Report - gamingfun.me/generator.php?id=5QJ311.rar

Report Overview

Submitted URL
gamingfun.me/generator.php?id=5QJ311.rar
IP
52.173.151.229
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2023-02-08 02:51:36
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
gamingfun.me	unknown	2020-09-23T22:31:34Z	2023-03-13T04:00:52Z	371 B	376 B	52.173.151.229
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	65 kB	34.120.237.76
ocsp.sectigo.com	487	2019-11-29T12:50:24Z	2023-03-13T08:22:43Z	1.4 kB	3.9 kB	104.18.32.68
grabify.world	unknown	2020-03-11T01:22:23Z	2023-03-13T05:34:42Z	470 B	722 B	188.114.96.1
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.0 kB	8.0 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
mega.nz	16544	2014-11-03T08:55:06Z	2023-03-11T21:04:18Z	1.6 kB	74 kB	31.216.144.5
eu.static.mega.co.nz	64878	2013-01-19T20:02:09Z	2023-03-12T19:56:53Z	18 kB	3.0 MB	66.203.127.11
g.api.mega.co.nz	23332	2013-12-26T03:26:29Z	2023-03-13T08:09:35Z	918 B	920 B	66.203.125.13
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-13T06:00:13Z	1.4 kB	2.0 kB	93.184.220.29
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	35.82.48.240

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-02-08 02:52:16	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .world TLD
2023-02-08 02:52:16	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .world TLD
2023-02-08 02:52:16	medium	Client IP	172.67.68.246	ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)
2023-02-08 02:52:21	low	Client IP	Internal IP	ET INFO Observed DNS Query to Filesharing Service (mega .co .nz)
2023-02-08 02:52:21	low	Client IP	Internal IP	ET INFO Observed DNS Query to Filesharing Service (mega .co .nz)
2023-02-08 02:52:22	low	Client IP	Internal IP	ET INFO Observed DNS Query to Filesharing Service (mega .co .nz)
2023-02-08 02:52:22	low	Client IP	Internal IP	ET INFO Observed DNS Query to Filesharing Service (mega .co .nz)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	mega.nz/secureboot.js?r=1675394342	230 kB	2023-03-13	2023-03-13
Pretty URL mega.nz/secureboot.js?r=1675394342 IP 31.216.144.5 ASN #203055 Datacenter Luxembourg S.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 16:10:03 Last Seen2023-03-13 19:58:15 Times Seen1 Hash ba0feed7b756db25b092af7bee8f0cc6 fea23d28ce65fadfcf99d7bbef993a7b792c5f3f f0c429aac38f09b5765fceebc174f82cdd6cbb9446701c85990725c9e8121bbc Loading...

	http:https://mega.nz/c6ba7468-f179-46ba-959a-82f56a1d79f2	28 kB	2023-03-07	2024-04-16
Pretty URL http:https://mega.nz/c6ba7468-f179-46ba-959a-82f56a1d79f2 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:57 Last Seen2024-04-16 18:35:30 Times Seen348 Hash 30a72b79e1de3f7bb48ac9c38cfe26fb 6e76245e1d5a1ca1ffcb887175874f9ed9293766 c8580c21984ea06cc3b42d1feae90eefc14605b24fc35c8edf1a7982295204d7 Loading...

	http:https://mega.nz/5ae17f91-20cb-4fd7-9c0d-a70a7476ec7a	176 B	2023-03-07	2023-09-20
Pretty URL http:https://mega.nz/5ae17f91-20cb-4fd7-9c0d-a70a7476ec7a IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:57 Last Seen2023-09-20 22:34:44 Times Seen151 Hash 538e1de0fb89119386ebac77847337c1 fdbadf16d4dd9ddebfe4b8d70b32cfbde0fdd1cf 616c821b9e500c6e9a78b08f1cac275539429169c7494c5829885817083fd6eb Loading...

	http:https://mega.nz/a30eef73-49ab-44d2-92ac-0a1cd47e4098	7.3 MB	2023-03-13	2023-03-13
Pretty URL http:https://mega.nz/a30eef73-49ab-44d2-92ac-0a1cd47e4098 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 16:40:01 Last Seen2023-03-13 19:58:17 Times Seen1 Hash 2c4e76a7aeb2c8c9b450265ab203cb28 ae9f5172a625e25e610f5727a978347556d18324 cd64fb0671df6d49f93c493aa0ed51f0f3bc2ac424fb11ea636ca9a25bc26bd8 Loading...

	http:https://mega.nz/164f1123-b976-40e7-8afb-d4572523aa8d	37 B	2023-03-07	2024-04-16
Pretty URL http:https://mega.nz/164f1123-b976-40e7-8afb-d4572523aa8d IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:57 Last Seen2024-04-16 18:35:30 Times Seen333 Hash 039bafef2406979c560430a61c2078ea 649f59b9386398ad8e609ec1a4b338e6656c02f8 2e884b248bc8fd99426b98c9e2b0347d64a1d76e0cbed818a7ed42a09afa75b4 Loading...

	http:https://mega.nz/ffd9e64c-d20b-4273-a9ae-94ab8d95ceb1	73 B	2023-03-07	2024-04-16
Pretty URL http:https://mega.nz/ffd9e64c-d20b-4273-a9ae-94ab8d95ceb1 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:57 Last Seen2024-04-16 18:35:30 Times Seen319 Hash 0dd8130d7db464efa9c71a961b684944 f68efee0c065dc94909e4e28fa9285df751d7fd0 faade5384f10ce8bb1ff7428682f6f67d7f880411e370b8696ddd1364476116a Loading...

HTTP Transactions (75)

	URL	IP	Response	Size
	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 507011ccb9124dcd57e84a90a0965cc4 1a6575d0ac979c7184490cc9836ac4812ad2afd1 01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10248 Expires: Wed, 08 Feb 2023 05:42:11 GMT Date: Wed, 08 Feb 2023 02:51:23 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a cfdba5bc597130461dd67bf6cda53183be592493 60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D" Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11581 Expires: Wed, 08 Feb 2023 06:04:24 GMT Date: Wed, 08 Feb 2023 02:51:23 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash bf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Wed, 08 Feb 2023 02:36:33 GMT content-type: application/json age: 890 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash cc14b0d2f7c451f6431dc87ba54d1d60 bab8bfda6fa3e2f17125353f5147211787dc25d0 b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD" Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6096 Expires: Wed, 08 Feb 2023 04:32:59 GMT Date: Wed, 08 Feb 2023 02:51:23 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash e76071a28ee566dababb3834f46d68ed aebb4e68c1ba2de0f90025283e8ed8470944fde0 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: 9AxGVvTiRZgQtT88PqPOBcxDT8UYbdiRWmVpRx5sdz977lwex0BHQ1tMs+jJXwbnt/vMRd3ghGQ= x-amz-request-id: KKSZYC82EJMYEC3Y content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Wed, 08 Feb 2023 02:45:48 GMT age: 335 last-modified: Sun, 29 Jan 2023 18:44:47 GMT etag: "e76071a28ee566dababb3834f46d68ed" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	gamingfun.me/generator.php?id=5QJ311.rar	52.173.151.229	302 Found	0 B
URL HTTP/1.1 gamingfun.me/generator.php?id=5QJ311.rar IP 52.173.151.229:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /generator.php?id=5QJ311.rar HTTP/1.1 Host: gamingfun.me User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1` `HTTP/1.1 302 Found Content-Length: 0 Content-Type: text/html; charset=utf-8 Date: Wed, 08 Feb 2023 02:51:23 GMT Server: Apache Location: https://grabify.world/generator.php?id=5QJ311.rar Status: 301 Moved Permanently cf-cache-status: DYNAMIC Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" cf-ray: 56137e603e72eeba`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:23 GMT content-type: application/json content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	ocsp.digicert.com/	93.184.220.29	200 OK	280 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 280 B (280 bytes) Hash 1e83fc6268d719a92baa3ff16f6248fb 7a514215aedb71fff7862e45665c791516d13a8b c99f8655195d13c47b4d90861c4103462ba34defe88b8a7b544939f5dd38de5f HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Wed, 08 Feb 2023 02:51:24 GMT Etag: "63dfacd3-117" Server: ECS (amb/6BC6) Content-Length: 280`

	ocsp.digicert.com/	93.184.220.29	200 OK	280 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 280 B (280 bytes) Hash 1e83fc6268d719a92baa3ff16f6248fb 7a514215aedb71fff7862e45665c791516d13a8b c99f8655195d13c47b4d90861c4103462ba34defe88b8a7b544939f5dd38de5f HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Wed, 08 Feb 2023 02:51:24 GMT Last-Modified: Wed, 08 Feb 2023 02:51:24 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 280`

	ocsp.digicert.com/	93.184.220.29	200 OK	279 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 279 B (279 bytes) Hash 7b497b1ba590ee1ebec1fb698fedd12a fdafe7066fc3740e4ade487fc4e641fc65bd503e 16321e1b688d3560ab8bbc1b78297156662610a61fef2baed34c83d6d1c13dd3 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Wed, 08 Feb 2023 02:51:24 GMT Etag: "63e130d5-117" Server: ECS (amb/6BC6) Content-Length: 279`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Wed, 08 Feb 2023 02:14:52 GMT age: 2192 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 9b88bae61bca33aba8aa99f6128db8d9 a07b61fb2458917699613fcae68710941b595416 54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA" Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8436 Expires: Wed, 08 Feb 2023 05:12:00 GMT Date: Wed, 08 Feb 2023 02:51:24 GMT Connection: keep-alive`

	push.services.mozilla.com/	35.82.48.240	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 35.82.48.240:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: vL5Oi+OJsyajOB7oy0PnPQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: u8vDTw6n0oeQTYlo8ILO2cU/Rps=`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 68273225f74fbf7493f395610d7a73fc 5a8779ef5656aeeba23b365aad60b7901c5dd7fc c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19" Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9951 Expires: Wed, 08 Feb 2023 05:37:16 GMT Date: Wed, 08 Feb 2023 02:51:25 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 68273225f74fbf7493f395610d7a73fc 5a8779ef5656aeeba23b365aad60b7901c5dd7fc c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19" Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9951 Expires: Wed, 08 Feb 2023 05:37:16 GMT Date: Wed, 08 Feb 2023 02:51:25 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 68273225f74fbf7493f395610d7a73fc 5a8779ef5656aeeba23b365aad60b7901c5dd7fc c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19" Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9951 Expires: Wed, 08 Feb 2023 05:37:16 GMT Date: Wed, 08 Feb 2023 02:51:25 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 68273225f74fbf7493f395610d7a73fc 5a8779ef5656aeeba23b365aad60b7901c5dd7fc c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19" Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9951 Expires: Wed, 08 Feb 2023 05:37:16 GMT Date: Wed, 08 Feb 2023 02:51:25 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc93fe33d-3033-473c-8315-95eb00ba319e.jpeg	34.120.237.76	200 OK	12 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc93fe33d-3033-473c-8315-95eb00ba319e.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 12 kB (12401 bytes) Hash ed10868ea9554510e43f77dfb8c43877 df0d86c2c53bdec7b8935912e42dc7f82f87aa61 751e95e7dd20802cc4e0b6f208bf5559b0b73efd3ca22a9abafd86cf83ab6420 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc93fe33d-3033-473c-8315-95eb00ba319e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 12401 x-amzn-requestid: 7bfa8a84-c348-4f55-8e8e-befcdd24f026 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_OjPG-eIAMFccA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c47a-06eedb3c7396825f77360755;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:58 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: lXTMw2s8GxQtwjucvNYZeHL-i8ECHbdGThUV5_vn2mKEhArswcO3VA== via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 21:42:03 GMT age: 18562 etag: "df0d86c2c53bdec7b8935912e42dc7f82f87aa61" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6ac124e-27b8-4818-9240-77708d007004.jpeg	34.120.237.76	200 OK	4.2 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6ac124e-27b8-4818-9240-77708d007004.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.2 kB (4168 bytes) Hash 845e4e4051f1162b20d3df5f208e8d3e 076462f67531c60b31ec768a275c96317292306d 40996d8929ab92f342328fc018518d6131c6222b0ec23051775eda276a602026 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6ac124e-27b8-4818-9240-77708d007004.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4168 x-amzn-requestid: 24814225-0063-49fb-86ff-e78869538b3c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_OjQFS_IAMFtLQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c47b-67307c42182089b3096e98b5;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: f90qZAgSmdYFuW_BDTZVivBlk_c5SrirTSeJmvoysOmCcOjxtFZrbA== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 21:42:03 GMT age: 18562 etag: "076462f67531c60b31ec768a275c96317292306d" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06b5f2a3-c53c-4690-b548-2c3d0f556f73.jpeg	34.120.237.76	200 OK	8.6 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06b5f2a3-c53c-4690-b548-2c3d0f556f73.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.6 kB (8629 bytes) Hash 02fde25be5ded120af759d19d8304f73 8d2a4d9ab5947113ce0737d4d4bed3e30a971026 7cdf26668cca22f28eee047d3fcf30cea8d97b1d8804fe2132728f26cd11558d HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06b5f2a3-c53c-4690-b548-2c3d0f556f73.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8629 x-amzn-requestid: cc20d28e-3937-4826-97ef-100fb5dd2645 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_O7LFn3oAMF61A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c514-6e764236604212fa26dab38a;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: GIAPTJF7sfpuubLSngEDMrowvBWW5c1xRlyVf7PQ3o6rGWdFITVioA== via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 22:15:10 GMT etag: "8d2a4d9ab5947113ce0737d4d4bed3e30a971026" content-type: image/jpeg age: 16575 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffcee4072-2c9e-4db4-b200-065a1ef67ace.jpeg	34.120.237.76	200 OK	10 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffcee4072-2c9e-4db4-b200-065a1ef67ace.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10 kB (10202 bytes) Hash f175de8eebe398f5de2829cd551b3f04 e6da63e9b03289bfded190d999a20da78232437c b5d1ee4bd6186cbac1e4ac037766c9e453e166b0cfb2e08004cb11b8bb7daa88 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffcee4072-2c9e-4db4-b200-065a1ef67ace.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10202 x-amzn-requestid: 15e6c7ee-acef-4638-9a15-a01864ac74f6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_PEYFZOoAMFzEA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c54f-3681217a71e5b9472b9cdb8a;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:40:31 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: PyOVGtKFSYIU2don5C7_L_pTUxdP_VEAhLZUhtBWo2PZ4kvPqaTg9g== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 22:13:47 GMT etag: "e6da63e9b03289bfded190d999a20da78232437c" content-type: image/jpeg age: 16658 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg	34.120.237.76	200 OK	10 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10 kB (10058 bytes) Hash a9c2a9eee923b84d4e06438a8b2acaff 520b122e3ce52220af153fee26bb7067283f9075 9ff4236fdcd05210a9c8bb48ea68179e142b1b05c8b19dd66282590dff69fa22 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdcf61053-67f6-4767-ad44-fa802c5ef5b4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10058 x-amzn-requestid: 94374454-1e89-4c43-895b-0a90f39b851d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f_O5vEgcoAMFctg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e2c50a-0bf11cad4b0818c36188ba91;Sampled=0 x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:22 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 1R4SRNvqhRHbrDZsGB06NJbBXf8WRgJEHmXTbop8pqf8etTJSlmQwQ== via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 22:06:05 GMT age: 17120 etag: "520b122e3ce52220af153fee26bb7067283f9075" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg	34.120.237.76	200 OK	13 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 13 kB (13160 bytes) Hash 003fc35e140a75a12b7795c3986426ec da002b22e2a01f48a545b369d4403eabb17a10d5 bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 13160 x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fzVxSHh7IAMFjAg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0 x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: qwSN-ztVJgRfu3bFIjYaVYV8Cnx77j1ugkRjqhRtRXdPju7AhEMg-A== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Tue, 07 Feb 2023 07:15:46 GMT age: 70539 etag: "da002b22e2a01f48a545b369d4403eabb17a10d5" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	ocsp.digicert.com/	93.184.220.29	200 OK	279 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 279 B (279 bytes) Hash 7b497b1ba590ee1ebec1fb698fedd12a fdafe7066fc3740e4ade487fc4e641fc65bd503e 16321e1b688d3560ab8bbc1b78297156662610a61fef2baed34c83d6d1c13dd3 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 4 Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Wed, 08 Feb 2023 02:51:28 GMT Last-Modified: Wed, 08 Feb 2023 02:51:24 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 279`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash fbdd1f4251ef4aace409c8bdaf2f7545 c96f990dc67cfef435fe7a50c6a4b0009b782c1c 4474a6c4713c0818c3e502f3d2f5c1fcc2322f7a166747cef6d806048ef88183 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "4474A6C4713C0818C3E502F3D2F5C1FCC2322F7A166747CEF6D806048EF88183" Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7135 Expires: Wed, 08 Feb 2023 04:50:24 GMT Date: Wed, 08 Feb 2023 02:51:29 GMT Connection: keep-alive`

	mega.nz/file/6mQRiSib	31.216.144.5	200 OK	912 B
URL HTTP/1.1 mega.nz/file/6mQRiSib IP 31.216.144.5:0 ASN #203055 Datacenter Luxembourg S.A. File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 912 B (912 bytes) Hash ff1d7a880ab6f77a84a86d77c0fc697f 70e9703b55af4905f8ebc95d2b2bdf7864ee24e1 6112bed9ba024f1499048530cc7e3be18ecbbcdfc2ea1936b9e9fe4192dd2472 HTTP Headers `GET /file/6mQRiSib HTTP/1.1 Host: mega.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1` HTTP/1.1 200 OK Content-Type: text/html Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Content-Encoding: gzip Content-Length: 912 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: DENY X-Robots-Tag: noindex Set-Cookie: geoip=NO Content-Security-Policy: default-src 'self' data: blob: .mega.co.nz .mega.nz .mega.io http://.mega.co.nz http://.mega.nz http://.mega.io wss://.karere.mega.nz wss://.sfu.mega.co.nz .karere.mega.nz:1380 http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342; script-src 'self' .mega.co.nz .mega.nz .mega.io data: blob:; style-src 'self' 'unsafe-inline' .mega.co.nz .mega.nz .mega.io data: blob:; frame-src 'self' .megapay.nz mega: .megaad.nz https://mega.nz/ https://mega.io/; img-src 'self' .mega.co.nz .mega.nz .mega.io data: blob: mega.nz Connection: Keep-Alive

	mega.nz/secureboot.js?r=1675394342	31.216.144.5	200 OK	67 kB
URL HTTP/1.1 mega.nz/secureboot.js?r=1675394342 IP 31.216.144.5:0 ASN #203055 Datacenter Luxembourg S.A. File type Unicode text, UTF-8 text, with very long lines (22407) Size 67 kB (67116 bytes) Hash 75b230e4afaa296fcb82f4a4878cbbd0 2f98e27dcffed3d64523d5902915e887b3049d7f ba7d456cbeb7f6cfdc8fe2752b6979ddc23cd6ead5eed9d4654c802caf3f778e HTTP Headers `GET /secureboot.js?r=1675394342 HTTP/1.1 Host: mega.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/file/6mQRiSib Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 67116 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Content-Encoding: gzip`

	mega.nz/loading-sprite_v4.png	31.216.144.5	200 OK	3.4 kB
URL HTTP/1.1 mega.nz/loading-sprite_v4.png IP 31.216.144.5:0 ASN #203055 Datacenter Luxembourg S.A. File type PNG image data, 222 x 560, 8-bit colormap, non-interlaced\012- data Size 3.4 kB (3414 bytes) Hash d2aae9f202c03e46c66d8319203bb480 242ac3ecb0c1a0af0e8049e1bfab919a110f4e7a c5fe532b638805ce8673cf9967ec017c1c197cc3027038caa7951a3cfb45b070 HTTP Headers `GET /loading-sprite_v4.png HTTP/1.1 Host: mega.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/file/6mQRiSib Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3414 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400`

	mega.nz/favicon.ico?v=3	31.216.144.5	200 OK	1.0 kB
URL HTTP/1.1 mega.nz/favicon.ico?v=3 IP 31.216.144.5:0 ASN #203055 Datacenter Luxembourg S.A. File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Size 1.0 kB (1029 bytes) Hash c46459376700d4981418ffa1f2454d3a 27b66079c8c20d62d9be54c784433f5d59239192 023bd36da4b895f47efcb31f1e1d105c67d941877a5dfd3edaf9bb9889e8333f HTTP Headers `GET /favicon.ico?v=3 HTTP/1.1 Host: mega.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/file/6mQRiSib Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 1029 Cache-Control: max-age=8640000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: MEGA-Chrome-Antileak Access-Control-Max-Age: 86400 Content-Encoding: gzip`

	ocsp.sectigo.com/	104.18.32.68	200 OK	471 B
URL HTTP/1.1 ocsp.sectigo.com/ IP 104.18.32.68:0 ASN #13335 CLOUDFLARENET File type data Size 471 B (471 bytes) Hash 2f9e662092873ce81703145760bd8fe3 88b68b7a2264bb1ba7efc120f43e9fa822c36bb5 4e47dcf415e928c7267b25aec393cd3a2f67031c06947765513d07e6587fa42e HTTP Headers `POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 08 Feb 2023 02:51:29 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Last-Modified: Tue, 07 Feb 2023 13:03:28 GMT Expires: Tue, 14 Feb 2023 13:03:27 GMT Etag: "88b68b7a2264bb1ba7efc120f43e9fa822c36bb5" Cache-Control: max-age=554517,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb6 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 79611054bf2ab505-OSL`

	eu.static.mega.co.nz/4/js/mega-1_b2b322241902d729911f514f678ed7ba7fdd827fc7a83fd336c004535111c645.js	66.203.127.11	200 OK	116 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-1_b2b322241902d729911f514f678ed7ba7fdd827fc7a83fd336c004535111c645.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type Algol 68 source text\012- Pascal source, ASCII text Size 116 kB (116218 bytes) Hash 064e241854a7568107bb2e5995040eed db5ebdf643a3bcf01adc44e5a162f870d4d169ba 4e6cc74cc8bbe7426518f88c7f1aaa0520b32d9838af1c044c476b858f57b081 HTTP Headers `GET /4/js/mega-1_b2b322241902d729911f514f678ed7ba7fdd827fc7a83fd336c004535111c645.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 116218 last-modified: Fri, 03 Feb 2023 04:54:35 GMT vary: Accept-Encoding etag: "63dc938b-1c5fa" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-2_ba28b82eb9acf8af1453e35f5d28607989c1de332f71d4e7644b7ec24f716e08.js	66.203.127.11	200 OK	124 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-2_ba28b82eb9acf8af1453e35f5d28607989c1de332f71d4e7644b7ec24f716e08.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text, with very long lines (411) Size 124 kB (123653 bytes) Hash 906df70f4a0113a2a56301b4f7c20e23 bd6f8e41932e9585fe0c1447bd605ddb4bd47bb6 b898500bc5d3069d5210540dcfa42a2afd63f9162bffcc995dc4af54a3de20de HTTP Headers `GET /4/js/mega-2_ba28b82eb9acf8af1453e35f5d28607989c1de332f71d4e7644b7ec24f716e08.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 123653 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-1e305" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	ocsp.sectigo.com/	104.18.32.68	200 OK	471 B
URL HTTP/1.1 ocsp.sectigo.com/ IP 104.18.32.68:0 ASN #13335 CLOUDFLARENET File type data Size 471 B (471 bytes) Hash 2f9e662092873ce81703145760bd8fe3 88b68b7a2264bb1ba7efc120f43e9fa822c36bb5 4e47dcf415e928c7267b25aec393cd3a2f67031c06947765513d07e6587fa42e HTTP Headers `POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 08 Feb 2023 02:51:29 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Last-Modified: Tue, 07 Feb 2023 13:03:28 GMT Expires: Tue, 14 Feb 2023 13:03:27 GMT Etag: "88b68b7a2264bb1ba7efc120f43e9fa822c36bb5" Cache-Control: max-age=554517,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb3 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 79611054c8390b49-OSL`

	eu.static.mega.co.nz/4/lang/en_b23f0882c8776bb3d4c53c251c51780e5969e7ad2563ec092676cb057eead1db.json	66.203.127.11	200 OK	96 kB
URL HTTP/2 eu.static.mega.co.nz/4/lang/en_b23f0882c8776bb3d4c53c251c51780e5969e7ad2563ec092676cb057eead1db.json IP 66.203.127.11:0 ASN #205809 MEGA Limited File type JSON data\012- , ASCII text, with very long lines (725) Size 96 kB (96525 bytes) Hash f45fbb59d002d88629fb2f0677655a92 c7abae829dfef3e295eb0dbf50f437ba9b29184e 893d54a31fbec7cd1bd085baa3568afa4db599d31f565bc1e083de3843af0214 HTTP Headers `GET /4/lang/en_b23f0882c8776bb3d4c53c251c51780e5969e7ad2563ec092676cb057eead1db.json HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/json content-length: 96525 last-modified: Fri, 03 Feb 2023 04:54:29 GMT vary: Accept-Encoding etag: "63dc9385-1790d" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-3_85b6d0979d05083a2c2703be1a70faaaa2fa7a809582db97accac130ead0ff66.js	66.203.127.11	200 OK	103 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-3_85b6d0979d05083a2c2703be1a70faaaa2fa7a809582db97accac130ead0ff66.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 103 kB (103159 bytes) Hash 8fd5f6cd9c5eb519876334edc45e7111 772eb147243916a369d06f1f9ff545e00846eae7 128cbb6980e300913d1a6af2d38812d5b6253e6c25615db3e50b5a4d95a57cab HTTP Headers `GET /4/js/mega-3_85b6d0979d05083a2c2703be1a70faaaa2fa7a809582db97accac130ead0ff66.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 103159 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-192f7" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-4_2dd5baa057c1a72adccd9b15d3fcb56ebf848c0f7f0a78d18d9b2a2bee5cb49a.js	66.203.127.11	200 OK	115 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-4_2dd5baa057c1a72adccd9b15d3fcb56ebf848c0f7f0a78d18d9b2a2bee5cb49a.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 115 kB (114665 bytes) Hash 202888d707e81946ed3537615dce03d5 add1a3c06f76064783901c482a67768d26a8969a e66757e10899c6736cd95b051591ea15afa4d59dbf48b7ed986a4f0ccf865f6f HTTP Headers `GET /4/js/mega-4_2dd5baa057c1a72adccd9b15d3fcb56ebf848c0f7f0a78d18d9b2a2bee5cb49a.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 114665 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-1bfe9" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-5_8bb276bf45de070e564bfb9e40b08184c22f0974a1cc21afddc1540ef5ec0ab9.js	66.203.127.11	200 OK	117 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-5_8bb276bf45de070e564bfb9e40b08184c22f0974a1cc21afddc1540ef5ec0ab9.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 117 kB (116891 bytes) Hash 8a3efbd6302db010d0f6f9fb33be7609 b437b47351a289fe4ac75c575a66df07827e5d83 0da0c3540d4957ef2f952c5459ddf16045398be926d465ef78695f617348a7ba HTTP Headers `GET /4/js/mega-5_8bb276bf45de070e564bfb9e40b08184c22f0974a1cc21afddc1540ef5ec0ab9.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 116891 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-1c89b" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-6_dba475da36bd4be0814311aa8e53663ec6a05d08f3b0c38dca97f7cf273baf12.js	66.203.127.11	200 OK	114 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-6_dba475da36bd4be0814311aa8e53663ec6a05d08f3b0c38dca97f7cf273baf12.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 114 kB (113926 bytes) Hash 62624ea89fc349292dcaedecc3a94ba8 d8d9e27ad4e48070943b9fadf066d070c90ed124 c6392b898168da728f69c7cef744be87768f041cf88968830931ca73c5a8f06d HTTP Headers `GET /4/js/mega-6_dba475da36bd4be0814311aa8e53663ec6a05d08f3b0c38dca97f7cf273baf12.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 113926 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-1bd06" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/css/mega-1_adf302354fcd39f23ddd0ec3fd04b57512d849f82ece1d6a5b91186fd88686fd.css	66.203.127.11	200 OK	84 kB
URL HTTP/2 eu.static.mega.co.nz/4/css/mega-1_adf302354fcd39f23ddd0ec3fd04b57512d849f82ece1d6a5b91186fd88686fd.css IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text, with very long lines (764) Size 84 kB (84047 bytes) Hash 1a0788d61c67af4483b608b0a310f1af 1f13006091421cc2458082db6946ff0bd0e7e7e1 9988985ddf2fb4b50658b99c5cf09c82341a18316f32c1ce0e903076e8457f94 HTTP Headers `GET /4/css/mega-1_adf302354fcd39f23ddd0ec3fd04b57512d849f82ece1d6a5b91186fd88686fd.css HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: text/css content-length: 84047 last-modified: Fri, 03 Feb 2023 04:54:37 GMT vary: Accept-Encoding etag: "63dc938d-1484f" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/html/templates_41745a8ebc9517011e407a0645c468bd53791c2701c88ab304538df7f3d7786c.json	66.203.127.11	200 OK	105 kB
URL HTTP/2 eu.static.mega.co.nz/4/html/templates_41745a8ebc9517011e407a0645c468bd53791c2701c88ab304538df7f3d7786c.json IP 66.203.127.11:0 ASN #205809 MEGA Limited File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators Size 105 kB (105165 bytes) Hash a0e9aed13f572981c213f056df694b94 c3ea71378e75f7f9476bb8f1bc2fa6f0da32b68f c1730b9b4da37857c3fe2b2eeeed979008cfd950e60de74a7cb94d1e87fc1505 HTTP Headers `GET /4/html/templates_41745a8ebc9517011e407a0645c468bd53791c2701c88ab304538df7f3d7786c.json HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/json content-length: 105165 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-19acd" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-7_6c9ed9a20e56ce5d8ef792e48f2ad22030a5024b57535a7d91fb593b386d471a.js	66.203.127.11	200 OK	14 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-7_6c9ed9a20e56ce5d8ef792e48f2ad22030a5024b57535a7d91fb593b386d471a.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 14 kB (13963 bytes) Hash f4c4a0ccaa19aca7eb15b31cee2b2c6c c1db91987dc7a16dbc8e822dd0bcc1eb18c52c27 b8ee5b02e1faa5634c925a2b9487137e418fad4d3b2ef6602d289172c4ed76c4 HTTP Headers `GET /4/js/mega-7_6c9ed9a20e56ce5d8ef792e48f2ad22030a5024b57535a7d91fb593b386d471a.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 13963 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-368b" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/css/mega-2_7f0ee6cfe3324b6510728b6d87843402874bc128863f1e124639f9b27947ae98.css	66.203.127.11	200 OK	4.0 kB
URL HTTP/2 eu.static.mega.co.nz/4/css/mega-2_7f0ee6cfe3324b6510728b6d87843402874bc128863f1e124639f9b27947ae98.css IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 4.0 kB (4010 bytes) Hash 0bc6bdb2df7732a044849b1c60f687de 2cb740b9177d3cdc4c2cc2efa6fe604cdc22a704 1e9c7c75ab4fb2ba971db484ffe028f0591b64443760939c701ba1052753b497 HTTP Headers `GET /4/css/mega-2_7f0ee6cfe3324b6510728b6d87843402874bc128863f1e124639f9b27947ae98.css HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: text/css content-length: 4010 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-faa" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-8_d34d5bbc7d89d7a30e5a09a8782e0f62071b58391a3c9e4ab007102cfddc0f00.js	66.203.127.11	200 OK	99 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-8_d34d5bbc7d89d7a30e5a09a8782e0f62071b58391a3c9e4ab007102cfddc0f00.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 99 kB (98673 bytes) Hash 81522629675330f5f4ad9931335be0c0 0af4508d7c96c30f891b4ba65debfeec63b6074e fad7f9c8208c730a7d2975f2a09d452b6790b1bffaa21671f7aceabaee6a5bc0 HTTP Headers `GET /4/js/mega-8_d34d5bbc7d89d7a30e5a09a8782e0f62071b58391a3c9e4ab007102cfddc0f00.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 98673 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-18171" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/css/bottom-pages-animations.css-postbuild_47f7d58d40f84e7fa878532d05a625c2b9700c9300276decec0cbc374c0a5644.css	66.203.127.11	200 OK	1.5 kB
URL HTTP/2 eu.static.mega.co.nz/4/css/bottom-pages-animations.css-postbuild_47f7d58d40f84e7fa878532d05a625c2b9700c9300276decec0cbc374c0a5644.css IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 1.5 kB (1485 bytes) Hash 2ce9b3c2df8d1487675990f5e0f602db c8f5bbc4844e1e3e9bcf4bd9f7582c66711c4fb9 966e8d0975f73304d52264f4163a7cde804381a64d3e16f71d329e917c392ace HTTP Headers `GET /4/css/bottom-pages-animations.css-postbuild_47f7d58d40f84e7fa878532d05a625c2b9700c9300276decec0cbc374c0a5644.css HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: text/css content-length: 1485 last-modified: Fri, 03 Feb 2023 04:54:37 GMT vary: Accept-Encoding etag: "63dc938d-5cd" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-9_7ebf1265d2bdefaf7e41dc63f125f7120a7cbc381cf24ffb21e04687105b56e9.js	66.203.127.11	200 OK	115 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-9_7ebf1265d2bdefaf7e41dc63f125f7120a7cbc381cf24ffb21e04687105b56e9.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 115 kB (114978 bytes) Hash df08fa84070dc22b63d8c217b8db293f 4032d71e0149960e374a87d6f577182a368455ae 850f74bb4f81432365695c73ee43ec9751ebe9a0339d8f73b7931117e7ef5691 HTTP Headers `GET /4/js/mega-9_7ebf1265d2bdefaf7e41dc63f125f7120a7cbc381cf24ffb21e04687105b56e9.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 114978 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-1c122" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/css/mega-3_b06d0787fb27dea109a8f04321ebe246698a7a5e1dd19e0c37f0ce2225a71ee3.css	66.203.127.11	200 OK	24 kB
URL HTTP/2 eu.static.mega.co.nz/4/css/mega-3_b06d0787fb27dea109a8f04321ebe246698a7a5e1dd19e0c37f0ce2225a71ee3.css IP 66.203.127.11:0 ASN #205809 MEGA Limited File type assembler source, ASCII text, with very long lines (550) Size 24 kB (23808 bytes) Hash 3dd7584dea3f8563ac200c0698958f8b e965ca95ad3006b1747265a482cd5af27144f702 e3ddaad5271babfa7c4896cc9c250f8f0a76ea491a739861c44a955f7d99ec60 HTTP Headers `GET /4/css/mega-3_b06d0787fb27dea109a8f04321ebe246698a7a5e1dd19e0c37f0ce2225a71ee3.css HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: text/css content-length: 23808 last-modified: Fri, 03 Feb 2023 04:54:37 GMT vary: Accept-Encoding etag: "63dc938d-5d00" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-10_abc43c59b2b4fbb98831d29b774422935a110295d72f6acb0d049f5cc476565c.js	66.203.127.11	200 OK	106 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-10_abc43c59b2b4fbb98831d29b774422935a110295d72f6acb0d049f5cc476565c.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 106 kB (106018 bytes) Hash b815ac2ca260c927b4b5a6bdb82413e3 3e7799f066829a163b70e7278eb6d3eaaa5f97f3 22a42fefe37193edc115dcf3640b22c15a39c9e55f2e925e3e2f1fee430adcd0 HTTP Headers `GET /4/js/mega-10_abc43c59b2b4fbb98831d29b774422935a110295d72f6acb0d049f5cc476565c.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 106018 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-19e22" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-11_f38c8fb439f26e8378bce7ce936e84a5016310553230f9f792d9d2b6d2942c00.js	66.203.127.11	200 OK	44 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-11_f38c8fb439f26e8378bce7ce936e84a5016310553230f9f792d9d2b6d2942c00.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type assembler source, ASCII text Size 44 kB (44144 bytes) Hash 2c6fb775342e41b2cc364a1493cbad8f dd94559ca567f86c76aae845906074f98d41c37c 299e62b5a7d87cae48091a6afab794a9ad632b6f949452c68000e15bf13b7346 HTTP Headers `GET /4/js/mega-11_f38c8fb439f26e8378bce7ce936e84a5016310553230f9f792d9d2b6d2942c00.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:29 GMT content-type: application/javascript content-length: 44144 last-modified: Fri, 03 Feb 2023 04:54:35 GMT vary: Accept-Encoding etag: "63dc938b-ac70" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-12_656472a1a13875acec8869109f4192bb241ae069fda99ce433123e886873a9ae.js	66.203.127.11	200 OK	88 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-12_656472a1a13875acec8869109f4192bb241ae069fda99ce433123e886873a9ae.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type C++ source, ASCII text Size 88 kB (88473 bytes) Hash f51725ac06cee5d10690b694c0fb874e 99e7fe3ad7bab369e815f1a0c53e7990851258ab ff386d6876d89ffefcd6b75bf093af2efcc261499a4a62b34ef48d150ca2dfed HTTP Headers `GET /4/js/mega-12_656472a1a13875acec8869109f4192bb241ae069fda99ce433123e886873a9ae.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: application/javascript content-length: 88473 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-15999" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/css/mega-4_d55b08c41513d928c899a3f2ebf9e637814e660efba831805b21be0bcee5fec7.css	66.203.127.11	200 OK	114 kB
URL HTTP/2 eu.static.mega.co.nz/4/css/mega-4_d55b08c41513d928c899a3f2ebf9e637814e660efba831805b21be0bcee5fec7.css IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text, with very long lines (900) Size 114 kB (114413 bytes) Hash 2c154aa830e2befc67bfb619fc742319 2e3210478fa801c406aa5ea8a689a850da3736f4 42ae50c9662dd83b3523d8c32da48651574f629dd0091883240566421f6483e2 HTTP Headers `GET /4/css/mega-4_d55b08c41513d928c899a3f2ebf9e637814e660efba831805b21be0bcee5fec7.css HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: text/css content-length: 114413 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-1beed" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-13_bca43b807a0c1f0279ea3359af8f53adb4b0d7661861632aed794f2015aec06f.js	66.203.127.11	200 OK	97 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-13_bca43b807a0c1f0279ea3359af8f53adb4b0d7661861632aed794f2015aec06f.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 97 kB (96885 bytes) Hash 4bddd8687f9891509cd9c1cde59a6685 5d9ee7c99e66027a25b54c4b0cf74362e34bb16f 40b907359e3ff324f1d22dab6c70e1574b1e16b99b146dd193f6d2f452f6a112 HTTP Headers `GET /4/js/mega-13_bca43b807a0c1f0279ea3359af8f53adb4b0d7661861632aed794f2015aec06f.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: application/javascript content-length: 96885 last-modified: Fri, 03 Feb 2023 04:54:35 GMT vary: Accept-Encoding etag: "63dc938b-17a75" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-14_569c76f52cee6cc121a7455dfd7e4619d8b304a4d0f89f0ffe78c284fdac432a.js	66.203.127.11	200 OK	56 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-14_569c76f52cee6cc121a7455dfd7e4619d8b304a4d0f89f0ffe78c284fdac432a.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type C++ source, ASCII text Size 56 kB (55626 bytes) Hash d7831eb7daf50fc6ad6720d661c83cad 11dc88fd82f1f128bbb574da24b10f63de983e74 ba1d8cc82351765f68bc4bf94b552437b95a2111d4a07fa436d56b1ca33265b7 HTTP Headers `GET /4/js/mega-14_569c76f52cee6cc121a7455dfd7e4619d8b304a4d0f89f0ffe78c284fdac432a.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: application/javascript content-length: 55626 last-modified: Fri, 03 Feb 2023 04:54:33 GMT vary: Accept-Encoding etag: "63dc9389-d94a" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/css/mega-5_202c5babbacd808126eadd53c7171dd933d994a250b313f81bf6247c5c1b3e58.css	66.203.127.11	200 OK	36 kB
URL HTTP/2 eu.static.mega.co.nz/4/css/mega-5_202c5babbacd808126eadd53c7171dd933d994a250b313f81bf6247c5c1b3e58.css IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text, with very long lines (426) Size 36 kB (36372 bytes) Hash a7a4025023ed04462cb0e9f89b195419 0bcb6da017c24f7cc22c4a7bd3270f8e4c04f7c0 a347b0db26cde921aec600c117d8d3310717d695b7817878be5682a94a5e6666 HTTP Headers `GET /4/css/mega-5_202c5babbacd808126eadd53c7171dd933d994a250b313f81bf6247c5c1b3e58.css HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: text/css content-length: 36372 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-8e14" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-15_dd05fec2ecd1863db26cc4f161f8dfadcd73e932d4ecdf170b0af94e42952731.js	66.203.127.11	200 OK	115 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-15_dd05fec2ecd1863db26cc4f161f8dfadcd73e932d4ecdf170b0af94e42952731.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 115 kB (114631 bytes) Hash 774261e11b28a7c2f17c991ac1d5b69e 8056cc6e5c1fe3dd97983ce1b4592bd9fbbbfa7b 28bbd4e1432e93930f14c917d2ff74998760577ae6258e9a580f970079765f16 HTTP Headers `GET /4/js/mega-15_dd05fec2ecd1863db26cc4f161f8dfadcd73e932d4ecdf170b0af94e42952731.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: application/javascript content-length: 114631 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-1bfc7" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/mega-16_c5796da4f468842818f03cf5d1bddc15dfa0f3a0c3ddce903261d897b9740c02.js	66.203.127.11	200 OK	68 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/mega-16_c5796da4f468842818f03cf5d1bddc15dfa0f3a0c3ddce903261d897b9740c02.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type C++ source, ASCII text Size 68 kB (67451 bytes) Hash 3c006fce417eb5018d82b009a0a46348 3d2be2d585e1e37878befdd30d45cfcafb67319f 5e3e610d8455afe2ca77eaf462ec634bad21c0b3b04214091298e470a25b4954 HTTP Headers `GET /4/js/mega-16_c5796da4f468842818f03cf5d1bddc15dfa0f3a0c3ddce903261d897b9740c02.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: application/javascript content-length: 67451 last-modified: Fri, 03 Feb 2023 04:54:34 GMT vary: Accept-Encoding etag: "63dc938a-1077b" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/css/mega-8_0ef77ca668092ff1b97fac8cdee3214d3d49470dafa7097af679e579237e1ee3.css	66.203.127.11	200 OK	8.7 kB
URL HTTP/2 eu.static.mega.co.nz/4/css/mega-8_0ef77ca668092ff1b97fac8cdee3214d3d49470dafa7097af679e579237e1ee3.css IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text, with very long lines (2429) Size 8.7 kB (8687 bytes) Hash f7babaf7bbeb1e248cccd5e496d4805d cbf20265ac9c04e9d88b23ace55fb61d7ae36576 11520c2e625ca9aee7dba579a935468faf1c2ee1974948542768448fe044cf1f HTTP Headers `GET /4/css/mega-8_0ef77ca668092ff1b97fac8cdee3214d3d49470dafa7097af679e579237e1ee3.css HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: text/css content-length: 8687 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-21ef" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js	66.203.127.11	200 OK	50 kB
URL HTTP/2 eu.static.mega.co.nz/4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 50 kB (49762 bytes) Hash 1aba1dcf947f397acc16b2e2621b73f3 4cdb7213a0d70f2ab6a4f8eed44d95a569715682 185f024126f51a5e2b1f213d59864993ca420f467b6b16f062345e1536043964 HTTP Headers `GET /4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: application/javascript content-length: 49762 last-modified: Fri, 03 Feb 2023 04:54:35 GMT vary: Accept-Encoding etag: "63dc938b-c262" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/html/download.html-postbuild_76d26151d55302b8a39cca8fb4a19269fc4b56980d3a78934931141d89b30af2.html	66.203.127.11	200 OK	1.9 kB
URL HTTP/2 eu.static.mega.co.nz/4/html/download.html-postbuild_76d26151d55302b8a39cca8fb4a19269fc4b56980d3a78934931141d89b30af2.html IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text, with very long lines (7830), with no line terminators Size 1.9 kB (1858 bytes) Hash 629d21f822f32e0c0c57843fe0c38236 c8bb7ba45d6f12025caba525ec4e71b73c498de7 825182702ee3ca38284f929a6d8e893724eb0ef7f03d85e556f3e220643f89b7 HTTP Headers `GET /4/html/download.html-postbuild_76d26151d55302b8a39cca8fb4a19269fc4b56980d3a78934931141d89b30af2.html HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: text/html content-length: 1858 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-742" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/html/js/download_3fea2fdc4f44f320210779abdff181bd68ef4c75c8351a5a7d8a9a5021ec0619.js	66.203.127.11	200 OK	9.8 kB
URL HTTP/2 eu.static.mega.co.nz/4/html/js/download_3fea2fdc4f44f320210779abdff181bd68ef4c75c8351a5a7d8a9a5021ec0619.js IP 66.203.127.11:0 ASN #205809 MEGA Limited File type ASCII text Size 9.8 kB (9755 bytes) Hash 6991d9cdcb0495cb277760a98357523b 7c96436546a17b83b95006b2f815eca12f3e11f5 21734ace3330c362d530423c48e30d8272d3ac5fe16694d3c233e27945aca0cf HTTP Headers `GET /4/html/js/download_3fea2fdc4f44f320210779abdff181bd68ef4c75c8351a5a7d8a9a5021ec0619.js HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: application/javascript content-length: 9755 last-modified: Fri, 03 Feb 2023 04:54:36 GMT vary: Accept-Encoding etag: "63dc938c-261b" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	ocsp.sectigo.com/	104.18.32.68	200 OK	472 B
URL HTTP/1.1 ocsp.sectigo.com/ IP 104.18.32.68:0 ASN #13335 CLOUDFLARENET File type data Size 472 B (472 bytes) Hash 06259f649060553bdc9507035b377e08 e66ff36dff444c3b9f763e7ce8114e3171543e91 084c5846e7eb14a5a9c09c7705f5897ecf560d97ad1e18dcc79aae0f8eb80e7a HTTP Headers `POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 08 Feb 2023 02:51:30 GMT Content-Type: application/ocsp-response Content-Length: 472 Connection: keep-alive Last-Modified: Mon, 06 Feb 2023 21:42:57 GMT Expires: Mon, 13 Feb 2023 21:42:56 GMT Etag: "e66ff36dff444c3b9f763e7ce8114e3171543e91" Cache-Control: max-age=499285,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb3 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7961105999af0b49-OSL`

	ocsp.sectigo.com/	104.18.32.68	200 OK	472 B
URL HTTP/1.1 ocsp.sectigo.com/ IP 104.18.32.68:0 ASN #13335 CLOUDFLARENET File type data Size 472 B (472 bytes) Hash 06259f649060553bdc9507035b377e08 e66ff36dff444c3b9f763e7ce8114e3171543e91 084c5846e7eb14a5a9c09c7705f5897ecf560d97ad1e18dcc79aae0f8eb80e7a HTTP Headers `POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 08 Feb 2023 02:51:30 GMT Content-Type: application/ocsp-response Content-Length: 472 Connection: keep-alive Last-Modified: Mon, 06 Feb 2023 21:42:57 GMT Expires: Mon, 13 Feb 2023 21:42:56 GMT Etag: "e66ff36dff444c3b9f763e7ce8114e3171543e91" Cache-Control: max-age=499285,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb2 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 796110599a16b505-OSL`

	g.api.mega.co.nz/cs?id=0&domain=meganz&v=2&lang=en	66.203.125.13	200 OK	99 B
URL HTTP/1.1 g.api.mega.co.nz/cs?id=0&domain=meganz&v=2&lang=en IP 66.203.125.13:0 ASN #203055 Datacenter Luxembourg S.A. File type JSON data\012- , ASCII text, with no line terminators Size 99 B (99 bytes) Hash d1cb544389f4df5e9c5d92f50cb9fdf3 545eee2c5199ea3d43ffa31a3d4a37a1cfd8ec91 dbe34d3a885465e31aa8e07d9979f8f906cb346e6931df934b036fc94e3ed161 HTTP Headers `POST /cs?id=0&domain=meganz&v=2&lang=en HTTP/1.1 Host: g.api.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Content-Type: text/plain;charset=UTF-8 Content-Length: 13 Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 99 Content-Length: 99 Connection: keep-alive`

	g.api.mega.co.nz/cs?id=0&domain=meganz&v=2&lang=en	66.203.125.13	200 OK	155 B
URL HTTP/1.1 g.api.mega.co.nz/cs?id=0&domain=meganz&v=2&lang=en IP 66.203.125.13:0 ASN #203055 Datacenter Luxembourg S.A. File type JSON data\012- , ASCII text, with no line terminators Size 155 B (155 bytes) Hash a387c4ec5060eef339b75279fa0083ae b1fab090aa5df99c3e88cc546d01a630c7c5edef b4e0a32c170cd137259d2dfe83149203ee2003345a6f704ec94c7c744ae9181b HTTP Headers `POST /cs?id=0&domain=meganz&v=2&lang=en HTTP/1.1 Host: g.api.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Content-Type: text/plain;charset=UTF-8 Content-Length: 26 Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type, MEGA-Chrome-Antileak Access-Control-Expose-Headers: Original-Content-Length Access-Control-Max-Age: 86400 Cache-Control: no-store Original-Content-Length: 155 Content-Length: 155 Connection: keep-alive`

	eu.static.mega.co.nz/4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e	66.203.127.11	200 OK	90 kB
URL HTTP/2 eu.static.mega.co.nz/4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e IP 66.203.127.11:0 ASN #205809 MEGA Limited File type Web Open Font Format (Version 2), TrueType, length 90132, version 2.655\012- data Size 90 kB (90132 bytes) Hash 94676e314a869cea8b70fc6698cb2c48 c681f9ea637011a45fa30e4750098dee378880d5 92090a2fc2ee13f67411a5e5778e3265e7401163c87beffa8e0392ccc765a8e8 HTTP Headers `GET /4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:30 GMT content-type: font/woff2 content-length: 90132 last-modified: Fri, 03 Feb 2023 03:19:48 GMT vary: Accept-Encoding etag: "63dc7d54-16014" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/imagery/mobile-button-loader-green.b175f7d362d2b4af.gif	66.203.127.11	200 OK	8.8 kB
URL HTTP/2 eu.static.mega.co.nz/4/imagery/mobile-button-loader-green.b175f7d362d2b4af.gif IP 66.203.127.11:0 ASN #205809 MEGA Limited File type GIF image data, version 89a, 32 x 32\012- data Size 8.8 kB (8787 bytes) Hash 3f788625bbc4f87885b982ed70876dcb d4155b22d2e63b149b42e238ab5c2788199a2f99 741f05bca4428e5880a44222f68a2f50172860f43b09abb57e3dc12d3ce5766d HTTP Headers `GET /4/imagery/mobile-button-loader-green.b175f7d362d2b4af.gif HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://mega.nz/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: image/gif content-length: 8787 last-modified: Fri, 03 Feb 2023 03:19:48 GMT etag: "63dc7d54-2253" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/imagery/sprites-fm-illustration-sprite-wide.b2880201cd454091.svg	66.203.127.11	200 OK	22 kB
URL HTTP/2 eu.static.mega.co.nz/4/imagery/sprites-fm-illustration-sprite-wide.b2880201cd454091.svg IP 66.203.127.11:0 ASN #205809 MEGA Limited File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (65536), with no line terminators Size 22 kB (22186 bytes) Hash fa9b9c6c9a547793e8d3dac8a8b0f346 10e82f88ef2a55160e535fc3c2f4efd588d3415f 43df0dc0a58f6e58e83e02827e1be9fb3d276f3a613bfc7cdb3d45f9b472077e HTTP Headers `GET /4/imagery/sprites-fm-illustration-sprite-wide.b2880201cd454091.svg HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: image/svg+xml content-length: 22186 last-modified: Fri, 03 Feb 2023 04:54:32 GMT vary: Accept-Encoding etag: "63dc9388-56aa" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.dbdd044c83f4bd5d.svg	66.203.127.11	200 OK	76 kB
URL HTTP/2 eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.dbdd044c83f4bd5d.svg IP 66.203.127.11:0 ASN #205809 MEGA Limited File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (65536), with no line terminators Size 76 kB (75755 bytes) Hash b37970b86179e65d01bd1f10666fdaa1 ac19bb958c25ae904e00f7002b5105c32b4aa026 e5de426d1a127b0c21d830f654008fa079a9e1aab6334f97fd277b1da0260e4b HTTP Headers `GET /4/imagery/sprites-fm-uni-uni.dbdd044c83f4bd5d.svg HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: image/svg+xml content-length: 75755 last-modified: Fri, 03 Feb 2023 04:54:32 GMT vary: Accept-Encoding etag: "63dc9388-127eb" content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/imagery/mega-files-icons.8f44fb1e74566206.png	66.203.127.11	200 OK	99 kB
URL HTTP/2 eu.static.mega.co.nz/4/imagery/mega-files-icons.8f44fb1e74566206.png IP 66.203.127.11:0 ASN #205809 MEGA Limited File type PNG image data, 399 x 7652, 8-bit colormap, non-interlaced\012- data Size 99 kB (98881 bytes) Hash 64835035649f645c21e6b9429095abc0 bf1b3e56e9c8ee50d9414603933f3a1d263178c3 a08d865c4c2c59e79d02513b9c92b236e3dbb510c46d4bdae21335fd8a615fae HTTP Headers `GET /4/imagery/mega-files-icons.8f44fb1e74566206.png HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: image/png content-length: 98881 last-modified: Fri, 03 Feb 2023 03:19:48 GMT etag: "63dc7d54-18241" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/imagery/mega-dialog-sprite.57a6bd1346996955.png	66.203.127.11	200 OK	31 kB
URL HTTP/2 eu.static.mega.co.nz/4/imagery/mega-dialog-sprite.57a6bd1346996955.png IP 66.203.127.11:0 ASN #205809 MEGA Limited File type PNG image data, 160 x 7432, 8-bit colormap, non-interlaced\012- data Size 31 kB (30699 bytes) Hash c53c4b781f53b21562990926425abfd3 fff91c4acd5d0c187ad634b79b2619dae9af58ad 1692f9c36f3aaa9d3e251a92fd2615b55d6f8e8e0bb286fa87184ecb4e20525c HTTP Headers `GET /4/imagery/mega-dialog-sprite.57a6bd1346996955.png HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: image/png content-length: 30699 last-modified: Fri, 03 Feb 2023 03:19:48 GMT etag: "63dc7d54-77eb" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/imagery/mega-download-dialog.cf6daa0027e27782.png	66.203.127.11	200 OK	70 kB
URL HTTP/2 eu.static.mega.co.nz/4/imagery/mega-download-dialog.cf6daa0027e27782.png IP 66.203.127.11:0 ASN #205809 MEGA Limited File type PNG image data, 853 x 1363, 8-bit colormap, non-interlaced\012- data Size 70 kB (70369 bytes) Hash d74c0efac1a9c59152b0325932d399f1 a472eadb5b431a4ef40e78ed79eaed9bb8fc8135 e8bedfbc203b2d09457d44a4ddfaadfb770d637e332f41487438fa9a7f5352f5 HTTP Headers `GET /4/imagery/mega-download-dialog.cf6daa0027e27782.png HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: image/png content-length: 70369 last-modified: Fri, 03 Feb 2023 03:19:48 GMT etag: "63dc7d54-112e1" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/fonts/Lato-Regular.woff2?v=6343dd45044b0726	66.203.127.11	200 OK	183 kB
URL HTTP/2 eu.static.mega.co.nz/4/fonts/Lato-Regular.woff2?v=6343dd45044b0726 IP 66.203.127.11:0 ASN #205809 MEGA Limited File type Web Open Font Format (Version 2), TrueType, length 182708, version 2.983\012- data Size 183 kB (182708 bytes) Hash bd03a2cc277bbbc338d464e679fe9942 cbff48bce12e71565156bb331b0c9979746a5680 983b0caf336e8542214fc17019a4fc5e0360864b92806ca14d55c1fc1c2c5a0f HTTP Headers `GET /4/fonts/Lato-Regular.woff2?v=6343dd45044b0726 HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: font/woff2 content-length: 182708 last-modified: Fri, 03 Feb 2023 03:19:48 GMT vary: Accept-Encoding etag: "63dc7d54-2c9b4" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/imagery/sprites-fm-mono.9db7baca1b05b559.woff2?t=1674816447114	66.203.127.11	200 OK	51 kB
URL HTTP/2 eu.static.mega.co.nz/4/imagery/sprites-fm-mono.9db7baca1b05b559.woff2?t=1674816447114 IP 66.203.127.11:0 ASN #205809 MEGA Limited File type Web Open Font Format (Version 2), TrueType, length 50588, version 1.0\012- data Size 51 kB (50588 bytes) Hash 6049d7b31556c3345c56db75464affcc 2af09a5ba22d1dab5d045af7800409995a3a30e9 546e1b8c13853b5cea1ea7a2e55c35f7c748cd674c7dd10b0db8a0bee2cd1a3f HTTP Headers `GET /4/imagery/sprites-fm-mono.9db7baca1b05b559.woff2?t=1674816447114 HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: font/woff2 content-length: 50588 last-modified: Fri, 03 Feb 2023 03:19:48 GMT vary: Accept-Encoding etag: "63dc7d54-c59c" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/fonts/lato-regular-ie.woff2?v=2aaea217993c48e0	66.203.127.11	200 OK	143 kB
URL HTTP/2 eu.static.mega.co.nz/4/fonts/lato-regular-ie.woff2?v=2aaea217993c48e0 IP 66.203.127.11:0 ASN #205809 MEGA Limited File type Web Open Font Format (Version 2), TrueType, length 142744, version 1.0\012- data Size 143 kB (142744 bytes) Hash 274c711b53b40a82962083e466f522e6 6e12611d65211c547ced3ea1d544454f5ffcae99 ab73d700946a2bb3ab20198c4af443b85bd72da201b92cbcd3882d1b4228c136 HTTP Headers `GET /4/fonts/lato-regular-ie.woff2?v=2aaea217993c48e0 HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: font/woff2 content-length: 142744 last-modified: Fri, 03 Feb 2023 03:19:48 GMT vary: Accept-Encoding etag: "63dc7d54-22d98" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	eu.static.mega.co.nz/4/fonts/Lato-Semibold.woff2?v=7194963095272d0e	66.203.127.11	200 OK	184 kB
URL HTTP/2 eu.static.mega.co.nz/4/fonts/Lato-Semibold.woff2?v=7194963095272d0e IP 66.203.127.11:0 ASN #205809 MEGA Limited File type Web Open Font Format (Version 2), TrueType, length 184076, version 2.983\012- data Size 184 kB (184076 bytes) Hash 8b4f872c5de19974857328d06d3fe48f 32092efbd7938af900e99d63cf25db246c6bff26 30f77a5ff0bcba46d4e760b0c939a5ff112da0d3ddd13a261834134e00cc21c7 HTTP Headers `GET /4/fonts/Lato-Semibold.woff2?v=7194963095272d0e HTTP/1.1 Host: eu.static.mega.co.nz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://mega.nz Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 Feb 2023 02:51:31 GMT content-type: font/woff2 content-length: 184076 last-modified: Fri, 03 Feb 2023 03:19:48 GMT vary: Accept-Encoding etag: "63dc7d54-2cf0c" access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept accept-ranges: bytes X-Firefox-Spdy: h2`

	grabify.world/generator.php?id=5QJ311.rar	188.114.96.1	302 Found	0 B
URL HTTP/2 grabify.world/generator.php?id=5QJ311.rar IP 188.114.96.1:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /generator.php?id=5QJ311.rar HTTP/1.1 Host: grabify.world User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1` HTTP/2 302 Found date: Wed, 08 Feb 2023 02:51:24 GMT location: https://grabify.link/generator.php?id=5QJ311.rar cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QQqMVzzWjfT4eMfRcEdTw0BCWLsHG0%2BX0RqUMObvjbLAV1RFe755EEaMjF1rpddlRglr2bYDk%2ByupobbcBY3lnkxZNIFh8nFo%2F1E51q0RFBoNX20kFJiylItNVzoo8%2FZ"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 79611033cf230b49-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (75)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type