| upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip | 57.129.39.102 | 301 Moved Permanently | 313 B |
URL upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip IP 57.129.39.102:0
File typeHTML document, ASCII text Hash7e85a81fb3d116c6f3a7ee718ed36d71 942cbe5e495f175e96120f10d137362a9879a1e5 563801dea78e53733233e1821b564e625063b452f787e94e3f04ecfb2cbd67f3
GET /download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip HTTP/1.1
Host: upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 01 Jan 2025 10:31:09 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 313
Connection: keep-alive
Keep-Alive: timeout=5
Location: http://www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip
|
|
| www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip | 57.129.39.102 | 302 Found | 0 B |
URL www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip IP 57.129.39.102:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 01 Jan 2025 10:31:09 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
Location: https://www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip
|
|
| www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip | 57.129.39.102 | 404 Not Found | 284 B |
URL www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip IP 57.129.39.102:0
File typeHTML document, ASCII text, with very long lines (441), with no line terminators Hashf6e960e2cf9bd6294a6d44ba5f276bf5 5ba5034c343d4c6cb99efc08fa6d42f73c2a5858 b58cf124af165098c0dae87c0a9f66f15540f5ec2c2920dbf7d8376746c61616
GET /download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 01 Jan 2025 10:31:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
Content-Encoding: gzip
|
|
| www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip | 57.129.39.102 | 404 Not Found | 284 B |
URL www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip IP 57.129.39.102:0
File typeHTML document, ASCII text, with very long lines (441), with no line terminators Hashf6e960e2cf9bd6294a6d44ba5f276bf5 5ba5034c343d4c6cb99efc08fa6d42f73c2a5858 b58cf124af165098c0dae87c0a9f66f15540f5ec2c2920dbf7d8376746c61616
GET /download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 01 Jan 2025 10:31:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
Content-Encoding: gzip
|
|
| www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html | 57.129.39.102 | 200 OK | 8.3 kB |
URL User Request GET HTTP/1.1www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html IP 57.129.39.102:443
CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4526) Hash015ea242fe308a1500fc9b3d032f092a 8dd3785c8d9a32e460d3ff06defdc80f8c368d0b 7ca53b547044e8ae86488cd9d00aa1d7417f7c6666dda827e0236e2b3b018f9f
GET /files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/download/13070382/22c756ed780a1ff06e60/krt_club_3.1.0.29_repack_v6.21.4_fix5_eng.zip
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Jan 2025 10:31:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
Content-Encoding: gzip
Set-Cookie: lng=eng; expires=Wed, 29-Jan-2025 10:31:10 GMT; path=/; domain=www.upload.ee; secure; httponly; SameSite=None
Last-Modified: Wed, 01 Jan 2025 10:31:10 GMT
|
|
| www.upload.ee/static/ubr__style.css | 57.129.39.102 | 200 OK | 2.8 kB |
URL GET HTTP/1.1www.upload.ee/static/ubr__style.css IP 57.129.39.102:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeASCII text, with very long lines (591), with CRLF line terminators Hash7b9692d4caecccf38e40d2333f8e00b0 8ecb4f873571250f02a5cc2ceff0a24aed25fc33 c4042306388924b75aa7d584c1e61165264967a52d09544ecba836f0d00eb9b9
GET /static/ubr__style.css HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html
Cookie: lng=eng
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Jan 2025 10:31:10 GMT
Content-Type: text/css
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
ETag: W/"66855297-24da"
Expires: Wed, 08 Jan 2025 10:31:10 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.upload.ee/js/js__file_upload.js | 57.129.39.102 | 200 OK | 7.7 kB |
URL GET HTTP/1.1www.upload.ee/js/js__file_upload.js IP 57.129.39.102:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1853) Hash66684709338f7239056ff3302e16bc4a 7dbd501434bdc062cdc8f6744e272a7d39ca5136 5163e50a8fe4549a8ca064e266de9c8e6aebd1d848185e0931959824a4d32c0f
GET /js/js__file_upload.js HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html
Cookie: lng=eng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Jan 2025 10:31:10 GMT
Content-Type: application/javascript
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
ETag: W/"66855297-651c"
Expires: Wed, 08 Jan 2025 10:31:10 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.upload.ee/images/dl_.png | 57.129.39.102 | 200 OK | 1.9 kB |
URL GET HTTP/1.1www.upload.ee/images/dl_.png IP 57.129.39.102:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typePNG image data, 154 x 32, 8-bit colormap, non-interlaced Hashf3e8f284a4e98cdb91b6abfc142d94a4 fa9e618c2f56bea752ddd7e45a372c5539dadda9 2f13919383f54ca21e5b87f5644df8a875b99815c821dcbbabea352d854c6882
GET /images/dl_.png HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Jan 2025 10:31:10 GMT
Content-Type: image/png
Content-Length: 1900
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "66855297-76c"
Expires: Wed, 08 Jan 2025 10:31:10 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
|
|
| www.upload.ee/images/arrow.gif | 57.129.39.102 | 200 OK | 59 B |
URL GET HTTP/1.1www.upload.ee/images/arrow.gif IP 57.129.39.102:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeGIF image data, version 89a, 6 x 9 Hash6675f814b94f13f91f1383707b250e36 31452650e8fce2095613a2010799bdb7548bdd51 061d01a0b85f948c6ec464870ecec4654c4bd2ff15cacda941bbbf16225ec411
GET /images/arrow.gif HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Jan 2025 10:31:10 GMT
Content-Type: image/gif
Content-Length: 59
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "66855297-3b"
Expires: Wed, 08 Jan 2025 10:31:10 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
|
|
| www.googletagmanager.com/gtag/js?id=UA-6703115-1 | 142.250.74.168 | 200 OK | 79 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-6703115-1 IP 142.250.74.168:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (2310) Hash196abbf85c360f8d0a7cf9d01bea44cf cd737874f225d5369d742d853c3ff1bd8963c660 05eb9215fc7fecbe7d846d4f9826fd4f54a3c53f2f9ae892b826876f58f19167
GET /gtag/js?id=UA-6703115-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Jan 2025 10:31:10 GMT
expires: Wed, 01 Jan 2025 10:31:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 78567
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| du0pud0sdlmzf.cloudfront.net/?dupud=997369 | 143.204.42.48 | 200 OK | 127 kB |
URL GET HTTP/2du0pud0sdlmzf.cloudfront.net/?dupud=997369 IP 143.204.42.48:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size127 kB (127346 bytes) Hash4cbedb1b4c2c14adb467dad5148772ac 1a884385d339d6156ef7bd57215cf0592c5b8120 6ae196076b849107a3ff3c1664eb759348461b94614d6250f2035ed7bbb807a5
GET /?dupud=997369 HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 127346
date: Wed, 01 Jan 2025 10:31:10 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7zLLw_p0-SUS521RIqCFpNSt5jojgbWfsxDpyKrxJkU4UuwLT7kf9w==
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c>m=457e4cc1za200 | 142.250.74.168 | 200 OK | 105 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c>m=457e4cc1za200 IP 142.250.74.168:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4 ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File typeJavaScript source, ASCII text, with very long lines (3835) Size105 kB (104627 bytes) Hashccab40cfb4f3fac50e19de8bf40797f7 8c0fc5812d5b48fecfc23f8137dfd801ece6d84b 1d47368d8d771568f623e30c3aead337a39a3d6c46e529b4ea2a9593cd286ad2
GET /gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c>m=457e4cc1za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Jan 2025 10:31:10 GMT
expires: Wed, 01 Jan 2025 10:31:10 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 104627
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| benefitssheasha.com/dTlKN1ZaBilEazsLJm8CGVYPYAE7AChQbxdjEg4kN38IXzMiTmxDPxEEcw5hRg9zESYcXXcGcAZNK0MjBgR7ET8bXyUKcAMEexllQRd5AXhBHz8KZ1NNOlYxSAhsRyIBVXcGYUYMfQVhQQ56D2JD | 104.21.64.1 | 204 No Content | 0 B |
URL GET HTTP/2benefitssheasha.com/dTlKN1ZaBilEazsLJm8CGVYPYAE7AChQbxdjEg4kN38IXzMiTmxDPxEEcw5hRg9zESYcXXcGcAZNK0MjBgR7ET8bXyUKcAMEexllQRd5AXhBHz8KZ1NNOlYxSAhsRyIBVXcGYUYMfQVhQQ56D2JD IP 104.21.64.1:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectbenefitssheasha.com Fingerprint58:2E:2C:A4:51:D7:F5:8E:42:A2:9B:EA:B2:77:35:54:A9:33:FD:B8 ValidityFri, 08 Nov 2024 08:42:51 GMT - Thu, 06 Feb 2025 08:42:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dTlKN1ZaBilEazsLJm8CGVYPYAE7AChQbxdjEg4kN38IXzMiTmxDPxEEcw5hRg9zESYcXXcGcAZNK0MjBgR7ET8bXyUKcAMEexllQRd5AXhBHz8KZ1NNOlYxSAhsRyIBVXcGYUYMfQVhQQ56D2JD HTTP/1.1
Host: benefitssheasha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 01 Jan 2025 10:31:11 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mw4HQTziKdSymeZpDk7dM0ifhK8Td2gUH6dYo4Ek7YMDRmDhCP5nt3%2BfgWX1qVsnXPXMc7iNS5BIzavNgUNFd2hIPha7jXINXelLE86D90Vx1yQCX4RjcJyZR529ch%2FyVJnKKSmj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fb1d6957eeb7127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=960&min_rtt=359&rtt_var=1161&sent=9&recv=13&lost=0&retrans=0&sent_bytes=3219&recv_bytes=1567&delivery_rate=7240000&cwnd=254&unsent_bytes=0&cid=06650f8ee9c0f640&ts=161&x=0"
X-Firefox-Spdy: h2
|
|
| benefitssheasha.com/aW5vanJGUQwZTzoUJSYoW1daK0FQNjlZSiwLKSQWCgk9XyQFBUkeGw1TVlNFXV9bTAIAClJbVBoaDh4HGlNeTBsHCABXVB9TXkRBXUBcXFxdSBpXQ08aHwsVVF9JGgYdAlJbRVpbWFhFXVlfUktc | 104.21.64.1 | 204 No Content | 0 B |
URL GET HTTP/2benefitssheasha.com/aW5vanJGUQwZTzoUJSYoW1daK0FQNjlZSiwLKSQWCgk9XyQFBUkeGw1TVlNFXV9bTAIAClJbVBoaDh4HGlNeTBsHCABXVB9TXkRBXUBcXFxdSBpXQ08aHwsVVF9JGgYdAlJbRVpbWFhFXVlfUktc IP 104.21.64.1:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectbenefitssheasha.com Fingerprint58:2E:2C:A4:51:D7:F5:8E:42:A2:9B:EA:B2:77:35:54:A9:33:FD:B8 ValidityFri, 08 Nov 2024 08:42:51 GMT - Thu, 06 Feb 2025 08:42:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aW5vanJGUQwZTzoUJSYoW1daK0FQNjlZSiwLKSQWCgk9XyQFBUkeGw1TVlNFXV9bTAIAClJbVBoaDh4HGlNeTBsHCABXVB9TXkRBXUBcXFxdSBpXQ08aHwsVVF9JGgYdAlJbRVpbWFhFXVlfUktc HTTP/1.1
Host: benefitssheasha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 01 Jan 2025 10:31:11 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LGSNFxA2dh7Yewx0Qr7pjV34jsIu0vejSyC8lf75zgidEmZtYaO2XvcCZ5HDXFT6ORYG6NlLx7zmJWvjKm0PJE6XdTSFjteAw194ei%2FkAl0lY3zyQyNlUHbG1lnf35SGRxL1KVdw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fb1d6957ef27127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=960&min_rtt=359&rtt_var=1161&sent=10&recv=13&lost=0&retrans=0&sent_bytes=3790&recv_bytes=1567&delivery_rate=7240000&cwnd=254&unsent_bytes=0&cid=06650f8ee9c0f640&ts=169&x=0"
X-Firefox-Spdy: h2
|
|
| benefitssheasha.com/NDd0dmkbCBcFVHtgIjAIWXokI1pMYyIBWGZTGEc7d1smDjwFdlICAFAKTU9eAAdMUBldU0lHURJEABcdQURJR09dWRIZVBJBSUdHBBlGWFwSQklHT0BHFRFUBREEAh1YCkVBWgEARkFdAwdMQV0 | 104.21.64.1 | 204 No Content | 0 B |
URL GET HTTP/2benefitssheasha.com/NDd0dmkbCBcFVHtgIjAIWXokI1pMYyIBWGZTGEc7d1smDjwFdlICAFAKTU9eAAdMUBldU0lHURJEABcdQURJR09dWRIZVBJBSUdHBBlGWFwSQklHT0BHFRFUBREEAh1YCkVBWgEARkFdAwdMQV0 IP 104.21.64.1:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectbenefitssheasha.com Fingerprint58:2E:2C:A4:51:D7:F5:8E:42:A2:9B:EA:B2:77:35:54:A9:33:FD:B8 ValidityFri, 08 Nov 2024 08:42:51 GMT - Thu, 06 Feb 2025 08:42:50 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NDd0dmkbCBcFVHtgIjAIWXokI1pMYyIBWGZTGEc7d1smDjwFdlICAFAKTU9eAAdMUBldU0lHURJEABcdQURJR09dWRIZVBJBSUdHBBlGWFwSQklHT0BHFRFUBREEAh1YCkVBWgEARkFdAwdMQV0 HTTP/1.1
Host: benefitssheasha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 01 Jan 2025 10:31:11 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OEV%2F03zJuc6DTowUdXuKlyKweYdSiAkITlTlrCihI7Ymp99KqmoodQsdnx1LKYG5PgIQHISURF31Eeo7Lzxs7icirlC6dKGExIJecSjSes8AEJvlSXkVY%2Fm5IU6%2F9uw7rDDgblJA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fb1d6958ef77127-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=2015&min_rtt=359&rtt_var=2980&sent=11&recv=14&lost=0&retrans=0&sent_bytes=4207&recv_bytes=1567&delivery_rate=7240000&cwnd=256&unsent_bytes=0&cid=06650f8ee9c0f640&ts=174&x=0"
X-Firefox-Spdy: h2
|
|
| abletopreseyna.com/ZWtuVG8ECQ05UARWDHIaFwdTcV0jTlwSCxBbHiELVRgKOAIfDUA3AwoeCjIdCgUaegEAH0tmKSY+Xzg+MCwFIyEPX1wCBgYcIBNeNAoDYQQ8PV9lJDYiXxBdUR4kLQstIQc/VzUcCWcLHz5fABUOGj4uWz8JB2woPAMFAiIdCCwePg45JwZeNSEXGV8HPQJlITEuS2YtIQZbcV0jJTpgJAcGBmYiNFsWDig3WSYHIlckXGQuLygdPyYnBAYYFVESOi02UQk6ZCguPy9sPyQDXDUXPwc8ZiFdMgMWLS5ZBjwLMwQ8MigvDCwAAFYhPTwiPDwFOw4jUyM2XUg5XwMHI1M3OS4HITYsBSA9LDgLVylbACgjGyAuOi4kKg5ePAJXPA4yLQkDOC8bNww5BzIUbFosDBllIQwDXwMXMww0Olo/Dz0sGzw6SD4cCgUeaRkzWR4SBSI6Ig4nFCY | 3.164.240.54 | 200 OK | 1.2 kB |
URL GET HTTP/2abletopreseyna.com/ZWtuVG8ECQ05UARWDHIaFwdTcV0jTlwSCxBbHiELVRgKOAIfDUA3AwoeCjIdCgUaegEAH0tmKSY+Xzg+MCwFIyEPX1wCBgYcIBNeNAoDYQQ8PV9lJDYiXxBdUR4kLQstIQc/VzUcCWcLHz5fABUOGj4uWz8JB2woPAMFAiIdCCwePg45JwZeNSEXGV8HPQJlITEuS2YtIQZbcV0jJTpgJAcGBmYiNFsWDig3WSYHIlckXGQuLygdPyYnBAYYFVESOi02UQk6ZCguPy9sPyQDXDUXPwc8ZiFdMgMWLS5ZBjwLMwQ8MigvDCwAAFYhPTwiPDwFOw4jUyM2XUg5XwMHI1M3OS4HITYsBSA9LDgLVylbACgjGyAuOi4kKg5ePAJXPA4yLQkDOC8bNww5BzIUbFosDBllIQwDXwMXMww0Olo/Dz0sGzw6SD4cCgUeaRkzWR4SBSI6Ig4nFCY IP 3.164.240.54:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerAmazon Subjectabletopreseyna.com Fingerprint3F:03:6C:93:6A:D6:52:78:A2:6F:CD:68:6D:DE:3C:D9:D7:6E:A8:6B ValidityWed, 13 Nov 2024 00:00:00 GMT - Fri, 12 Dec 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3045), with no line terminators Hash5b54e4c4ee3b9cccfaaa125b43ae2347 5cc0e1c0b9cd7988d6e5207d1b93b47c79dc18d9 1b1a57a16c434d98785ae5346be36d0e9e99371eef622013804ad86b298b0d92
GET /ZWtuVG8ECQ05UARWDHIaFwdTcV0jTlwSCxBbHiELVRgKOAIfDUA3AwoeCjIdCgUaegEAH0tmKSY+Xzg+MCwFIyEPX1wCBgYcIBNeNAoDYQQ8PV9lJDYiXxBdUR4kLQstIQc/VzUcCWcLHz5fABUOGj4uWz8JB2woPAMFAiIdCCwePg45JwZeNSEXGV8HPQJlITEuS2YtIQZbcV0jJTpgJAcGBmYiNFsWDig3WSYHIlckXGQuLygdPyYnBAYYFVESOi02UQk6ZCguPy9sPyQDXDUXPwc8ZiFdMgMWLS5ZBjwLMwQ8MigvDCwAAFYhPTwiPDwFOw4jUyM2XUg5XwMHI1M3OS4HITYsBSA9LDgLVylbACgjGyAuOi4kKg5ePAJXPA4yLQkDOC8bNww5BzIUbFosDBllIQwDXwMXMww0Olo/Dz0sGzw6SD4cCgUeaRkzWR4SBSI6Ig4nFCY HTTP/1.1
Host: abletopreseyna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1200
date: Wed, 01 Jan 2025 10:31:11 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=VRkojRdPu5/t+9GzOzl+Nlt0ZAEqMqVMyo0Rj7ryfTSXh38ege5tmEMtWEStDUo+m5uAcSXKCt8r/875fEJGnZgOsxUoD20NaF4doRDEyhVE/GGe7hxOlGSS+tVi; Expires=Wed, 08 Jan 2025 10:31:11 GMT; Path=/
AWSALBCORS=VRkojRdPu5/t+9GzOzl+Nlt0ZAEqMqVMyo0Rj7ryfTSXh38ege5tmEMtWEStDUo+m5uAcSXKCt8r/875fEJGnZgOsxUoD20NaF4doRDEyhVE/GGe7hxOlGSS+tVi; Expires=Wed, 08 Jan 2025 10:31:11 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 2d4ccfc38ee1229022124d55e34be376.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: wwXydiFvux_SLnbLsf7ybSUfeMzqwnX-qddzUmzsmt72p-SE6cqfNw==
X-Firefox-Spdy: h2
|
|
| abletopreseyna.com/dEhiSXAVKgEkTxV1AG8FBiRfbEIybVAPFAF4EjwURDsGJR0OLkwqHBs9Bi8CGyYWZx4RPEd7Nj4qJA8RJyU7GSAeGREeIhN8MicUEh41EwASDlsCOScvFAg2MSUuHUE9DzEMQj4ZAQAWDnAUGDEtISwaISMdMQhHPQknATg3cEd7MiIxI308DnAkCigXPS8IOiYROj4dNj8reypGPyYIGj4mB3kxOgY2IUMhIw0lOx0dLBwkEzwtCzkXAQsuSDcJV3o8DTwACCRALys+HzUFKnBEPQ4ObEIyKQ9wJSwACSAVRSwoEBgcPjQPB00FGxgkMgAwJhUcfTcTB1keWhwbGCElDkkhECEEAxZ5Nz0RMzAJHxsieAMBHzYLNgAIPh0sLDZGIFQfQQwgA3oALBs1BwE4CVosPjA/DgEbGCIqAT4lGQ8PSCR5Fi1WHjsNJwBJOQMjFx8FFz1BOCEXPBMR | 3.164.240.54 | 200 OK | 1.2 kB |
URL GET HTTP/2abletopreseyna.com/dEhiSXAVKgEkTxV1AG8FBiRfbEIybVAPFAF4EjwURDsGJR0OLkwqHBs9Bi8CGyYWZx4RPEd7Nj4qJA8RJyU7GSAeGREeIhN8MicUEh41EwASDlsCOScvFAg2MSUuHUE9DzEMQj4ZAQAWDnAUGDEtISwaISMdMQhHPQknATg3cEd7MiIxI308DnAkCigXPS8IOiYROj4dNj8reypGPyYIGj4mB3kxOgY2IUMhIw0lOx0dLBwkEzwtCzkXAQsuSDcJV3o8DTwACCRALys+HzUFKnBEPQ4ObEIyKQ9wJSwACSAVRSwoEBgcPjQPB00FGxgkMgAwJhUcfTcTB1keWhwbGCElDkkhECEEAxZ5Nz0RMzAJHxsieAMBHzYLNgAIPh0sLDZGIFQfQQwgA3oALBs1BwE4CVosPjA/DgEbGCIqAT4lGQ8PSCR5Fi1WHjsNJwBJOQMjFx8FFz1BOCEXPBMR IP 3.164.240.54:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerAmazon Subjectabletopreseyna.com Fingerprint3F:03:6C:93:6A:D6:52:78:A2:6F:CD:68:6D:DE:3C:D9:D7:6E:A8:6B ValidityWed, 13 Nov 2024 00:00:00 GMT - Fri, 12 Dec 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3049), with no line terminators Hash871bd203b6c16cc284c337fd9403b8c4 3047dab2d09c6873ee4a0ed987f36d15d9621f35 3681d3ea788a31e710ad77ac08ffcf94620874578694abec6ce9a96a268a7054
GET /dEhiSXAVKgEkTxV1AG8FBiRfbEIybVAPFAF4EjwURDsGJR0OLkwqHBs9Bi8CGyYWZx4RPEd7Nj4qJA8RJyU7GSAeGREeIhN8MicUEh41EwASDlsCOScvFAg2MSUuHUE9DzEMQj4ZAQAWDnAUGDEtISwaISMdMQhHPQknATg3cEd7MiIxI308DnAkCigXPS8IOiYROj4dNj8reypGPyYIGj4mB3kxOgY2IUMhIw0lOx0dLBwkEzwtCzkXAQsuSDcJV3o8DTwACCRALys+HzUFKnBEPQ4ObEIyKQ9wJSwACSAVRSwoEBgcPjQPB00FGxgkMgAwJhUcfTcTB1keWhwbGCElDkkhECEEAxZ5Nz0RMzAJHxsieAMBHzYLNgAIPh0sLDZGIFQfQQwgA3oALBs1BwE4CVosPjA/DgEbGCIqAT4lGQ8PSCR5Fi1WHjsNJwBJOQMjFx8FFz1BOCEXPBMR HTTP/1.1
Host: abletopreseyna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1203
date: Wed, 01 Jan 2025 10:31:11 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=RzhYE0JfMy1qt2OXR8wDX5RS/QrqcLDT0uqRO1bort+pkkAZx9tJ8mehbDqW2QfiFN1dLNLk2C60DzKNmTudPHDS5KZqjgAEz08ynOKVgVI7WQs9fsWHhLHmDEhH; Expires=Wed, 08 Jan 2025 10:31:11 GMT; Path=/
AWSALBCORS=RzhYE0JfMy1qt2OXR8wDX5RS/QrqcLDT0uqRO1bort+pkkAZx9tJ8mehbDqW2QfiFN1dLNLk2C60DzKNmTudPHDS5KZqjgAEz08ynOKVgVI7WQs9fsWHhLHmDEhH; Expires=Wed, 08 Jan 2025 10:31:11 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 2d4ccfc38ee1229022124d55e34be376.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: O0Pibs2wJzn9FIJ2jd8dz5i4b6PMRhi0Q7w3AQoUHYPsOzZK2PSdHg==
X-Firefox-Spdy: h2
|
|
| www.upload.ee/favicon.ico | 57.129.39.102 | 200 OK | 1.2 kB |
URL GET HTTP/1.1www.upload.ee/favicon.ico IP 57.129.39.102:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashf299cf2e651c19e48d27900ced493ccb c2d1086d517d7a26292e0d7b32da7c55b166c23b 115c8eb4840245f7aed0cb2a17fa7e91b86f79bb2f223a25af8cc533e1dedff1
GET /favicon.ico HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html
Cookie: lng=eng; _ga_LT9YQX0N49=GS1.1.1735727470.1.0.1735727471.0.0.0; _ga=GA1.1.94176986.1735727471
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Jan 2025 10:31:11 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "66855297-47e"
Expires: Wed, 08 Jan 2025 10:31:11 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.164.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP 64.233.164.84:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint69:38:7E:29:3C:FF:37:1E:96:50:B5:FA:A1:F2:98:30:3B:BE:E6:8D ValidityMon, 02 Dec 2024 08:37:47 GMT - Mon, 24 Feb 2025 08:37:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:5koQU7C84vgGpxcIVdiQTy9MsAojeg:aHPxjq_LbFCPDIit; Expires=Fri, 01-Jan-2027 10:31:11 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 01 Jan 2025 10:31:11 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AeZLP9_IFqDh3Ktyq3y8ciIxl9nIHrzPfHEsGaT0Lcj0pHnP_dHMk1VzKUf4EHTpp3QoXK0X6x9L2Q
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-JncmBQHiOisNzz6p-gQmvQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.164.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP 64.233.164.84:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint69:38:7E:29:3C:FF:37:1E:96:50:B5:FA:A1:F2:98:30:3B:BE:E6:8D ValidityMon, 02 Dec 2024 08:37:47 GMT - Mon, 24 Feb 2025 08:37:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:nZlHM9fMZf6d_6h9PD2sryfq4i3D5g:z_ckHJbYuNxVutDx; Expires=Fri, 01-Jan-2027 10:31:11 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 01 Jan 2025 10:31:11 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AeZLP9-NnbAv1vM0-SxZfl9rkQpSmFexCzlGjdH2jcsMxhEubmadRHS5lY3syK2uZ2q4DVmskB5jkw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-bft1QDHDw5HlKhPSXLiWaA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| du0pud0sdlmzf.cloudfront.net/JbFFaSmYPPjQsWRg4PndfVWZpfF9KISgvAFEmLT1IGSE2JQcIfz8vQAYiNSQWUSA7IAEHHC8+VyA4Lz8FCXcuMAJRYXwmBwI2Z2wDAjJne0ANNTh3UkolKiUNUTgtOBIcIig8CA53LytbAT4gIwoAMH94IFl/am9UXHkie1dJYhhvVFw9MyQTFHRoeh5UZw-V8UkliGG9UXCMsb1UtaGxkVkV0aHoBCTIxJUNeF2h6V1xha3pXSWNqLA8eNDwlHkljHHNQQmF8P1td | 143.204.42.48 | 200 OK | 607 B |
URL du0pud0sdlmzf.cloudfront.net/JbFFaSmYPPjQsWRg4PndfVWZpfF9KISgvAFEmLT1IGSE2JQcIfz8vQAYiNSQWUSA7IAEHHC8+VyA4Lz8FCXcuMAJRYXwmBwI2Z2wDAjJne0ANNTh3UkolKiUNUTgtOBIcIig8CA53LytbAT4gIwoAMH94IFl/am9UXHkie1dJYhhvVFw9MyQTFHRoeh5UZw-V8UkliGG9UXCMsb1UtaGxkVkV0aHoBCTIxJUNeF2h6V1xha3pXSWNqLA8eNDwlHkljHHNQQmF8P1td IP 143.204.42.48:0
CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (875), with no line terminators Hash9afff857161a6bded72ed397bee331a5 a770ec43aeb6979fbf9a975af604606c1552872c 429a3e83894790bfab8dfed436138d13bb085c93d5e46854e271bdb752c5fcb2
GET /JbFFaSmYPPjQsWRg4PndfVWZpfF9KISgvAFEmLT1IGSE2JQcIfz8vQAYiNSQWUSA7IAEHHC8+VyA4Lz8FCXcuMAJRYXwmBwI2Z2wDAjJne0ANNTh3UkolKiUNUTgtOBIcIig8CA53LytbAT4gIwoAMH94IFl/am9UXHkie1dJYhhvVFw9MyQTFHRoeh5UZw-V8UkliGG9UXCMsb1UtaGxkVkV0aHoBCTIxJUNeF2h6V1xha3pXSWNqLA8eNDwlHkljHHNQQmF8P1td HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abletopreseyna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 607
date: Wed, 01 Jan 2025 10:31:11 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zXFQkg38OJPjKUVbhQ-Ob5mZ9hAU7dhxxh-IhCvfpg1TmHvj8m6n-A==
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AeZLP9-NnbAv1vM0-SxZfl9rkQpSmFexCzlGjdH2jcsMxhEubmadRHS5lY3syK2uZ2q4DVmskB5jkw | 64.233.164.84 | 302 Found | 420 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AeZLP9-NnbAv1vM0-SxZfl9rkQpSmFexCzlGjdH2jcsMxhEubmadRHS5lY3syK2uZ2q4DVmskB5jkw IP 64.233.164.84:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint69:38:7E:29:3C:FF:37:1E:96:50:B5:FA:A1:F2:98:30:3B:BE:E6:8D ValidityMon, 02 Dec 2024 08:37:47 GMT - Mon, 24 Feb 2025 08:37:46 GMT
File typeHTML document, ASCII text, with very long lines (390) Hashfad84565ce1855e1e24e4ac81a43b4bc c2328044484f04f09986ad4a8969fa2444575051 f81d7938da3aa693ae213f51b07003662217e03a8eb9ca77698a1827c54a586f
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AeZLP9-NnbAv1vM0-SxZfl9rkQpSmFexCzlGjdH2jcsMxhEubmadRHS5lY3syK2uZ2q4DVmskB5jkw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:GtuVG_xan5-biSwLbssUBGwN9F5i_A:7aGmvyI4GFVfdSmA;Path=/;Expires=Fri, 01-Jan-2027 10:31:11 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 01 Jan 2025 10:31:11 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9_l5q6bUw4NDh0-jxEFzpVEiSwLrA362pcvzs9934WPu6i5QSoN6DSWWe6uXvORdalagaKBaA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1866093741%3A1735727471442172&ddm=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-D_ZYbEPngLc7xI0kgHnKwg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 420
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AeZLP9_IFqDh3Ktyq3y8ciIxl9nIHrzPfHEsGaT0Lcj0pHnP_dHMk1VzKUf4EHTpp3QoXK0X6x9L2Q | 64.233.164.84 | 302 Found | 422 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AeZLP9_IFqDh3Ktyq3y8ciIxl9nIHrzPfHEsGaT0Lcj0pHnP_dHMk1VzKUf4EHTpp3QoXK0X6x9L2Q IP 64.233.164.84:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint69:38:7E:29:3C:FF:37:1E:96:50:B5:FA:A1:F2:98:30:3B:BE:E6:8D ValidityMon, 02 Dec 2024 08:37:47 GMT - Mon, 24 Feb 2025 08:37:46 GMT
File typeHTML document, ASCII text, with very long lines (393) Hash76a3c3b5fcbd0552e31fd5b52ba2e3fe c08774f6cdb6b7fae872a62251befa3953cc5705 56b7462ddb0ee7938bbe287349ea30e0eedf229653ac473067c074d8908794aa
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AeZLP9_IFqDh3Ktyq3y8ciIxl9nIHrzPfHEsGaT0Lcj0pHnP_dHMk1VzKUf4EHTpp3QoXK0X6x9L2Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:CrBOQWmVqNTDbdjlMV0uGDtiX17jrA:s73IoQf3erM7rAFg;Path=/;Expires=Fri, 01-Jan-2027 10:31:11 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 01 Jan 2025 10:31:11 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9_S3ovoWFPUb2wAeEk7zEZxbvYhDkqRsuM-lvd1ioo95W457mALcpsFQxgwdaLN4K3qhuBpbw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S641316719%3A1735727471441592&ddm=1
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-oAAXdXvmvcyJLrKbJ2IMrA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 422
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| du0pud0sdlmzf.cloudfront.net/CU1lQUGkwNj42VicwNG1Qam5kYV11KSI1D24uJydHJik8Pwg3dzU1TzkqPz4Zbi8GYhkVMxcBJQkRIR1PJyM0bVl1NTE+Dm5/NT4Kbmh2MQ0xZGR2HSM2O20AJCskIBohLz4yTyY4bT0GKTA8PAh2axZlR2N8YmBBK2hhdVoRfGJgBTo3JShMYWkoaF8Mb2-R1WhF8YmAbJXxjEVBld2B5TGFpNzUKODZ1Yi9haWFgWWJpYXVbYz85Igw1Nih1WxVgZn5ZdSxtYQ | 143.204.42.48 | 200 OK | 573 B |
URL du0pud0sdlmzf.cloudfront.net/CU1lQUGkwNj42VicwNG1Qam5kYV11KSI1D24uJydHJik8Pwg3dzU1TzkqPz4Zbi8GYhkVMxcBJQkRIR1PJyM0bVl1NTE+Dm5/NT4Kbmh2MQ0xZGR2HSM2O20AJCskIBohLz4yTyY4bT0GKTA8PAh2axZlR2N8YmBBK2hhdVoRfGJgBTo3JShMYWkoaF8Mb2-R1WhF8YmAbJXxjEVBld2B5TGFpNzUKODZ1Yi9haWFgWWJpYXVbYz85Igw1Nih1WxVgZn5ZdSxtYQ IP 143.204.42.48:0
CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (809), with no line terminators Hash5780c87b48c49390d5236450b998ff88 81d496bf8c405d16b0982122569b1a9fec6a33db 53ffbef0ce6da1bfe1692c0a97666a00a0b321b339b33b04bfa3dc11a8184bc5
GET /CU1lQUGkwNj42VicwNG1Qam5kYV11KSI1D24uJydHJik8Pwg3dzU1TzkqPz4Zbi8GYhkVMxcBJQkRIR1PJyM0bVl1NTE+Dm5/NT4Kbmh2MQ0xZGR2HSM2O20AJCskIBohLz4yTyY4bT0GKTA8PAh2axZlR2N8YmBBK2hhdVoRfGJgBTo3JShMYWkoaF8Mb2-R1WhF8YmAbJXxjEVBld2B5TGFpNzUKODZ1Yi9haWFgWWJpYXVbYz85Igw1Nih1WxVgZn5ZdSxtYQ HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abletopreseyna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 573
date: Wed, 01 Jan 2025 10:31:11 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: P_qu1z49oXvXm00KCFXy-GLFS03r26ZePylYM-fhJwYSFcV3F-vXCQ==
X-Firefox-Spdy: h2
|
|
| benefitssheasha.com/popunder.gif | 104.21.64.1 | 200 OK | 58 B |
URL GET benefitssheasha.com/popunder.gif IP 104.21.64.1:0
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectbenefitssheasha.com Fingerprint58:2E:2C:A4:51:D7:F5:8E:42:A2:9B:EA:B2:77:35:54:A9:33:FD:B8 ValidityFri, 08 Nov 2024 08:42:51 GMT - Thu, 06 Feb 2025 08:42:50 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: benefitssheasha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 Jan 2025 10:31:11 GMT
content-type: image/gif
content-length: 58
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pSFARxVlopiz7kx7vhoZEfSrsrOf9tBVrb%2BdKvwHSagCKfLgaytGlgqJDhz%2FRNgNAlIv8Z%2FiRaaYvv06ad4y98yA1RHc0LP3spE8CjhgJufZIBgitMQ%2FTy6uKfxqQvqetee%2FM2sZ"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 79144
last-modified: Tue, 31 Dec 2024 12:32:07 GMT
accept-ranges: bytes
cf-ray: 8fb1d699fafd0b02-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9_S3ovoWFPUb2wAeEk7zEZxbvYhDkqRsuM-lvd1ioo95W457mALcpsFQxgwdaLN4K3qhuBpbw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S641316719%3A1735727471441592&ddm=1 | 64.233.164.84 | 403 Forbidden | 1.3 kB |
URL GET HTTP/2accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9_S3ovoWFPUb2wAeEk7zEZxbvYhDkqRsuM-lvd1ioo95W457mALcpsFQxgwdaLN4K3qhuBpbw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S641316719%3A1735727471441592&ddm=1 IP 64.233.164.84:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint69:38:7E:29:3C:FF:37:1E:96:50:B5:FA:A1:F2:98:30:3B:BE:E6:8D ValidityMon, 02 Dec 2024 08:37:47 GMT - Mon, 24 Feb 2025 08:37:46 GMT
File typegzip compressed data, max compression Hash664b08dccd86a852012651d8f20f17c5 a812a2910b8f0f0a5f72284fbba03fa4e21e5232 4ee3b7599c0d99126adaebe63e021af9436037a8a05567970a167eab1cb61033
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9_S3ovoWFPUb2wAeEk7zEZxbvYhDkqRsuM-lvd1ioo95W457mALcpsFQxgwdaLN4K3qhuBpbw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S641316719%3A1735727471441592&ddm=1 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 01 Jan 2025 10:31:11 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-5n4bFjyYqryPp6Ej0GpDfw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/recaptcha/api.js https://translate.google.com/translate_a/element.js https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.1PNB2j8wR4U.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.48.1 | 200 OK | 10 kB |
IP 104.21.48.1:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint72:95:BE:5B:B7:C6:8C:31:B9:5E:60:DA:66:68:99:88:EC:99:F6:E5 ValiditySun, 03 Nov 2024 13:54:20 GMT - Sat, 01 Feb 2025 13:54:19 GMT
File typeASCII text, with no line terminators Hashdf18e10c08516e5f6a58383da17d5a84 93a931d24cb90174b7c74cc38029cc1b85305861 d1f2eda4bf4e5ab7c80989643a7d0aab2a2bf9b0edaa8ae3c3cefe3c00f3abdc
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Jan 2025 10:31:11 GMT
content-type: text/plain
set-cookie: csu=1585745006795642@1@1735727471; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KbQYcS6s0z8DbquWrnXFXAzIVARU0P%2B4rOzmepMMHFmcuFJAPqi8zmORyj3doaxiFubXjmBnm4P0j2JsgcUw1QSp9NGFz%2Bhv4wt11TmkH749OwrMnkWvSP62cHpnkI47eMs9DYo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8fb1d6978a5e0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6070&min_rtt=345&rtt_var=10962&sent=161&recv=62&lost=0&retrans=0&sent_bytes=211232&recv_bytes=1423&delivery_rate=69424657&cwnd=175&unsent_bytes=0&cid=9522785ed541c5bb&ts=178&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.48.1 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP 104.21.48.1:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint72:95:BE:5B:B7:C6:8C:31:B9:5E:60:DA:66:68:99:88:EC:99:F6:E5 ValiditySun, 03 Nov 2024 13:54:20 GMT - Sat, 01 Feb 2025 13:54:19 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Jan 2025 10:31:11 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 5198
last-modified: Wed, 01 Jan 2025 09:04:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b%2Fr6I6h2bJp36s1%2FdQqhJSDA50AMA2bAW1JGKmj47qBcIXkyXftQgzHsUA%2Fw6MPYA7grdFDnOae1DLeSAaeY1%2F3HnpKRzNMdXotuxnly5xARCntHOTt9qAiyvcgDBWK01O6Vr%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fb1d6977a3a0b69-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=636&min_rtt=345&rtt_var=565&sent=8&recv=13&lost=0&retrans=0&sent_bytes=3293&recv_bytes=1355&delivery_rate=8242884&cwnd=254&unsent_bytes=0&cid=9522785ed541c5bb&ts=61&x=0"
X-Firefox-Spdy: h2
|
|
| undefined/TnNKdmcvESkbWC9OKFASPB93U1UIVngwAztDOgMDfgAuGgo0FWQVCyEGLhAVIR0+WAkrB29EIQ0hMCAjLBh+HTAnQwMVMwAQAEcpfRUtPFQWHRAeNRo2Bj0vPjAENAspPiEjEQ8gchwgNyoGFyR/NAY3JmtBCBMKCEMAJVc4Jwk8Bis3cxsoJiJ/OAAMHw0cNiQwAjguBxoQFC0IPSU/Cz0UH0VeJiUJFSotQAciKSlKMD0LIUYIDy48JQ0sBA07AxQEfgdyEh9+RBJFXicxLTArKDsuLCwpMn0mHwwLEhw9a0EMNx82Ki8bLgkyHwJfKkMpRzR9Qw0yL2MlCxAKeiIpIFM+OiYvCA8kPkcEfTUvEFQtNSkaUmtBDC8AKgkJNQR/JgkjJQAeAz4lGBd+FzYYHw1FKXxVIAUIIAN3IlAFECIPBnpFMiUeNAQ7Qw | 0.0.0.0 | | 0 B |
URL GET undefined/TnNKdmcvESkbWC9OKFASPB93U1UIVngwAztDOgMDfgAuGgo0FWQVCyEGLhAVIR0+WAkrB29EIQ0hMCAjLBh+HTAnQwMVMwAQAEcpfRUtPFQWHRAeNRo2Bj0vPjAENAspPiEjEQ8gchwgNyoGFyR/NAY3JmtBCBMKCEMAJVc4Jwk8Bis3cxsoJiJ/OAAMHw0cNiQwAjguBxoQFC0IPSU/Cz0UH0VeJiUJFSotQAciKSlKMD0LIUYIDy48JQ0sBA07AxQEfgdyEh9+RBJFXicxLTArKDsuLCwpMn0mHwwLEhw9a0EMNx82Ki8bLgkyHwJfKkMpRzR9Qw0yL2MlCxAKeiIpIFM+OiYvCA8kPkcEfTUvEFQtNSkaUmtBDC8AKgkJNQR/JgkjJQAeAz4lGBd+FzYYHw1FKXxVIAUIIAN3IlAFECIPBnpFMiUeNAQ7Qw IP 0.0.0.0:0
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /TnNKdmcvESkbWC9OKFASPB93U1UIVngwAztDOgMDfgAuGgo0FWQVCyEGLhAVIR0+WAkrB29EIQ0hMCAjLBh+HTAnQwMVMwAQAEcpfRUtPFQWHRAeNRo2Bj0vPjAENAspPiEjEQ8gchwgNyoGFyR/NAY3JmtBCBMKCEMAJVc4Jwk8Bis3cxsoJiJ/OAAMHw0cNiQwAjguBxoQFC0IPSU/Cz0UH0VeJiUJFSotQAciKSlKMD0LIUYIDy48JQ0sBA07AxQEfgdyEh9+RBJFXicxLTArKDsuLCwpMn0mHwwLEhw9a0EMNx82Ki8bLgkyHwJfKkMpRzR9Qw0yL2MlCxAKeiIpIFM+OiYvCA8kPkcEfTUvEFQtNSkaUmtBDC8AKgkJNQR/JgkjJQAeAz4lGBd+FzYYHw1FKXxVIAUIIAN3IlAFECIPBnpFMiUeNAQ7Qw HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9_l5q6bUw4NDh0-jxEFzpVEiSwLrA362pcvzs9934WPu6i5QSoN6DSWWe6uXvORdalagaKBaA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1866093741%3A1735727471442172&ddm=1 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET HTTP/2accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9_l5q6bUw4NDh0-jxEFzpVEiSwLrA362pcvzs9934WPu6i5QSoN6DSWWe6uXvORdalagaKBaA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1866093741%3A1735727471442172&ddm=1 IP 64.233.164.84:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint69:38:7E:29:3C:FF:37:1E:96:50:B5:FA:A1:F2:98:30:3B:BE:E6:8D ValidityMon, 02 Dec 2024 08:37:47 GMT - Mon, 24 Feb 2025 08:37:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9_l5q6bUw4NDh0-jxEFzpVEiSwLrA362pcvzs9934WPu6i5QSoN6DSWWe6uXvORdalagaKBaA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1866093741%3A1735727471442172&ddm=1 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 01 Jan 2025 10:31:11 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-uP0omiou6xpU77WP2zaDPA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/recaptcha/api.js https://translate.google.com/translate_a/element.js https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.1PNB2j8wR4U.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.48.1 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP 104.21.48.1:443
Requested byhttps://www.upload.ee/files/13070382/KRT_CLUB_3.1.0.29_RePack_v6.21.4_Fix5_Eng.zip.html CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint72:95:BE:5B:B7:C6:8C:31:B9:5E:60:DA:66:68:99:88:EC:99:F6:E5 ValiditySun, 03 Nov 2024 13:54:20 GMT - Sat, 01 Feb 2025 13:54:19 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Jan 2025 10:31:11 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 5198
last-modified: Wed, 01 Jan 2025 09:04:33 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4xLB8MnaZvezoHj5SBrjf%2F7%2F%2FzXmYmwWK7KQH1X8XOFmwIXKEFB6xKwTBKZHe%2FXk4eGFWF4xoa7Rd6b4uLXmR39opzjO%2F%2FkDH578dYw0ZByLzffcJ7aYALHK1wyYJSfh894FfMs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8fb1d6977a4f0b69-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=594&min_rtt=345&rtt_var=393&sent=55&recv=15&lost=0&retrans=0&sent_bytes=67421&recv_bytes=1355&delivery_rate=11893223&cwnd=256&unsent_bytes=31856&cid=9522785ed541c5bb&ts=62&x=0"
X-Firefox-Spdy: h2
|
|