{"report_id":"be609511-3471-467c-b576-75ca3aaae258","version":0,"status":"done","tags":[],"date":"2026-08-24T05:10:30Z","url":{"schema":"https","addr":"mgmarket6.cfd/","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mgmarket6.cfd/login/index.php","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"title":"MEGA","dom":{"size":6317,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (671)","md5":"204fe9e60b08919d8e4f5abe7617f2e2","sha1":"7880ca086c62100eec0d79879fa3d51bd549f39c","sha256":"8e7c7261dc1cd1186daa5300cd961afeda57e16bb6f33f90a21f16bf00011e5f","sha512":"236bee4ecbe667f7cfaf967d96843b30a94475661a3644045bd40556a853756e4690ccaf318567308509b3d15d604b4b3ec163778a4e59840b8f140877d07397","ssdeep":"96:n8+y5aV2Zyi1xp7TTzSmj6nF7c/nGCS0xg0ZEHyZFJiDntd:45FZdchc/nHS0xg2EHyZPiDntd","tlshash":"bcd1947001b71e260593e0ad9f8665017b5d907f6ae6db4176bc0b842fd3dc0ca9a1de","dom_hash":"domhash6f2a29bf9a44336a12fd2f3be5b4e225","first_seen":"2026-08-24T05:10:32.195101Z","last_seen":"2026-08-24T05:10:32.195101Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mgmarket6.cfd/","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T05:10:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mgmarket6.cfd","ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-04","domain_rank":0,"first_seen":"2026-08-24T05:07:21.847065Z","last_seen":"2026-08-24T05:07:21.847065Z","alert_count":0,"request_count":10,"received_data":54586,"sent_data":5918,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:8.4.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":1,"received_data":508340,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mgmarket6.cfd/","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"500ea3bc72c0622974c39d3a0033eb70","sha1":"6c8c5d98f5cd60cf8972c5a6193a4decf7285317","sha256":"4283196e62a0add9cd097bcf1f0a71256bb7163bb7b77dda504dcfd2623eceac","sha512":"d30374e2b1d54d373b78583ce9252ceff6b3e499e07ee5db118ca5601873bf9a90da1cc81fc42a2bd6f485e310905115da6e88f53c9fa2c64bad97c2063dba0a","ssdeep":"","tlshash":"e0c02b8c210a0cb051f72b10cb7fb600f0013204d4d1f9320c0e63448d20e03db94890","size":149,"data":"","first_seen":"2026-08-24T05:07:25.0444Z","last_seen":"2026-08-24T05:10:32.21768Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"55a5bf7a04c3c0fe119b1facc3094a60","sha1":"c8625b35fcfd82e2a314c0aea2d5db15031ef154","sha256":"54bf88f1a7f8307f4515351eb5f533bde163819138e5ec4728f4b584eddc1ac0","sha512":"39329fb0338569bab590984ba57a3079152a38cdca3705bef38b46cd241afe92bf0c515263fd6c02b7e5d45f7c3bfdca36811baf79a0e83d9bbdef9b74c78e96","ssdeep":"","tlshash":"4ba0029066a511f477c50732597093551d7d7932ddab1af1300b6868997b98c501dd12","size":60,"data":"","first_seen":"2026-07-01T03:56:39.408971Z","last_seen":"2026-08-24T05:10:32.219798Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f4c2f8f610033116e36d6a7d46c66d2","sha1":"d0e9bf7ee286f1f4128d8816c48564838e4a2b45","sha256":"d1d101fd6d565f208c373a6ad402f4a116ca310361c7ecbd35d9794e4b6e81dd","sha512":"8e93f6ad859cb93f8cc3622cff74d88ab92fb01f78cc5a7ff83c94fadbb6b8272b4f217ebbb757a68cf06434eb9532158480474b92884593d97e5ee013e3d795","ssdeep":"","tlshash":"e621a64d21f33151856335798e0f611832b2a1633a0ede003c6d2b74aff06a59bd3be8","size":1187,"data":"","first_seen":"2026-08-24T05:07:25.052881Z","last_seen":"2026-08-24T05:10:32.221223Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E3H5M51J2Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b24210f50a173e6fc1059cee62880c7","sha1":"3079dc0d0dae3e6d572415c2723929da338c63d0","sha256":"49f5b45b1bf803efbfefdd6b64ed1086efc22c036df92968f84d780cad0a56dd","sha512":"3179b50a476315a212599381afb778f6e615fc09fb796bb4732c71eedc7a94819bc7011d1ce140e5ab95d3ef4a0b0d612f41a5e05d0d20c6468b54869c4a9eff","ssdeep":"6144:njd89AY1iLZKHg0N70HtdZen0okfha5gcXsL3EQB3PDqkbzW0cHHNNbKQ:jbdLZMvNwO0lDkHPX","tlshash":"83b4e8ceb3d674665396f078503f01cba57b28a2b45cc89af189cce42e7469a4127f7c","size":507736,"data":"","first_seen":"2026-08-24T05:10:32.201954Z","last_seen":"2026-08-24T05:10:32.201954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/login/index.php","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5f0912104224f7c5cc5cbdba0e84d1c","sha1":"349d5a91f0eb8011896c23f86012d2d70b50b6cc","sha256":"520e867c1b77330a89d19a116ae666d6a32270175339ee31453cc0599b296cd2","sha512":"f4761d13a1f180f5a5b590526e4291e2d3adbaf0b47298244f29e53916b6a4017763575d9040d48e3fbc59b471b6cc8ed71b1a351f452387c34fa316c7a4784f","ssdeep":"","tlshash":"f851e160097b39210752f0bf878b29067b24503f35a5dfa53e7c0a493fd7a1009a52df","size":2625,"data":"","first_seen":"2026-08-24T05:07:25.055823Z","last_seen":"2026-08-24T05:10:32.22883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mgmarket6.cfd/","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:10:02.723Z","timestamp":1787548202723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 05:10:03 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hu5yjgo2cBtP1QYuiPsqY8mCr6CaSGyYGOeiKWyCDBwk3aUGG%2FMo9mrPD3CKSDb%2FI0Jr4AWN%2FqoPQfbeOGINKwJCcW61arLW4lG%2BD1nkmT567O53jVcsfDFf0TZsfJAR\"}]}\r\nlast-modified: Sun, 08 Feb 2026 01:41:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2ffd92bbbd2b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":24986,"size_decoded":18126,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14170)","md5":"95714ebbbc92352e71325b7463596f0d","sha1":"93dd01c42587c2b4f59e1eaa041aa870a224242e","sha256":"358e4d4a565e32411dadff22d3d34afaafb519e8f99734b7b71d3d3bf8e3059b","sha512":"052c62959eb4b0f4646d25141db12a917176af3685c88effc07d0479936b89214a9a8f1f9336a6bb92afa235ff242dd3939a91de2eb06cb5374c324d4f5a3e6f","ssdeep":"768:FIQhvLMSRA7rm0O9PYa/+Wumsw2yZYXkc:FnvLMSIrm0O1/+Wumsbkc","tlshash":"d7b2d1752da310536093d1bc872af9cd5fa9c22ba15a930039dc0a965fe6dd2cf43b98","first_seen":"2026-08-24T05:07:25.032643Z","last_seen":"2026-08-24T05:10:32.198955Z","times_seen":2,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":102,"connect":12,"send":0,"wait":235,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E3H5M51J2Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mgmarket6.cfd/","date":"2026-08-24T05:10:03.419Z","timestamp":1787548203419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=G-E3H5M51J2Y HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 24 Aug 2026 05:10:03 GMT\r\nexpires: Mon, 24 Aug 2026 05:10:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 171683\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":507736,"size_decoded":172287,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"2b24210f50a173e6fc1059cee62880c7","sha1":"3079dc0d0dae3e6d572415c2723929da338c63d0","sha256":"49f5b45b1bf803efbfefdd6b64ed1086efc22c036df92968f84d780cad0a56dd","sha512":"3179b50a476315a212599381afb778f6e615fc09fb796bb4732c71eedc7a94819bc7011d1ce140e5ab95d3ef4a0b0d612f41a5e05d0d20c6468b54869c4a9eff","ssdeep":"6144:njd89AY1iLZKHg0N70HtdZen0okfha5gcXsL3EQB3PDqkbzW0cHHNNbKQ:jbdLZMvNwO0lDkHPX","tlshash":"83b4e8ceb3d674665396f078503f01cba57b28a2b45cc89af189cce42e7469a4127f7c","first_seen":"2026-08-24T05:10:32.201954Z","last_seen":"2026-08-24T05:10:32.201954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":44,"receive":60,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/login/index.php","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:10:09.680Z","timestamp":1787548209680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /login/index.php HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/\r\nCookie: _ga_E3H5M51J2Y=GS2.1.s1787548203$o1$g0$t1787548203$j60$l0$h0; _ga=GA1.1.1985889623.1787548204\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 05:10:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=0,i\r\nx-powered-by: PHP/8.4.24\r\nset-cookie: PHPSESSID=11baba9ed1f8b8b7d7faa5d141d83f75; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xSnD8rYx9o848m5%2Bnl9gC2SxZ8BfXbXXaV1juxuMwLqA8a%2FT13YXGANGkSBmtZ3%2Bm8X4Qte%2BfShbZ4a2HKna%2BmHZUjNJscLbkSrpZwil73%2FPeS5a9nHIPP%2B1W3WPK66i\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ffd9567d31b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"11baba9ed1f8b8b7d7faa5d141d83f75","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=11baba9ed1f8b8b7d7faa5d141d83f75; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.4.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6420,"size_decoded":3629,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (671), with CRLF line terminators","md5":"d5bc75c010ebcda8fe7fd97a3fd47036","sha1":"b1355f124bfaf6b8529b6ad3b84b789374a7b33a","sha256":"d01dc5b4590e8a5777eec18429e594c5974a3f848f029b9e2044ec8bf0907c12","sha512":"0c79c0a475733df2355e5df316a44e34971ee9d35c838d93bc2bb31a981e74b413fa6c5a88d3102ca814e445d35fdf28ec97abfb0aaf4d2935bfe581e04d83bc","ssdeep":"96:wx5aVwHZri1xvTzS1s0/+SzsggJ14wcC6:I5HHZ2bdSzsggowcC6","tlshash":"91d1846001551e2605b3e2be8f916604fa5e407f6a92d70176fc1b973ff3c80ca5b99e","first_seen":"2026-08-24T05:10:32.205071Z","last_seen":"2026-08-24T05:10:32.205071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/css/gate.css","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mgmarket6.cfd/","date":"2026-08-24T05:10:03.417Z","timestamp":1787548203417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /css/gate.css HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 05:10:03 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 05:06:42 GMT\r\nlast-modified: Wed, 03 Dec 2025 16:59:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9K%2FXi0VcUQDQR6V9EmMjXbqKPsFrYADg4V8PWuxjIMzLZ7HD0rAii2pAtzQoHn5QoI3EScCsZTWkMdGBdMfP4cn89BD25L0YEG3yFWLFmCt4UEiuux6IQPASAi35eDhT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2ffd92f5bebb51b-OSL\r\ncontent-length: 1292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5105,"size_decoded":2083,"mime_type":"text/css","magic":"ASCII text, with very long lines (5105), with no line terminators","md5":"36099a1d8a679d84dd581b8b629a3e6e","sha1":"5243c443a0fc7a21d307103c6ad0b7386d6ea65a","sha256":"328706c4081eb8965d98c3d4e22d3daee3b6d4088e5b1086323e01306dbf6991","sha512":"d9889cd5aa393a4ef979e5629ed6328f925a80cb917de2e5b1bfd2ce0fc4beaa619f6afbaccff648294a7fee179e523ed5cbe8637d4be5f0cfe54ed523b4ccff","ssdeep":"48:Iveex4zVYTquJKkc491+D+hlLFyB77EsDSAYDXr9SuFjLHk5osV1VjfB:ECzVYTvokJGB77zDqjr9SuFXibp","tlshash":"d5b12ee245043c2cb917c121b9e2a4ee355d2b1eb76b21fdee21e635cecb6c74135a08","first_seen":"2026-07-01T03:56:39.400343Z","last_seen":"2026-08-24T05:10:32.20931Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/login/index.php","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:10:09.632Z","timestamp":1787548209632,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /login/index.php HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/\r\nCookie: _ga_E3H5M51J2Y=GS2.1.s1787548203$o1$g0$t1787548203$j60$l0$h0; _ga=GA1.1.1985889623.1787548204\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T08:40:44.512084Z","times_seen":18071912,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/login/index.php","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:10:09.663Z","timestamp":1787548209663,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /login/index.php HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/\r\nCookie: _ga_E3H5M51J2Y=GS2.1.s1787548203$o1$g0$t1787548203$j60$l0$h0; _ga=GA1.1.1985889623.1787548204\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T08:40:44.512084Z","times_seen":18071912,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/css/yo-style.css","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mgmarket6.cfd/login/index.php","date":"2026-08-24T05:10:09.911Z","timestamp":1787548209911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /css/yo-style.css HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/login/index.php\r\nCookie: _ga_E3H5M51J2Y=GS2.1.s1787548203$o1$g0$t1787548203$j60$l0$h0; _ga=GA1.1.1985889623.1787548204; PHPSESSID=11baba9ed1f8b8b7d7faa5d141d83f75\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 05:10:09 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 05:06:49 GMT\r\nlast-modified: Thu, 04 Dec 2025 13:44:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzJrjCdvRqW%2FchRDtZuUlVBq83DURL6XnGJG1pKOQZtKRwmOFI4zYHUXVNMETSfH6ygP1zw9CiE8Bz4TA1NekL6UbvPakOmasaEQHGE0Sc9n2SrfeOFKj3LtKpo5Vauf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2ffd957ed38b51b-OSL\r\ncontent-length: 2064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10050,"size_decoded":2857,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c970591334cc3ed3949349d7150b6e96","sha1":"2c144dd6c6746b9fbbca32f842705c2798372b4e","sha256":"af6c275728c8e6419a3f09654e7b19702cae27681b04452d4bb05d3bfd918a2f","sha512":"1ff035c6d16e3ad226a6a7734d5b5d9a32854c6336c29939b4ea9f728e639254a217f19ffb07e532b049531a49eb1f59edebcb34fcb32cce0abd77808b336aac","ssdeep":"192:dbConqzYuIwrW0YhfVC6QvNIeIsMrrf77LNW+AUw5P87:JX","tlshash":"1422ec55d310620260b3eb79eba31a86f9ea50279643967cbfdc53288ff5414ca20fdd","first_seen":"2026-08-24T05:07:25.039503Z","last_seen":"2026-08-24T05:10:32.213649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/login/index.php","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:10:09.615Z","timestamp":1787548209615,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /login/index.php HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/\r\nCookie: _ga_E3H5M51J2Y=GS2.1.s1787548203$o1$g0$t1787548203$j60$l0$h0; _ga=GA1.1.1985889623.1787548204\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T08:40:44.512084Z","times_seen":18071912,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/login/index.php","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T05:10:09.647Z","timestamp":1787548209647,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /login/index.php HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/\r\nCookie: _ga_E3H5M51J2Y=GS2.1.s1787548203$o1$g0$t1787548203$j60$l0$h0; _ga=GA1.1.1985889623.1787548204\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T08:40:44.512084Z","times_seen":18071912,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/favicon.ico","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmarket6.cfd/login/index.php","date":"2026-08-24T05:10:09.941Z","timestamp":1787548209941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/login/index.php\r\nCookie: _ga_E3H5M51J2Y=GS2.1.s1787548203$o1$g0$t1787548203$j60$l0$h0; _ga=GA1.1.1985889623.1787548204; PHPSESSID=11baba9ed1f8b8b7d7faa5d141d83f75\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 05:10:10 GMT\r\ncontent-type: image/x-icon\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 05:06:42 GMT\r\nlast-modified: Fri, 05 Dec 2025 00:44:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 206\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCmVsgm6jcM636CvZUCr57SnjBeDKG4GZh25YNomcNCFOn40078VURhu7vTGQwijGyEAJngAlX8zUz1Imxaa1SU3wK%2BESiZ%2B4kG4KlWnKJ%2F8JdSPp2yOv5iHpMdLcgo%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2ffd9581d39b51b-OSL\r\ncontent-length: 475\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1662,"size_decoded":1275,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 16 colors, 4 bits/pixel","md5":"5590798a04912369f29a14d7f3d1945c","sha1":"d3e7ee2d7c9c08ed22ed000ed589975e88e56fb7","sha256":"8cf73bf270f0ffc3a15f070df1a5ec73fdce9f7ee693d920a5f7d6152d679818","sha512":"bd649ad8c8650bac8e7a520efcbb0bc4b73bdffdf5a3af8a2842991bfea04eb889b76b069c816b78ff5ef91691e16a7617809d7c6dc3d392e0b0e969598357f3","ssdeep":"","tlshash":"90312115b044e3acf4350076ee89e1fc2684dd36de190c077686b39f38b84be8e1a382","first_seen":"2024-10-12T13:56:02.837068Z","last_seen":"2026-08-24T08:28:10.513336Z","times_seen":46,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mgmarket6.cfd/favicon.ico","fqdn":"mgmarket6.cfd","domain":"mgmarket6.cfd","tld":"cfd"},"ip":{"addr":"104.21.63.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mgmarket6.cfd/","date":"2026-08-24T05:10:03.579Z","timestamp":1787548203579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgmarket6.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 23:01:44 GMT","end":"Tue, 27 Oct 2026 00:00:21 GMT"},"fingerprint":{"sha1":"BD:DB:19:1E:74:D7:7D:33:BD:C7:53:80:FE:2F:F3:18:67:A0:23:81","sha256":"75:82:E4:09:D7:99:0B:4E:76:3D:09:B2:58:5F:AC:2C:11:D6:CB:C4:6C:3D:EE:03:3C:2E:86:E0:B0:10:6A:32"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mgmarket6.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mgmarket6.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 24 Aug 2026 05:10:03 GMT\r\ncontent-type: image/x-icon\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 05:06:42 GMT\r\nlast-modified: Fri, 05 Dec 2025 00:44:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msLDMxggf6VXkcaKpqWY69I2VEDBwaln2xCnAmZy1Rl5PR1V891jO1qbohsAN72N4HNyjKy%2BscZCtwKIVVPSeD0%2FUmQB%2FVL2F2DsUDjP2FSzn44pDjYCuQLkUjkSEv1R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2ffd9305bedb51b-OSL\r\ncontent-length: 475\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":1273,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 16 colors, 4 bits/pixel","md5":"5590798a04912369f29a14d7f3d1945c","sha1":"d3e7ee2d7c9c08ed22ed000ed589975e88e56fb7","sha256":"8cf73bf270f0ffc3a15f070df1a5ec73fdce9f7ee693d920a5f7d6152d679818","sha512":"bd649ad8c8650bac8e7a520efcbb0bc4b73bdffdf5a3af8a2842991bfea04eb889b76b069c816b78ff5ef91691e16a7617809d7c6dc3d392e0b0e969598357f3","ssdeep":"","tlshash":"90312115b044e3acf4350076ee89e1fc2684dd36de190c077686b39f38b84be8e1a382","first_seen":"2024-10-12T13:56:02.837068Z","last_seen":"2026-08-24T08:28:10.513336Z","times_seen":46,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}