Comment by aereal

I guessed the URL, but found nothing on it.

I'm guessing the flag may be in the rest of the message to be decoded.