{"report_id":"a3690585-0623-4f75-b0f8-d0136426b9b3","version":0,"status":"done","tags":[],"date":"2026-09-25T04:37:44Z","url":{"schema":"https","addr":"mgmarket6.cc/","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mgmarket6.cc/captcha/183466/index","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"title":"MEGA: MGMARKET6.AT | mgmarket6.cc | mgmarket6cc | mgmarket6at","dom":{"size":55150,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14173)","md5":"bd7bf1028a23ad05fc51c7bbc049f7dc","sha1":"a7e394336a862653e06ec6a17b34cfce1e8f5b8c","sha256":"a6fef49ec801fa72ce07127a0ff416d8bd1944173aa7483dce6c1555058d71c7","sha512":"411f758229b31ef44f7ccb5c319acca7e4095fb936dfd56586182ba63e5d527ef4577e06b2f988e11950f8b5bd166a4ad5dfddb6bab9249beb43a1467dc188d4","ssdeep":"1536:TdDnvLMSIrm0O1/+WumshGQvGjyECJorrPmEOFY2TJx3l:BDnT1X/+zmshVECJzrR","tlshash":"6743c0bb36e314012d03f07a9feb99857c16901ff14ec9a93d8c2645dfc869459b6784","dom_hash":"domhashadfd11e18c0684ec20814c7e80a1a362","first_seen":"2026-09-25T04:37:45.894584Z","last_seen":"2026-09-25T04:37:45.894584Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mgmarket6.cc/","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T04:37:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mgmarket6.cc","ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-17","domain_rank":0,"first_seen":"2026-09-25T04:27:39.213538Z","last_seen":"2026-09-25T04:27:39.213538Z","alert_count":8,"request_count":8,"received_data":121553,"sent_data":4352,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mgmarket6.cc/captcha/183466/index","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bc34afa2ca13fad4b8f09eeb94f55e5","sha1":"d3a98b0bc73358504694f1d2a57c22199bb5e0bf","sha256":"0a6390253f3b14164663ca23a8b184d61313bd5949b1c1bb5be3cc5abf7b721f","sha512":"812fee73c5fec07442b17f6015f2c76dba150f2a374ee53ce867f620d05998fe1e49f554b3f612d07a84b27f560e5b0d828531db22f974b05036ee93bcb9f947","ssdeep":"","tlshash":"36e0c2eba7a91512aa6bb12f0d9ec20176b9c45707c4e9403c4cd5559f3296a02ff690","size":359,"data":"","first_seen":"2026-09-25T03:31:29.498552Z","last_seen":"2026-09-25T04:37:45.907264Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/captcha/183466/index","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b920b5a1595e015270efe8b43e8400b9","sha1":"5540243c32bf8fc8374b9ab10cf2acfe59603a6c","sha256":"6aff72c256fd2a8ae2f2a05305490160b46952bbbb6b27957e67c098daf314cd","sha512":"5148e1f2fed0330ede6f3882b514ed9b9d9f75c2ed56de77550480b85167520ba772b7a0442b5b9ad78a53c2e868a9bc67fb5c74c901c98f658878a7657a4b16","ssdeep":"96:+z8aoHmLQ8/dEkREyosc5CCbP8918IHgiJ:+zUGEud7XoscY281HgS","tlshash":"d2a1007f33b318240eabb4bf92db92897912945b384ad4553c0c0518bfd067975b6fca","size":4844,"data":"","first_seen":"2026-09-25T03:31:29.500201Z","last_seen":"2026-09-25T04:37:45.909767Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/captcha/183466/js/ad.js?v=8","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"585b16189b94815aa9c14a4441e5049b","sha1":"0368d98d4909c4086a8fe02570ff0f116b4a6dfb","sha256":"c4817313779c241cb9982ef39e0bcb8dd0af7130408ac477fdfba542215094ad","sha512":"16b22f6ad807fdc540cd6dd7d6bc1bcf4efe9ef59e857bf8bdbe3a71a6f99d98165661b7731871b9b2398d76e0bcc013f9a6367a6e395a58a1a2d906ce49526b","ssdeep":"1536:vrbPmEOFYUWK70K2wejA1atEzc9V2PsVR/KzP+BXi:jIZWY2wejA8OY9V2MVBXi","tlshash":"475302305abbb8632286e009ef037925bf278c47fa435c2bf59cb5921fc9890e5e6545","size":65795,"data":"","first_seen":"2026-09-25T03:31:29.497214Z","last_seen":"2026-09-25T04:37:45.906393Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mgmarket6.cc/","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T04:37:14.689Z","timestamp":1790311034689,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mgmarket6.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_id=124f574a5e1dc631c095623594bbdb20\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 04:37:16 GMT\r\ncontent-type: text/html\r\nset-cookie: session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nmtag: 0\r\nctag: 0\r\ncnt: 6\r\nwhatislove: 0x439\r\ncache-control: no-store\r\nlocation: https://mgmarket6.cc/captcha\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, PATCH, DELETE\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nonion-location: http://mega3tvaobi5tydtkuwfxh26zwa5yyfwxkynb6ghjihldlsxpi6nuwyd.onion/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y2oQfvnOnu5i2fvIdil5s6Cx9y0liRBZMK5ooGeWQru1i%2BCqGSStQ9twfvs8bfYikzjR2GtYWOcsYE0WRoo4lmdDp3yO0TjXGQSOahrzv3Ey6xUb%2BW4R4dJVLpZP%2B0dAAw%3D%3D\"}]}\r\ncf-ray: a407551ec8570b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"session_id","value":"124f574a5e1dc631c095623594bbdb20","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T22:43:31.335783Z","times_seen":19039518,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/captcha","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T04:37:16.031Z","timestamp":1790311036031,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: mgmarket6.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_id=124f574a5e1dc631c095623594bbdb20\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 04:37:16 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nmtag: 0\r\nctag: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, PATCH, DELETE\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Br0G6wgcl7MzgCjHBFhyITQEeAeBVTNVQCny7%2Fpapu%2BBjW63f3t4vcAb3zGpqrwB95Oq%2BSAXLvaAMfL%2FPD4c26PEMIqw9jblgFO9VNqRw9gjhfEUaEIOZP%2B4ZVyJT8ehMQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/\r\ncf-ray: a407552738b90b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"session_id","value":"124f574a5e1dc631c095623594bbdb20","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T22:43:31.335783Z","times_seen":19039518,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/captcha/183466/index","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T04:37:16.425Z","timestamp":1790311036425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:14:52 GMT","end":"Wed, 28 Oct 2026 08:14:33 GMT"},"fingerprint":{"sha1":"63:3A:FC:BB:A8:9A:84:4D:16:8C:B7:AA:A1:98:55:20:6A:E1:76:D4","sha256":"AB:BC:9D:75:98:08:90:19:04:7A:BC:A5:C5:6B:F9:86:43:4F:16:21:4C:D3:8C:58:EF:B6:4B:2A:BB:CE:2A:F0"}}},"request":{"raw":"GET /captcha/183466/index HTTP/1.1\r\nHost: mgmarket6.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmarket6.cc/captcha\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_id=124f574a5e1dc631c095623594bbdb20\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 04:37:17 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding, Origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nmtag: 0\r\nctag: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, PATCH, DELETE\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jmb%2B2vKSP2QcEzqcnO04oHNZdlIHJkqv%2FR%2FP0CYcDOtnewPlxjOhoBceDh0frJ6062CRGtpbLnp8I3kqYQYp6bwirZm9xs0fsMwCGeKZl55wPE5%2Bi5xXw0tumbexgoHdsg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/\r\ncf-ray: a4075529a8c80b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"session_id","value":"124f574a5e1dc631c095623594bbdb20","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30574,"size_decoded":16944,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14076)","md5":"74f8a729bcb10396087c53a9bb5dc59b","sha1":"f77664b919f62c138d878e9ca5fdd54b627b4ac9","sha256":"8e250260b3e558779f485f399280fc1f132412594065fac96e6ee907f7044389","sha512":"9978550c17c3e7f84ecdbcf7023706a81d5249024f5a875298feb958fc22ce9ef57c4c2c57e4ee6513e964c05919de7fd7b14fd990a6c1e27631b04563816462","ssdeep":"768:mddcQhvLMSRA7rm0O9PYa/+Wumsw21fquJx3B:mddTvLMSIrm0O1/+WumshfquJx3B","tlshash":"7dd26dbb39f300051c03f07e5feb9b883d29902fa18ac9593d8c6509dfc96955a77b98","first_seen":"2026-09-25T04:37:45.898277Z","last_seen":"2026-09-25T04:37:45.898277Z","times_seen":1,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/favicon.ico","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmarket6.cc/captcha","date":"2026-09-25T04:37:16.530Z","timestamp":1790311036530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:14:52 GMT","end":"Wed, 28 Oct 2026 08:14:33 GMT"},"fingerprint":{"sha1":"63:3A:FC:BB:A8:9A:84:4D:16:8C:B7:AA:A1:98:55:20:6A:E1:76:D4","sha256":"AB:BC:9D:75:98:08:90:19:04:7A:BC:A5:C5:6B:F9:86:43:4F:16:21:4C:D3:8C:58:EF:B6:4B:2A:BB:CE:2A:F0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mgmarket6.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmarket6.cc/captcha\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_id=124f574a5e1dc631c095623594bbdb20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 04:37:16 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FaIu5oFiwHrEchm2AMhHrTalVP1scOEdNmmnr4pivxX8TBH3H6utmRXXefLJ%2BQ7A%2BpshAGXY9lHKCrijDCY%2FKdLeiW4rkCPssmfOdwYBvx%2BkfBunvcy%2FIckqQsl71Y%3D\"}]}\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nage: 606\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 25 Sep 2026 04:27:10 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407552a58cc0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":1212,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 16 colors, 4 bits/pixel","md5":"5590798a04912369f29a14d7f3d1945c","sha1":"d3e7ee2d7c9c08ed22ed000ed589975e88e56fb7","sha256":"8cf73bf270f0ffc3a15f070df1a5ec73fdce9f7ee693d920a5f7d6152d679818","sha512":"bd649ad8c8650bac8e7a520efcbb0bc4b73bdffdf5a3af8a2842991bfea04eb889b76b069c816b78ff5ef91691e16a7617809d7c6dc3d392e0b0e969598357f3","ssdeep":"","tlshash":"90312115b044e3acf4350076ee89e1fc2684dd36de190c077686b39f38b84be8e1a382","first_seen":"2024-10-12T13:56:02.837068Z","last_seen":"2026-10-07T12:28:33.656757Z","times_seen":56,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/captcha/get","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mgmarket6.cc/captcha/183466/index","date":"2026-09-25T04:37:17.685Z","timestamp":1790311037685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:14:52 GMT","end":"Wed, 28 Oct 2026 08:14:33 GMT"},"fingerprint":{"sha1":"63:3A:FC:BB:A8:9A:84:4D:16:8C:B7:AA:A1:98:55:20:6A:E1:76:D4","sha256":"AB:BC:9D:75:98:08:90:19:04:7A:BC:A5:C5:6B:F9:86:43:4F:16:21:4C:D3:8C:58:EF:B6:4B:2A:BB:CE:2A:F0"}}},"request":{"raw":"POST /captcha/get HTTP/1.1\r\nHost: mgmarket6.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmarket6.cc/captcha/183466/index\r\nOrigin: https://mgmarket6.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_id=124f574a5e1dc631c095623594bbdb20\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 04:37:20 GMT\r\ncontent-type: application/json\r\nset-cookie: session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nmtag: 0\r\nctag: 0\r\ncnt: 6\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-origin: https://mgmarket6.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, PATCH, DELETE\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2A%2BxNM5PFMeE0DkOCTbJnkbGAo%2FSswR%2BJLUpzg2NdnBTIL594Wt4MbNzIXZ45Gx%2FVUMBol0hYg5OriW6%2B8UJXVPy8tancOKjIP4Pp7BUP%2BDSylw77xVMTx6w0h%2FT7rmyg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\ncf-ray: a4075531898c0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"session_id","value":"124f574a5e1dc631c095623594bbdb20","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13877,"size_decoded":11470,"mime_type":"application/json","magic":"JSON text data","md5":"513de6b59f33a7c77b11ab84a0d5f138","sha1":"9fec91d6d510e7045d869face7e0a31d07e29199","sha256":"8a6eeb4bcd24a92d9b1f2574024a8e7ea0f4661dfd2db146ec6c1dbb5eeaecf2","sha512":"616fd5dd5174b4c5417e49cd4a55fbcb9c534f7602ff862a1a20f47a51a7722c184f9333a02ce278ec96285259fef1a1495c7f216e17f90b6b6d1ab75a411c88","ssdeep":"384:HDdpyQvGjjxLpYRnxjV7KblY5R5PdG+r9KjP:DyQvGjjVmRnCBCfG+r9KjP","tlshash":"2b52c0b893ea1f323b49709554778c8fdc032807764d85f1cbc21a92d86ef959df8861","first_seen":"2026-09-25T04:37:45.904521Z","last_seen":"2026-09-25T04:37:45.904521Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T04:37:14.397Z","timestamp":1790311034397,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mgmarket6.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 04:37:14 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqojbIHC7r3WSbhkuOCq3vFz1VJm9Q2Csm7PDnQ2IwQZepFrDYBTS%2BfQHGN1RV%2B%2B76xnlZ%2BtQRUBz2IXgbSs5%2FBzQ6OgazeFSzjY3lq6VllAFNrWpuL8Wf%2By1U7Av1k%3D\"}]}\r\npriority: u=0,i\r\nlocation: https://mgmarket6.cc/\r\ncache-control: no-store\r\nset-cookie: session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407551d28510b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"session_id","value":"124f574a5e1dc631c095623594bbdb20","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T22:43:31.335783Z","times_seen":19039518,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/favicon.ico","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmarket6.cc/captcha/183466/index","date":"2026-09-25T04:37:17.252Z","timestamp":1790311037252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:14:52 GMT","end":"Wed, 28 Oct 2026 08:14:33 GMT"},"fingerprint":{"sha1":"63:3A:FC:BB:A8:9A:84:4D:16:8C:B7:AA:A1:98:55:20:6A:E1:76:D4","sha256":"AB:BC:9D:75:98:08:90:19:04:7A:BC:A5:C5:6B:F9:86:43:4F:16:21:4C:D3:8C:58:EF:B6:4B:2A:BB:CE:2A:F0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mgmarket6.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmarket6.cc/captcha/183466/index\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_id=124f574a5e1dc631c095623594bbdb20\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 04:37:17 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=31jymchsDHOGjwc0f35nzNm189xLu9Wfa%2BmVLYFsMdKMdoGAeOcMGnxF%2B%2BEFchUBS24dAHktpPLSpY2%2FaHB9XHgI0jjDBMe9mYVEBliUJAz0zozY4oQ0S9ee8Am5gd0%3D\"}]}\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nage: 607\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 25 Sep 2026 04:27:10 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407552ed9360b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":1208,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 16 colors, 4 bits/pixel","md5":"5590798a04912369f29a14d7f3d1945c","sha1":"d3e7ee2d7c9c08ed22ed000ed589975e88e56fb7","sha256":"8cf73bf270f0ffc3a15f070df1a5ec73fdce9f7ee693d920a5f7d6152d679818","sha512":"bd649ad8c8650bac8e7a520efcbb0bc4b73bdffdf5a3af8a2842991bfea04eb889b76b069c816b78ff5ef91691e16a7617809d7c6dc3d392e0b0e969598357f3","ssdeep":"","tlshash":"90312115b044e3acf4350076ee89e1fc2684dd36de190c077686b39f38b84be8e1a382","first_seen":"2024-10-12T13:56:02.837068Z","last_seen":"2026-10-07T12:28:33.656757Z","times_seen":56,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cc/captcha/183466/js/ad.js?v=8","fqdn":"mgmarket6.cc","domain":"mgmarket6.cc","tld":"cc"},"ip":{"addr":"104.21.41.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mgmarket6.cc/captcha/183466/index","date":"2026-09-25T04:37:17.264Z","timestamp":1790311037264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 07:14:52 GMT","end":"Wed, 28 Oct 2026 08:14:33 GMT"},"fingerprint":{"sha1":"63:3A:FC:BB:A8:9A:84:4D:16:8C:B7:AA:A1:98:55:20:6A:E1:76:D4","sha256":"AB:BC:9D:75:98:08:90:19:04:7A:BC:A5:C5:6B:F9:86:43:4F:16:21:4C:D3:8C:58:EF:B6:4B:2A:BB:CE:2A:F0"}}},"request":{"raw":"GET /captcha/183466/js/ad.js?v=8 HTTP/1.1\r\nHost: mgmarket6.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mgmarket6.cc/captcha/183466/index\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_id=124f574a5e1dc631c095623594bbdb20\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 04:37:17 GMT\r\ncontent-type: application/javascript\r\nset-cookie: session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nmtag: 0\r\nctag: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, PATCH, DELETE\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhQHu%2B9fGjsWKGlX%2FQCZ4n%2FPsMQ8VwfeJB4To6hMGxlbjQ42P5xCvP78%2Fk1o0N9PqnZdEpZluMbXuvu9ZSQQLM2memv9bvAiDtNIBrfM3dRQVHSq%2FGikELPM4l1aGCmfZg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\ncf-ray: a407552ee9370b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"session_id","value":"124f574a5e1dc631c095623594bbdb20","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"session_id=124f574a5e1dc631c095623594bbdb20; HttpOnly; Secure; SameSite=Lax; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65795,"size_decoded":51050,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text, with very long lines (30912)","md5":"585b16189b94815aa9c14a4441e5049b","sha1":"0368d98d4909c4086a8fe02570ff0f116b4a6dfb","sha256":"c4817313779c241cb9982ef39e0bcb8dd0af7130408ac477fdfba542215094ad","sha512":"16b22f6ad807fdc540cd6dd7d6bc1bcf4efe9ef59e857bf8bdbe3a71a6f99d98165661b7731871b9b2398d76e0bcc013f9a6367a6e395a58a1a2d906ce49526b","ssdeep":"1536:vrbPmEOFYUWK70K2wejA1atEzc9V2PsVR/KzP+BXi:jIZWY2wejA8OY9V2MVBXi","tlshash":"475302305abbb8632286e009ef037925bf278c47fa435c2bf59cb5921fc9890e5e6545","first_seen":"2026-09-25T03:31:29.497214Z","last_seen":"2026-09-25T04:37:45.906393Z","times_seen":3,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"mgmarket6.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}