GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js
5.34.214.148200 OK 21 kB URL GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators
Hash 8cfe207a6a21c7495cfb751c761217a6
35d686a6c4ecc9946c35444ce93e110cb0e1611c
804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-51ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.67200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.178.67:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Hash 015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 May 2025 13:00:47 GMT
expires: Tue, 12 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 507596
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
142.250.178.67200 OK 25 kB URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
IP 142.250.178.67:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 24984, version 1.0
Hash 303a79d404d97ccbb3d803088fc387d8
66e3525b79a1a58a63fe0934f31676dd40c7f033
7e510e61c497d334da21eccda06df5d3a428c9ea94d6903b6138e7c7255aba0f
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 18:18:04 GMT
expires: Fri, 15 May 2026 18:18:04 GMT
cache-control: public, max-age=31536000
age: 229359
last-modified: Thu, 14 Dec 2023 02:04:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET excepededonef.org/NjBkNkoZDwdFd1VkMkYvYXYjchxacTFzB3dnIQ8TZFcAUhtgU0JCI1INUwB7BwhSEDpfVFkHbEVEBUI/RQ1VECNYVgsLbEANVRh5Ah5XAGQCFhELexBEFFctCwFCRj5CXFkHfQIHUQB4AgRQB3MO
188.114.96.1204 No Content 0 B URL GET excepededonef.org/NjBkNkoZDwdFd1VkMkYvYXYjchxacTFzB3dnIQ8TZFcAUhtgU0JCI1INUwB7BwhSEDpfVFkHbEVEBUI/RQ1VECNYVgsLbEANVRh5Ah5XAGQCFhELexBEFFctCwFCRj5CXFkHfQIHUQB4AgRQB3MO
IP 188.114.96.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectexcepededonef.org
FingerprintF0:A3:FD:F6:CD:21:03:0A:28:F2:46:76:1C:F3:4C:35:BA:73:ED:27
ValidityTue, 22 Apr 2025 10:23:07 GMT - Mon, 21 Jul 2025 11:21:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NjBkNkoZDwdFd1VkMkYvYXYjchxacTFzB3dnIQ8TZFcAUhtgU0JCI1INUwB7BwhSEDpfVFkHbEVEBUI/RQ1VECNYVgsLbEANVRh5Ah5XAGQCFhELexBEFFctCwFCRj5CXFkHfQIHUQB4AgRQB3MO HTTP/1.1
Host: excepededonef.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 18 May 2025 10:00:44 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5RhainS6Q7TuHRwumCtmjOAy5bjXmEiZhIP9U403ktpahYcAKAKdI7LUzrZ4Z94dJuNNgpfA0D7vzTSDXaftanDptH2jH8i%2FcdWFQQBWig%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 941a825cff9356c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
5.34.214.148200 OK 536 B URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 57 x 57, 8-bit colormap, non-interlaced
Hash 0019444f6b6df5b4b5ed32b6b469caab
4232370d10ab54ef9bda57aa9dcb813036047b35
0509f6df067face535f028cd86200748952227161f8f244aa7864e7848553562
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:44 GMT
content-type: image/png
content-length: 536
last-modified: Thu, 13 Feb 2025 17:40:08 GMT
vary: Accept-Encoding
etag: "67ae2e78-218"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MgHA1Pc2Hb-I3e-kxJdzLF-qtMsK1WZJO2oK6wgXivI5pkXwDFwg1hpGJeugTs80vM4ufDv&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-350549528%3A1747562445015460
64.233.164.84403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MgHA1Pc2Hb-I3e-kxJdzLF-qtMsK1WZJO2oK6wgXivI5pkXwDFwg1hpGJeugTs80vM4ufDv&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-350549528%3A1747562445015460
IP 64.233.164.84:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51
ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MgHA1Pc2Hb-I3e-kxJdzLF-qtMsK1WZJO2oK6wgXivI5pkXwDFwg1hpGJeugTs80vM4ufDv&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-350549528%3A1747562445015460 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 18 May 2025 10:00:45 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-pvcWynm7trq94pK8gGlDXw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.NDLLMFEP-JU.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST excepededonef.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
188.114.96.1204 No Content 0 B URL POST excepededonef.org/TkdIZVNheCsWbgAtDjAHIyQMJgQAdR4SHg0lEB0ADAYSCTYiFm4ROip6cFdmd3Z5QyMnI3VWYWg0PAQnOzR1V2N+cm4MPSgodVdjfnF4VWZ3cG1SECYzPBUga3QJQGEIYnojIGAxIQw9JC0kEX0tKCVAYQgpbVcVfH99V3Z8AScfOiYyfxYlJyUlDSp4MysVIX0yKx86KTciEzslPTwXOigjLg4wPSIhUDY5ICQSOXopKwI+eiMyFTElMn4BISI3KhQgOS4jAjQkKzsSYCQgJhwiPCw5FiUvISoXND10KgYhNCE9UmF6IDIIJnoxOwY/PHAgEmB9NSQJMiM0IQE9OCggHycqIiYXOCFzewE/OiwrBj0iJSYEOigoLgxnfD0vDTk2MC0XMil1LFEnITcgFmAtKyAUJjcuIQhgPDclECQgdSkXJigiPQ5hKyAuACcnIyoSMiUzLlckIC0xFmF8JH0XNyMzIxwmOiMgHCAlLC4POz8wfBEqJSUxACZ9MT8OIyciPRY7JCgyEWY7NCcfJzghfAImOyE9FyZ5Pj4dPz4wehI7IikpHTF7PXpROHt0LwklJCUjDjsgLj8cJSA3Ig0+fS0pVzg2KnsWJyQsLgw3fCwpET19ICofOytxLhRnKHU+CGUjMiMPPCEkMQY6fTEuECt9NCIcITQuLwthJjYqBmUiLz9WYDg2fQBneCY9HWYgNjsINCdyP1c2PTQjAiI9JDwUYSUifVcmPC0gFDp8Mi8VJS0xIQk9NigxCTsrInsIIjs/OlNkfS46AGY+MDtWOXpyPhU5LyMuUyAtJCcKKXwofBEyPiksCD0pNS0EOj8iehQgJioqFjsrcTkNZilyOhA4IjMiBzw2LC8OJCQlKg00Oz0/HSU6NHoTYSooLw5kKSMjDjk7In0JNDd0Kh84KCAxASY3JTkVNSw2ewMxLS8nUSAjPiFWJSY/JhUyfXI/Ujotcn8PKj4yfggwIS0uCT48IycSMStze1clN3I6AmcrMSQMNigkPAAmKnQgEyopIH4UJy0lJBM8PHUqD2Y9JS8JKiIoPgs0PSt7FzgoLzlTZSI2JVEkICJ8BiI9PSAGP30kPQw/Lz8lV2clKC9SOSR0exchJDAxHzImNyIOZzkhIx03ez8wAzk9NC8KZCo/Oh0iOXU6D2Yrc38LPjc9fQBmODE6Uj8nMHoNPCAlIVIkOio7HSA8PiRQOz8xJgQ+OTF9HWUqJiETOChzOlc1JHUlUDohPT0CMD8rfwkxeTE/Hzc0Nz4JNiMxLFcjIDYwUCo6MCMOIys2PxUkJS0pBjokNS8XOX0wfQIwODU7ACM2KTAWYTklfQ44L2J7IXZ9AS5AYAovPBEjPWJ6UGAPYnpQYQhielBhCC5mBjcgISEIND1pKwo+a3V9VxUnKikCNmt1fVcVITQ4QGF7dQ5RYHd+bVdmfAF7XGprdX1XFXh/eARrfnMqUDAtd3sRYnlzfVBidnF+UiF/dHhdfT4pL0BkDX95U2B+cG1SEH1+bhNufmlxS2FgcW4Qbn92fVNqeXN6UWR/fnhWZHhhPBUyKXp5QyM6MyRYYnlzf1BlfHN8UmR2dg
IP 188.114.96.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectexcepededonef.org
FingerprintF0:A3:FD:F6:CD:21:03:0A:28:F2:46:76:1C:F3:4C:35:BA:73:ED:27
ValidityTue, 22 Apr 2025 10:23:07 GMT - Mon, 21 Jul 2025 11:21:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: excepededonef.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sun, 18 May 2025 10:00:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kla7Bvvwa6kZxbLfpZQHIajjmFt%2FPL%2F8XJ5VR%2Bh3hWA5NAfE3BkXWwhGmmXSSHcHXyfgcTl8QqE7qglRj0tFYFvXxrxyh3T1uKGCAGRn0A%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 941a8272be67568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
5.34.214.148200 OK 70 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (768), with CRLF line terminators
Hash 6fda19caa29287e6f584f0557fdeb6d4
40f58160090cd1f022704ee1352b343adb9e73b9
8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1107a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
POST excepededonef.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
188.114.96.1204 No Content 0 B URL POST excepededonef.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
IP 188.114.96.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectexcepededonef.org
FingerprintF0:A3:FD:F6:CD:21:03:0A:28:F2:46:76:1C:F3:4C:35:BA:73:ED:27
ValidityTue, 22 Apr 2025 10:23:07 GMT - Mon, 21 Jul 2025 11:21:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /WHFJSFh3Tio7ZQ5DGz0LDUAgEB40CS8fEgAnejxsAicHLj4ARW88MTxMcXptYUB4bigxFXR7an4CPSksLQJ0emhoRG8hNj4edHpoaEd5eG1uQmx/GzAFPTgrfUIIbWoeVHsOKjYcJjh2Ox4kbWoeGCxtax4HbHscbFR7fjt9Qg0xHTZDBh0RBx4+H2wUQh0cbwg+MQBrYQhxBjYHO3spOTkhIQ4oLUUnACkAI3w8bG8DIBIANxYiBh4HABAeOmpBD31rKxc+LA5sQB0rMg8bPDELFykPOQ0JNwQCFy87Fj8yBzMTJQwpHQd8aTJHfXpgakcYJhszAA0/ORY4BCwqPycZFwwoRSYHFD0CDQsKEkUuLhshFjE/NQ0HODgaPh8rOCIBQgo/aj8ECwFgbyMvC20dQzEGLj8BGDI8EgQEBw89Oz0MGiEWfwo/ahsnOxwCEHA4EAkILhAMITUoLgx1MAA9IAoVOA86GRARcW0SQQYmCzkdGBozF0YEDGoWOyM/HjsufCE3MSgbHgoiEgMhKx0BLSY5DjAiIGwuIgIXPR4fKzErKSkAfzQ6BQslNSklAHFrFQEuCWo7FQQHMggjPyAMAkcxGGFtAz44HjMgEDAyOxw8PwcwBSU7PQA+eAAxDRQOOyEOGh0nYBQ8PC4uIAYuLRk6Oxw7GiJGPHozYUYNMjEdARBwAisrBDE6HSEwOmscICQ9GTQLDg08HUIhGhISB3wfPhtJOD4TdR4MFztuHDEqDTkneS0ONUgAPBcKSQseKgkzIgoBDyUrLxU2K3E+DzsTCgwOdUgQfDMhAHwZGX1CDW1rHFR7fi5pVHoMb2FUe34ualR6DG9pRHh/fW8yJz00NFR+C2thSHh9bG1DfnhsaEZ6cW5gR3luLmVBZ3F2al9/bi1lQHh9bmFGfXpsb0BweGtvR288KDkWdHl+KAU9JGVpRn1/bW5DfX1pb0Z4 HTTP/1.1
Host: excepededonef.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sun, 18 May 2025 10:00:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FaaaOJ2thSXwDveRaIFYa0VjJXAVR4fp9zuirfoR3nQQLQ6hHpHNAhZLrmbq4dHbEfGfN%2FBDT%2FfM32dbjfNfy7g9vW4MOzoAIMA3OfmlOQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 941a828b9c16568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET rnmop.com/ie?v=4&c=yEn2OUI_owW4L3TT7POxH39y8Nn_J2aaaPhFpu4nHqXR5t47riZXogkNF_qYVb20F53sfwdV41TcjWjuySOXFqUQFMJOwJ_wj_BZmTqlN41j642826QnCkqDwaNIMdrgVP_Tp4oOLesDCRJ4gfCygxwmUvqpBfnbpzY3Cw2guBI87RfC5E2xNvgpQzdJuMOWeJtDByg6Bg2jnsDZa9pHQygXTyDafT-AIuxRdqGbAaX95J0OnSalQRkO7MD2NJjwFc_5ioiYRVRzcJisEpdnaVAkh4vSK_eFnbysqXI7lbtBmmqTI93MpgA2cdMOjPRvhTZ6xP95rwpFkQYxjcmuw_htlseXO1HiUeGsyVkTo8LMufvxwgeAbJUsBz7u2k97DziEpY8ZsZMybEPyr3DQmuAlzGEdE3hRJJv5WfC8qvK-oE_c6mxbUaV0eVm9ItOR8BVrQBkBYWTbgMnZ8vWcbCDV-9Y4kyq5QA==&v1=79&v2=71517
162.55.246.161301 Moved Permanently 59 kB URL GET rnmop.com/ie?v=4&c=yEn2OUI_owW4L3TT7POxH39y8Nn_J2aaaPhFpu4nHqXR5t47riZXogkNF_qYVb20F53sfwdV41TcjWjuySOXFqUQFMJOwJ_wj_BZmTqlN41j642826QnCkqDwaNIMdrgVP_Tp4oOLesDCRJ4gfCygxwmUvqpBfnbpzY3Cw2guBI87RfC5E2xNvgpQzdJuMOWeJtDByg6Bg2jnsDZa9pHQygXTyDafT-AIuxRdqGbAaX95J0OnSalQRkO7MD2NJjwFc_5ioiYRVRzcJisEpdnaVAkh4vSK_eFnbysqXI7lbtBmmqTI93MpgA2cdMOjPRvhTZ6xP95rwpFkQYxjcmuw_htlseXO1HiUeGsyVkTo8LMufvxwgeAbJUsBz7u2k97DziEpY8ZsZMybEPyr3DQmuAlzGEdE3hRJJv5WfC8qvK-oE_c6mxbUaV0eVm9ItOR8BVrQBkBYWTbgMnZ8vWcbCDV-9Y4kyq5QA==&v1=79&v2=71517
IP 162.55.246.161:443
ASN #24940 Hetzner Online GmbH
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerLet's Encrypt
Subjectnimrute.com
FingerprintE2:D9:3C:CF:D5:57:A7:A2:2A:60:4E:99:80:79:B1:7A:F2:04:4F:7D
ValidityMon, 05 May 2025 05:34:31 GMT - Sun, 03 Aug 2025 05:34:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=yEn2OUI_owW4L3TT7POxH39y8Nn_J2aaaPhFpu4nHqXR5t47riZXogkNF_qYVb20F53sfwdV41TcjWjuySOXFqUQFMJOwJ_wj_BZmTqlN41j642826QnCkqDwaNIMdrgVP_Tp4oOLesDCRJ4gfCygxwmUvqpBfnbpzY3Cw2guBI87RfC5E2xNvgpQzdJuMOWeJtDByg6Bg2jnsDZa9pHQygXTyDafT-AIuxRdqGbAaX95J0OnSalQRkO7MD2NJjwFc_5ioiYRVRzcJisEpdnaVAkh4vSK_eFnbysqXI7lbtBmmqTI93MpgA2cdMOjPRvhTZ6xP95rwpFkQYxjcmuw_htlseXO1HiUeGsyVkTo8LMufvxwgeAbJUsBz7u2k97DziEpY8ZsZMybEPyr3DQmuAlzGEdE3hRJJv5WfC8qvK-oE_c6mxbUaV0eVm9ItOR8BVrQBkBYWTbgMnZ8vWcbCDV-9Y4kyq5QA==&v1=79&v2=71517 HTTP/1.1
Host: rnmop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Sun, 18 May 2025 10:00:52 GMT
content-length: 0
location: https://img.vmmcdn.com/get/62987579/238427_icon.png
x-app-id: 11
GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
5.34.214.148200 OK 6.0 kB URL GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 25cfe48e07622a00154b677afcbaeb47
23e3ae1bd04ad1d00d25d30e39815104ceeae52f
709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1783"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
5.34.214.148200 OK 7.1 kB URL GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: image/png
content-length: 7137
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/sw.js
5.34.214.148200 OK 103 kB IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103036 bytes)
Hash 9ee51131e416458b88d6da4e6e6959ca
a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4
db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 22:15:30 GMT
vary: Accept-Encoding
etag: W/"63a23402-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.67200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.178.67:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Hash 015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 May 2025 13:00:47 GMT
expires: Tue, 12 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 507596
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e55g2za200&tag_exp=101509157~103116025~103130498~103130500~103136993~103136995~103200001~103207802~103233427~103252644~103252646~103263073~103301114~103301116
142.250.74.136200 OK 334 kB URL GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e55g2za200&tag_exp=101509157~103116025~103130498~103130500~103136993~103136995~103200001~103207802~103233427~103252644~103252646~103263073~103301114~103301116
IP 142.250.74.136:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
File type JavaScript source, ASCII text, with very long lines (6125)
Size 334 kB (334399 bytes)
Hash 0ae5ccc1a0c0d38b4cd73daf3bc2b7de
2d8fee4336aec0a702168b39419b6e7ac963329c
daf28aa7ed330410cee69d30f5743cfb0590742732600557dde0888d6c1b7a37
GET /gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e55g2za200&tag_exp=101509157~103116025~103130498~103130500~103136993~103136995~103200001~103207802~103233427~103252644~103252646~103263073~103301114~103301116 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 May 2025 10:00:44 GMT
expires: Sun, 18 May 2025 10:00:44 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 117203
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET rnmop.com/ie?v=4&c=yEn2OUI_owW4L3TT7POxH39y8Nn_J2aaaPhFpu4nHqXR5t47riZXogkNF_qYVb20F53sfwdV41TcjWjuySOXFqUQFMJOwJ_wj_BZmTqlN41j642826QnCkqDwaNIMdrgVP_Tp4oOLesDCRJ4gfCygxwmUvqpBfnbpzY3Cw2guBI87RfC5E2xNvgpQzdJuMOWeJtDByg6Bg2jnsDZa9pHQygXTyDafT-AIuxRdqGbAaX95J0OnSalQRkO7MD2NJjwFc_5ioiYRVRzcJisEpdnaVAkh4vSK_eFnbysqXI7lbtBmmqTI93MpgA2cdMOjPRvhTZ6xP95rwpFkQYxjcmuw_htlseXO1HiUeGsyVkTo8LMufvxwgeAbJUsBz7u2k97DziEpY8ZsZMybEPyr3DQmuAlzGEdE3hRJJv5WfC8qvK-oE_c6mxbUaV0eVm9ItOR8BVrQBkBYWTbgMnZ8vWcbCDV-9Y4kyq5QA==&v1=79&v2=71517
0.0.0.0 0 B URL GET rnmop.com/ie?v=4&c=yEn2OUI_owW4L3TT7POxH39y8Nn_J2aaaPhFpu4nHqXR5t47riZXogkNF_qYVb20F53sfwdV41TcjWjuySOXFqUQFMJOwJ_wj_BZmTqlN41j642826QnCkqDwaNIMdrgVP_Tp4oOLesDCRJ4gfCygxwmUvqpBfnbpzY3Cw2guBI87RfC5E2xNvgpQzdJuMOWeJtDByg6Bg2jnsDZa9pHQygXTyDafT-AIuxRdqGbAaX95J0OnSalQRkO7MD2NJjwFc_5ioiYRVRzcJisEpdnaVAkh4vSK_eFnbysqXI7lbtBmmqTI93MpgA2cdMOjPRvhTZ6xP95rwpFkQYxjcmuw_htlseXO1HiUeGsyVkTo8LMufvxwgeAbJUsBz7u2k97DziEpY8ZsZMybEPyr3DQmuAlzGEdE3hRJJv5WfC8qvK-oE_c6mxbUaV0eVm9ItOR8BVrQBkBYWTbgMnZ8vWcbCDV-9Y4kyq5QA==&v1=79&v2=71517
IP 0.0.0.0:0
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=yEn2OUI_owW4L3TT7POxH39y8Nn_J2aaaPhFpu4nHqXR5t47riZXogkNF_qYVb20F53sfwdV41TcjWjuySOXFqUQFMJOwJ_wj_BZmTqlN41j642826QnCkqDwaNIMdrgVP_Tp4oOLesDCRJ4gfCygxwmUvqpBfnbpzY3Cw2guBI87RfC5E2xNvgpQzdJuMOWeJtDByg6Bg2jnsDZa9pHQygXTyDafT-AIuxRdqGbAaX95J0OnSalQRkO7MD2NJjwFc_5ioiYRVRzcJisEpdnaVAkh4vSK_eFnbysqXI7lbtBmmqTI93MpgA2cdMOjPRvhTZ6xP95rwpFkQYxjcmuw_htlseXO1HiUeGsyVkTo8LMufvxwgeAbJUsBz7u2k97DziEpY8ZsZMybEPyr3DQmuAlzGEdE3hRJJv5WfC8qvK-oE_c6mxbUaV0eVm9ItOR8BVrQBkBYWTbgMnZ8vWcbCDV-9Y4kyq5QA==&v1=79&v2=71517 HTTP/1.1
Host: rnmop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
5.34.214.148200 OK 3.2 kB URL GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 4541b29b6040bc31b760f98e914fd1d7
0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba
6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-c58"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
5.34.214.148200 OK 739 B URL GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash a19cdfde4cca33ccafc0b8bfd518bebb
df1830e07033d0ae31288f62892121778fc7c765
a347474d3c97d5440c2f06c86c314eb1e9c2a20e2b84e8367d57743fe77a8115
GET /themes/spirit/assets/frontend/css/mu-waiting-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Mon, 17 Feb 2025 00:39:28 GMT
vary: Accept-Encoding
etag: W/"67b28540-2e3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/custom.css
5.34.214.148200 OK 8.9 kB URL GET megaup.net/themes/spirit/assets/frontend/css/custom.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Hash 68443327ebd1d8f35857bbb29d3ce6df
d34e37d8cebc246854f05dde78abc32b5ad5d9fe
98cf7514d65d87963ee938b6f83493b4429f8005a5f6814ba226a7b89c80aa45
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 19:56:14 GMT
vary: Accept-Encoding
etag: W/"67abab5e-22e8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET excepededonef.org/MjVTNTMdCjBGDmRjAV5nZVk5V2VkEGFzZHVnPmAAXlAxYmVWURVeFUZcNwgKBgxrAwcURTpRDgMNdUZHU0EmRg4DEzpbVV0IdUMOAxtjGwEcAHVADgMTJ0VSVQhiE0NGQT8IAgUBZAAFAAFnAQEGAw
188.114.96.1204 No Content 0 B URL GET excepededonef.org/MjVTNTMdCjBGDmRjAV5nZVk5V2VkEGFzZHVnPmAAXlAxYmVWURVeFUZcNwgKBgxrAwcURTpRDgMNdUZHU0EmRg4DEzpbVV0IdUMOAxtjGwEcAHVADgMTJ0VSVQhiE0NGQT8IAgUBZAAFAAFnAQEGAw
IP 188.114.96.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectexcepededonef.org
FingerprintF0:A3:FD:F6:CD:21:03:0A:28:F2:46:76:1C:F3:4C:35:BA:73:ED:27
ValidityTue, 22 Apr 2025 10:23:07 GMT - Mon, 21 Jul 2025 11:21:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /MjVTNTMdCjBGDmRjAV5nZVk5V2VkEGFzZHVnPmAAXlAxYmVWURVeFUZcNwgKBgxrAwcURTpRDgMNdUZHU0EmRg4DEzpbVV0IdUMOAxtjGwEcAHVADgMTJ0VSVQhiE0NGQT8IAgUBZAAFAAFnAQEGAw HTTP/1.1
Host: excepededonef.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 18 May 2025 10:00:44 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=W3cCMj6xbuFNEqzJr6rKMxvlN1Gaks14G2qjw91cx4wFQjogThHgHAqapvcuS2GDif0VtbkBjWKI9NMdA9UfcrkGNekpnNHK555HvmgVEQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 941a825d482856c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhSb1Sv8pCbgl_ru2ST768B6Lxr918B5Ry8MLQaAdQDp1VhxWR4o4OpUNsdOXvsu7x1Q1D6&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1560395637%3A1747562445022079
64.233.164.84403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhSb1Sv8pCbgl_ru2ST768B6Lxr918B5Ry8MLQaAdQDp1VhxWR4o4OpUNsdOXvsu7x1Q1D6&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1560395637%3A1747562445022079
IP 64.233.164.84:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51
ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhSb1Sv8pCbgl_ru2ST768B6Lxr918B5Ry8MLQaAdQDp1VhxWR4o4OpUNsdOXvsu7x1Q1D6&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1560395637%3A1747562445022079 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 18 May 2025 10:00:45 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-jwy3DUxskKGMCri4vGhelw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.NDLLMFEP-JU.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET i.cdnfimgs.com/image/osp/4399/399/680a804b5cc03t1745518667r1308.png
45.133.44.36200 OK 4.0 kB URL GET i.cdnfimgs.com/image/osp/4399/399/680a804b5cc03t1745518667r1308.png
IP 45.133.44.36:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerLet's Encrypt
Subjecti.cdnfimgs.com
Fingerprint97:B4:EE:30:86:38:1F:9C:D6:F7:C9:03:F8:21:2D:F3:7E:1F:71:A5
ValidityThu, 20 Mar 2025 06:33:17 GMT - Wed, 18 Jun 2025 06:33:16 GMT
File type PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Hash 301c02a7da7d4815711709ce35376b94
c82f08ab557545d3411edf6fc830def01a6f8298
51841dde05ff4c9a88854f6dfe2f5c3fa3cb3db0b316b314e6a250a9863c9767
GET /image/osp/4399/399/680a804b5cc03t1745518667r1308.png HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 May 2025 10:00:48 GMT
content-type: image/png
content-length: 4014
server: nginx
last-modified: Tue, 29 Apr 2025 10:14:54 GMT
etag: "6810a69e-fae"
cache-control: max-age=1209600
expires: Sun, 01 Jun 2025 10:00:48 GMT
x-cdn-host-id: ds5059
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js
5.34.214.148200 OK 3.9 kB URL GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3949), with no line terminators
Hash 2f6185a8a32a50b2b3e04849f44359d4
0e5501588c5c0d1c9462f34b0d56c21abff5bfef
914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f6d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undefined/ZE03aDMFL1QFDAVwVU5GFiEKTQEiaAUuV1ciUFBHVXUEAQISL1BGUAgiQgxVFiJZHB0KKENNASIleVpmHR5cBGYnIUAbVw8Aej5dADp2WUQvK39YYSIYdh5/EyJ+PkpUImYAZgcHdBB3NXxQXXkIJmEsRDUGdTsDLwBQKkY0fVBcYzEMYS53UDdiWVQnL3Q+ZCd8YVtRVQR7PWsAeXI5YTMGfzl3NX1UGlciInw7cCkhYB9iPCh2UHA3On0eVhMpeTpgKSNiH0MiAmAfdTIbQE0BJi92PmUlfkcGcVQMdSt0EwthPWYOB0AuYSJ+XCR2CC50JV1cCWYpHiEEVSllMhxzEEAmDmYsVjx9bT5hEDtSH1AnG04DWjMIdil3LD5/PnIue1IpVzELBAAGMRxPKX8ddG4gYQB5cx9pMw9aOgYhH3Y4VhNrXRtcCj0KJnBWBQ8Qej0XTRpHEz0
0.0.0.0 0 B URL GET undefined/ZE03aDMFL1QFDAVwVU5GFiEKTQEiaAUuV1ciUFBHVXUEAQISL1BGUAgiQgxVFiJZHB0KKENNASIleVpmHR5cBGYnIUAbVw8Aej5dADp2WUQvK39YYSIYdh5/EyJ+PkpUImYAZgcHdBB3NXxQXXkIJmEsRDUGdTsDLwBQKkY0fVBcYzEMYS53UDdiWVQnL3Q+ZCd8YVtRVQR7PWsAeXI5YTMGfzl3NX1UGlciInw7cCkhYB9iPCh2UHA3On0eVhMpeTpgKSNiH0MiAmAfdTIbQE0BJi92PmUlfkcGcVQMdSt0EwthPWYOB0AuYSJ+XCR2CC50JV1cCWYpHiEEVSllMhxzEEAmDmYsVjx9bT5hEDtSH1AnG04DWjMIdil3LD5/PnIue1IpVzELBAAGMRxPKX8ddG4gYQB5cx9pMw9aOgYhH3Y4VhNrXRtcCj0KJnBWBQ8Qej0XTRpHEz0
IP 0.0.0.0:0
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ZE03aDMFL1QFDAVwVU5GFiEKTQEiaAUuV1ciUFBHVXUEAQISL1BGUAgiQgxVFiJZHB0KKENNASIleVpmHR5cBGYnIUAbVw8Aej5dADp2WUQvK39YYSIYdh5/EyJ+PkpUImYAZgcHdBB3NXxQXXkIJmEsRDUGdTsDLwBQKkY0fVBcYzEMYS53UDdiWVQnL3Q+ZCd8YVtRVQR7PWsAeXI5YTMGfzl3NX1UGlciInw7cCkhYB9iPCh2UHA3On0eVhMpeTpgKSNiH0MiAmAfdTIbQE0BJi92PmUlfkcGcVQMdSt0EwthPWYOB0AuYSJ+XCR2CC50JV1cCWYpHiEEVSllMhxzEEAmDmYsVjx9bT5hEDtSH1AnG04DWjMIdil3LD5/PnIue1IpVzELBAAGMRxPKX8ddG4gYQB5cx9pMw9aOgYhH3Y4VhNrXRtcCj0KJnBWBQ8Qej0XTRpHEz0 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
64.233.164.84302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 64.233.164.84:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:IO_GR-xR_eNgtnEmxnDu5GVDSqMphQ:7iBQayozjW8gsmex; Expires=Tue, 18-May-2027 10:00:44 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 18 May 2025 10:00:44 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mg0NmgdwDy07SfCFGBBEHHTwC2xAd1xXSmUnLwzXUrHo3qyNeaHB-AlW_i8m_UOqibbKjZtsg
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-9UQpFKM2JuyYzHtAa9_9og' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mg0NmgdwDy07SfCFGBBEHHTwC2xAd1xXSmUnLwzXUrHo3qyNeaHB-AlW_i8m_UOqibbKjZtsg
64.233.164.84302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mg0NmgdwDy07SfCFGBBEHHTwC2xAd1xXSmUnLwzXUrHo3qyNeaHB-AlW_i8m_UOqibbKjZtsg
IP 64.233.164.84:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mg0NmgdwDy07SfCFGBBEHHTwC2xAd1xXSmUnLwzXUrHo3qyNeaHB-AlW_i8m_UOqibbKjZtsg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:xS9qGJ0C85mhv1-LO7MmlI_m_RLcmQ:1SoLm1At2uRTeGQF;Path=/;Expires=Tue, 18-May-2027 10:00:45 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 18 May 2025 10:00:45 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MhSb1Sv8pCbgl_ru2ST768B6Lxr918B5Ry8MLQaAdQDp1VhxWR4o4OpUNsdOXvsu7x1Q1D6&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1560395637%3A1747562445022079
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-OPoJSB97jZ4UFd0vPqFAFg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 416
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET s.viinjjlt.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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4399%2F399%2F680a804b5cc03t1745518667r1308.png
0.0.0.0 0 B URL GET s.viinjjlt.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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4399%2F399%2F680a804b5cc03t1745518667r1308.png
IP 0.0.0.0:0
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectviinjjlt.com
FingerprintC6:75:0A:57:57:BF:D5:FA:91:4E:E1:AE:FB:AC:BF:41:AD:99:1C:EC
ValidityWed, 07 May 2025 18:56:43 GMT - Tue, 05 Aug 2025 19:55:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4399%2F399%2F680a804b5cc03t1745518667r1308.png HTTP/1.1
Host: s.viinjjlt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET rinryesopertyva.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
108.157.214.23200 OK 3.1 kB URL GET rinryesopertyva.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
IP 108.157.214.23:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerAmazon
Subjectrinryesopertyva.org
Fingerprint42:90:56:60:6F:41:37:50:C1:6C:07:10:C3:52:F6:88:E3:F6:BB:34
ValidityTue, 29 Apr 2025 00:00:00 GMT - Thu, 28 May 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3070), with no line terminators
Hash 447d4c4d43989c8522ceaa7c8e313aad
c43540f06a68d8c4357e8af0a8d0ed712377e36b
a73f614d3bc565166e9f8979a2a8e5fe6091fb4cfec651f45afb9e1dc1562dc0
GET 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 HTTP/1.1
Host: rinryesopertyva.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1215
date: Sun, 18 May 2025 10:00:44 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=KeenswjJRVk0RNQFg00ax5aezwELrhKmj2LVPyggfn3SBm/vrnyhCJPxv3JtUI7fVzgDo5Y4DpQJllmamZKBhSRwPoKYqnMk3nHpAhk6eVpU3bDCUOps5jmX7376; Expires=Sun, 25 May 2025 10:00:44 GMT; Path=/
AWSALBCORS=KeenswjJRVk0RNQFg00ax5aezwELrhKmj2LVPyggfn3SBm/vrnyhCJPxv3JtUI7fVzgDo5Y4DpQJllmamZKBhSRwPoKYqnMk3nHpAhk6eVpU3bDCUOps5jmX7376; Expires=Sun, 25 May 2025 10:00:44 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d7969a7dfe0a063d186d3c72531d67be.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: _Yh-RxzCFdtuENGDy4UfQPXnM1Smo8fFOWp6w6Q3MrS2ljvGWNLnqw==
X-Firefox-Spdy: h2
GET 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
0.0.0.0 0 B URL GET undefined/a3BvMXgKEgxcRwpNDRcNGRxSFEotVV13HFgfCAkMWkhcWEkdEggfGwcfGlUeGR8BRVYFFRsUSi0ROgM+BCoFZA8vFzZwOwITJnU+GD42Zyo5JhhjSS4iAHUtWUQidSktJSVZPiwzKXAWOQcmZy8BQD1nKlIzIHc5TkIpfEkAITl3OjoyB3gVLCUtczM6JjlnECZVXXc5KiktcjA+NS1WLSIpBFIyKhwLRC4+RDxjLBw7OWM2CT4YYDcvQRwDOj5EO2c/Xz0tSQAIIBgBMjoHDGcuLio4dD8tIj5zPgggPmQwLiU1Ay1aFyZgIDEkOHcbLRY5dzY9KAsDLVpdCGMgL0E3aT0mNypkKgomBAAUPSVeZxxYKjtmOjk0C10xGyYYaxY/QQdhPSw2PXUPJScgcE0lJid/ED4mA2Y6PDo9Zi0mODZGGyk2KXBJLxgtdToTJj5mSSISNgEbDycYYF4BAwBfCFYJGFpJPCUDck1TRlxwPxo
IP 0.0.0.0:0
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a3BvMXgKEgxcRwpNDRcNGRxSFEotVV13HFgfCAkMWkhcWEkdEggfGwcfGlUeGR8BRVYFFRsUSi0ROgM+BCoFZA8vFzZwOwITJnU+GD42Zyo5JhhjSS4iAHUtWUQidSktJSVZPiwzKXAWOQcmZy8BQD1nKlIzIHc5TkIpfEkAITl3OjoyB3gVLCUtczM6JjlnECZVXXc5KiktcjA+NS1WLSIpBFIyKhwLRC4+RDxjLBw7OWM2CT4YYDcvQRwDOj5EO2c/Xz0tSQAIIBgBMjoHDGcuLio4dD8tIj5zPgggPmQwLiU1Ay1aFyZgIDEkOHcbLRY5dzY9KAsDLVpdCGMgL0E3aT0mNypkKgomBAAUPSVeZxxYKjtmOjk0C10xGyYYaxY/QQdhPSw2PXUPJScgcE0lJid/ED4mA2Y6PDo9Zi0mODZGGyk2KXBJLxgtdToTJj5mSSISNgEbDycYYF4BAwBfCFYJGFpJPCUDck1TRlxwPxo HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET theharityhild.buzz/eUpSeU8CaCEOEAw4Plt1WyImDT8KcH1WIhwtMww%2FVyQ3DWAKPXwTPFtmcAoiH2hoSGNbOT8PbUNoZld8W2ZwDS4eFTsdbUNoakp9T3lhW2NbOScbEBAuYFt1WyxqSnwaemYbYk8vYhtiTS4wSWJAfmpOYh98NxwqGi8xGiwaL3AE
0.0.0.0 0 B URL GET theharityhild.buzz/eUpSeU8CaCEOEAw4Plt1WyImDT8KcH1WIhwtMww%2FVyQ3DWAKPXwTPFtmcAoiH2hoSGNbOT8PbUNoZld8W2ZwDS4eFTsdbUNoakp9T3lhW2NbOScbEBAuYFt1WyxqSnwaemYbYk8vYhtiTS4wSWJAfmpOYh98NxwqGi8xGiwaL3AE
IP 0.0.0.0:0
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eUpSeU8CaCEOEAw4Plt1WyImDT8KcH1WIhwtMww%2FVyQ3DWAKPXwTPFtmcAoiH2hoSGNbOT8PbUNoZld8W2ZwDS4eFTsdbUNoakp9T3lhW2NbOScbEBAuYFt1WyxqSnwaemYbYk8vYhtiTS4wSWJAfmpOYh98NxwqGi8xGiwaL3AE HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
142.250.178.74200 OK 39 kB URL GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
IP 142.250.178.74:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type ASCII text, with very long lines (1572)
Hash 1570f79838476e473326cd7a3fb1d06b
81ce3aa01918d85e18534934cd967f35a7558f1a
f0a8682f65670a4a8fd9a982d1b3a36521a2e74d47cece7d3b1f84f262c8b51c
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 May 2025 10:00:42 GMT
date: Sun, 18 May 2025 10:00:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
5.34.214.148200 OK 54 kB URL GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators
Hash 8c1e666176ac7bdce67d58b45823ffac
75947e4316427ce0c5e33300aeb4dc4d7d54dd09
c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-d271"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
104.21.16.1404 Not Found 159 B URL GET ukankingwithea.com/asd100.bin
IP 104.21.16.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash fb9666f93e418b95fea8fdbc20e80af9
d4eefca1b299cc266a80e83c9e39c4261cb87583
c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 18 May 2025 10:00:45 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=txbJoH7zNCAM8h6HRytPW7%2FchiltecKAb7jpyp8HvjWDE0JHyOwgxcaS8WCSrGj8m2KV4g0JHRpurV1ELWr9edyV7hLW8MVA4YGLw5ZTl4g%3D"}]}
content-encoding: br
cf-ray: 941a8260cced5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET tomlldahehun.org/multi?cs=aGRLRW9ZU350X1BReHZYW1V6cl0&abt=0&red=1&sm=76&k=18208%20precinct&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1156974247190376&agec=1747562444&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd440468c781e3877c069d9bbab02dbe7%2FThe.Precinct.v1.4.18208-P2P.7z&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_GZ5l=1747562445205&crc=1
18.239.50.23200 OK 3.8 kB URL GET tomlldahehun.org/multi?cs=aGRLRW9ZU350X1BReHZYW1V6cl0&abt=0&red=1&sm=76&k=18208%20precinct&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1156974247190376&agec=1747562444&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd440468c781e3877c069d9bbab02dbe7%2FThe.Precinct.v1.4.18208-P2P.7z&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_GZ5l=1747562445205&crc=1
IP 18.239.50.23:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerAmazon
Subjecttomlldahehun.org
Fingerprint6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D
ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File type ASCII text, with very long lines (3787), with no line terminators
Hash 885036ad6a4531c68720ebb7664e3c56
5a214cfb7fc8778a8b1d89a84ab362e86a5d3ef5
a6b2f6a53faba387dc72376541edc35041c09426f2eb98c2fd62268dc7f6342f
GET /multi?cs=aGRLRW9ZU350X1BReHZYW1V6cl0&abt=0&red=1&sm=76&k=18208%20precinct&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1156974247190376&agec=1747562444&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd440468c781e3877c069d9bbab02dbe7%2FThe.Precinct.v1.4.18208-P2P.7z&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_GZ5l=1747562445205&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1884
date: Sun, 18 May 2025 10:00:45 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=6wCScT7+Phy9oBeQwQadNZQ2zLlTEOXTSUHekbTBF4Sxnldro572VL3NmiUf1a/E3Wi5F2G0PAShWUAb9S67w80O1t93grQyP4q1XIfjhXC4+D6LbBRpjl9yHl0F; Expires=Sun, 25 May 2025 10:00:45 GMT; Path=/
AWSALBCORS=6wCScT7+Phy9oBeQwQadNZQ2zLlTEOXTSUHekbTBF4Sxnldro572VL3NmiUf1a/E3Wi5F2G0PAShWUAb9S67w80O1t93grQyP4q1XIfjhXC4+D6LbBRpjl9yHl0F; Expires=Sun, 25 May 2025 10:00:45 GMT; Path=/; SameSite=None
csu=3a20fcef-cc07-410f-aa5e-1205c0380960
csu=1156974247190376
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c2c44e18165da827386e0ed36aeea344.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS58-P3
x-amz-cf-id: ALOg-1Y-A8AMiqHPeknYW2ysLRG3wu8uyRG9b22umBng1NR43DkHlA==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/socicon.css
5.34.214.148200 OK 9.8 kB URL GET megaup.net/themes/spirit/assets/frontend/css/socicon.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 910a42ce112991b31b30a735f1006a5f
6c8b4769270f1c86bb1c7a6b54325465395ba614
010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-266e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.67200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.178.67:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Hash 015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 May 2025 13:00:47 GMT
expires: Tue, 12 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 507596
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
3.167.7.201200 OK 489 kB URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP 3.167.7.201:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62
ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 489 kB (489393 bytes)
Hash 60491f6439162391aa737c17d8c8fc6b
d1f466322f8052cdac72c4589310da13306eeb77
f85abeeeedda4648ecc725f3dfc4b14b438f8fbe6a95f0ac09b07f013db37c3e
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151950
date: Sun, 18 May 2025 10:00:44 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: ZgKpknyRUY8vlRv6Ns7llwV2MvaugiBrGl88hjiJOKYzNUh7y3hisQ==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
5.34.214.148200 OK 590 B URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Hash ed3d11830b3e136b384f2a0b8082f235
3b75f2a64d528165f108d62e8c30d464b76945d7
1aef6752088fe69a166d3a84375431e1041dde8fa3f9ccbde26accb220feb4a5
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:44 GMT
content-type: image/png
content-length: 590
last-modified: Thu, 13 Feb 2025 17:42:00 GMT
vary: Accept-Encoding
etag: "67ae2ee8-24e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.16.1200 OK 27 B IP 104.21.16.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 22d521910d19413f61bd96fee96863af
194866ee3405875e55ae3bd7fd51eb324152bd35
50739101052234a3c6e907eb6391a1260b7375a570946f8a25853353f32eb50f
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 May 2025 10:00:45 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tZTB9sWvX6GoCL3y5z9hY7flPfP%2FT8cZlZ9D7Dg847Z2OyiRSjXSO8yRwOQqKc0x4gFtgoUhL3n5cBo4RpEf66QNEOaaG0V8K7H0evFR2kE%3D"}]}
content-encoding: br
set-cookie: csu=2117442779700654@1@1747562444; SameSite=None; Secure; Max-Age=31104000
cf-ray: 941a8260acbb5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
104.21.16.1404 Not Found 159 B URL GET ukankingwithea.com/asd100.bin
IP 104.21.16.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash fb9666f93e418b95fea8fdbc20e80af9
d4eefca1b299cc266a80e83c9e39c4261cb87583
c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 18 May 2025 10:00:45 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=DgaaERUd1mFxpwLI7pOCZy2ljM5yZ8C7wDX9bTRXxac4D15lt2BLCbMJ2bxUQ8KIUOKE%2B8agclRNyk62dzM%2Bn9p%2FfyUdl61kENC%2BX6EsGr8%3D"}]}
content-encoding: br
cf-ray: 941a82609c985684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/theme.css
5.34.214.148200 OK 207 kB URL GET megaup.net/themes/spirit/assets/frontend/css/theme.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Size 207 kB (206626 bytes)
Hash 06cc8983a538a05dddf526b3b7e732aa
2414173a1660589ebbba8bdc6e3d1237df6063db
27e49bfa89404d352fa4627719f2a9a3ea5c2759c2bc74e7567ff98b5a996758
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 18:30:52 GMT
vary: Accept-Encoding
etag: W/"67ab975c-32722"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.16.1200 OK 27 B IP 104.21.16.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash 951a3f5eec348173e956aaeac785d381
51d6abc304cef5fd71ba6d22cf0c59640b2fc6f4
d0206bb70c66bbec61a56d81372696ac9287b84e6d0f2428ce39a3541c5d03a2
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 May 2025 10:00:45 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=U8n%2BUI1uHFUdZUOS%2BSZDyGWei8QHsdwrCA6SmRRdPD8qliyrDsJ92dX63JP5yfJ9w%2BfMkoErHlfMqaFuH7xn54Z6RJNwE%2BcWlpQ4BRqNJio%3D"}]}
content-encoding: br
set-cookie: csu=1156974247190376@1@1747562444; SameSite=None; Secure; Max-Age=31104000
cf-ray: 941a8260dd0e5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.67200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.178.67:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Hash 015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 May 2025 13:00:47 GMT
expires: Tue, 12 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 507596
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
5.34.214.148200 OK 6.0 kB URL GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators
Hash c9e3a210d83398f301b3a7049c259676
8e227bb40fe120841829a7fef0ffeb091d179a91
aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-178c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
142.250.178.67200 OK 19 kB URL GET fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
IP 142.250.178.67:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 19280, version 1.0
Hash 386fb59be54b2d819064af98e57cc226
9e2d14d736be97ec84bfca3513558450cd6e3249
b4855cc8ec721cbaf27f3c907345e101b1524858221c14faa79df34cb2f84991
GET /s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 May 2025 18:04:47 GMT
expires: Fri, 15 May 2026 18:04:47 GMT
cache-control: public, max-age=31536000
age: 230156
last-modified: Thu, 14 Dec 2023 02:02:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
5.34.214.148200 OK 4.3 kB URL GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 4292, version 1.0
Hash ae072782b361d2afdbf43db08d3cfb73
f3db2e65b53d97491672f8631e21d6d05905cc88
31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:43 GMT
content-type: font/woff2
content-length: 4292
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-10c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET excepededonef.org/Q01pd2RscgoEWRAYUAIAFgNRE1UvAwpEHHsbWRNWJn4BETUbDE8DDSdwUUVRenxYURQqKVREVmU+HRYQNj5URVRzek8eCiUiVEVCNXBZWV1tf0dBQjZwWFEQMywOSlVlPR0DCH58XkNTdntbQ1B3f1tH
188.114.96.1204 No Content 0 B URL GET excepededonef.org/Q01pd2RscgoEWRAYUAIAFgNRE1UvAwpEHHsbWRNWJn4BETUbDE8DDSdwUUVRenxYURQqKVREVmU+HRYQNj5URVRzek8eCiUiVEVCNXBZWV1tf0dBQjZwWFEQMywOSlVlPR0DCH58XkNTdntbQ1B3f1tH
IP 188.114.96.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectexcepededonef.org
FingerprintF0:A3:FD:F6:CD:21:03:0A:28:F2:46:76:1C:F3:4C:35:BA:73:ED:27
ValidityTue, 22 Apr 2025 10:23:07 GMT - Mon, 21 Jul 2025 11:21:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Q01pd2RscgoEWRAYUAIAFgNRE1UvAwpEHHsbWRNWJn4BETUbDE8DDSdwUUVRenxYURQqKVREVmU+HRYQNj5URVRzek8eCiUiVEVCNXBZWV1tf0dBQjZwWFEQMywOSlVlPR0DCH58XkNTdntbQ1B3f1tH HTTP/1.1
Host: excepededonef.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 18 May 2025 10:00:44 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tp7PY6XZcFiJAQp0mYQqHZem1o1fRGVWADYE3XwraaVYuR4YsdMuonZGIxgmJkOVAYRf3Y20k7iWK7cNQHCVjDcysX9wbIgc5BqjnUSUPw%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 941a825d1fcd56c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MhAuJkJKI38_LCbfRnAcPFkB6ewposNoJSZWPCi_D6fK08p6QpWEXvZe3JFvSmOPQr3AQADSQ
64.233.164.84302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MhAuJkJKI38_LCbfRnAcPFkB6ewposNoJSZWPCi_D6fK08p6QpWEXvZe3JFvSmOPQr3AQADSQ
IP 64.233.164.84:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MhAuJkJKI38_LCbfRnAcPFkB6ewposNoJSZWPCi_D6fK08p6QpWEXvZe3JFvSmOPQr3AQADSQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:DyUnGQ1UkV6Nz6VWwnHBHPFhiTt6iw:rueTOW8t7HNDkZ2S;Path=/;Expires=Tue, 18-May-2027 10:00:45 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 18 May 2025 10:00:45 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MgHA1Pc2Hb-I3e-kxJdzLF-qtMsK1WZJO2oK6wgXivI5pkXwDFwg1hpGJeugTs80vM4ufDv&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-350549528%3A1747562445015460
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-wg6VyzGFzIIp3rQYLv7aaQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 413
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
5.34.214.148200 OK 79 kB URL User Request GET megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
IP 5.34.214.148:443
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (52002)
Hash c0c3cdf2023b71c5d464b32317ea3c14
cf62d167ec3b4da4aa980baea5e36dcdff4ec62c
6a84aee17dc67fc082879d434c1c47cebd23d9d7e3f5e32bd4e5160747c44c9a
GET /d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=9g8v4lsfqc29k24vo032j8q347; expires=Mon, 19 May 2025 10:00:42 GMT; Max-Age=86400; path=/; domain=megaup.net; secure; HttpOnly; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
access-control-allow-origin: https://megaup.net
access-control-allow-headers: Content-Type, Content-Range, Content-Disposition, Content-Description
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/icon?family=Material+Icons
142.250.178.74200 OK 565 B URL GET fonts.googleapis.com/icon?family=Material+Icons
IP 142.250.178.74:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7A:29:E6:A8:BE:59:2C:AE:82:2D:CA:8E:15:89:41:BE:EC:D2:0D:EA
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
Hash 736c83e15fc300de505f6ce9762a9396
31c0f11ada78e92970ff42d990116d77c169c6d7
c31266310101d0b1607937a7baf07f1601b7637bd2373176696488a07d7b4302
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 May 2025 10:00:42 GMT
date: Sun, 18 May 2025 10:00:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
5.34.214.148200 OK 5.4 kB URL GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators
Hash 76a923d3d69255c45cd24bf9b100244f
eb3c96f9901692f1a03500ea632963a16afdb985
8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-14f0"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undefined/dWxMWEYUDi81eRRRLn4zBwBxfXQzSX4eIkYDK2AyRFR/MXcDDit2JRkDOTwgBwMiLGgbCTh9dDMJKTMqHT18Pxw/C3Q0IgJYKxoeQBsYAH8mDyIaJTo+ATUKHg8nGgUkHAgiKiUgH2gJFxs/LwwNPXkABDQAARB2LSB/YGNHKg8eIhk8DRkyLSQCLQAcCxwSDiMPABl+EggZLDA0Ly8pFEZdBBY8EjoFNDEdIw5sNDIvHSgOHB8aAhJFDigZMQYhJBUqMT8GLBU0VRk6Hh0KKWkABzw0FSg3Pzt9dDMvGyASFhUVFyQzIjY9EwUCGQ8cQiMLIBIWFnQMDERBKGskIAcACg4zWA02fyM2IityFyoCIgkSFD8NIT9ZHwB3JQ9+HiAQXQkzCicHJRwrL1ocEDInDyIwDRAqCiEkIAR5Gj8aWgQhfjojfmkPMV0OLyAzPnkKPC9dHy9gHx8jNjZIPyEScgMAex0HQw
0.0.0.0 0 B URL GET undefined/dWxMWEYUDi81eRRRLn4zBwBxfXQzSX4eIkYDK2AyRFR/MXcDDit2JRkDOTwgBwMiLGgbCTh9dDMJKTMqHT18Pxw/C3Q0IgJYKxoeQBsYAH8mDyIaJTo+ATUKHg8nGgUkHAgiKiUgH2gJFxs/LwwNPXkABDQAARB2LSB/YGNHKg8eIhk8DRkyLSQCLQAcCxwSDiMPABl+EggZLDA0Ly8pFEZdBBY8EjoFNDEdIw5sNDIvHSgOHB8aAhJFDigZMQYhJBUqMT8GLBU0VRk6Hh0KKWkABzw0FSg3Pzt9dDMvGyASFhUVFyQzIjY9EwUCGQ8cQiMLIBIWFnQMDERBKGskIAcACg4zWA02fyM2IityFyoCIgkSFD8NIT9ZHwB3JQ9+HiAQXQkzCicHJRwrL1ocEDInDyIwDRAqCiEkIAR5Gj8aWgQhfjojfmkPMV0OLyAzPnkKPC9dHy9gHx8jNjZIPyEScgMAex0HQw
IP 0.0.0.0:0
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dWxMWEYUDi81eRRRLn4zBwBxfXQzSX4eIkYDK2AyRFR/MXcDDit2JRkDOTwgBwMiLGgbCTh9dDMJKTMqHT18Pxw/C3Q0IgJYKxoeQBsYAH8mDyIaJTo+ATUKHg8nGgUkHAgiKiUgH2gJFxs/LwwNPXkABDQAARB2LSB/YGNHKg8eIhk8DRkyLSQCLQAcCxwSDiMPABl+EggZLDA0Ly8pFEZdBBY8EjoFNDEdIw5sNDIvHSgOHB8aAhJFDigZMQYhJBUqMT8GLBU0VRk6Hh0KKWkABzw0FSg3Pzt9dDMvGyASFhUVFyQzIjY9EwUCGQ8cQiMLIBIWFnQMDERBKGskIAcACg4zWA02fyM2IityFyoCIgkSFD8NIT9ZHwB3JQ9+HiAQXQkzCicHJRwrL1ocEDInDyIwDRAqCiEkIAR5Gj8aWgQhfjojfmkPMV0OLyAzPnkKPC9dHy9gHx8jNjZIPyEScgMAex0HQw HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
POST excepededonef.org/WjVHUkV1CiQheAleDmMLNkViYAM/Ug4dJDQMPxYECEMiGhAfdCo5Yy5cI299aAB+Y3R8RS42eGkHYSExO0EyIXhoBXdlYzNbIT14aBMxb3V0DGlga2wTMm90awBxa3JuB3NldGMFdGVzfEE3MyJnBGEiMS5ZemNybgJyZHduAXJjfGM
188.114.96.1204 No Content 0 B URL POST excepededonef.org/WjVHUkV1CiQheAleDmMLNkViYAM/Ug4dJDQMPxYECEMiGhAfdCo5Yy5cI299aAB+Y3R8RS42eGkHYSExO0EyIXhoBXdlYzNbIT14aBMxb3V0DGlga2wTMm90awBxa3JuB3NldGMFdGVzfEE3MyJnBGEiMS5ZemNybgJyZHduAXJjfGM
IP 188.114.96.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectexcepededonef.org
FingerprintF0:A3:FD:F6:CD:21:03:0A:28:F2:46:76:1C:F3:4C:35:BA:73:ED:27
ValidityTue, 22 Apr 2025 10:23:07 GMT - Mon, 21 Jul 2025 11:21:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /WjVHUkV1CiQheAleDmMLNkViYAM/Ug4dJDQMPxYECEMiGhAfdCo5Yy5cI299aAB+Y3R8RS42eGkHYSExO0EyIXhoBXdlYzNbIT14aBMxb3V0DGlga2wTMm90awBxa3JuB3NldGMFdGVzfEE3MyJnBGEiMS5ZemNybgJyZHduAXJjfGM HTTP/1.1
Host: excepededonef.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sun, 18 May 2025 10:00:45 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XSrZTdjzGzn9nsXIY19RtIKsto6V2wOAxd3gVyR7yNa848sFbVqwS5X%2BAv5BinXN4AD4HVzWnGwcuWZwAmDBCmqepEp5dE%2Fs%2B%2B6E3yx1vQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 941a82629a86568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET s.viinjjlt.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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4399%2F399%2F680a804b5cc03t1745518667r1308.png
104.21.16.228302 Found 4.0 kB URL GET s.viinjjlt.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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4399%2F399%2F680a804b5cc03t1745518667r1308.png
IP 104.21.16.228:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectviinjjlt.com
FingerprintC6:75:0A:57:57:BF:D5:FA:91:4E:E1:AE:FB:AC:BF:41:AD:99:1C:EC
ValidityWed, 07 May 2025 18:56:43 GMT - Tue, 05 Aug 2025 19:55:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4399%2F399%2F680a804b5cc03t1745518667r1308.png HTTP/1.1
Host: s.viinjjlt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 18 May 2025 10:00:47 GMT
content-length: 0
location: https://i.cdnfimgs.com/image/osp/4399/399/680a804b5cc03t1745518667r1308.png
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=p2Y%2BqI7HtVDqHK4SfYKIYtMH7T2WsAgM5fLCVscmMkja6qsXwq1pokdPgoenB67MKl%2BUWQPkaLqUFqQxynvU6TY9JIngCLXnBgKGEQ%3D%3D"}]}
cf-ray: 941a8273593cb4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/flickity.css
5.34.214.148200 OK 2.5 kB URL GET megaup.net/themes/spirit/assets/frontend/css/flickity.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 244d315064064270eabbbb7ac9f6c700
21ad53d3efbb40154293190173ee0c497ed7651c
ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-9d9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET excepededonef.org/bDFhMkJDDgJBfzVbKwcYAnM5cSlZVDB0IS5gJ2AEOXA3excHfEdGKwgMWQB3VQBQFDIFVVwBcEpCFVM2GUJcA2QFXwddf0pHXAJsVR9THHRKRFwDZBhBAFV/XRcRRjYADFAFdlsEVwB2WAVTA3o
188.114.96.1204 No Content 0 B URL GET excepededonef.org/bDFhMkJDDgJBfzVbKwcYAnM5cSlZVDB0IS5gJ2AEOXA3excHfEdGKwgMWQB3VQBQFDIFVVwBcEpCFVM2GUJcA2QFXwddf0pHXAJsVR9THHRKRFwDZBhBAFV/XRcRRjYADFAFdlsEVwB2WAVTA3o
IP 188.114.96.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectexcepededonef.org
FingerprintF0:A3:FD:F6:CD:21:03:0A:28:F2:46:76:1C:F3:4C:35:BA:73:ED:27
ValidityTue, 22 Apr 2025 10:23:07 GMT - Mon, 21 Jul 2025 11:21:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bDFhMkJDDgJBfzVbKwcYAnM5cSlZVDB0IS5gJ2AEOXA3excHfEdGKwgMWQB3VQBQFDIFVVwBcEpCFVM2GUJcA2QFXwddf0pHXAJsVR9THHRKRFwDZBhBAFV/XRcRRjYADFAFdlsEVwB2WAVTA3o HTTP/1.1
Host: excepededonef.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 18 May 2025 10:00:44 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ftJbMPjCcytt4XOgqvOIvGltylLlQ0W3rHsFz%2FtnDdqHjdZP3QYFtHDgEXu4MaEewmDnZGgdhIvmgQdDDJukv%2BVb7P1B%2BPRW%2F8E3cWxQSA%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 941a825d0fbd56c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.16.1200 OK 26 B IP 104.21.16.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70
ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File type ASCII text, with no line terminators
Hash e0e5457d720b0df1f93d4469ad1e95fb
6795de1fa43837a98d1933929b4b68eb30a8b85d
63f31df50a610b1776c96c59caae5536130664cf67fedb2ed6bf3d6673d41db7
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 May 2025 10:00:45 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kcOPnw8%2FqRqe8CgY%2Fs93TbLPpw33TWfhGFASqBQWpBagsj%2F5FzvRvrC9PVmwoVXKPLV%2F%2F8FuGQdwJAzkUJb3C9Es0U1CO5xStezAN371Puw%3D"}]}
content-encoding: br
set-cookie: csu=408529327091668@1@1747562444; SameSite=None; Secure; Max-Age=31104000
cf-ray: 941a8260bcc65684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET tomlldahehun.org/floater?cs=NldqZmkDb11eWQNkU1RcBGBbUlo&abt=0&red=1&sm=83&k=18208%20precinct&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1156974247190376&agec=1747562444&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd440468c781e3877c069d9bbab02dbe7%2FThe.Precinct.v1.4.18208-P2P.7z&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_67z0=1747562445202&crc=1
18.239.50.23200 OK 10 kB URL GET tomlldahehun.org/floater?cs=NldqZmkDb11eWQNkU1RcBGBbUlo&abt=0&red=1&sm=83&k=18208%20precinct&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1156974247190376&agec=1747562444&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd440468c781e3877c069d9bbab02dbe7%2FThe.Precinct.v1.4.18208-P2P.7z&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_67z0=1747562445202&crc=1
IP 18.239.50.23:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerAmazon
Subjecttomlldahehun.org
Fingerprint6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D
ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File type ASCII text, with very long lines (10158), with no line terminators
Hash 5b3b88a498246135d1a54d71f3756d2e
cd4ad806783940697bbcdddf16d12c756f6f00ac
fa3656b3bf5bed6f57987cab7297b90dadf648359f2386bcab694ee2bdef2b53
GET /floater?cs=NldqZmkDb11eWQNkU1RcBGBbUlo&abt=0&red=1&sm=83&k=18208%20precinct&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1156974247190376&agec=1747562444&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd440468c781e3877c069d9bbab02dbe7%2FThe.Precinct.v1.4.18208-P2P.7z&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_67z0=1747562445202&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 6986
date: Sun, 18 May 2025 10:00:45 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=xGHog1xTrK/VTCzDsl/xPk5j24l4w6lce8AePQpIOc0czv1wQSonqMMZkKkx+ap3CmAsDuREsMRW2StYBvW/l4pnRJiAlXMjEM3RRQzmg8du96TavFQ1mx/rUWvA; Expires=Sun, 25 May 2025 10:00:45 GMT; Path=/
AWSALBCORS=xGHog1xTrK/VTCzDsl/xPk5j24l4w6lce8AePQpIOc0czv1wQSonqMMZkKkx+ap3CmAsDuREsMRW2StYBvW/l4pnRJiAlXMjEM3RRQzmg8du96TavFQ1mx/rUWvA; Expires=Sun, 25 May 2025 10:00:45 GMT; Path=/; SameSite=None
csu=894a5a38-5379-4cf7-adab-cb2919a573c6
csu=1156974247190376
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c2c44e18165da827386e0ed36aeea344.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS58-P3
x-amz-cf-id: 1fP5HWwijIWocOFgDi78X1Jl0PNa-dJsJjkjTg5jzvHZWuxGRb7vOA==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
5.34.214.148200 OK 14 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators
Hash 0eef6fe46d14f860d5666d2c7b13a564
7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe
95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-3626"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
5.34.214.148200 OK 80 kB URL GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 80148, version 331.17301
Hash c500da19d776384ba69573ae6fe274e7
6290834672aba86d5b6c1c73b30b57c9c53996f7
cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:44 GMT
content-type: font/woff2
content-length: 80148
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-13914"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
64.233.164.84302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 64.233.164.84:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84
ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:iwNhyWsZ67EDBejXF_wZBbkqsGViqA:HjL_h7txN4vnVPPw; Expires=Tue, 18-May-2027 10:00:44 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 18 May 2025 10:00:44 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MhAuJkJKI38_LCbfRnAcPFkB6ewposNoJSZWPCi_D6fK08p6QpWEXvZe3JFvSmOPQr3AQADSQ
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-wmqmnkOdcYCPUeK5WYwPXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
5.34.214.148200 OK 59 kB URL GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (58929), with CRLF line terminators
Hash 879812fc22af75aa3ae7b5666ca4f4b8
df27469a952b7ee36cc03db471c6198f577186a8
c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-e6ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo.png
5.34.214.148200 OK 5.9 kB URL GET megaup.net/themes/spirit/assets/images/logo/logo.png
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
Hash fa360a47a62ae74a0a3d8c0f3e6f7f12
168c72a918b04b735f8e0f8a72223a16f0eda358
1d3a3c84dd36871d1009693761f441537117d5ee62c8e775d7d52c77d4c46de4
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: image/png
content-length: 5900
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-170c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js
5.34.214.148200 OK 11 kB URL GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators
Hash 714368d20c70f8c91b0a596e128dac07
563954ec3a896fc129d014f01836245829f6d01d
e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-298b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
142.250.74.136200 OK 276 kB URL GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP 142.250.74.136:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
File type JavaScript source, ASCII text, with very long lines (5432)
Size 276 kB (276255 bytes)
Hash dfc6639d0e50671d2eb297b1ab5b0ae8
6a8565b186f8d8c25aa69c7123fd392881485c65
73b55fca322e96b17c2650853f674fafb0028d84e2e882a119e011e8022faec6
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 May 2025 10:00:42 GMT
expires: Sun, 18 May 2025 10:00:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 May 2025 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 97699
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/background.jpg
5.34.214.148200 OK 86 kB URL GET megaup.net/themes/spirit/assets/frontend/img/background.jpg
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3
Hash 1b0874b56457a14258e3bd22805266c6
26ff3d095376d43cb78388e700707cdaf6ac75eb
5c5e0d52eb281e1ceae07f53c931982e8e014b9a535df9c98246157167e29285
GET /themes/spirit/assets/frontend/img/background.jpg HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:43 GMT
content-type: image/jpeg
content-length: 86513
last-modified: Tue, 11 Feb 2025 07:35:38 GMT
vary: Accept-Encoding
etag: "67aafdca-151f1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.67200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.178.67:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint15:8B:D4:EA:7E:CB:34:1B:6F:2E:20:9E:39:44:7A:D6:D7:30:26:AB
ValidityMon, 21 Apr 2025 08:41:49 GMT - Mon, 14 Jul 2025 08:41:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Hash 015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 May 2025 13:00:47 GMT
expires: Tue, 12 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 507596
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET excepededonef.org/Q0tCZ25sdCEUUyB5eh47cQEBMC8nIhcMGiIKFSU4Eg12IzQFCmQTByd2elBYcHp6QR4qL39VV2U4NgYaNjh/VkgqJSQIU2U9f1ZAc2V0V0B3bTdaX2U/MgYJfnpkFxo3J39WWXd8d1Fcd392VV1w
188.114.96.1204 No Content 0 B URL GET excepededonef.org/Q0tCZ25sdCEUUyB5eh47cQEBMC8nIhcMGiIKFSU4Eg12IzQFCmQTByd2elBYcHp6QR4qL39VV2U4NgYaNjh/VkgqJSQIU2U9f1ZAc2V0V0B3bTdaX2U/MgYJfnpkFxo3J39WWXd8d1Fcd392VV1w
IP 188.114.96.1:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerGoogle Trust Services
Subjectexcepededonef.org
FingerprintF0:A3:FD:F6:CD:21:03:0A:28:F2:46:76:1C:F3:4C:35:BA:73:ED:27
ValidityTue, 22 Apr 2025 10:23:07 GMT - Mon, 21 Jul 2025 11:21:33 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Q0tCZ25sdCEUUyB5eh47cQEBMC8nIhcMGiIKFSU4Eg12IzQFCmQTByd2elBYcHp6QR4qL39VV2U4NgYaNjh/VkgqJSQIU2U9f1ZAc2V0V0B3bTdaX2U/MgYJfnpkFxo3J39WWXd8d1Fcd392VV1w HTTP/1.1
Host: excepededonef.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 18 May 2025 10:00:44 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=H6nbPOy%2BtvWYo4UaoXQl7NQSl7noNE%2BxMN%2B9B1E47PZjVD1F4q2ZcPO%2Bj5uxNP1jVfYEbJzvW1aL1oncHcwGaKDpEWl6GViG35GNDDCWng%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 941a825d381856c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET img.vmmcdn.com/get/62987579/238427_icon.png
46.4.121.113200 OK 59 kB URL GET img.vmmcdn.com/get/62987579/238427_icon.png
IP 46.4.121.113:443
ASN #24940 Hetzner Online GmbH
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerLet's Encrypt
Subjectimg.vmmcdn.com
Fingerprint80:06:97:89:A7:1D:CD:83:B1:41:F8:CA:CE:6A:15:04:EB:BE:E6:BF
ValidityTue, 15 Apr 2025 20:58:33 GMT - Mon, 14 Jul 2025 20:58:32 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash 669eb036e71ef2df4b1a7d3fa9e5ebb7
6a8686b1ce7276b8c6732245e340dbe38b30eb04
89edf6961767b760b3ff755a803457eee41b5f2df863cdeca95165bf4a126732
GET /get/62987579/238427_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.1
date: Sun, 18 May 2025 10:00:52 GMT
content-type: image/png
content-length: 59035
last-modified: Sun, 18 Dec 2022 10:47:59 GMT
cache-control: public, max-age=604800
etag: "639eefdf-e69b"
x-proxy-cache: HIT
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
access-control-request-headers: x-requested-with
access-control-allow-headers: x-requested-with
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
5.34.214.148200 OK 3.9 kB URL GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 30265c8089a8f3e871d0873ef6a5b944
2804a2fe5a6a956626ce6a46adf6b1a0676ee13d
f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f31"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
5.34.214.148200 OK 87 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators
Hash 5b5a269bd363e0886c17d855c2aab241
042dd055cd289215835a58507c9531f808e1648a
1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-152b9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/scripts.js
5.34.214.148200 OK 115 kB URL GET megaup.net/themes/spirit/assets/frontend/js/scripts.js
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (914), with CRLF line terminators
Size 115 kB (114862 bytes)
Hash ce260d2170faf98639ab8e0e3758f1e2
32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f
ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1c0ae"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
3.167.7.201200 OK 489 kB URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP 3.167.7.201:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62
ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 489 kB (489393 bytes)
Hash 7683f68b05eeff38f43594a068fa54e2
07f109d3045284855cabb84b7bfe97d871abf8b3
3664c05aa384f2a3a1173f78704ea568fa9f81acc81d95058798be72f7fe306d
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151951
date: Sun, 18 May 2025 10:00:42 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: WEYw4jFZEO9ix_2PQtK7Hnlf4z_Fer6veKHLgLzk9Y81RpfHhSjCjA==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
5.34.214.148200 OK 103 kB URL GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Size 103 kB (102727 bytes)
Hash c9b1c618a7b12bd7ecf6034164b29164
f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99
fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-19147"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
5.34.214.148200 OK 77 kB URL GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
IP 5.34.214.148:443
Requested by https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (65319), with CRLF line terminators
Hash 9b67b9ffbfcbe226a8c413fa740fd91c
7837bd0c312897e46311aaf472947f3e23d75df2
2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d440468c781e3877c069d9bbab02dbe7/The.Precinct.v1.4.18208-P2P.7z
DNT: 1
Connection: keep-alive
Cookie: filehosting=9g8v4lsfqc29k24vo032j8q347
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 May 2025 10:00:42 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-12c7a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2