLYtEG1tEWhMhFggxbLzL1laScQQuYuu8L8ag-kN3qVkpo4oMLXnSSTvQy3SMuEudhwRQwTi8EWJC4RZ6w5KR3upp2o7zYLPQkjLzzpgu-kFJ16p8cWNRrh1Qz-hWNH2SGEIE7nI4l6qYPdwnfAYpnAsW5VegYhn6Rzx4Z2R4twbMDpxEAfHAUTM$jJM8u3zLuwfj1-gMVpxQZMK6J3rWBS4h7JNLMHh5Eu25wwMpvLb$bMPVbX8xBdn-uWSwnY7-ZXCEU$bk6qOxyQgzNW+AKCW6hTszQ4tztzNCm4P41us6EjeWWzGuzWJhRoUQRQfJzHBCgE7g4QxpgAdq7YD3qj9Hu8eEo$46yq2oPlBzjAtQWTiLfozfoExAcRNWU8m4wSVndE-EzqFzhoGEWH5xg2H2A3q44gxpeTKuN2zL9oGQRufHACK3mw58HXJ6ZRMLb5-J-zhlxQRpen$hBLuxlSKlxQQ2NRZS7J$rQuOVzh$5fdTpjSC$W4fu6JkC8XNR8Xnna4ZkCXC$MLyq3RO3aEzhf5k-n-HANV9EL8N2NWanionMiR43uLHCCg-wUlCqVJNhB8KxiuB2HACY6CwgM$PCTAkESw6ENh6lBnhwnuz$aTg2n--L8Tz-xlNd6H4kM8zl5hhzLxBADLW4x3Mx9$TEyqG4HCPS7ScwfANWOhyxwlOrhJt57$Jo1ThMHdVMd$SQ9hNqyxp$DladLMCM6WcnMwH-gk$6OH$EHL1peJHSxT8qp1uxI1v3jAG5JYRQX3LSR$GJ1ldWNHVlej9qAVzqWw1MEdg-76I4kkP5VYYMY5f-KC4ggRIfzjNlwTu6gfEjZ6l4PQV3vly4LYOdKChpYjLxv3C58yoTzHhT85Yqiw5Ll5yuHLMhsQ1uZhA3y3oo8c2$pl85877qB86CBJiM8UmEmEyZgn9M+R$AcTHEc56nc$zoj3rHXk5q3un2$gUhBRrhwwNd5$ZfF1DJJ1j5SFcES7ErEAwpIgtYepE39xkcyxN-58rTWAe3RzHoJge1HTLrQzORqw9RL19XuyWhcRL39kkMrJcJRfXY8-nHyCanGZ8XQdBhmpkZH6fYJ3yxRMl3fW3QtwlJJAI6ckjRUDAT9rVfwAY8pgLE$5ZohRVfJuyTWAVMGl84YHUnNLGJp4ZkYQ9hOHWx5-clGwXVt2mw-hkXPrzobg5ZOgHjgwPjewjgIdicGEUWbRspby$Afxy6ox1QSjuIz8qEzXuV58$Xb$z8In4n1AUf4AGQbypdF3xjpHX8-hNLBpuCA3VYnnhwhZP2nHWqVnoQgkhTguf-yCA7Hwj$xjQSgLRgtjFz1XC62wHXrpoh4FfJ6WX3I1KLfhgW2kML9fpdhE4qZHB8ND2JiyXd-zio2HNcHTiHIpdfgcWWkZWM8UfVv$862yarN77nAgg-Y3UDczqEtS4I7cgXWR9peyQREdTdXV9$WgLq9E-cmX$Uz8QzhXq8345HzUn2JLbpgF42ilnX-J93fAdHfCd2BUSVxRfWXFLDe$bgiUMQYzOAqd-1Hy-n4hbkkqgJOQvWtEMH3wlgbU+QWUgftUbXp3QyyAHxhVPpq5C5DDcknYlAQ1BDMUnAgyEMFE1w$wuL5hj57Zh3qw8$kpyqL-J8WxOUf-ykEDKIrH54mjrqXfckRkr38yGwfq2MB7ZrY1BhJTWW3rEAGphH8p8EMhL3TT6pxTh$ULJft4tWvSK-J7N2Bz+R3MWyUEtdl2eryT9rh69WPS-Q45f8pW84IAU$Y7nElUnrl3SD44i4gHgIyCBl$CQw1$nno7rTmAkYqRH$tFtyKH2cx2P1nVso5xnutIidfDBgXg-MyWWJdMc4c6jkCop$x6g7Z-OSQw5kJp+y28+-+La3zTHVYqSry-1dcnOk5xIzgTuoqE255rt58XaJrDKLfTt5cWY$MUC3ioY-tTWQ1AmDFEk4i6coXdEcxfHdccYJWCPRK7$7yONSd8VFMD1wzTu-y2-JbZn8pgEAHx4SvgIVK8W241mwRn$fIjZTvzPl9$lM7RtDkT5hlukGrny-u$iZiQR3yHzyCdfgCWQnY$4Rzo8cVEzXH5RJ9h9xKhuoQScovIlJo2zRu8-GdpFw8Dz87Xz8GQQAKUuLzdO1iW$X8lXCgY1Lwi378HxZBgPQkGkqV1eRKdUM2C$CS4$wb5GOOxYhCWFDHfbuR1vTOMh-qT8elyQyyufjp77FxT7UXUeDeDWdTDf-5H5LuoUZapxXLvSWy3fFhZKlmwPumApoP2PVp5c3H4LZz6VSRnhwYEYE5VfQQ2HUmW$3p$Irf1hO5C585cQfal4JBxzMBUfY7qEy8IfzjJy8DSJqG5RFYSQSUrSAHAUTpFkGT5f8LorQjAP$4TeScoPZIdu5NS53UxTJv3yfy-BfHhpAMYu8nkqk-U4RblGB15+fTZUQ6HNJOtUEbhHo8UL3ex3y-zN-5MCyHWvcgVslyDMy2FU5lk-J2ggnuiCLWrL7-laSEr26oikiDvuHDBJvq5l7L81DUxbcSyaUXDCFWRW1SIGZI2P7Py7zYthQ9MXABUYl1LHmZp5qSGyhjUVgrTFrrfBDZUavcDSlaBBZtuytrIbFjWVJ1JitjAkAvQ9g5Ch4tYTFyQq4Qm$YQtCDMQuUcyH6UZFW9Ch6djJuWVLHhO2DBS4zjdcTZOplan9lruS3QXeyTQy$W1O8KCBXLGZCNgt5QErrVcgdfvih-UFpGFPy1rffTDkmTFeFrrITiCMQfnd$NEmYi$hevWV2EGLUzpcX78dw$2vM1$kZ8mlccONMvQDXmITEfpqS71mZrWD1LH5OUL+UATXcL8g-QoG4dryHvpbcdEzqv27Q9nB8QQNJyiNzOL97owHHrZ6ZYqutpBK-KVxc7XTc7OdIftBHGHPXcBO2h-ghbkYCHIPjb-dcxBXVGfgiGIIo5CDioeoB+1ovIzL6eW9wV$n4U-WhUqKycpBBXVpUBt6irj9euwaUVmW1CcSPTUcnqftUnWC7LLVf7QwkH2V2ujbnETh6PyC7bIyHOdTiufn8d6bzl$rjD2IUdvDG8FTXLTbc34vVpGjGu6vAU8cpYWM8kdvkW-5mN5edrMt3K$M6eYLBEVwN1ns5VTvCow9hg4F5Yh$fevUeBA3OIOo96JfIf2JiKrtJFZbiiG4y5FCjCV2vuBWVMXS+5BUwVFF$n7l4EuuQaI1imUyIO4yWHCqwuC6Z9B2-e2+VYn4-IXDQfRwZuQHeJehy+L4OZ-UHia7MydQfOk3Xm4Achlqx+vSUXEXQCe6ZB+AIn$IraWE7JVJVcdpehe7H1ruC6Q5P-D2J14JiHjavXWgzwF1YXz$HakzGyIVFK-22TyxDCAg7wwuy8y-ZubHtK4qjPj4tATK8TS2qK25nLDkmLI3VvT5qNOFJY6bkE1re-X6xZcnVM5HBBUFygLLt-zbt56L-xlItVv4r4CIvIIzWtnQV+ih4OYAIfeUrD9wVOx3mlsZYx5w$Z2TIGwkhyvYDnu7OlCBaN9PnXs5N7PIeHvYhFBKhBdcIuCLZY-Gkwknbc4pyJN2qDIuqwfbo+X8DUv6lqHTZW9XQ3M-EYugBTWwTzLuwTENSAEESnGCLEg-uY8qI16BcvHAhG9Zclv$y4ChpPrngdfuCdTe6npISd8-quq7Rbn6DBKTGwKKEwK-gZUuA59$Y6dtKyLb$qY9RkGut4JuOH-3G2yKC94qMIiLA6uI$vrvrjWtBcpv3wQfnzVfRiigO6AgexvhdiGRkhWhdj2oDH9Zzy5nT9$XyP+PsFa8xYZhHdibNslbK9jMIqYgP5MdLb5RsxV+TA$W5fC9jabeGjUaDXFVMLwdKzVJ9ZdUsWmuLirLXfcgudybzyrnMgHV+KLTAZM5Gq5FsMVhMS5ZXrc8bxrh5GW-x+8r9zqBfhdkDMhMM-buH8Yhw5-+8n$jUmqJN6zTDnN2+$flMvx58CUoUjjMYHB-DcGMMiuVGTcCJ9ecX9HlCieHS4DxruEWlfCEFj4RNzN+Svo2Sq-2ZzP8Cu+hi7T6qq4RG+Shumjn+x5HPH-BgPXnnowvlN8+SBom+h8-DTW8ZkbS6B$MLKziQuBwhHAtelzSFdBgfSKfrMr481XtM5eXACDW$l9xYN4gioHMnwzEYb8XxGWJyrE-WlTSwXe8ZtpH8eYKkMSVZXYu5-AwfABA7rHL5uHYxMiDMmyTLrCNgNLzi-BfxLMRHl-YGRu$hH2CFzYNq5BMByvDl2CC-o2NkeSAYuqVLu4zQASi$4Sc4r-45vwry8w3HHrxwHuiT8YPHoqABoAe5AbZwrExZ8iSB85BOurhlFxjyHs-G$u$62VLN2eW$BVOWJHg8aZ5+B5$uXAv8AwhxCtBWMHw9YyR2WzjBuwr$qOYpzaOdMvk32CFMLz$AN5Hexb7nxZ2CMdgf3gG2PHIzpUjN$brEH5AY8w3fRH2-9AaAgyqwLMvU-XSPXyYHzMMeMM7xo1JDPw8oSQW7P$YuYbJtLewM5f2aGY-HYLe+q9xVtqw7uBkAgMlhmY5GIolfTcqLHGd7SCM5B5ogD9nxoA-UMyYCC8ZXlNyBMYkOgJJ2-1tSj2eEHWg-xywEYjAYsMp-nh4aHULN-uOlSD-JekOLMgAmlEe9IXAY3558vUTB4aaPMd5VixhoRHygUyeever2$clN-OBleATfLr4xW1p$CMLLAVl$h2HoECMYAVx-+CW-MY2i5wWw8FqHzUyVow5OhXtL+MFD+4rMuOWy8c8EGGSlBmehkXSHulyB9BYJXUgNNGluV5yjJraSnQ-lgs5L3gn6-sAXo38iUv-$J8$-Q-z82LhyqNzdxEzOfi6LG$9qF-uzFmm85do1hW55WoBxfHxpol1-AYRYdUtD1CLW8ZuYavWZ4rcqGH9l5NZLq95P2ln$MTBpGY$hJxrYtlcBgkHDCUXxXKyYAsE$jgThPHwNTaHLh5TEezrb8DB+4HlCZqPysMuxMyGYkvYggd8Q8rSL+Cki$YsWBMA-GH$N-AQGZqoqlH$qVg-G7zqiW-vb3uHM5SETSTGuO$J2BVZNBMOZTn2pgvC$uiBLL-KqLxN8H8eSCUW1EuahAa$NAUoCRR2oylXN$2Wx5lx-xWHuG8WrgithYSDytMhaLA3lTo-9Y8SBkk8MGY47hX4k5kcjc6La9JbvBA4YLfoVfB5dEu9c5n1f3kHUb6GeSrNx9joHq+x4t58IRuhjBQntJbuCgvTJhoS+p8vKqNhyxnYwlpiOT3o8eg548lj5+kTwVS2yhyCAAKC-z-l3zTExwyHTBAXuCynJ888uIw8a8Gxq8uIh+LiSL8E1iwkgOEc8AuvgHKLf684RVqD2ClaHDAHlTB1bhPS4GskyaqyXDAMzuHOSJ5JKojhrVi-WTYSITkNVWx+SKPHFRgpExnHiJAMWAqy5wzvad8OX3oAgHRNWUVHDoT3hoq9nw2ciLN-fVEXhCX7G$oBf9zCpKat-i8XaxwmeA78UoMSByKLCjxVqHSE7PP8-YBCWkuz2uBy1pHaxCq38Yi9wMsz28egL8OBByDUe5ROR9yWOp-t9teAeet-SA-MB9cWMjYiboAskjuedrORLBlYLMfL$EMR-$Y1L2qxGv-$BxKYKkY5yyjDTuHp1j7Vke37VM78kpkA+5F5xh8w1unVDboBfCzwb8WHDSZ$23C2TbhNCf8vBEx73xH8-8QyySeuGhxh-fg7SCAxwmBCZeWzi81odN$uRHVmV1yhSr5LQdL1d1ZN+keNLrM9xon1eGjqJ872Ko5uTeAwZEVzo7zuHKeXuG4HMrWeNHPM7k2O3e85zhA6eZwCBCrX-BS8Ie4N1o-oCg7Dp9BkGauFqrB8$xC8XS8MhKl5PEAVSWii$utJF17p3zRUplH-J9AGVyarA$K$R$zSe4sUwGbKIRTuH5HSa$Gp9M$1tnF1AyrBw$u6TvnbQiaS9XfLbYPkeHNN3UpDBBxw9Hk$avBI2TjrN17efaVk4X$aCliRtMkvKeOAa8HYbb6eCSf$mRMU-hlP8vU4vMyhyCKdPMYbsCfyMPnq4RyvUIWcmX$9nYraKGIWZdL84znTB+b+Ah3M2xEA$S6aLKWPTsRgHLAYUnSL8D41wBZyIbRjkO58u9bdBqGbHu3TSjmkvaKGQg-zu-pEAC8uGrEAyhsXNfNaKGl$emSPnOALwQDrEuMTRnAfW8XmqKjA7HgwfrSkwm$2oUQlc44OOE-Zrp-$4f86SeEGEjRpL-M56eo-s8ZnAPJuVmwv-+L1AcLWWoS-R-Qm5PxLdua9lvUDhWM-OgiCiCoqf18gqkjyfluma5YjS$snJfvYv5MlY6rw1xlpwE-+uYcH1J5obCVg9o88DMjDT3BcGYleGhDVlo6Csgn$AoDa1HTkCjgNX28DqnzTV5mGEzGRAWVOfvL9OeKja-2jHfunMcm$W5LnR2gzSrg9Hewx4j2przTSxD8q31qGA6GW-6DCuy5HcpW8rE2VMy2Ldrfn4Y42E$3$Vv6yyhTgssIR$yaqMyhx2pYudVegOlVahJj7YV8Ujyfb-PrO7O63U1-pb-qZe7me8HLIry5f4zeOUy9dpf$aZ4aEL5IMMc4QaQS-7mR3M-nHc8jkq43RfcSRX$wtGHzubFdVSyPaKGkLBALfdLNaNd1-Mqb74cZQiCMfwfXGcfpEYZ8UAHhY63UzocUCyuCUBI4YdjV8er8UzVuxwNjxPMwoA3HVhn4Ga$C1kEzO-gXdoSElBS8nvvXzXLNVDvUUO8nkVPEYM5EwYnGsQx17oPMmAjfMT3EJhAOCIoICme2q4IAvCBM5$GbyKRgAmS3L-NefFPg6T1LKqx4X-3nWs-OMmLYLXs6Yx1xWCcoz4CT3Yy2ctSIUNQu5Lzjg4pdkGPl2FrrdKfNn-xfQY28pqC5O7KEuQBpMOBh7jYC8N58Lxol87fl6gaqUhFE8nTwiNiDWdTMdkhHoQ+kfSHP5rjOpjd9bsEY$LVWw8SaEGFrObDJxv4iazZJ$BRTVuncn24GDSCNxTdtCzd6LjreJIcdKA9Q3fEd2P-Vlnc2aeigDvWDPd9c1e+GzFBiFvRIQzQS9ueBE7qjYfwQM9KXV$UqAYflQhAAaBZURJFldQ5bgJ89ZU-Tp$LUMbam4UdWkyRazZoFmEFXz3NaLK9+SLgkbWhcpan-lFtm3juEZInzZnKiqLhPIZqaiSrK2OUdd9wdQrZbHjOUdjST7Q1ibHj$USwoT8n5hPbSSc86ofzl2hQH2K7WWBfwQ$-zdViIoWJ7xd7ilF2AUkWfc4CMbvzyEDyW+cfrG1G+VQCkfrcECii+zY$UrdGfJDI-PGSMc6Xx-vdNgo+jlyf82TYQgZ9YVFuBQ4TZrvhlYe2DBwZTpQmWYYD65ddiftCyNldmyFgpvcEMLJL1BX7FC8vx$dg+$dX7uwXyXftiEXGN7ZdBvICyh6xtNcAuLvICU-y1tNUAw$vonfhppieSS6$vSnwhoQBkZU6W8UnfNP+maH-wKyKYNW7xGuyFdnTFQD2zTYuHtWrcEnUbJpOnZWjjZ5FC5TejF5ddaiEBzJ9eG5Z6devxd74keG77FjdifBk4Frmd7fQtTpQl4seOnnBEfcEFlWpeiw7PhPTf8i46cewDBzFi+npWbaWJc2EIxWfQSVbjZyuxbA7zFN7vv7gaqNyHCd$3pLoCMdSSc862qvvpzLEP8ropoOkY2xvuJLM8iB2yMbHfdlZsf+N6vr5-o7PHRy8SMscOEQqbZY7HGm8RtE-C9xPM$Pd92nI1usvBY5iyMM+DYh4iLXmvjnO4cVxO8CkMS2888qy5t-M5O88C7GSz8jBMQFL1OY6Edyuu-KhAYZYFL1oTY$7xVHTyT8KEYNMpy52-AwownvrA88MdS28GU82LA238+Smk2Aq$2F-zGj-1uHg$5TjLyzRS5AF2XdXUYPz7ttBzjjSxA-P8L8j$S8HVH8Ro882gCw4PD8vYrZJJxU8U85MlDzoW8CXVg9DSkD1qecDQw9PTtQ8kACpIlHGPVoWDS8rlGPTtg-832UhxQGPrB58x8-9-Qwh9Dts9rhrA8lwy8L87NC32RZaw4X7SHkCBH1DSHY9FtlDPbUA-qzYMwobOFS$YTwxIi8SzJqiJJ85-N9iAZA9jGo-5-8Z+o+OnSM6I98NHTMTOSCet-FHXc9818dIYo-SgLLXoHwzSdy3nHWSwuFKV6JBgSzEY6l8umQhJhd8lzGt+LT-HRrZMilxYeA4OIL8DJYpa4RgOZ3jxVHFZ5t6SryLvHjwKGwALHfwx1IMxN9V8Y$bCTi-Dyq8T8dyiNLsZ8JGMcAE8j3t8-V6BH4o3DF8X8xAHohL8ryf-MpropQYqMdMF5$-ge612TldMZ-h-Y3XLg4XUAjsGrL58U8wxqOI85erNx1avAFH1QYdhMrNHvALoFdVFxYRU-wo88BJR6BLyMeEk+cVHY6PtwtW$+sesUXEVf5tFyCh$MHbA6888Ikyi88"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: Tmehxgpm6ltuXebeu1F9ag==$2gM8GTUg3uX6CGu1osssXw==\r\nset-cookie: cf_clearance=eU_yAoJzOlfoqns5kyAkyfkn91rgso0FR0AXtGdo3ok-1770825303-1.2.1.1-y58EWbwb7SWL2JBzCJkG63hk.IaVkWUK1Sp2TnFOPp9di1KFbssAxqK5hl4hdQ3psWF6FxS8lH_cmUgZLSE5PWk_Sr90YNrk1gDuMRp.otVhyfDINZyd7q1GklLBQN93.29_XsqcnmRPGC3I1ngtd_mbEDSAyKDzOv2hU4sgZL20I2X6kWaZznxyd6yageFQfRP0PyENdom5XE.a1ebHMYPEgJu5Gm6FZoPsn4FNeOg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=mega-eth.run; Expires=Thu, 11 Feb 2027 15:55:03 GMT\r\ntiming-allow-origin: https://mega-eth.run\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cc507438b389926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T17:43:05.502825Z","times_seen":17783072,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T15:55:02.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:02 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 16:41:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9snUWjSjtTHPIonbJyd%2Bap5PDMrKuS7fPvby4rPqqvE3IHLMQlJyS7I5dzGJBj4%2F4i56arhzVwrmqIf7u%2FXiS8%2FLEuPu1PolJE%3D\"}]}\r\nage: 4662\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cc5073ecbf40a1f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246341,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (549)","md5":"c8a3fb38f553ed9a4580d0934513544a","sha1":"c9f2126febf71b1564900471bc41cc4ab0c153cf","sha256":"d171bb9014623f48a8992ec3ae52e29a6c70de50acd37fd5f84de892f5bee16a","sha512":"99f67a5dd15991899143d4f21762d0c22e527b3ca60dd288c5b5d359e70f6c881e90a762ddca4d11e5a5a2a1fbc8c1de48e6c0f90970f64dffc37c5599a75193","ssdeep":"6144:eWpbMkV3JmFJ6Hf+pju3ZT/OnbnV0/neaRXuiX4:e2LVZmH+fJZT/seFP4","tlshash":"6234cf15fe63c076a93be03e67ea664fb67170038615f7cc3bdc91418f826ba1963a14","first_seen":"2026-02-11T15:55:29.16191Z","last_seen":"2026-02-11T15:55:29.16191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":53,"dns":22,"connect":8,"send":0,"wait":41,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/css2.css","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-eth.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 16:41:45 GMT\r\netag: W/\"697647c9-1aa9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 4661\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxZ7eDfI2isXC%2BbaIY0zAUUBF9Lilu6Ys3YF6%2BesfCGssUAJHIv%2FXMAqT92vlroWyuKM828GDZJn%2FbRB1KKEtBwggslvrPJBw44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc507400fc39926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6825,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0f22ec54af3f7da1915721ba0038b47a","sha1":"61950b4213eb7d5ae62bfd073cb577966a6ea88b","sha256":"f6b590d5de76a75fb96027c9a56f6b35d0eb238154b3943ae590c06a6a23fab7","sha512":"067b597ccad2b22913582eb646f09dd83f555d1df683f16df82cab54c5f36465922df9abd0d778cdd577e1722f2bd63c04d1dd59eace89e485721fea924bb2cb","ssdeep":"192:9TNSbO34o5DMTOB0O3/v581Tro9O3iS5lp:NvWsk1H","tlshash":"c5e17b91002ba400a7970cc677ce3f3aaedd6144a049da782ffd0d8a6cdeda953a175d","first_seen":"2025-08-21T04:37:09.159515Z","last_seen":"2026-05-07T11:37:11.69937Z","times_seen":15,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/chunk.21.uuef2pf5.js","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /chunk.21.uuef2pf5.js HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-eth.run/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 16:41:45 GMT\r\netag: W/\"697647c9-12dd1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 4661\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pV06AZ2PJANJiZPla1Iv8W7FHYOQ7FOtwd2vDGTStxlGZhW5W7Ncvo0BB3cCdIKe864GHI%2FTEgbJGk8AP9jLsA%2FWEA0h6oGs1c0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc507400fca9926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77265,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc7a9c4717c7f8de7cbbbe36c05215a6","sha1":"203013379845395b0a6490ce7d3d04b553fc3fa8","sha256":"5d087e9cdc7a6842c6eefee7863d4c3a9815f0380f9d574c182b462d67ca6a55","sha512":"4ab28f7b71ec52f6e25774231140bf6928fa2965a6e3e973b2c8312e88a0482a414174e58f188cd24379ed2b6399cdb00103e719e0b3fc0c71a15d385e1ac9f0","ssdeep":"768:+2TdKcruf/xJdvD6UNpHzyuK1ZFm1+lDX0RTfjNE4M8c+SLE7ct4s7P2cm5Us1cz:Qf5bD6UrTyu6zm1bxp8nscHt","tlshash":"3873a5e6954ad0d98e2124cdd477f808e06849a3cdadf153ea6cddc6b42df62c48723b","first_seen":"2026-02-11T14:37:53.070558Z","last_seen":"2026-02-11T15:55:29.163704Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-eth.run/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48532\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 16:41:45 GMT\r\netag: \"697647c9-bd94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 4661\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwbxetZp2uT7zCOHcWyzvf3yYqpF03YtykaR3fD1LH%2BTC2ntY41uTOvzjqETCZFmr4Fz0ujLI57IWJhIlp%2BVT%2B%2FJzhcfUYSQMYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc50741894d9926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T17:39:20.400408Z","times_seen":254952,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-eth.run/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48532\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 16:41:45 GMT\r\netag: \"697647c9-bd94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 4661\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiHUu1I0LFhrYgr1KSc7%2BrFmlbsP6KsvJAYs%2BFVuC9cuylloh7JN3WJS7fJRZbZ0KVZ5Hm5%2FruRfoaQKEtnMFhX6ebd4aH8k1JY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc5074189529926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T17:39:20.400408Z","times_seen":254952,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/favicon.ico","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega-eth.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 16:41:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 4661\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2%2Bf9n5qFRjO3Yx6BYyp7h8QlkxiBA5pnd3KPg4Lg7eP%2F0KYxP5HGrbkDpV%2FhisAG76jD9iWrwzpLrPqB2zRia6i6WLCuUCQDH4%3D\"}]}\r\netag: W/\"697647c9-cde\"\r\ncontent-encoding: br\r\ncf-ray: 9cc50741e9b09926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3294,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bf57820134b35af7f4f02e9f1ba7cff8","sha1":"7cfb7f2195e3b94f9e53e611524667ddae69041d","sha256":"84a09aa8c59d97079a5125e2c38cdaa5f698eedadefeb9b966c82d15fdf333d6","sha512":"5491a61121fd9a99b3e1ac1e213f774d9a4eedf5e65aeb3ba55bc7c474a50387eed265daee77471fbeadbdbf2c20c90b64ab7dffcefa23f14701e025100cd0b8","ssdeep":"","tlshash":"0f615ddfc812951597290e22bc1fddcaf9ad02f5db30cc61bf926431f62b91d951a138","first_seen":"2025-09-03T17:27:13.432757Z","last_seen":"2026-07-08T12:41:38.465943Z","times_seen":131,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cc507428a4c9926-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21031,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21031), with no line terminators","md5":"1aefc346db025642f2362e236b19a5b5","sha1":"4b85a046200e21061d51ca83140e56923f3b6fad","sha256":"407d26958e8e81a91f05bc6c9d65da5442cff331c872f4940bd78f86301afd6a","sha512":"e4a5d12daaf1210172f85df7b7e5cbcc200d4b32374033f9136d5f605082efeea6a5d3a3a6991b02fc264b74ae38df58b27780b50b9f6fa0d39a0cc87b19c337","ssdeep":"384:aEhg2Kgd9OmP5KRxmRgoqjlAC/kS1RfJv6leISlbhOCNKQtio:aEhvkngtgn5v6l6u1Qt5","tlshash":"b992b6df36c9b428936730b2146736c671afbc957c2c0e05c110edf8faa27d95466ea8","first_seen":"2026-02-11T15:48:14.236364Z","last_seen":"2026-02-11T15:55:29.166081Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mega-eth.run/secureproxy?e=jscdn/getFile","fqdn":"mega-eth.run","domain":"mega-eth.run","tld":"run"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega-eth.run/","date":"2026-02-11T15:55:03.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega-eth.run","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 15:50:32 GMT","end":"Sat, 25 Apr 2026 16:48:37 GMT"},"fingerprint":{"sha1":"ED:8E:EB:31:18:BF:52:E1:96:3E:E0:4D:8B:D6:F5:4D:EE:B1:B2:72","sha256":"BD:49:31:53:C5:AB:CF:03:C0:95:51:95:48:F3:A5:9A:B8:D3:AA:8E:0D:64:C8:4F:75:28:FC:5C:EB:A0:54:50"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: mega-eth.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega-eth.run/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://mega-eth.run\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"j1u8zwn6rrxuivtrxj37\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 15:55:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2FK%2BnToI7HJuHjJ3kYv3QXuDdfoWEjoCUJiGHdLkFVpjYtTVXBHdMT1d141FrULOpeQmsTBXRloW3zwjP24IWwA3TMXy4JACextJYmyzS6E%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cc50742ba719926-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4028362,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9947076557db1032aa35c63f9ed2d653","sha1":"46e1145e0db784c49a1252bf9f0522990f5c2f24","sha256":"3423540426e82edfaa4c1e581b0ec2a5a3c541bf21b92cbe629390298f3532e9","sha512":"77aed9e5007120aefe907874146951dbee3498dfc3b14af4a12d6af3d6f114d746feeda58c95e24b0a8f15013bcbf559e0f94c6c7fe86b8fc39c7813145343c1","ssdeep":"24576:G7M0RgaJ1ePB7LFQUXTyMmS5yMkylmdJUScCa7omWT7U:G5evBuMmSuESUeacmWTI","tlshash":"702523432f53f6a10e5467bea0b72d1b25a01e608c5cd0eedfd8d4d63055be508ab62e","first_seen":"2026-02-11T14:37:53.066205Z","last_seen":"2026-02-11T15:55:29.166908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":442,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"mega-eth.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}