{"report_id":"e24a1926-8492-46c5-b473-ffd15d724b43","version":6,"status":"done","tags":[],"date":"2025-09-01T22:32:50Z","url":{"schema":"http","addr":"myprivate.pics/PER9ZS","fqdn":"myprivate.pics","domain":"myprivate.pics","tld":"pics"},"ip":{"addr":"52.173.151.229","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mega.nz/folder/03UFVDhI","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"title":"MEGA"},"submit":{"url":{"schema":"http","addr":"myprivate.pics/PER9ZS","fqdn":"myprivate.pics","domain":"myprivate.pics","tld":"pics"},"ip":{"addr":"52.173.151.229","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-06T22:32:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":7,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:24Z","timestamp":1756765944,"ip_dst":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":48678,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)","source":"{\"timestamp\":\"2025-09-01T22:32:24.109018+0000\",\"flow_id\":28306501569459,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":48678,\"dest_ip\":\"104.26.9.202\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035419,\"rev\":1,\"signature\":\"ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_03_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2022_03_07\"]}},\"tls\":{\"sni\":\"grabify.link\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3522,\"start\":\"2025-09-01T22:32:24.101299+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:26Z","timestamp":1756765946,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":37366,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:26.102738+0000\",\"flow_id\":711779679905059,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":37366,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:26.042275+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44360,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.683401+0000\",\"flow_id\":162079700783149,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44360,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.626733+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44372,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.686629+0000\",\"flow_id\":1301036308205999,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44372,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.627119+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44378,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.689281+0000\",\"flow_id\":393778154018201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44378,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.628121+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44392,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.690638+0000\",\"flow_id\":2181635600390826,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44392,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.629418+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44402,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.707557+0000\",\"flow_id\":195898273275083,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44402,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.629963+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"myprivate.pics","ip":{"addr":"52.173.151.229","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2022-05-18","domain_rank":0,"first_seen":"2022-05-18T22:27:47Z","last_seen":"2025-08-08T05:12:11.891574Z","alert_count":0,"request_count":1,"received_data":2420,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"grabify.world","ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-10","domain_rank":3973890,"first_seen":"2020-03-11T00:22:23Z","last_seen":"2025-08-27T18:26:54.227728Z","alert_count":0,"request_count":1,"received_data":2589,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"eu.static.mega.co.nz","ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"2012-07-25","domain_rank":472126,"first_seen":"2013-01-19T19:02:09Z","last_seen":"2025-09-01T19:35:51.00497Z","alert_count":0,"request_count":46,"received_data":14807366,"sent_data":22533,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mega.nz","ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"2014-10-01","domain_rank":2896,"first_seen":"2014-11-03T07:55:06Z","last_seen":"2025-08-29T15:39:57.799041Z","alert_count":0,"request_count":29,"received_data":3129547,"sent_data":12219,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"g.api.mega.co.nz","ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"2012-07-25","domain_rank":196250,"first_seen":"2013-12-26T02:26:29Z","last_seen":"2025-08-27T18:56:04.143373Z","alert_count":0,"request_count":3,"received_data":1298,"sent_data":1505,"comment":"","tags":null,"fingerprints":null},{"fqdn":"grabify.link","ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-05","domain_rank":78278,"first_seen":"2015-07-08T09:57:23Z","last_seen":"2025-08-30T23:56:44.8695Z","alert_count":0,"request_count":1,"received_data":3997,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:24Z","timestamp":1756765944,"ip_dst":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":48678,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)","source":"{\"timestamp\":\"2025-09-01T22:32:24.109018+0000\",\"flow_id\":28306501569459,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":48678,\"dest_ip\":\"104.26.9.202\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035419,\"rev\":1,\"signature\":\"ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_03_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2022_03_07\"]}},\"tls\":{\"sni\":\"grabify.link\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3522,\"start\":\"2025-09-01T22:32:24.101299+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:26Z","timestamp":1756765946,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":37366,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:26.102738+0000\",\"flow_id\":711779679905059,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":37366,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:26.042275+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44360,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.683401+0000\",\"flow_id\":162079700783149,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44360,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.626733+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44372,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.686629+0000\",\"flow_id\":1301036308205999,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44372,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.627119+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44378,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.689281+0000\",\"flow_id\":393778154018201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44378,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.628121+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44392,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.690638+0000\",\"flow_id\":2181635600390826,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44392,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.629418+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-01T22:32:29Z","timestamp":1756765949,"ip_dst":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"ip_src":{"addr":"172.18.0.22","port":44402,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)","source":"{\"timestamp\":\"2025-09-01T22:32:29.707557+0000\",\"flow_id\":195898273275083,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":44402,\"dest_ip\":\"31.216.145.5\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049372,\"rev\":1,\"signature\":\"ET INFO File Sharing Domain Observed in TLS SNI (mega .nz)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_28\"]}},\"tls\":{\"sni\":\"mega.nz\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3397,\"start\":\"2025-09-01T22:32:29.629963+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mega.nz/secureboot.js?r=1756339832","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c52afb1e8b6a96445efe56318c3e208","sha1":"c12989d996b94053b1da9df97db9cdacc8f3e3b6","sha256":"0c60817b7f0c89046ee99d27949faa063b1faca9b692fd2c56eba985aeb3dbe3","sha512":"f06171037ebfc5d3f4f90b6c54594e8f597d8e88895f2b302dcf1ddc691d77f32bd8f426dec3fdc794ef90de0ba7a9329f691f33d043f5a808046cb3c8822ce1","ssdeep":"3072:/ljl1gaKbzFHEYfxUmU8UdvQ0whT6C2XSazmA:NjgawzCYppzuvQphb2CYmA","tlshash":"d314f819a5ea011f8953207f579fe442b2e9c02b054cdc507a8d53b57fd1e2a82b2bfb","size":191494,"data":"","first_seen":"2025-08-28T17:58:30.84093Z","last_seen":"2025-09-04T02:49:46.761471Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/7535b2f8-8abb-4751-90ee-d00db24a3ece","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf609c0b705c1b873fc30e94a8a72f2","sha1":"4f4e6ae980f40abf9df2cb69b3b30ed8b92e0162","sha256":"ca0b050b1e4e5291f59c2b4a310ff9b1d161a3250b7d5c4537bade2ad77266b2","sha512":"42c0b60fc59d1540aae19da7b8151ba8386725acd1a82fa14bd5832ecc3c749784621c689b60926f1a03257be7a440dde550feae9ab3845ab1be8604029a9adb","ssdeep":"","tlshash":"9bd022cc7a4a52611828271a200ef0248ab3df3b40032ad48382ae4e8c014222b4ea68","size":200,"data":"","first_seen":"2025-01-10T08:32:50.232999Z","last_seen":"2026-04-04T06:14:22.717632Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/e553db19-3653-4745-bd61-8acca0c54520","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"30a72b79e1de3f7bb48ac9c38cfe26fb","sha1":"6e76245e1d5a1ca1ffcb887175874f9ed9293766","sha256":"c8580c21984ea06cc3b42d1feae90eefc14605b24fc35c8edf1a7982295204d7","sha512":"f7e98547e1f4fc1fcdc53ee6845bfd095c62f37e477cb379aa0c4ba97ec3a37301c26514f1ad5957355fe93565f1dc60118062f9eff5e519814766eeb1bdfba0","ssdeep":"384:2kZpPMg3EGK/5OAHAvRuANJbzlbKC39+jqQQkTtQ9T:2kZpPMOAHAvRuA/lOC3cjBQ6tQ9T","tlshash":"53d2531c5aac220e9a43e6df01cbe0033ddad5611d599cd56acd10b3bfd1d2f29b21ba","size":28398,"data":"","first_seen":"2023-03-07T12:04:57Z","last_seen":"2026-04-04T06:14:22.718552Z","times_seen":1572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/7830f433-87e8-4481-8ac6-62ed78a82119","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3f21baeeacb802d8e0834767fd674b1","sha1":"0c54d88c57b80016fc7f94f9bb3008beb9ed5d2e","sha256":"9189a16575855b532290c40bfab333e9fa62cff6a970ef745eeda20b13c404b5","sha512":"fdb0ac83327ad5ea21534541a4e9a04f2ead4f48582f1872b0658890a8e367431bbf9641e08885b709bde3b866a2fe9addb40d1a1a7b892361f589eda27f0cdc","ssdeep":"49152:1uVYmD4/cZQ/PLGVFyCJTiPf7A8lIyHCcmM5/W/EEft0hDdR4A8E6/X79PYwzbr/:6/zJ","tlshash":"ba96d24a7afb11324463707e8fdfa044b238801b6609de687d9c97942f8453896f6ff9","size":8775157,"data":"","first_seen":"2025-08-30T18:55:41.734087Z","last_seen":"2025-09-04T02:49:46.797529Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/4a0ad41f-6921-49b8-ac42-786e1aadf329","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"039bafef2406979c560430a61c2078ea","sha1":"649f59b9386398ad8e609ec1a4b338e6656c02f8","sha256":"2e884b248bc8fd99426b98c9e2b0347d64a1d76e0cbed818a7ed42a09afa75b4","sha512":"223bad065fb825441e1684fcf7a00a165dd013b07db48c8fdb5c3d4493a4d4337fe73c87e62f28d1cf13784247e261c00fc03fc5d55978ea31090cdbba1dde2f","ssdeep":"","tlshash":"a48004004051440c351331d5114173351103431004c0457405c034001175107dd4c054","size":37,"data":"","first_seen":"2023-03-07T12:04:57Z","last_seen":"2026-04-04T01:09:23.066622Z","times_seen":1493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/f1a95e27-a5c7-40df-8d95-f21d24cb17c4","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dd8130d7db464efa9c71a961b684944","sha1":"f68efee0c065dc94909e4e28fa9285df751d7fd0","sha256":"faade5384f10ce8bb1ff7428682f6f67d7f880411e370b8696ddd1364476116a","sha512":"01ed9f90b2ab38fd125aeb486ee3a698e55d2e7ac5a93f1634deca2d8ce07f809d25aea19b10e5b86ba89e92ba1c6c9e8ee0639914574304eb22814c174b6f8e","ssdeep":"","tlshash":"25a022cc888230fabc0833832020f00088aeec30c83308a823c2280eb80c00ac3bc238","size":73,"data":"","first_seen":"2023-03-07T12:04:57Z","last_seen":"2026-04-04T01:09:23.067195Z","times_seen":1203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/lang/en_5a20bab5e5a6163207f423bcac73ae83393bb84f35ae3fa5488df04e7e8619b9.json","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:26.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/lang/en_5a20bab5e5a6163207f423bcac73ae83393bb84f35ae3fa5488df04e7e8619b9.json HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 419924\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-66854\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":419924,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b251dffbc0602a154e5468471f68537c","sha1":"8026b39cb1b57a7c84c6c348490265bcbc0dcc1f","sha256":"5a20bab5e5a6163207f423bcac73ae83393bb84f35ae3fa5488df04e7e8619b9","sha512":"272bd4fb613898a288673d3432045e3909012dfee4325886576f6208cfff70f4667098e186ae4147675e1e3c8eef53cadfdd4e4937e3bb0a45dbcd9d9b233895","ssdeep":"6144:2V8j5YSdVZ0Bwq4XYs1/7S6uXtfQpN1MwzAsgYNEdcV0Q9/d3:LGY1EIAsgY6dcCQ9/d3","tlshash":"dc94fa4eee050da309d15142b8935997f614806b0f90b41cbbb8819c2fbd96f62ff9de","first_seen":"2025-08-29T19:38:27.093774Z","last_seen":"2025-09-04T02:49:46.781481Z","times_seen":10,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":118,"dns":23,"connect":28,"send":0,"wait":28,"receive":149,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:28.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 90132\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-16014\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 90132, version 2.655","md5":"94676e314a869cea8b70fc6698cb2c48","sha1":"c681f9ea637011a45fa30e4750098dee378880d5","sha256":"92090a2fc2ee13f67411a5e5778e3265e7401163c87beffa8e0392ccc765a8e8","sha512":"59bbfe9127e937271e5ac8443681dd48c7bfa882bdbfe3e340ea145ee8b6852d9a612d67f51252985fb0e11b37cafb42eb3a7e33b39c3af9aecdce3c5bd98e37","ssdeep":"1536:/rfP9tchGTkgdTU1GvCOsDeEJxefg7vtz0Nlm63XnMBya1VBVbmV9kgOrU9mo6bN:zfP9tchGAMU1lXnLil33cBLVBVbm68Up","tlshash":"1a93124a29a43759f2078cd2d438da40ad74c829cba787764eb1e61377c6dc0920ef5f","first_seen":"2023-05-04T20:06:27Z","last_seen":"2026-04-04T01:09:23.027489Z","times_seen":1414,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/mega-icons-3d-illustration-s4-3d.54642885c7fc0200.png","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/mega-icons-3d-illustration-s4-3d.54642885c7fc0200.png HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 21142\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-5296\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 450, 8-bit colormap, non-interlaced","md5":"c75010d4d5c13ead3a962ba2c1f53bb9","sha1":"dab95a4b027ef70e36e139c92fc440f19343071b","sha256":"aff82b4fceb3dbf328b92d4f31fcb545c5ac9e8fe4bc47082a88550ed9a01ab1","sha512":"393a8456beeefceb226d54cdcb2638640360e8248a6c02a02982356cbd1c17ff8b8fda02ded6a2f4df5e7c73d923a72921a8b323dfda0ac0d83ad5cb4e0467bf","ssdeep":"384:8c7c5xP/k1I9gCunXLDYfGT1fBBHsgfrmwi223WHc4nQ0W:8c7aSbW61ZBHdli223ANzW","tlshash":"fd92f1e82993ecc845e63f261004a2dd4c0927b528d336d7c8781eb5b4adc4eecf51aa","first_seen":"2024-10-27T18:25:40.690644Z","last_seen":"2026-04-04T01:09:23.031758Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg#icon-info","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308401\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4b4b1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5420e2507b414c978408c07fc91a4e64","sha1":"4ffb26793c5dd583265a042a6111237d0d927b07","sha256":"1ad398c97cc20d9ece5da763529d3c53dfc1459b05e87a17c0cb70e2350dc726","sha512":"d0964c4bf7a9d2bfc77d0f25e3f49f7fbe2253e30e4220cb05999debac344d72e6fd5214e905607ea97a8772fd68de2da375a95f05aa6a68f5f74f0ef5d52299","ssdeep":"3072:Dpyn6CXdR4MIvHBl75WSwv+UcxXQDIqxBEAR:YR4fBl75WSwvXiXQkqX","tlshash":"e164b4e1a22c518cd44b93bedb3dec92131e60feb8c589d8664d9b48a05f5cffd4a580","first_seen":"2025-08-07T15:52:14.908981Z","last_seen":"2026-01-21T12:16:40.019Z","times_seen":179,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/nodedec.js?v=11","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /nodedec.js?v=11 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 10156\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36728,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"53a8b9446281bf1ba7ffb938b3491116","sha1":"040fa4eab6737d4146dc0027200ba8b6fb9775e3","sha256":"32c6ae6b9080084e8b328f0a5f45cbd6a97ae2022ebcfb5c58ba630eda9944c2","sha512":"8e77140d018b1a3c76df1b7bcd46dfecde7a406843a87c4d9d831874f291ad948800634446bb29498d56617e3329c8243df281ede96449287f8a60270c62d2fb","ssdeep":"384:F69/G4OOMEH1H0UeivnUvK8eCsoRsRMa+/4352iVQJW:F65G4OEHbvnUdeo6yar52iKJW","tlshash":"47f23d0a6df710260563f47a4b9fa001fa399423029cef55be5da350afd14394af9fe8","first_seen":"2025-04-24T20:08:26.429264Z","last_seen":"2025-09-24T08:59:47.513313Z","times_seen":34,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":46,"dns":1,"connect":31,"send":0,"wait":27,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.api.mega.co.nz/cs?id=0\u0026v=1\u0026n=03UFVDhI","fqdn":"g.api.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:26.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:92:87:B0:48:35:8B:0C:87:B6:40:CD:57:89:6E:C8:6B:7B:5B:5D","sha256":"C6:D0:8D:45:31:54:1C:DA:39:7F:1F:F7:E9:86:33:9C:94:DF:2B:F3:91:2C:9F:3F:25:B0:CE:2F:36:8C:77:9B"}}},"request":{"raw":"POST /cs?id=0\u0026v=1\u0026n=03UFVDhI HTTP/1.1\r\nHost: g.api.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, X-Hashcash, MEGA-Chrome-Antileak\r\nAccess-Control-Expose-Headers: Original-Content-Length, X-Hashcash\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-store\r\nOriginal-Content-Length: 3\r\nContent-Length: 3\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"55ef51c35b7e218b34dd47605cfe5d6a","sha1":"ab33e22244714911b118201d7d8fd0ad82152f54","sha256":"80843f62e074cdde6622f9e68f409d489c44e0ae3fc59493c90df79705611947","sha512":"3028ba1802250cebaa45e9ccd51278c8b8df7f2eff1d0a5a2f932d645b0f11e231589e7c8100ea6c26bb1bb5653c0f01aea39f107f2c3c0ef25e50136e16b0ed","ssdeep":"","tlshash":"c72000000c0000000003000c0000000000000000000000000000000000000000000000","first_seen":"2023-09-01T00:27:04Z","last_seen":"2026-03-07T11:52:38.183538Z","times_seen":14,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":113,"dns":25,"connect":27,"send":0,"wait":115,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/fonts/Inter-Regular.woff2?v=b4e5eb92b9448cca","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/fonts/Inter-Regular.woff2?v=b4e5eb92b9448cca HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98756\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-181c4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98756, version 1.0","md5":"a90c493e75dbd61aec1195dbb9bb6b06","sha1":"a3e3ae8b6f79820b0b393a92fc613f50fb9f03c6","sha256":"ed64c5d83f5fcc357eb8afd0a7b8d9912cae97d88dd57cccb64787bb643c7c76","sha512":"4c3bda6554b08f9378fca75fb24fc9334534f365de8ab28f83228d95871d5c25ca90ba3945c390dc41ed176f4258df86bd5db1849b7d5bc09f257d309cd66cde","ssdeep":"3072:3f52dl72hKiGTrJNGZvdfJVgBz+rbFoGR0F6M:vol7gKiGPc1u6M","tlshash":"28a30217d38fbf2cc371ba7a390b245d225e9280421df6195f48c94a161dead27f368b","first_seen":"2023-04-26T21:16:46Z","last_seen":"2026-04-04T01:09:23.053751Z","times_seen":1583,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/rsaasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /rsaasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 37695\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"87ecb96466ed6b9a0c14c3bf365dd76f","sha1":"26e08a28ee8ca4395bbb3d62287ebba58c0e6f46","sha256":"c2b4cfff0a6d36d482282dddfed93e75058f5db32193a755bd77ae64682eccf9","sha512":"06e92b7bb092fc4916acffd50caa30ef7d45488be99f7546e5b7e4d6ef26edf1a390b26c232c289ea64e1e6474bb54b0ea75e57b30df4259787827e88631c2dc","ssdeep":"6144:s/BJvB38ZebZ7n2LfjvmIyybeVXWeK4cz4by60sAK16BKRQY06Qmu:s5Jvj2Lfj+IyybeVXWeK4cPd6Qmu","tlshash":"69340e4a6aeb16b18617aa2c9bdf940451e8a4174f36dc1c3c0cad704f59c24d6fafbc","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.564814Z","times_seen":218,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":34,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-7_35afff64de8483b2175fc95859586e6bfa7da3429af4a188dcda35406fd149a1.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-7_35afff64de8483b2175fc95859586e6bfa7da3429af4a188dcda35406fd149a1.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 595139\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-914c3\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":595139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0b15b324b2aad52bd6f686255e910f61","sha1":"a52fa0b450805d9af562360f3eb56db00fc1d61a","sha256":"35afff64de8483b2175fc95859586e6bfa7da3429af4a188dcda35406fd149a1","sha512":"1b20343172ef29a80716bdcd2e9a5fd4068adf03b1adcbcd13132b1bbf57fdfe26f129f015b6b5bef843700df7b005ba7b381fe68abcd4945db53292fbd3a7ee","ssdeep":"6144:LQ7/OWBO2KXZ3+4o2CsRMqYZoRWEWznPHzkRbLGKv7+Ov:Lc/OWBOro2CsRMqcmbLGKv7b","tlshash":"3fc4c40a39f7112244a370798fdf6040b639c01ba609de447dad93e05f85a789bf6fe9","first_seen":"2025-08-29T19:38:27.041991Z","last_seen":"2025-09-04T02:49:46.777654Z","times_seen":10,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/nodedec.js?v=11","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /nodedec.js?v=11 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 10156\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36728,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"53a8b9446281bf1ba7ffb938b3491116","sha1":"040fa4eab6737d4146dc0027200ba8b6fb9775e3","sha256":"32c6ae6b9080084e8b328f0a5f45cbd6a97ae2022ebcfb5c58ba630eda9944c2","sha512":"8e77140d018b1a3c76df1b7bcd46dfecde7a406843a87c4d9d831874f291ad948800634446bb29498d56617e3329c8243df281ede96449287f8a60270c62d2fb","ssdeep":"384:F69/G4OOMEH1H0UeivnUvK8eCsoRsRMa+/4352iVQJW:F65G4OEHbvnUdeo6yar52iKJW","tlshash":"47f23d0a6df710260563f47a4b9fa001fa399423029cef55be5da350afd14394af9fe8","first_seen":"2025-04-24T20:08:26.429264Z","last_seen":"2025-09-24T08:59:47.513313Z","times_seen":34,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":43,"dns":1,"connect":29,"send":0,"wait":28,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg#icon-linkedin","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308401\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4b4b1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5420e2507b414c978408c07fc91a4e64","sha1":"4ffb26793c5dd583265a042a6111237d0d927b07","sha256":"1ad398c97cc20d9ece5da763529d3c53dfc1459b05e87a17c0cb70e2350dc726","sha512":"d0964c4bf7a9d2bfc77d0f25e3f49f7fbe2253e30e4220cb05999debac344d72e6fd5214e905607ea97a8772fd68de2da375a95f05aa6a68f5f74f0ef5d52299","ssdeep":"3072:Dpyn6CXdR4MIvHBl75WSwv+UcxXQDIqxBEAR:YR4fBl75WSwvXiXQkqX","tlshash":"e164b4e1a22c518cd44b93bedb3dec92131e60feb8c589d8664d9b48a05f5cffd4a580","first_seen":"2025-08-07T15:52:14.908981Z","last_seen":"2026-01-21T12:16:40.019Z","times_seen":179,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/html/contact-avatar_18cc8179fdcf896e202df0bee3a8a381667c7ab2e8206b7b157494d10beeae12.svg","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/html/contact-avatar_18cc8179fdcf896e202df0bee3a8a381667c7ab2e8206b7b157494d10beeae12.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3544\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-dd8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3544,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b77a56614a61554062526d9cc9abe1b","sha1":"ea96f5169990d03c7e42819515b837bd33bc7e69","sha256":"18cc8179fdcf896e202df0bee3a8a381667c7ab2e8206b7b157494d10beeae12","sha512":"76ee94466793243e46b0032ba92dde4875a3876342073053d16470123dd96ce426ee6316695514fe3592e5455cef43acb8ed6a71cbdc1deb9713a225fd560ec4","ssdeep":"","tlshash":"c871ec2dd7f68e3fe526c24eca84d02857a5024b695ac365f36e7b0e1f542e2c48f354","first_seen":"2024-09-01T23:17:22Z","last_seen":"2026-04-04T01:09:23.03432Z","times_seen":1061,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-14_5e0a3a31c042cdbe663b6bb3491b8acffece960b5e38371e6b25b0746dc44078.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-14_5e0a3a31c042cdbe663b6bb3491b8acffece960b5e38371e6b25b0746dc44078.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 614766\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-9616e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":614766,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"50fb6cc0edcdead220576c8ec9effb48","sha1":"15ece128c3994775a1c715bc9838d0e429127b83","sha256":"5e0a3a31c042cdbe663b6bb3491b8acffece960b5e38371e6b25b0746dc44078","sha512":"4640812507382a5bac9e6e462c82c3d24684527c679e808b3ce9fcd74d2c4d2858988fd232c71ffadc8902946b0d72caa0c38691ac8ff4274782161f9189effa","ssdeep":"3072:hPo7he6gaQFRbjULcomAoPsnbqFlxBuaLdb7zFH4/hB9SY29faWqBUwaprombx1Z:BF7/ULcomAJuX78CrbHnHLbFV82B","tlshash":"3dd4704a39f71136456374ba9bcfa108b338901b604dde687d4c93946fc1078aaf6fe9","first_seen":"2025-08-29T19:38:27.089876Z","last_seen":"2025-09-04T02:49:46.775139Z","times_seen":10,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/mega-icons-3d-icon-list-3d.1cbacc9ad7207808.png","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/mega-icons-3d-icon-list-3d.1cbacc9ad7207808.png HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2214\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-8a6\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"3ccd2d9c7d0c2ed39bb9aee5697dae55","sha1":"f7e8a89bd2b7a3f22dc8b3870ee2510e1452c9b7","sha256":"7d4baf623dbd6fccb2943e8b904c7a9339bdbac35bb4ee9f55c321fe7119ea89","sha512":"50dd17df066c40e11f4f89cc249f9d97251e44e9c17fb3b3b2e8942019a5960251ed24eacf778ce453ddfd591cb810f6202cd77a80e2c81ecf147fe9135de1a6","ssdeep":"","tlshash":"a0414b2b813c3099e8a83913f562489ecd5aedad17c6e93dd0bdc0e36206d41f60c822","first_seen":"2024-10-27T18:25:40.697594Z","last_seen":"2026-03-22T22:31:44.05752Z","times_seen":1038,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/sjcl.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /sjcl.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 22139\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a5add339d0fc07a3bf18555a3ffa95f3","sha1":"1c21f57c4c94e36a2b77e7d511999cc0a10f2007","sha256":"2de43c149597674d654d146dd3529643d01b13304c886540207fd81ebd709911","sha512":"05620ed4908279e3dcfc57bdfd24b1cfed4e182e11220e719626b01f64a17515548f8271ba149940e352590ff704bb986af599a1649fc7410297488de892e304","ssdeep":"1536:LloUsPSV8DRSvTqfQ2FlrQD96VxLNiM6TTjuG2q5rIBJn4d:L66iDRSOQMkBQxMuDq5rIq","tlshash":"dc83e9183ee211b1914770b2abaf5405f220f01f2699ed98785c9b88af5cf7542f5fe8","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.567129Z","times_seen":226,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-11_1a26e991b501040f487e2a617dd9117dec701e4a55e9d2cf9a27f153571f1f0b.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-11_1a26e991b501040f487e2a617dd9117dec701e4a55e9d2cf9a27f153571f1f0b.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 565632\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-8a180\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":565632,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f5501d9eaa04dead9be838732181dcb9","sha1":"61e3de2bd81c34c520a39b215c2c6b273db65145","sha256":"1a26e991b501040f487e2a617dd9117dec701e4a55e9d2cf9a27f153571f1f0b","sha512":"12268efa0023da11d4c77a858cbdf7cafc5809cb22c3f84dfa23ae4aaea37caeb22a9410b05762306bed38ae5fc179f3b665b02f082b683e645fe2a2b33d0133","ssdeep":"6144:fSphcynv/1gPPlsB4M5KgiIO8FZoGZreSfpZQC+Du:Kp6YFM6","tlshash":"7bc4920936fb123184b7307a4fefa044b235800ba54aee587d9c53c45f95178aaf6fe9","first_seen":"2025-08-29T19:38:27.097953Z","last_seen":"2025-09-04T02:49:46.762088Z","times_seen":10,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/BDL-3_2908f873822f2367efa1b5be7b087f4feac181fd72fdd11d5586b82d247707d4.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/BDL-3_2908f873822f2367efa1b5be7b087f4feac181fd72fdd11d5586b82d247707d4.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 296540\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4865c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":296540,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (550)","md5":"5cd607017e117fd74e4c1136d436b4c4","sha1":"2288c11f97834eb79aa0aa611ff681fcdfbc4b34","sha256":"2908f873822f2367efa1b5be7b087f4feac181fd72fdd11d5586b82d247707d4","sha512":"ddbc677ea153aaf48c38fac4d322a4d18fa4cb140b191fa80ea24ba86cb1eddbf9917c2c139e533993f3e57d9d3ddff66f339e9642d9f713382dc3a9dbd4e9f1","ssdeep":"1536:kE/Qf+uSxiLvREE6LrXcAq4kf9YfTKIPGOF9/TVTQOQT3dLLlodgo6cvAYH4sASg:i+uSxiLvRkLri9YfTKIPGO1QMvAM4gM","tlshash":"73542480f1094ef6277bc24ed60ad704dfaa6160ce965de7d1e7d81983f71ec22916e0","first_seen":"2025-08-21T16:14:03.651652Z","last_seen":"2025-09-04T02:49:46.786279Z","times_seen":20,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":28,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-13_2dcafe4d319d9307c0b7d3747e6cfdec13e486030b8c78cd7edd2e4458ded8f7.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-13_2dcafe4d319d9307c0b7d3747e6cfdec13e486030b8c78cd7edd2e4458ded8f7.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 510527\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-7ca3f\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bf2d246e647e66e861ec4aeb51dbc08a","sha1":"a6b4577fd4bf87a506bd65f3e30f059ed6573a32","sha256":"2dcafe4d319d9307c0b7d3747e6cfdec13e486030b8c78cd7edd2e4458ded8f7","sha512":"757cd458e5e74d62df0773b34499a7370d6e34c2c4b34b0c6434f570c5a690f3d809899a929762039c9b76340da081e4c21caf5d14fb517a5977d3ba9ca93a3d","ssdeep":"3072:Dk4JlUx0f1lW8MkJIi4k3D2+EdeWlTXbMkhDtAWUmUTBTO+s0RMiR9yCTEMbRMv+:A4rU3KBryH6g7d2","tlshash":"80b4821926fb113580b7707e8fcf9052b234900b6809de697eac97885fc457896f6fe8","first_seen":"2025-08-29T19:38:27.105315Z","last_seen":"2025-09-04T02:49:46.749102Z","times_seen":10,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/BDL-1_a06d21c5913813bef247b0b00d32a41203f00ad437e2c3d14c0ed7b1c221370d.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/BDL-1_a06d21c5913813bef247b0b00d32a41203f00ad437e2c3d14c0ed7b1c221370d.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 523693\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-7fdad\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":523693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (764)","md5":"b31d32eb7dc31887653381e9952a7504","sha1":"6dccdfa484a3743f925c1d088278721b55b31be7","sha256":"a06d21c5913813bef247b0b00d32a41203f00ad437e2c3d14c0ed7b1c221370d","sha512":"da4be9b88a770678cce3bd77579958f631569308e5b6a46625e43aea05f51c3a9078b1dee72778bea55235f72113482191772482c6f2015d1ef16a2f7dd55470","ssdeep":"3072:1CZXWqbPypt5PyRah87r/osM7auqy7oKSIW0GwBXquxou:1iPBRahwr/oJE0GwBau2u","tlshash":"4db4a53269902daef21b4219f794b64cab260003ef1f4fffa91a7d6c93d50e5126271d","first_seen":"2025-08-21T16:14:03.713864Z","last_seen":"2025-09-04T02:49:46.795019Z","times_seen":20,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/sjcl.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /sjcl.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 22139\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a5add339d0fc07a3bf18555a3ffa95f3","sha1":"1c21f57c4c94e36a2b77e7d511999cc0a10f2007","sha256":"2de43c149597674d654d146dd3529643d01b13304c886540207fd81ebd709911","sha512":"05620ed4908279e3dcfc57bdfd24b1cfed4e182e11220e719626b01f64a17515548f8271ba149940e352590ff704bb986af599a1649fc7410297488de892e304","ssdeep":"1536:LloUsPSV8DRSvTqfQ2FlrQD96VxLNiM6TTjuG2q5rIBJn4d:L66iDRSOQMkBQxMuDq5rIq","tlshash":"dc83e9183ee211b1914770b2abaf5405f220f01f2699ed98785c9b88af5cf7542f5fe8","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.567129Z","times_seen":226,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg#icon-youtube","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308401\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4b4b1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5420e2507b414c978408c07fc91a4e64","sha1":"4ffb26793c5dd583265a042a6111237d0d927b07","sha256":"1ad398c97cc20d9ece5da763529d3c53dfc1459b05e87a17c0cb70e2350dc726","sha512":"d0964c4bf7a9d2bfc77d0f25e3f49f7fbe2253e30e4220cb05999debac344d72e6fd5214e905607ea97a8772fd68de2da375a95f05aa6a68f5f74f0ef5d52299","ssdeep":"3072:Dpyn6CXdR4MIvHBl75WSwv+UcxXQDIqxBEAR:YR4fBl75WSwvXiXQkqX","tlshash":"e164b4e1a22c518cd44b93bedb3dec92131e60feb8c589d8664d9b48a05f5cffd4a580","first_seen":"2025-08-07T15:52:14.908981Z","last_seen":"2026-01-21T12:16:40.019Z","times_seen":179,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/fonts/Inter-SemiBold.woff2?v=598278c73b24c2ce","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/fonts/Inter-SemiBold.woff2?v=598278c73b24c2ce HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106788\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-1a124\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106788, version 1.0","md5":"920533ddd1d6ea543f7fc3e89b4556bb","sha1":"bc11a427dcb55d1354a5ea07bbc353c57fe9cc0b","sha256":"d6d0905419e1e821c57189396db46ffe335960bd68befedddaf9e73f3f2e7a3a","sha512":"08edf9e3b3b03eb44ec7b194468eb969e72d51b0c66946ece974d0d6c1b8b738facd155c576b8dc1302b0889a5c04924c44b91cbedb6ed0c64c72c780742a571","ssdeep":"3072:uz6Qf75dUBRMxnGF/g7OVr5eaHPDwqK6wIms:O75LxnGFdVrnDc6ks","tlshash":"b7a312f67491d415f90f36f99b77a0251abd1957b4bb4214c3833cab41ee08a7bacb02","first_seen":"2023-05-21T06:58:03Z","last_seen":"2026-04-04T01:09:23.051077Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/sjcl.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /sjcl.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 22139\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a5add339d0fc07a3bf18555a3ffa95f3","sha1":"1c21f57c4c94e36a2b77e7d511999cc0a10f2007","sha256":"2de43c149597674d654d146dd3529643d01b13304c886540207fd81ebd709911","sha512":"05620ed4908279e3dcfc57bdfd24b1cfed4e182e11220e719626b01f64a17515548f8271ba149940e352590ff704bb986af599a1649fc7410297488de892e304","ssdeep":"1536:LloUsPSV8DRSvTqfQ2FlrQD96VxLNiM6TTjuG2q5rIBJn4d:L66iDRSOQMkBQxMuDq5rIq","tlshash":"dc83e9183ee211b1914770b2abaf5405f220f01f2699ed98785c9b88af5cf7542f5fe8","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.567129Z","times_seen":226,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/rsaasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /rsaasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 37695\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"87ecb96466ed6b9a0c14c3bf365dd76f","sha1":"26e08a28ee8ca4395bbb3d62287ebba58c0e6f46","sha256":"c2b4cfff0a6d36d482282dddfed93e75058f5db32193a755bd77ae64682eccf9","sha512":"06e92b7bb092fc4916acffd50caa30ef7d45488be99f7546e5b7e4d6ef26edf1a390b26c232c289ea64e1e6474bb54b0ea75e57b30df4259787827e88631c2dc","ssdeep":"6144:s/BJvB38ZebZ7n2LfjvmIyybeVXWeK4cz4by60sAK16BKRQY06Qmu:s5Jvj2Lfj+IyybeVXWeK4cPd6Qmu","tlshash":"69340e4a6aeb16b18617aa2c9bdf940451e8a4174f36dc1c3c0cad704f59c24d6fafbc","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.564814Z","times_seen":218,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":42,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/BDL-5_d0d07bbecf769ffa096d3dde0a5a68e308ea3c97d75d55093600f3f698d30c4f.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/BDL-5_d0d07bbecf769ffa096d3dde0a5a68e308ea3c97d75d55093600f3f698d30c4f.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 324240\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4f290\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":324240,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (769)","md5":"343f81aeb9021f637bdbd33a1cee37ca","sha1":"e2791017496a81c568e0ab0cbdbc47bc696168a2","sha256":"d0d07bbecf769ffa096d3dde0a5a68e308ea3c97d75d55093600f3f698d30c4f","sha512":"e8af05d837c9b7b4ca388be3fc74fe60511668e41bcc12a7afce759b31327b7b905bafe1b75510b4115468f77a1f01a035ccdc9d39b792213d141b641de26723","ssdeep":"3072:Frq+eG6Ho8tGgcpgfQTRPPrkVcyo5wS+TMpJABSIt4qQU8R8eY:FoVcyo5wS+TMzABSOQU8R8eY","tlshash":"a964d669f9112d7ca12391a9afcd264c7b15d452de0fcedef82e713c83c96e420a261d","first_seen":"2025-08-29T19:38:27.108162Z","last_seen":"2025-09-10T03:40:01.429713Z","times_seen":19,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-9_a1b50651fb4a23cc0b75067ee5fc2ccb02ed7aaec531a035afa78ae148d6ae78.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-9_a1b50651fb4a23cc0b75067ee5fc2ccb02ed7aaec531a035afa78ae148d6ae78.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 653565\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-9f8fd\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":653565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"663013b15228ce534800c060134cb8f4","sha1":"2c067a47903f10d0667e7ed60b9c0f4a14efe6b4","sha256":"a1b50651fb4a23cc0b75067ee5fc2ccb02ed7aaec531a035afa78ae148d6ae78","sha512":"4a3dfa7f8e6f5da109caaf4a7c7661cb77f5e70c440d94e1b5847352a5e0a5a038b004f8af941b1347a882fd145ba3eede8a1ac9bb6efc56222abb08d87bb3c8","ssdeep":"12288:OS1nnP/UiY2eAuLJYxHBLkNKl3rt/mxQChX4rkAQazCF:OS1nnP/UiY2eAuLJiHBLkNKl3rtOxQCJ","tlshash":"94d4b408b9f711715977317e9befa004a738400b6508ee58be5c93902fc963c96b6bed","first_seen":"2025-08-21T16:14:03.710221Z","last_seen":"2025-09-04T02:49:46.774267Z","times_seen":20,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 443062\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-6c2b6\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":443062,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"057852173e958810f1de0e8adbc9d462","sha1":"bd05e51244966615a9dc2b0119f7e8cfa64f22b5","sha256":"9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7","sha512":"230ec42dfcea740b4fb37e3c7559da2289b7bf2025c465bf055db75659c7f9f05ede374792b046ffb3365f8fa5dc34e23f1312984c195c32a6d42147959efc86","ssdeep":"6144:6/BJv438PebFPmBjbNibrw7n2nfjvmIyybeVXWeK4cz4by6AsAt16BCfQYs63:65Jv5Niu2nfj+IyybeVXWeK4cu763","tlshash":"4094de9aa9eb1bb9a10aae3c4bdf800142d8d41b4f22dc9e3c4d4d714f5c9245af5b7c","first_seen":"2023-04-07T07:56:35Z","last_seen":"2026-04-04T06:14:22.694297Z","times_seen":1577,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/images/mobile/button-loader-green.gif?v=b175f7d362d2b4af HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 8787\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-2253\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8787,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"3f788625bbc4f87885b982ed70876dcb","sha1":"d4155b22d2e63b149b42e238ab5c2788199a2f99","sha256":"741f05bca4428e5880a44222f68a2f50172860f43b09abb57e3dc12d3ce5766d","sha512":"80fce5a6fe9afcebc834b8f324bbabb368aaf5bd4cb4753cd4b675b18d657a988f91806119844ab68ab58ffdc25b2f27e6f8728487e6ccdfea82fa6f0115ccd8","ssdeep":"192:QQ9CzWgjVU7tlCZR7WzmvEIOT7XJ+rgRNn:X9CzWgj+5loFo7ygL","tlshash":"82027c86c9a0c159d46383f204cf496e1ac127ec407c275d5e90e655ecdb7aeba0cbed","first_seen":"2023-05-04T20:06:27Z","last_seen":"2026-04-04T01:09:23.031112Z","times_seen":1423,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg#icon-twitter","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308401\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4b4b1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5420e2507b414c978408c07fc91a4e64","sha1":"4ffb26793c5dd583265a042a6111237d0d927b07","sha256":"1ad398c97cc20d9ece5da763529d3c53dfc1459b05e87a17c0cb70e2350dc726","sha512":"d0964c4bf7a9d2bfc77d0f25e3f49f7fbe2253e30e4220cb05999debac344d72e6fd5214e905607ea97a8772fd68de2da375a95f05aa6a68f5f74f0ef5d52299","ssdeep":"3072:Dpyn6CXdR4MIvHBl75WSwv+UcxXQDIqxBEAR:YR4fBl75WSwvXiXQkqX","tlshash":"e164b4e1a22c518cd44b93bedb3dec92131e60feb8c589d8664d9b48a05f5cffd4a580","first_seen":"2025-08-07T15:52:14.908981Z","last_seen":"2026-01-21T12:16:40.019Z","times_seen":179,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/nodedec.js?v=11","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /nodedec.js?v=11 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 10156\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36728,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"53a8b9446281bf1ba7ffb938b3491116","sha1":"040fa4eab6737d4146dc0027200ba8b6fb9775e3","sha256":"32c6ae6b9080084e8b328f0a5f45cbd6a97ae2022ebcfb5c58ba630eda9944c2","sha512":"8e77140d018b1a3c76df1b7bcd46dfecde7a406843a87c4d9d831874f291ad948800634446bb29498d56617e3329c8243df281ede96449287f8a60270c62d2fb","ssdeep":"384:F69/G4OOMEH1H0UeivnUvK8eCsoRsRMa+/4352iVQJW:F65G4OEHbvnUdeo6yar52iKJW","tlshash":"47f23d0a6df710260563f47a4b9fa001fa399423029cef55be5da350afd14394af9fe8","first_seen":"2025-04-24T20:08:26.429264Z","last_seen":"2025-09-24T08:59:47.513313Z","times_seen":34,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":59,"dns":1,"connect":37,"send":0,"wait":37,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/sjcl.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /sjcl.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 22139\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a5add339d0fc07a3bf18555a3ffa95f3","sha1":"1c21f57c4c94e36a2b77e7d511999cc0a10f2007","sha256":"2de43c149597674d654d146dd3529643d01b13304c886540207fd81ebd709911","sha512":"05620ed4908279e3dcfc57bdfd24b1cfed4e182e11220e719626b01f64a17515548f8271ba149940e352590ff704bb986af599a1649fc7410297488de892e304","ssdeep":"1536:LloUsPSV8DRSvTqfQ2FlrQD96VxLNiM6TTjuG2q5rIBJn4d:L66iDRSOQMkBQxMuDq5rIq","tlshash":"dc83e9183ee211b1914770b2abaf5405f220f01f2699ed98785c9b88af5cf7542f5fe8","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.567129Z","times_seen":226,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/favicon.ico?v=3","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:26.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /favicon.ico?v=3 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/x-icon\r\nContent-Length: 1029\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6518,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"72f13fa5f987ea923a68a818d38fb540","sha1":"f014620d35787fcfdef193c20bb383f5655b9e1e","sha256":"37127c1a29c164cdaa75ec72ae685094c2468fe0577f743cb1f307d23dd35ec1","sha512":"b66af0b6b95560c20584ed033547235d5188981a092131a7c1749926ba1ac208266193bd7fa8a3403a39eee23fcdd53580e9533803d7f52df5fb01d508e292b3","ssdeep":"96:EaLq5FfE6rwDDDIDDgDDDDD+CxyVqqqqqq0qqqqqq:Jq5hEtDDDIDDgDDDDD","tlshash":"71d17bbecf19d7aac091a7b571e2fb358205ec54cf11c80491b63e2a31f14c63ad5da9","first_seen":"2023-05-12T08:09:00Z","last_seen":"2026-04-04T01:09:23.036593Z","times_seen":1459,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/folder/03UFVDhI","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T22:32:26.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /folder/03UFVDhI HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\nContent-Length: 829\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nX-Frame-Options: DENY\r\nX-Robots-Tag: noindex\r\nSet-Cookie: geoip=NO; Secure\r\nContent-Security-Policy: default-src 'self' data: blob: *.mega.co.nz *.mega.nz *.mega.io http://*.mega.co.nz http://*.mega.nz http://*.mega.io wss://*.userstorage.mega.co.nz wss://*.karere.mega.nz wss://*.sfu.mega.co.nz *.karere.mega.nz:1380 http://127.0.0.1:6341 localhost.megasyncloopback.mega.nz:6342; script-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob:; style-src 'self' 'unsafe-inline' *.mega.co.nz *.mega.nz *.mega.io data: blob:; frame-src 'self' *.megapay.nz ad.mega.nz mega: *.megaad.nz https://mega.nz/ https://mega.io/; img-src 'self' *.mega.co.nz *.mega.nz *.mega.io data: blob: mega.nz\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2063,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"cf8ab365a4cb05c1846a857c2c74d85a","sha1":"a74caed234d3918cd8aed2f8b9e5f8ccf29307a0","sha256":"8dc3aa73d0372ba23dcd51287a3ea3fbba928d5e1faf4d34e8f1f77d0677c83b","sha512":"fde1c72a82142dcea8a35b785b4e546698e7924ec16ac6a1d6c20ea4f6b9cef10c72bbd3e2993ae15ce7549f55dfddbb69e9555f40196b137878bbcafeb01321","ssdeep":"","tlshash":"a8415623e90484154665e144f0e9b71d8023978fdb625c4167f4a5eb91dbfe1c1363e9","first_seen":"2025-09-01T22:33:02.92158Z","last_seen":"2025-09-01T22:33:02.92158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":78,"dns":11,"connect":28,"send":0,"wait":28,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/vendor/scheduler-polyfill_66da9107c97037dacd222b1f39336ce288eb8216b37b7120e81d62ee5dccf82c.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/vendor/scheduler-polyfill_66da9107c97037dacd222b1f39336ce288eb8216b37b7120e81d62ee5dccf82c.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 33736\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-83c8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a84088002ad6ca024b9e0dd76839dfc3","sha1":"757199046eb295aefcfcd40a3e9b6469dfa0a0b1","sha256":"66da9107c97037dacd222b1f39336ce288eb8216b37b7120e81d62ee5dccf82c","sha512":"5bbdbb78a6f43f1da09988645b81c27d78b990b845ca59a2069e670cb5745ba79320841095b34cb25283837fd08acedad6a7f88c61f2aefc06a862e19cad8cd0","ssdeep":"384:hXQuRXQukIW02q1qUJDI/s/yZBhC6sQul+YYkoMOaiQuP5Q+L7Utto8YWeumQuBo:hBU50v1qUJUJEi/TL7UExIJdRDL","tlshash":"1ee264992adb136349a2b6b59b5ba381e23c831f2b5dc984785dc3f41f4537043a2fe1","first_seen":"2024-12-07T06:49:13.837414Z","last_seen":"2026-04-04T06:14:22.679797Z","times_seen":1120,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-mono.6e3079b3fa4b69b1.woff2?h=98d23a7bb","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-mono.6e3079b3fa4b69b1.woff2?h=98d23a7bb HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 90876\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-162fc\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90876,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 90876, version 1.0","md5":"e9e97a9a5f2bbe792c4dc2d9c3aca9da","sha1":"796ec35b3786b8da2d22e1d638f104a4a6b31fca","sha256":"c778df9cf58fbce4fae5d1edcada4c675e976ab325003e3016a5f9d98e4a58ae","sha512":"d00002fc5e244d0c8469559122260aaec401c161b2f5a6ee1a5a2b24a527a8699846480fbb32f840b1dd68f89d13a7ef1a30f0ba9eb9bc99b4abef911dd5f62e","ssdeep":"1536:eBXgh1cbaQsQ0U5Ip37x039HydV3E75laJ3aiYVMPTaLpXwjrQxwPc/wH7cs7wrw:mghyaQsQ0MIpLmIOreaTVM7aLpgjKwPp","tlshash":"b59302dacc2a5f0e46bdaf31c85558e433a15a3b5497959e36178c93b0ec4c02f9b4f2","first_seen":"2025-08-21T16:14:03.675585Z","last_seen":"2025-09-18T00:10:39.544689Z","times_seen":36,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/rsaasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /rsaasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 37695\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"87ecb96466ed6b9a0c14c3bf365dd76f","sha1":"26e08a28ee8ca4395bbb3d62287ebba58c0e6f46","sha256":"c2b4cfff0a6d36d482282dddfed93e75058f5db32193a755bd77ae64682eccf9","sha512":"06e92b7bb092fc4916acffd50caa30ef7d45488be99f7546e5b7e4d6ef26edf1a390b26c232c289ea64e1e6474bb54b0ea75e57b30df4259787827e88631c2dc","ssdeep":"6144:s/BJvB38ZebZ7n2LfjvmIyybeVXWeK4cz4by60sAK16BKRQY06Qmu:s5Jvj2Lfj+IyybeVXWeK4cPd6Qmu","tlshash":"69340e4a6aeb16b18617aa2c9bdf940451e8a4174f36dc1c3c0cad704f59c24d6fafbc","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.564814Z","times_seen":218,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/rsaasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /rsaasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 37695\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"87ecb96466ed6b9a0c14c3bf365dd76f","sha1":"26e08a28ee8ca4395bbb3d62287ebba58c0e6f46","sha256":"c2b4cfff0a6d36d482282dddfed93e75058f5db32193a755bd77ae64682eccf9","sha512":"06e92b7bb092fc4916acffd50caa30ef7d45488be99f7546e5b7e4d6ef26edf1a390b26c232c289ea64e1e6474bb54b0ea75e57b30df4259787827e88631c2dc","ssdeep":"6144:s/BJvB38ZebZ7n2LfjvmIyybeVXWeK4cz4by60sAK16BKRQY06Qmu:s5Jvj2Lfj+IyybeVXWeK4cPd6Qmu","tlshash":"69340e4a6aeb16b18617aa2c9bdf940451e8a4174f36dc1c3c0cad704f59c24d6fafbc","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.564814Z","times_seen":218,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grabify.link/PER9ZS","fqdn":"grabify.link","domain":"grabify.link","tld":"link"},"ip":{"addr":"104.26.9.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T22:32:24.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grabify.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:05:33 GMT","end":"Fri, 21 Nov 2025 07:05:30 GMT"},"fingerprint":{"sha1":"EC:22:44:6D:29:CB:E1:2F:F6:18:D1:C7:84:40:1F:D5:82:C9:B4:98","sha256":"5F:C8:D7:96:0B:B8:2E:F1:3B:2B:9B:75:B9:55:F9:DC:B6:C1:E5:A0:03:67:45:FB:1F:DF:5B:E7:1B:3F:6C:90"}}},"request":{"raw":"GET /PER9ZS HTTP/1.1\r\nHost: grabify.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 01 Sep 2025 22:32:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://mega.nz/folder/03UFVDhI\r\ncf-ray: 9788392ecf96b50b-OSL\r\ncache-control: no-cache, private\r\nx-robots-tag: noindex, nofollow\r\nx-content-type-options: nosniff\r\nx-abuse: abuse@grabify.link\r\nx-ratelimit-limit: 15\r\nx-ratelimit-remaining: 14\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InZZdzhsWHY5NlM2aUR0VzdZdFExeFE9PSIsInZhbHVlIjoiQld1YmNXcWUzRGd2ZnZ0czJEWU1VTDZ5dkR5Rk9aVjRZeEpYdXF2c0NCQWVGTkJXMzIrVDhjY3NiMUV3dWFuNmh2UHRKYTZ5Rjl0ZlJ1QllzME4wSVBPL0hFWngrUDhIOHNWV1BrSTh1eXBuY1VManhVZnhwdWtUcmdtanFqcUUiLCJtYWMiOiIzZGU4MGVkMzRhOTU1OTA5MWIwMWY5ZjViZTk4MTAxYzEwNjc2YzJmODM4ZThiYzkzMWUzODhhOWQxNTgyOGIyIiwidGFnIjoiIn0%3D; expires=Tue, 02 Sep 2025 03:32:25 GMT; Max-Age=18000; path=/; secure\ng_session=eyJpdiI6Iit0RXVpVy9jWjJMSUp4QW8xMG5KelE9PSIsInZhbHVlIjoiK0NpbWFYMWNSRFpzL3ZvTXdyVjltYmEwZTduUEROaVkwMDRtSnFyOGJUNnd4cUt4Q0ttSHhVakpsL3NCNjZmazQ1d04xV2pSRXJKd1UwVzA5b3ZEdnBEc1QxRFdZTEFKTkI0Z2lhR25aT3liMzhFWE5BRXNiOWsrcmQ2SXU5VmYiLCJtYWMiOiJhZjkyZTJmODBiMDBiM2ZiNTQyNThmZTk2NTFmZTgxZjAzYzJlOTgzOWVmNzFlMGIwZTNkYjZhNzlkNGEwM2M4IiwidGFnIjoiIn0%3D; expires=Tue, 02 Sep 2025 03:32:25 GMT; Max-Age=18000; path=/; secure; httponly\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QKuYi0y%2FA2pPQcXA0c0vwneS21IQO9g1yzDWVJnfeDnkB%2Fd7FMIBIJ%2FFuNAZa9PQuY6ZcmLInU4QHOM3WVxh%2BbqHddPR6sUHHWqtiZRNCVTZdDk1m75dGJLnG%2BtFyw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=1873,cfEdge;dur=23, cfL4;desc=\"?proto=TCP\u0026rtt=6115\u0026min_rtt=456\u0026rtt_var=11347\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3277\u0026recv_bytes=1253\u0026delivery_rate=8290076\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=ae70818e9c0ee9a1\u0026ts=1913\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2063,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":1984,"timings":{"blocked":43,"dns":22,"connect":1,"send":0,"wait":1898,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/BDL-2_b3316255b9b1ad343c48f0028205b8bdca2c2191fe83515a3091b7eab6086d6f.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/BDL-2_b3316255b9b1ad343c48f0028205b8bdca2c2191fe83515a3091b7eab6086d6f.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 27630\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-6bee\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (456)","md5":"286acdc51594ee3f773ce6c6da8cd878","sha1":"a089dbc929cc1ec699370b589da7754c11692a41","sha256":"b3316255b9b1ad343c48f0028205b8bdca2c2191fe83515a3091b7eab6086d6f","sha512":"2353e805da4dd992ae8f84c7d0b345340cd82e9cea4b7bb203f3b3b41ffda7d351fa1a54cb01743a82832b0d8fc296c0cc0d5455a03913cae0d734cac2f0c9cc","ssdeep":"768:2BzwNgGHtk3TNZIrgZ5/wdnj1BOqmu3ybn/Q/VluMnLH/c/in3r4df32IaYN1KAN:2mtHC/w91Iq53ybn/Q/bu8LH/c/E3E3T","tlshash":"5dc254aad8817e0949532a73bfef254497358d82af25cddeb23d0c0d879c6c4139367a","first_seen":"2025-08-29T19:38:27.044909Z","last_seen":"2025-10-01T04:59:12.182182Z","times_seen":45,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/BDL-8_1c255773e95915631318c45724e0dc5df530caac133d38f8e8b617e491bebfdb.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/BDL-8_1c255773e95915631318c45724e0dc5df530caac133d38f8e8b617e491bebfdb.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 56748\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-ddac\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56748,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2217)","md5":"6bbf05f240edfb81d823c0799356d497","sha1":"53b1dfdc0df2203951e5d88999b67ff2b33c432f","sha256":"1c255773e95915631318c45724e0dc5df530caac133d38f8e8b617e491bebfdb","sha512":"3c94a04a5d0c81ef16e800851eb8f8139afb43682f3634625b2d90ada824b5d72f21d75d9ce3efde2fa72ddf140b22d26bf47710c33e1687e79bb4268955cf19","ssdeep":"768:hT/KXrNFw51/UcobKsZS7lLcPaANR5tthlhDnW4BgG83FA:hT/4jwqPaANXhTbW4BgG83FA","tlshash":"2c43a754e9007eee6a534978f24c62089b1588a3cd4bcdfff5bd652886ca9d5223373c","first_seen":"2025-07-31T08:15:25.459836Z","last_seen":"2025-09-04T02:49:46.792476Z","times_seen":64,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/nodedec.js?v=11","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /nodedec.js?v=11 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 10156\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36728,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"53a8b9446281bf1ba7ffb938b3491116","sha1":"040fa4eab6737d4146dc0027200ba8b6fb9775e3","sha256":"32c6ae6b9080084e8b328f0a5f45cbd6a97ae2022ebcfb5c58ba630eda9944c2","sha512":"8e77140d018b1a3c76df1b7bcd46dfecde7a406843a87c4d9d831874f291ad948800634446bb29498d56617e3329c8243df281ede96449287f8a60270c62d2fb","ssdeep":"384:F69/G4OOMEH1H0UeivnUvK8eCsoRsRMa+/4352iVQJW:F65G4OEHbvnUdeo6yar52iKJW","tlshash":"47f23d0a6df710260563f47a4b9fa001fa399423029cef55be5da350afd14394af9fe8","first_seen":"2025-04-24T20:08:26.429264Z","last_seen":"2025-09-24T08:59:47.513313Z","times_seen":34,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/sjcl.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /sjcl.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 22139\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a5add339d0fc07a3bf18555a3ffa95f3","sha1":"1c21f57c4c94e36a2b77e7d511999cc0a10f2007","sha256":"2de43c149597674d654d146dd3529643d01b13304c886540207fd81ebd709911","sha512":"05620ed4908279e3dcfc57bdfd24b1cfed4e182e11220e719626b01f64a17515548f8271ba149940e352590ff704bb986af599a1649fc7410297488de892e304","ssdeep":"1536:LloUsPSV8DRSvTqfQ2FlrQD96VxLNiM6TTjuG2q5rIBJn4d:L66iDRSOQMkBQxMuDq5rIq","tlshash":"dc83e9183ee211b1914770b2abaf5405f220f01f2699ed98785c9b88af5cf7542f5fe8","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.567129Z","times_seen":226,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/sjcl.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /sjcl.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 22139\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a5add339d0fc07a3bf18555a3ffa95f3","sha1":"1c21f57c4c94e36a2b77e7d511999cc0a10f2007","sha256":"2de43c149597674d654d146dd3529643d01b13304c886540207fd81ebd709911","sha512":"05620ed4908279e3dcfc57bdfd24b1cfed4e182e11220e719626b01f64a17515548f8271ba149940e352590ff704bb986af599a1649fc7410297488de892e304","ssdeep":"1536:LloUsPSV8DRSvTqfQ2FlrQD96VxLNiM6TTjuG2q5rIBJn4d:L66iDRSOQMkBQxMuDq5rIq","tlshash":"dc83e9183ee211b1914770b2abaf5405f220f01f2699ed98785c9b88af5cf7542f5fe8","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.567129Z","times_seen":226,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-4_f1bad6f234528713c1bc1900101c33c24e45f50feab6955cc00599dfaed4d713.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-4_f1bad6f234528713c1bc1900101c33c24e45f50feab6955cc00599dfaed4d713.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 591406\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-9062e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c6d1e862f3fd3cfc2c4997e7c1d7feb2","sha1":"7e6897b1d7e4553b9f937596ce0546b458445dd4","sha256":"f1bad6f234528713c1bc1900101c33c24e45f50feab6955cc00599dfaed4d713","sha512":"69d58939ca9ef47ae292134ea71e409e67cba4653ec6426adf51871a857d5102c34c31710e094ef46cdc1052ad65b8a81f049c06a8f014afe8a7d6421c0cb51a","ssdeep":"6144:umWdoPMvAeE5vTTq8cVcCrLOXw3l7LnobmD5qeGZuN0cdavCXDdav0Y+0A3L+87T:umWHAeAez70e/GZuNV","tlshash":"20c4b64a7dfb11324a6370798b9fa005f2399017110cde64be9c93a06f8553897fafe9","first_seen":"2025-08-29T19:38:27.058007Z","last_seen":"2025-09-04T02:49:46.789114Z","times_seen":10,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/html/templates_0f3e88df47adc695dd7c084487c06cf5898b6d28905d4fbf0f581a011e426c90.json","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/html/templates_0f3e88df47adc695dd7c084487c06cf5898b6d28905d4fbf0f581a011e426c90.json HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/json\r\ncontent-length: 674793\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-a4be9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":674793,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"36e1d8cae0bd9f436afd622f6979d3d9","sha1":"237fdcb6ba14d7b96d1d33fe0f16bedd86434ce6","sha256":"0f3e88df47adc695dd7c084487c06cf5898b6d28905d4fbf0f581a011e426c90","sha512":"9e1971308e8a5997626dd3302040dab80d5fd693566bfbc1e441e4d6277ec9866fc044c6c60feb0ac505e524265a652da8fdea65d0d8fbba70956831a73c8794","ssdeep":"6144:QktmrhaS0iHQoXgBm0Z0Br1jShQU93VfDh1nPAYJr7wxqBWkQj2:riZShQOFgxqBWkQi","tlshash":"81e4fc74a09cda338193c2d6a6729b2f7766d258eeb3034253f8c39c0fe6c64ee56505","first_seen":"2025-08-29T19:38:27.062439Z","last_seen":"2025-09-04T02:49:46.779515Z","times_seen":10,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg#icon-mega-logo","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308401\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4b4b1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5420e2507b414c978408c07fc91a4e64","sha1":"4ffb26793c5dd583265a042a6111237d0d927b07","sha256":"1ad398c97cc20d9ece5da763529d3c53dfc1459b05e87a17c0cb70e2350dc726","sha512":"d0964c4bf7a9d2bfc77d0f25e3f49f7fbe2253e30e4220cb05999debac344d72e6fd5214e905607ea97a8772fd68de2da375a95f05aa6a68f5f74f0ef5d52299","ssdeep":"3072:Dpyn6CXdR4MIvHBl75WSwv+UcxXQDIqxBEAR:YR4fBl75WSwvXiXQkqX","tlshash":"e164b4e1a22c518cd44b93bedb3dec92131e60feb8c589d8664d9b48a05f5cffd4a580","first_seen":"2025-08-07T15:52:14.908981Z","last_seen":"2026-01-21T12:16:40.019Z","times_seen":179,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/nodedec.js?v=11","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /nodedec.js?v=11 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 10156\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36728,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"53a8b9446281bf1ba7ffb938b3491116","sha1":"040fa4eab6737d4146dc0027200ba8b6fb9775e3","sha256":"32c6ae6b9080084e8b328f0a5f45cbd6a97ae2022ebcfb5c58ba630eda9944c2","sha512":"8e77140d018b1a3c76df1b7bcd46dfecde7a406843a87c4d9d831874f291ad948800634446bb29498d56617e3329c8243df281ede96449287f8a60270c62d2fb","ssdeep":"384:F69/G4OOMEH1H0UeivnUvK8eCsoRsRMa+/4352iVQJW:F65G4OEHbvnUdeo6yar52iKJW","tlshash":"47f23d0a6df710260563f47a4b9fa001fa399423029cef55be5da350afd14394af9fe8","first_seen":"2025-04-24T20:08:26.429264Z","last_seen":"2025-09-24T08:59:47.513313Z","times_seen":34,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":46,"dns":1,"connect":28,"send":0,"wait":28,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/nodedec.js?v=11","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /nodedec.js?v=11 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 10156\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36728,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"53a8b9446281bf1ba7ffb938b3491116","sha1":"040fa4eab6737d4146dc0027200ba8b6fb9775e3","sha256":"32c6ae6b9080084e8b328f0a5f45cbd6a97ae2022ebcfb5c58ba630eda9944c2","sha512":"8e77140d018b1a3c76df1b7bcd46dfecde7a406843a87c4d9d831874f291ad948800634446bb29498d56617e3329c8243df281ede96449287f8a60270c62d2fb","ssdeep":"384:F69/G4OOMEH1H0UeivnUvK8eCsoRsRMa+/4352iVQJW:F65G4OEHbvnUdeo6yar52iKJW","tlshash":"47f23d0a6df710260563f47a4b9fa001fa399423029cef55be5da350afd14394af9fe8","first_seen":"2025-04-24T20:08:26.429264Z","last_seen":"2025-09-24T08:59:47.513313Z","times_seen":34,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-6_b91e8cf701bf33434892ce9d1106328efba3262f898eadc00dde5f283db9569b.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-6_b91e8cf701bf33434892ce9d1106328efba3262f898eadc00dde5f283db9569b.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 395877\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-60a65\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":395877,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"06920375165396e69e438960812d0558","sha1":"57cf464eeb2a69111ff134128c01b9b53677c538","sha256":"b91e8cf701bf33434892ce9d1106328efba3262f898eadc00dde5f283db9569b","sha512":"4cbf92a471b5dbc7c76f88b3d3227197741bd28e853c8799cbc2ff02c04538553e4926e21bcfbf08713ed7cfcb20c6d375ff887a05b901b986d94df2c5424cc0","ssdeep":"3072:+vOmUXOHlZBVtHBoQaomD64s3vOTgeo5w/MUunUkqFSkM60ulERDMf8JHIuGVBk:urTeJUUunUsueRDNZIuYk","tlshash":"2d84a3083afb113241a7b07d9bcf9044f23890275549de587eac83946f9097896faff9","first_seen":"2025-08-29T19:38:27.06032Z","last_seen":"2025-09-04T02:49:46.766068Z","times_seen":10,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/rsaasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /rsaasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 37695\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"87ecb96466ed6b9a0c14c3bf365dd76f","sha1":"26e08a28ee8ca4395bbb3d62287ebba58c0e6f46","sha256":"c2b4cfff0a6d36d482282dddfed93e75058f5db32193a755bd77ae64682eccf9","sha512":"06e92b7bb092fc4916acffd50caa30ef7d45488be99f7546e5b7e4d6ef26edf1a390b26c232c289ea64e1e6474bb54b0ea75e57b30df4259787827e88631c2dc","ssdeep":"6144:s/BJvB38ZebZ7n2LfjvmIyybeVXWeK4cz4by60sAK16BKRQY06Qmu:s5Jvj2Lfj+IyybeVXWeK4cPd6Qmu","tlshash":"69340e4a6aeb16b18617aa2c9bdf940451e8a4174f36dc1c3c0cad704f59c24d6fafbc","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.564814Z","times_seen":218,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/BDL-6_2ad8436e91370f2f90358416165ff3243f5d0beb26f4aac472c63f5504696bca.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/BDL-6_2ad8436e91370f2f90358416165ff3243f5d0beb26f4aac472c63f5504696bca.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 74707\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-123d3\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74707,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (618)","md5":"a821b9567e065e1fa4fada516847982c","sha1":"8887faf8cfc7b3ea9dc4861ce9d41e9f77861aa3","sha256":"2ad8436e91370f2f90358416165ff3243f5d0beb26f4aac472c63f5504696bca","sha512":"5c0db225b3c8a6dbf057de17449cab29f65ce73abf447a8894e05c55ff405daab5b1eb300fa1635971c1b354ddc548de92a538669a696589da911c9cb27d09f3","ssdeep":"1536:2uxrwpHXG4FmMzZpptoLWZ2R8d7QfK9CpcOC3h8wtJTFoPKUY+zYLhSxnxz/2qiN:2uxrwpHW4Fm8pTiK9CpcOC3h8wtJTF5j","tlshash":"7f737159e00276fba9229cabb34d24887f769c91cd0acedff2ae614441c75f74061a3d","first_seen":"2025-08-29T19:38:27.079132Z","last_seen":"2025-09-04T02:49:46.740407Z","times_seen":10,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/loading-sprite_light.png","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:26.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /loading-sprite_light.png HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 2883\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 200, 8-bit colormap, non-interlaced","md5":"9921934f1bf864072da77c61020377d7","sha1":"6d17fe18447d4150fa3df4875a19e90db20c67bb","sha256":"73e10e327fb13409cf18780c1356edf4f86350643db0d098e1f476330ce7fcfe","sha512":"99b7095d14385c2cc9b9ede9ecdb6a5b3b6eb6751ae1f222ea9bb5aeeb1850c8de20f2c280b425a65de146a28b231d154b1fe8d0c38b2a3560158864484e171f","ssdeep":"","tlshash":"845129503f2ecd9c51cd9836e40759b3718eaf8c539ac28044a536bebe32b4ce24a290","first_seen":"2024-12-20T15:48:27.1462Z","last_seen":"2025-09-04T02:49:46.759122Z","times_seen":469,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-10_1f2e31fdb1ee93c193263fc6049b51b8abe99519bb844446176454b559de3f1f.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-10_1f2e31fdb1ee93c193263fc6049b51b8abe99519bb844446176454b559de3f1f.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 507470\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-7be4e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":507470,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"33aa2e1c01525f3f0b012d264bdeea46","sha1":"d45010528c181edf471096b74eacb94d0443d7f2","sha256":"1f2e31fdb1ee93c193263fc6049b51b8abe99519bb844446176454b559de3f1f","sha512":"1a063c2de2f211c2390b07e1f2d4a65e2894680ac9bc384d11b6bfb4b13a62d58df3817a3c23eab1a8c9d8db8e6be10ac1f75bff20221bd743344e551199a503","ssdeep":"3072:Oby3hr9HjtXbh4m65Yjs7XVh7fEA0TT+5c5ALu1d/7ntbPvi2J1fWpDxNbTnCwqh:Z3hr9Hjtrh4m6+3A0TTwcZ7GplV4Ue","tlshash":"cab4714926fb112180a7307e9fdf9005b235810ba50ade687dac87d86fc167496f6ff8","first_seen":"2025-08-29T19:38:27.113497Z","last_seen":"2025-09-04T02:49:46.773377Z","times_seen":10,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg#icon-loading","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308401\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4b4b1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5420e2507b414c978408c07fc91a4e64","sha1":"4ffb26793c5dd583265a042a6111237d0d927b07","sha256":"1ad398c97cc20d9ece5da763529d3c53dfc1459b05e87a17c0cb70e2350dc726","sha512":"d0964c4bf7a9d2bfc77d0f25e3f49f7fbe2253e30e4220cb05999debac344d72e6fd5214e905607ea97a8772fd68de2da375a95f05aa6a68f5f74f0ef5d52299","ssdeep":"3072:Dpyn6CXdR4MIvHBl75WSwv+UcxXQDIqxBEAR:YR4fBl75WSwvXiXQkqX","tlshash":"e164b4e1a22c518cd44b93bedb3dec92131e60feb8c589d8664d9b48a05f5cffd4a580","first_seen":"2025-08-07T15:52:14.908981Z","last_seen":"2026-01-21T12:16:40.019Z","times_seen":179,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg#icon-instagram","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308401\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4b4b1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5420e2507b414c978408c07fc91a4e64","sha1":"4ffb26793c5dd583265a042a6111237d0d927b07","sha256":"1ad398c97cc20d9ece5da763529d3c53dfc1459b05e87a17c0cb70e2350dc726","sha512":"d0964c4bf7a9d2bfc77d0f25e3f49f7fbe2253e30e4220cb05999debac344d72e6fd5214e905607ea97a8772fd68de2da375a95f05aa6a68f5f74f0ef5d52299","ssdeep":"3072:Dpyn6CXdR4MIvHBl75WSwv+UcxXQDIqxBEAR:YR4fBl75WSwvXiXQkqX","tlshash":"e164b4e1a22c518cd44b93bedb3dec92131e60feb8c589d8664d9b48a05f5cffd4a580","first_seen":"2025-08-07T15:52:14.908981Z","last_seen":"2026-01-21T12:16:40.019Z","times_seen":179,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/nodedec.js?v=11","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /nodedec.js?v=11 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 10156\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36728,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"53a8b9446281bf1ba7ffb938b3491116","sha1":"040fa4eab6737d4146dc0027200ba8b6fb9775e3","sha256":"32c6ae6b9080084e8b328f0a5f45cbd6a97ae2022ebcfb5c58ba630eda9944c2","sha512":"8e77140d018b1a3c76df1b7bcd46dfecde7a406843a87c4d9d831874f291ad948800634446bb29498d56617e3329c8243df281ede96449287f8a60270c62d2fb","ssdeep":"384:F69/G4OOMEH1H0UeivnUvK8eCsoRsRMa+/4352iVQJW:F65G4OEHbvnUdeo6yar52iKJW","tlshash":"47f23d0a6df710260563f47a4b9fa001fa399423029cef55be5da350afd14394af9fe8","first_seen":"2025-04-24T20:08:26.429264Z","last_seen":"2025-09-24T08:59:47.513313Z","times_seen":34,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":42,"dns":1,"connect":26,"send":0,"wait":27,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/favicon.ico","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/x-icon\r\nContent-Length: 1029\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6518,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"72f13fa5f987ea923a68a818d38fb540","sha1":"f014620d35787fcfdef193c20bb383f5655b9e1e","sha256":"37127c1a29c164cdaa75ec72ae685094c2468fe0577f743cb1f307d23dd35ec1","sha512":"b66af0b6b95560c20584ed033547235d5188981a092131a7c1749926ba1ac208266193bd7fa8a3403a39eee23fcdd53580e9533803d7f52df5fb01d508e292b3","ssdeep":"96:EaLq5FfE6rwDDDIDDgDDDDD+CxyVqqqqqq0qqqqqq:Jq5hEtDDDIDDgDDDDD","tlshash":"71d17bbecf19d7aac091a7b571e2fb358205ec54cf11c80491b63e2a31f14c63ad5da9","first_seen":"2023-05-12T08:09:00Z","last_seen":"2026-04-04T01:09:23.036593Z","times_seen":1459,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/rsaasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /rsaasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 37695\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"87ecb96466ed6b9a0c14c3bf365dd76f","sha1":"26e08a28ee8ca4395bbb3d62287ebba58c0e6f46","sha256":"c2b4cfff0a6d36d482282dddfed93e75058f5db32193a755bd77ae64682eccf9","sha512":"06e92b7bb092fc4916acffd50caa30ef7d45488be99f7546e5b7e4d6ef26edf1a390b26c232c289ea64e1e6474bb54b0ea75e57b30df4259787827e88631c2dc","ssdeep":"6144:s/BJvB38ZebZ7n2LfjvmIyybeVXWeK4cz4by60sAK16BKRQY06Qmu:s5Jvj2Lfj+IyybeVXWeK4cPd6Qmu","tlshash":"69340e4a6aeb16b18617aa2c9bdf940451e8a4174f36dc1c3c0cad704f59c24d6fafbc","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.564814Z","times_seen":218,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":33,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myprivate.pics/PER9ZS","fqdn":"myprivate.pics","domain":"myprivate.pics","tld":"pics"},"ip":{"addr":"52.173.151.229","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T22:32:23.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myprivate.pics","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Sun, 01 Jun 2025 00:00:00 GMT","end":"Mon, 01 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CD:6A:AB:A3:D2:F8:C4:48:7B:BC:26:83:1B:31:67:86:79:10:1B:4A","sha256":"61:68:9F:C9:59:D2:FE:52:2E:07:DA:A4:BE:59:FF:95:C0:86:CA:91:29:87:36:05:2D:10:15:9D:6F:D4:1E:67"}}},"request":{"raw":"GET /PER9ZS HTTP/1.1\r\nHost: myprivate.pics\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 01 Sep 2025 22:32:23 GMT\r\nServer: Apache\r\nLocation: https://grabify.world/PER9ZS\r\nStatus: 301 Moved Permanently\r\ncf-cache-status: DYNAMIC\r\nExpect-CT: max-age=604800, report-uri=\"https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct\"\r\ncf-ray: 56137e603e72eeba\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2063,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":295,"dns":32,"connect":127,"send":0,"wait":134,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-5_f8c2364679e2d2a2f8641f2d32c4083cd232dfe21c1108b61b85452354ad7435.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-5_f8c2364679e2d2a2f8641f2d32c4083cd232dfe21c1108b61b85452354ad7435.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 650134\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-9eb96\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":650134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1a5af921e5c96ce0ac7bd10814242e36","sha1":"de6d065c1dcd5d6db4b85dd59ce75acf7b3b4b4f","sha256":"f8c2364679e2d2a2f8641f2d32c4083cd232dfe21c1108b61b85452354ad7435","sha512":"defdb56aaaee62cbdc664ef8b9b3c1664608a0426abdd694d3dbea45b24a72d8a411b48b00e38e6b2ff5eb7d5d8fcb0240f0d627b7034e3ea190809b3e8079e3","ssdeep":"6144:J5LiQ6JpW4u/jl3zDsUajIeg1qT/qCqo8rjoPFbAb5nCg:J4QA2sUae1qyXd","tlshash":"02d4060a3af71032416370bd9bafa006f239901b111cde587e5c93946fc657896fafe9","first_seen":"2025-08-29T19:38:27.049058Z","last_seen":"2025-09-04T02:49:46.746114Z","times_seen":10,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.api.mega.co.nz/cs?id=0","fqdn":"g.api.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:92:87:B0:48:35:8B:0C:87:B6:40:CD:57:89:6E:C8:6B:7B:5B:5D","sha256":"C6:D0:8D:45:31:54:1C:DA:39:7F:1F:F7:E9:86:33:9C:94:DF:2B:F3:91:2C:9F:3F:25:B0:CE:2F:36:8C:77:9B"}}},"request":{"raw":"POST /cs?id=0 HTTP/1.1\r\nHost: g.api.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, X-Hashcash, MEGA-Chrome-Antileak\r\nAccess-Control-Expose-Headers: Original-Content-Length, X-Hashcash\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-store\r\nOriginal-Content-Length: 215\r\nContent-Length: 215\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":215,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9736634456c936319a5253d57ca92739","sha1":"8bbdc413794283eadae949ae5b8e43cc1aa4ad9d","sha256":"3d264993e5eeaa571d4420fdd2a6bdb2bb3715e913cc0baed33cbadfe5a1c490","sha512":"fc2b490004c0d322858bbcc6f365471747eb97c4ace19d3d7b4d446838c8ff8e1ef38547acecf87834470034d71fe783c7f36d54f4ec3c45ee507dff2e87bdb8","ssdeep":"","tlshash":"46d012439e26f894e0f43c0655a15147525d0b158dac7b3023d7551c757fd2db25f08d","first_seen":"2025-07-02T11:42:49.025801Z","last_seen":"2025-09-08T19:49:06.226682Z","times_seen":226,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-8_0da6483f8374a7f96409feec35a959cef795db5cc27742056d35ab6a55a24686.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-8_0da6483f8374a7f96409feec35a959cef795db5cc27742056d35ab6a55a24686.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 642023\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-9cbe7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":642023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"94f60dc8b01491ac3bc719b619d32d60","sha1":"eb8aed72fc6476d9f6cfc0c3b214432be237310a","sha256":"0da6483f8374a7f96409feec35a959cef795db5cc27742056d35ab6a55a24686","sha512":"1dd8a11f94adab8b0ffebfa733043e68f9f50c2eaec15c1fd9af6a75e1e7e2fb1723ef8bf8dc373ea2d60cab4d15762e842d8a99d7d1ede1989e05f0b1b24472","ssdeep":"6144:xE2bM8oFdAGHM2MNVdtbFgFS2WIUfeF/zSFr41NwZ6AeK41T9JntOaJi+S9cp7Ex:xEHXHM2MNVWFSdIUfk/zqr41NEj","tlshash":"aed4a18a6afb102295637079afdf5049b234800b150dde183e9c6384afc553d96f6ffa","first_seen":"2025-08-29T19:38:27.077236Z","last_seen":"2025-09-04T02:49:46.765422Z","times_seen":10,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/nodedec.js?v=11","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /nodedec.js?v=11 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 10156\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36728,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"53a8b9446281bf1ba7ffb938b3491116","sha1":"040fa4eab6737d4146dc0027200ba8b6fb9775e3","sha256":"32c6ae6b9080084e8b328f0a5f45cbd6a97ae2022ebcfb5c58ba630eda9944c2","sha512":"8e77140d018b1a3c76df1b7bcd46dfecde7a406843a87c4d9d831874f291ad948800634446bb29498d56617e3329c8243df281ede96449287f8a60270c62d2fb","ssdeep":"384:F69/G4OOMEH1H0UeivnUvK8eCsoRsRMa+/4352iVQJW:F65G4OEHbvnUdeo6yar52iKJW","tlshash":"47f23d0a6df710260563f47a4b9fa001fa399423029cef55be5da350afd14394af9fe8","first_seen":"2025-04-24T20:08:26.429264Z","last_seen":"2025-09-24T08:59:47.513313Z","times_seen":34,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/rsaasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /rsaasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 37695\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"87ecb96466ed6b9a0c14c3bf365dd76f","sha1":"26e08a28ee8ca4395bbb3d62287ebba58c0e6f46","sha256":"c2b4cfff0a6d36d482282dddfed93e75058f5db32193a755bd77ae64682eccf9","sha512":"06e92b7bb092fc4916acffd50caa30ef7d45488be99f7546e5b7e4d6ef26edf1a390b26c232c289ea64e1e6474bb54b0ea75e57b30df4259787827e88631c2dc","ssdeep":"6144:s/BJvB38ZebZ7n2LfjvmIyybeVXWeK4cz4by60sAK16BKRQY06Qmu:s5Jvj2Lfj+IyybeVXWeK4cPd6Qmu","tlshash":"69340e4a6aeb16b18617aa2c9bdf940451e8a4174f36dc1c3c0cad704f59c24d6fafbc","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.564814Z","times_seen":218,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/rsaasm.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /rsaasm.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 37695\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241968,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"87ecb96466ed6b9a0c14c3bf365dd76f","sha1":"26e08a28ee8ca4395bbb3d62287ebba58c0e6f46","sha256":"c2b4cfff0a6d36d482282dddfed93e75058f5db32193a755bd77ae64682eccf9","sha512":"06e92b7bb092fc4916acffd50caa30ef7d45488be99f7546e5b7e4d6ef26edf1a390b26c232c289ea64e1e6474bb54b0ea75e57b30df4259787827e88631c2dc","ssdeep":"6144:s/BJvB38ZebZ7n2LfjvmIyybeVXWeK4cz4by60sAK16BKRQY06Qmu:s5Jvj2Lfj+IyybeVXWeK4cPd6Qmu","tlshash":"69340e4a6aeb16b18617aa2c9bdf940451e8a4174f36dc1c3c0cad704f59c24d6fafbc","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.564814Z","times_seen":218,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grabify.world/PER9ZS","fqdn":"grabify.world","domain":"grabify.world","tld":"world"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-01T22:32:24.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grabify.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 00:04:36 GMT","end":"Mon, 13 Oct 2025 01:01:59 GMT"},"fingerprint":{"sha1":"50:13:60:46:1F:AA:4A:DA:F9:4F:B1:99:09:1E:83:48:FC:85:77:ED","sha256":"6B:09:DD:96:47:5E:60:3E:7A:26:A6:21:75:D9:88:3E:41:5A:9F:A6:6D:5C:BC:C7:C5:53:9D:93:61:85:49:F0"}}},"request":{"raw":"GET /PER9ZS HTTP/1.1\r\nHost: grabify.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Sep 2025 22:32:24 GMT\r\nlocation: https://grabify.link/PER9ZS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJSb6XDxGHfaZZo8NCVD%2B3LrKxR1H9tdUXp%2FC%2FI9H%2Fn96l3fQwMVIu%2FnhFpVEOSyu2XaPPXWyoL4akyDSyfQPGGyfq3AT%2FwQw%2BML%2Fyk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9788392e7eac21fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2063,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":21,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/folder-link.css-postbuild_003b66141d0178ee94a1ee74a192cf6386738252126602eb7f4f2a3f9ab637c5.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/folder-link.css-postbuild_003b66141d0178ee94a1ee74a192cf6386738252126602eb7f4f2a3f9ab637c5.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 1442\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-5a2\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1442,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"15c243a99ecb603676ba30a838b2645e","sha1":"c794f8fb4dd601f2f34285b280ad040a814e3dc0","sha256":"003b66141d0178ee94a1ee74a192cf6386738252126602eb7f4f2a3f9ab637c5","sha512":"fd5fa7e2bf42bb950682f0c128b0cb991e37b79a4e1640e04fc633f56106d934c558167c5d64f97061b0e7b5df10de60024089992b4682e3acefd4359beefdec","ssdeep":"","tlshash":"dd219943d6203b6c3952cd46e7c83aa0d629e7914ac698fff4a31288a3d93c0607760f","first_seen":"2025-02-01T03:41:42.289438Z","last_seen":"2026-04-03T06:57:34.636756Z","times_seen":125,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg#icon-facebook","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/sprites-fm-uni-uni.a0af8108373c8679.svg HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 308401\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-4b4b1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5420e2507b414c978408c07fc91a4e64","sha1":"4ffb26793c5dd583265a042a6111237d0d927b07","sha256":"1ad398c97cc20d9ece5da763529d3c53dfc1459b05e87a17c0cb70e2350dc726","sha512":"d0964c4bf7a9d2bfc77d0f25e3f49f7fbe2253e30e4220cb05999debac344d72e6fd5214e905607ea97a8772fd68de2da375a95f05aa6a68f5f74f0ef5d52299","ssdeep":"3072:Dpyn6CXdR4MIvHBl75WSwv+UcxXQDIqxBEAR:YR4fBl75WSwvXiXQkqX","tlshash":"e164b4e1a22c518cd44b93bedb3dec92131e60feb8c589d8664d9b48a05f5cffd4a580","first_seen":"2025-08-07T15:52:14.908981Z","last_seen":"2026-01-21T12:16:40.019Z","times_seen":179,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/sjcl.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /sjcl.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 22139\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a5add339d0fc07a3bf18555a3ffa95f3","sha1":"1c21f57c4c94e36a2b77e7d511999cc0a10f2007","sha256":"2de43c149597674d654d146dd3529643d01b13304c886540207fd81ebd709911","sha512":"05620ed4908279e3dcfc57bdfd24b1cfed4e182e11220e719626b01f64a17515548f8271ba149940e352590ff704bb986af599a1649fc7410297488de892e304","ssdeep":"1536:LloUsPSV8DRSvTqfQ2FlrQD96VxLNiM6TTjuG2q5rIBJn4d:L66iDRSOQMkBQxMuDq5rIq","tlshash":"dc83e9183ee211b1914770b2abaf5405f220f01f2699ed98785c9b88af5cf7542f5fe8","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.567129Z","times_seen":226,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/sjcl.js","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/nodedec.js?v=11","date":"2025-09-01T22:32:30.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /sjcl.js HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mega.nz/nodedec.js?v=11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 22139\r\nCache-Control: max-age=8640000\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a5add339d0fc07a3bf18555a3ffa95f3","sha1":"1c21f57c4c94e36a2b77e7d511999cc0a10f2007","sha256":"2de43c149597674d654d146dd3529643d01b13304c886540207fd81ebd709911","sha512":"05620ed4908279e3dcfc57bdfd24b1cfed4e182e11220e719626b01f64a17515548f8271ba149940e352590ff704bb986af599a1649fc7410297488de892e304","ssdeep":"1536:LloUsPSV8DRSvTqfQ2FlrQD96VxLNiM6TTjuG2q5rIBJn4d:L66iDRSOQMkBQxMuDq5rIq","tlshash":"dc83e9183ee211b1914770b2abaf5405f220f01f2699ed98785c9b88af5cf7542f5fe8","first_seen":"2023-04-09T18:05:21Z","last_seen":"2026-04-03T06:57:34.567129Z","times_seen":226,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mega.nz/secureboot.js?r=1756339832","fqdn":"mega.nz","domain":"mega.nz","tld":"nz"},"ip":{"addr":"31.216.145.5","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:26.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mega.nz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:02:56 GMT","end":"Thu, 18 Sep 2025 21:02:55 GMT"},"fingerprint":{"sha1":"38:60:8A:BB:CC:01:11:D1:C2:45:14:01:44:2C:67:AF:11:6F:A1:74","sha256":"01:B5:B6:73:83:D2:E4:85:DA:CE:A2:6C:9B:38:68:A1:8B:1C:46:85:78:AE:C8:F6:7D:E2:DB:95:11:93:31:E2"}}},"request":{"raw":"GET /secureboot.js?r=1756339832 HTTP/1.1\r\nHost: mega.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/folder/03UFVDhI\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 55767\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: MEGA-Chrome-Antileak\r\nAccess-Control-Max-Age: 86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":191494,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24180)","md5":"6c52afb1e8b6a96445efe56318c3e208","sha1":"c12989d996b94053b1da9df97db9cdacc8f3e3b6","sha256":"0c60817b7f0c89046ee99d27949faa063b1faca9b692fd2c56eba985aeb3dbe3","sha512":"f06171037ebfc5d3f4f90b6c54594e8f597d8e88895f2b302dcf1ddc691d77f32bd8f426dec3fdc794ef90de0ba7a9329f691f33d043f5a808046cb3c8822ce1","ssdeep":"3072:/ljl1gaKbzFHEYfxUmU8UdvQ0whT6C2XSazmA:NjgawzCYppzuvQphb2CYmA","tlshash":"d314f819a5ea011f8953207f579fe442b2e9c02b054cdc507a8d53b57fd1e2a82b2bfb","first_seen":"2025-08-28T17:58:30.84093Z","last_seen":"2025-09-04T02:49:46.761471Z","times_seen":15,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-2_dcbede7d7860e0d858e0bd207d737fb27e4cfdf2d547221786c964aa36298b72.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:26.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-2_dcbede7d7860e0d858e0bd207d737fb27e4cfdf2d547221786c964aa36298b72.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 650718\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-9edde\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":650718,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (351)","md5":"ff2ec532d174639c8166d7fa7130363c","sha1":"418b5ff4c5b2c632eacd2b657fa81d999d0849cb","sha256":"dcbede7d7860e0d858e0bd207d737fb27e4cfdf2d547221786c964aa36298b72","sha512":"a3fc90efb56c774adbbd03b34fd8af237c5445ba9d6c90d958c0b95aae8ffec93019fb8f2b0140dd767e5e027c6b2771b0f7a45f43bb0eae1ec662c64b354d70","ssdeep":"12288:zIyHCcmM5/W/EEflQRgkrVhDdR4JlM8bAAgD6/X7Hdv:zIyHCcmM5/W/EEft0hDdR4A8E6/X7Hdv","tlshash":"dcd4b689a7ee112a852b716a4e5f51cdb33c8027a204d86d7c5c57d82f9493843faff8","first_seen":"2025-08-21T16:14:03.707266Z","last_seen":"2025-09-10T03:40:01.403861Z","times_seen":29,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-3_5e93621d372903f908075f2948a1fef798adb374646e8e189c6d30f677e1d38a.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:26.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-3_5e93621d372903f908075f2948a1fef798adb374646e8e189c6d30f677e1d38a.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 632703\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-9a77f\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":632703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"61f16d751aa914ff85d23a57a2a7d47c","sha1":"c3fb944a51e7483279ce8238f4202a3061727e94","sha256":"5e93621d372903f908075f2948a1fef798adb374646e8e189c6d30f677e1d38a","sha512":"a61b0a8ae4c2ef4c2e1fd3599f49e34a558d2614af0de034f5e377242326cee64e3a58378715b3eaae7241a40b58d3a0f5c66dcd3ed84663f57176afa0d2eedc","ssdeep":"12288:PfnYwzbryw6TNXOSd+3CJOwkg7ubdv/lKCl5E:XYwzbryw6TNt+3CJlkg6bdv/lKCXE","tlshash":"e9d4b41e7df710660523b0bd9b8f9005b2349007a28dce547e5c93946fe59389afafe8","first_seen":"2025-08-29T19:38:27.095637Z","last_seen":"2025-09-04T02:49:46.757219Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/css/BDL-4_9597c89763300e62bfcf8f01f8b1bbf1fbd23962ca3aa95f74fd0b769e492b82.css","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/css/BDL-4_9597c89763300e62bfcf8f01f8b1bbf1fbd23962ca3aa95f74fd0b769e492b82.css HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 714627\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-ae783\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (728)","md5":"eb438c15a94f244bad09103b95fe1315","sha1":"3683bca9eb93d9cd38b23f87ca6e7ffc87e73dad","sha256":"9597c89763300e62bfcf8f01f8b1bbf1fbd23962ca3aa95f74fd0b769e492b82","sha512":"ceb67a936fa1cb4e1e4940e52f6c6e0cd410e06666edc427fb399fa822a4c20a78adfbc3d3ac02750c43e3456ca2bb2d9d159e005337688c62f1c815eecc655a","ssdeep":"3072:3UiwjiVQKTXvYy5VX0C6YvjX64IpsAyFLiyxhaVnjDTdZzzT90hMAJtCH+6vYCkW:3Uiwysy5eC6ytCHBkguOJ","tlshash":"3de4b665f6153ddda21781a8ea883a48eb364852dd1fcfeff43d753c82c90e5216262c","first_seen":"2025-08-29T19:38:27.072598Z","last_seen":"2025-09-04T02:49:46.793718Z","times_seen":10,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-12_12e483e4b37c44a004b1ea5aecf6f684cb853e3f54a0ddc61881f9a11a42da19.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-12_12e483e4b37c44a004b1ea5aecf6f684cb853e3f54a0ddc61881f9a11a42da19.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 620247\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-976d7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":620247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"841d4c8cf7954db9a708767a062bcb2d","sha1":"fd645962b23ea24fbb160d1f1c91e931fa5747c8","sha256":"12e483e4b37c44a004b1ea5aecf6f684cb853e3f54a0ddc61881f9a11a42da19","sha512":"f5dc8f1f5df546c24332aede54a6936cfa847469d631ecf3f7d13645e33384ebc3efe3aed801504f6e93463e0db41a91c32b687f32b3f445e6cdf7450bb0dc3e","ssdeep":"6144:4XooBWPe1OJxpa/CZCsKobdUCdis1tx+roOmX4T7K+I6Y04P:H8CZC0dU4is1txEoOmX4T7BI6e","tlshash":"70d4d74d39fb117259a3707a5fdfa044b233801b640acd687ead93841f8167896f3be9","first_seen":"2025-08-29T19:38:27.09963Z","last_seen":"2025-09-04T02:49:46.791803Z","times_seen":10,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-15_542f3ccc11eab0fb2cbc11331f02d7736a3691b089221c512ea5dd280b003a5f.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:27.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-15_542f3ccc11eab0fb2cbc11331f02d7736a3691b089221c512ea5dd280b003a5f.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 258270\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-3f0de\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258270,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f3c88a5284e090a67ff0a9fb2ab39ab7","sha1":"2edd928788dca00abecc964f1894c94a8d3114ad","sha256":"542f3ccc11eab0fb2cbc11331f02d7736a3691b089221c512ea5dd280b003a5f","sha512":"54a4c3ef63445ceecff8f0e0684a244e96f4f51e36d691429d8a586288dc3ee76bc7ffb223dcec8a74231d0a65413cc984e43383bd43110864d370d31e392a6e","ssdeep":"3072:Kf3sJGfHD1G4imyQyneULvZeNscRYTJSjvDW0uS8BSSPKqQHeth4lHY:Kf3sJGfHfyneQvZeNscR80F8BTPKqz","tlshash":"2644930979fb0135087370ba5bdf6044b734c117a209ce58bd5d53986fc05b8aebabea","first_seen":"2025-08-29T19:38:27.05369Z","last_seen":"2025-09-04T02:49:46.762737Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/mega-icons-3d-icon-key-3d.10e986479b570c8a.png","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/mega-icons-3d-icon-key-3d.10e986479b570c8a.png HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3159\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-c57\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"719b56b6986378fc91dd50c591759d7a","sha1":"2be2b44a26ffa67d3ec7d8a5f3d711cd261fc202","sha256":"01fa8ea62966f7a58ac5d84a1f91660ee5341b3ce29b8d80ef02c10d7ad1cbaa","sha512":"1d391bbb7370ffe9a5d512aa341d54594ebd58338b9444630d44ef59ed5fa32405cdccd3f51aafb9cecdcc210fe3185940c4171ada9b9d15f6fefd89a70114b2","ssdeep":"","tlshash":"82517cc2a138b0973854ab12d388ae504cd3f87160590b0c5f6bcdf8ef49b69c87893a","first_seen":"2024-10-27T18:25:40.692182Z","last_seen":"2026-04-04T01:09:23.053146Z","times_seen":1046,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/imagery/mega-icons-3d-icon-bucket-3d.309b7aad111304f7.png","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/imagery/mega-icons-3d-icon-bucket-3d.309b7aad111304f7.png HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5917\r\nlast-modified: Thu, 28 Aug 2025 00:11:09 GMT\r\netag: \"68af9e9d-171d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"829203ee3e16adc614a3152e72293751","sha1":"15c5ec593711488f65965a2517530fdcedf19fb7","sha256":"30b5b465af353f56efbb33ac6f49a9a68059719f3dc1f89f623d40b41d422657","sha512":"80676e4c9baf792a5d007fafff0f79763428b66e18f783a740fef087400912e83f672b614b729ae24d644c9fa0c49ecec04b1a58117a6d6a58dcc84863092b56","ssdeep":"96:n0O1iXhOFhhuMNLKxG+pitpq3ugCszgBzYlvSaFelxcBXfmDYiie1u8DEIK74:nz1S8HugKxG5pq+gCskBsl3clxcB+DJV","tlshash":"48c1af08f46167bffc8e6781b2b97409898d363c8492f2cce85bbb46ca3bc1c0ad0544","first_seen":"2024-10-27T18:25:40.693687Z","last_seen":"2026-04-04T01:09:23.056446Z","times_seen":1046,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/js/BDL-1_1aa61593c58fa97150e675c02cf81b5798a968a6fcd6cb48d4cfd956420a00ca.js","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:26.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/js/BDL-1_1aa61593c58fa97150e675c02cf81b5798a968a6fcd6cb48d4cfd956420a00ca.js HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 409821\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-640dd\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":409821,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"823c4fea1fb3f47f129a5f9dfcfa7573","sha1":"56fc4834471ef2cbfa67be59c6079e30db072fd0","sha256":"1aa61593c58fa97150e675c02cf81b5798a968a6fcd6cb48d4cfd956420a00ca","sha512":"ce502ee7c229b13f9a4c39014e998266c9059048cb2f44fb633be247ea3867bbac292e43e57c9cbbb2a8d54d456339fc0fc21dfffa765af3f5836bd4962a5465","ssdeep":"12288:HSOdxMuVHFuYcYmD4/cZQ/coLGVFyCJTiPf7AqqArR:ykuVYmD4/cZQ/coLGVFyCJTiPf7A8rR","tlshash":"1694c7d8bbdd112e422330669d2f518db73cd077161498aabd4d4a6c2f9483c42fafb9","first_seen":"2025-04-24T20:08:26.471524Z","last_seen":"2025-09-25T15:00:17.317597Z","times_seen":256,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":110,"dns":17,"connect":38,"send":0,"wait":142,"receive":50,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.api.mega.co.nz/cs?id=23710120\u0026v=3\u0026lang=en\u0026domain=meganz","fqdn":"g.api.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"66.203.125.12","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:30.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Fri, 06 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:92:87:B0:48:35:8B:0C:87:B6:40:CD:57:89:6E:C8:6B:7B:5B:5D","sha256":"C6:D0:8D:45:31:54:1C:DA:39:7F:1F:F7:E9:86:33:9C:94:DF:2B:F3:91:2C:9F:3F:25:B0:CE:2F:36:8C:77:9B"}}},"request":{"raw":"POST /cs?id=23710120\u0026v=3\u0026lang=en\u0026domain=meganz HTTP/1.1\r\nHost: g.api.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 88\r\nOrigin: https://mega.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Content-Type, X-Hashcash, MEGA-Chrome-Antileak\r\nAccess-Control-Expose-Headers: Original-Content-Length, X-Hashcash\r\nAccess-Control-Max-Age: 86400\r\nCache-Control: no-store\r\nOriginal-Content-Length: 8\r\nContent-Length: 8\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9e571c88c646bb9e639479f7f86bed52","sha1":"4d7e78097b7060af3563f4c3e5c1e89362aec328","sha256":"f739026c732c1788a42a8e7894d620dd0b68e7e5891b9807f8a5b485f337d2da","sha512":"0c0c80116b761e5e7d18265fdc678df6bd7b0a55dac6bc009d54de813a569b248dbb13fea00407647c877f21abff01c92ae53a38177c73d5d2bd0d4fc8198441","ssdeep":"","tlshash":"a450003003000000300000030c0000c00cc0000c00000c00000000030c0030000c0000","first_seen":"2024-12-17T14:17:44.921894Z","last_seen":"2026-02-24T18:36:53.327797Z","times_seen":127,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.static.mega.co.nz/4/images/mega/icons-3d/icon-lightbulb-3d.png?v=bd8de57b8b075f61","fqdn":"eu.static.mega.co.nz","domain":"mega.co.nz","tld":"co.nz"},"ip":{"addr":"89.44.169.134","port":443,"asn":203055,"as":"Datacenter Luxembourg S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mega.nz/folder/03UFVDhI","date":"2025-09-01T22:32:29.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static.mega.co.nz","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Jan 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:82:33:22:88:B2:89:93:88:56:36:38:89:36:38:24:EF:23:EF:1A","sha256":"AA:42:E7:E8:42:10:71:08:CE:F6:AD:D0:A6:20:28:8C:A3:F9:92:25:9B:01:3D:F6:86:F8:25:60:95:07:F9:07"}}},"request":{"raw":"GET /4/images/mega/icons-3d/icon-lightbulb-3d.png?v=bd8de57b8b075f61 HTTP/1.1\r\nHost: eu.static.mega.co.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mega.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Mon, 01 Sep 2025 22:32:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 3212\r\nlast-modified: Thu, 28 Aug 2025 00:11:10 GMT\r\netag: \"68af9e9e-c8c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit colormap, non-interlaced","md5":"6c2e717caba4e6b7ba445f0c3bcc7286","sha1":"9db0868507f38f23e31690f12382d5dece715f41","sha256":"7c9916432d5de81002c7b7bec85b40fc33dd343a8cfb8e86fd85291ac79cc765","sha512":"276e396901535e3bb1e4d08f078e2c41e0ad105db96acb32511353b4277ca1c52632b96b8e44943b6f2ecc1c1cf635bd3e43d97daffa13bfd0b470047516e261","ssdeep":"","tlshash":"4d614b91da7564098ac05782c34cab69a936cb4c2452013001d77ecf529adfd9c50e1b","first_seen":"2024-10-27T18:25:40.695673Z","last_seen":"2026-03-22T22:31:44.041891Z","times_seen":1038,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}