GET fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
142.250.74.35200 OK 26 kB URL
fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu
First Seen 2023-04-09
Last Seen 2025-07-30
Times Seen 902
Size 26 kB (26488 bytes)
MD5 c045b73d86803686f4cd1cc3f9ceba59
SHA1 92d652578c531e2c3d9db4622584f6a1ab2c225a
SHA256 927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17857
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:23:31 GMT
expires: Fri, 17 Jul 2026 10:23:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:44 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 93018
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET wasquitefullofe.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
3.167.2.120200 OK 3.1 kB URL
wasquitefullofe.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
IP / ASN
3.167.2.120
#0
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type HTML document, ASCII text, with very long lines (3083), with no line terminators
First Seen 2025-07-18
Last Seen 2025-07-18
Times Seen 1
Size 3.1 kB (3083 bytes)
MD5 85b425db4298ec14af280187bf807edb
SHA1 cec9653da7fa83e75e30c186f1af832b52e57439
SHA256 c5c0fadd8f1bd7d51108a8c8d2d20bbc5afde96e80c167fcfc7c2513b94203b6
Certificate Info
Issuer Amazon
Subject wasquitefullofe.com
Fingerprint 8C:3F:2F:12:AF:6F:AB:71:61:1A:1C:BD:6F:B6:BE:8B:71:41:D1:DB
Validity Fri, 27 Jun 2025 00:00:00 GMT - Sun, 26 Jul 2026 23:59:59 GMT
GET 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 HTTP/1.1
Host: wasquitefullofe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1229
date: Fri, 18 Jul 2025 12:13:49 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=59/3YOK1oaAFRCE51s3edEUNAMJI4gY03zhMXRXCfemWCsqvSJnvkdZN4X+5EDH45IpljZrugmAipMoEgjduU/XENCrg9XfGN/u29oLJaEXXMEXoVWo8oZC8gDT3; Expires=Fri, 25 Jul 2025 12:13:49 GMT; Path=/
AWSALBCORS=59/3YOK1oaAFRCE51s3edEUNAMJI4gY03zhMXRXCfemWCsqvSJnvkdZN4X+5EDH45IpljZrugmAipMoEgjduU/XENCrg9XfGN/u29oLJaEXXMEXoVWo8oZC8gDT3; Expires=Fri, 25 Jul 2025 12:13:49 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f1dfb112336c56393fdb3341c0df8da0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: wc3Q4ARCAJWcVfxjguTh7J9PlIu-8C-ATSUFOnZxrzAvxob2gg7tAg==
X-Firefox-Spdy: h2
GET multiup.io/favicon.ico
104.21.112.1200 OK 854 B URL
multiup.io/favicon.ico
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
First Seen 2023-04-30
Last Seen 2025-07-30
Times Seen 838
Size 854 B (854 bytes)
MD5 53bfb4a8399c379e6857b5e848d3a408
SHA1 6c59da45ce3e443722a71c4cfaaa92a990e17610
SHA256 9f55eab5447f560225a66911fcbe9edca0c35c7da9ca994bf6f7e5af6881b11e
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /favicon.ico HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 18 Jul 2025 12:13:49 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bwaishL2LgtC3isPerWFjZF%2FbNMzp8T6NuS66YkDiBcVmJ3tuBnOqwfRktsfYborI8r6DBu0LjiceL1V0W3SQicIILWt3NZrd2c%2B3OlQ22tvYnq5kgjuVXPc5UUB"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 07 Aug 2020 09:03:58 GMT
etag: W/"5f2d18fe-356"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 4455
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 9611e52eeeca56b7-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=671&min_rtt=0&rtt_var=404&sent=226&recv=244&lost=0&retrans=0&sent_bytes=106947&recv_bytes=14056&delivery_rate=36521103&ss_exit_cwnd=14911&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=aefb289be85659c8&ts=1193&inflight_dur=70&x=40"
GET ukankingwithea.com/
104.21.112.1200 OK 26 B IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-07-18
Last Seen 2025-07-18
Times Seen 1
Size 26 B (26 bytes)
MD5 ac93d6624f03ea44f215fc47c3f62696
SHA1 41f982af8eabcd0009ea1f9c93d93f8ee0e0f7f8
SHA256 29ea0b45c2c1d21466a0c550e8b1be8190a04f252d2fc185d0b19e277da122f3
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:49 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://multiup.io
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=f%2BD0IXmI6gGhXiPueUaQAPeHt5wKROzsWMUUb0Ax%2FxrKIa%2BkVNDVU95N%2Bb30p2xWoZeboqewJK2M10mwoSqpbwQ%2BjMHPyZ4PZdlL6Ani0kE%3D"}]}
content-encoding: br
set-cookie: csu=414935239642551@1@1752840829; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9611e52f3ab256c5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET d3m6crjuedf6o.cloudfront.net/?jrcmd=1195868
3.167.7.154200 OK 232 kB URL
d3m6crjuedf6o.cloudfront.net/?jrcmd=1195868
IP / ASN
3.167.7.154
#0
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
First Seen 2025-07-18
Last Seen 2025-07-18
Times Seen 2
Size 232 kB (232529 bytes)
MD5 0d106e730c9e57b7c84f31b681fda95e
SHA1 b6f02e1cd95697f5fed11948fde34f0f6c9be512
SHA256 1d70dc08b41bfdd212712696e5b26a48883ef149278492b51d9bd50e91d7641e
Certificate Info
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /?jrcmd=1195868 HTTP/1.1
Host: d3m6crjuedf6o.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 79261
date: Fri, 18 Jul 2025 11:40:49 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 4b6691d4a753b7360fa8632b90c77126.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: qSjJG6nuMrKw1vRY38um4MS1mrvuglHljfgxH2xeWOPV0cl1VVS53A==
age: 1979
X-Firefox-Spdy: h2
GET multiup.io/build/app.6b0cbd46.js
104.21.112.1200 OK 188 kB URL
multiup.io/build/app.6b0cbd46.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, ASCII text, with very long lines (65466)
First Seen 2023-03-09
Last Seen 2025-07-30
Times Seen 261
Size 188 kB (188405 bytes)
MD5 6f77d251bacf7b2935dbe06ebbee0cf7
SHA1 c99c89d26212e7283c0b164c00e6d99fbac59b61
SHA256 e90703f0dcd04fd8f404c7409417a27f910bfb70e3aab6a6960aa0d3bc329793
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/app.6b0cbd46.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PRCuTN4dqMWx5Wwy%2Fbo1kywj%2FTW8awCmOA2kdE0YWJvc9UPg2JTIkuTUIauJrAM5bLNDZsB6LDx4bPw2aJpSamse2tKAJGuA"}]}
age: 3619
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"6481d6c5-2dff5"
content-encoding: br
cf-ray: 9611e52a18ebb4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET static.cloudflareinsights.com/beacon.min.js
104.16.79.73200 OK 20 kB URL
static.cloudflareinsights.com/beacon.min.js
IP / ASN
104.16.79.73
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
First Seen 2024-06-07
Last Seen 2025-08-02
Times Seen 101481
Size 20 kB (19948 bytes)
MD5 ec18af6d41f6f278b6aed3bdabffa7bc
SHA1 62c9e2cab76b888829f3c5335e91c320b22329ae
SHA256 8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
Certificate Info
Issuer Google Trust Services
Subject cloudflareinsights.com
Fingerprint 9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
Validity Wed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
GET /beacon.min.js HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 9611e52a5f5b56a2-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
142.250.74.35200 OK 28 kB URL
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open Sans LightRegular1.10;1ASC;OpenSan
First Seen 2023-05-02
Last Seen 2025-07-30
Times Seen 858
Size 28 kB (27604 bytes)
MD5 177cc92d2e8027712a8c1724abd272cd
SHA1 861b3593521709d9fa8a8efb6f40817dd7fa9337
SHA256 2289b94b0f245d3078128fbdd2a5c59648ddd94ac1a7dd749b2375596ac8d562
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:28:13 GMT
expires: Fri, 17 Jul 2026 10:28:13 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:35 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 92736
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiOvOqnBca7h8lSX7GQDfxaM_EQjWfJNrfZmNsMey6HNgioOb2s6WCToYVU9OlYO-k78M2PnOw
142.251.9.84302 Found 0 B URL
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiOvOqnBca7h8lSX7GQDfxaM_EQjWfJNrfZmNsMey6HNgioOb2s6WCToYVU9OlYO-k78M2PnOw
IP / ASN
142.251.9.84
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 15:3C:A5:EB:88:20:49:7C:8B:43:37:D0:94:67:48:E3:A9:C4:CB:41
Validity Mon, 23 Jun 2025 08:42:16 GMT - Mon, 15 Sep 2025 08:42:15 GMT
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiOvOqnBca7h8lSX7GQDfxaM_EQjWfJNrfZmNsMey6HNgioOb2s6WCToYVU9OlYO-k78M2PnOw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:Te6Et-uueBn-QNbLyGoxomMNfkqp2A:gyOUgTTQpIRkGOjV;Path=/;Expires=Sun, 18-Jul-2027 12:13:49 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 18 Jul 2025 12:13:49 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNjAxkM99PasTtHkwX6g-CWLAPbmRmBnclRq9kNCgqgI8wKV1cUsOaW7R8LFCPicWIlBm3XKg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-536014785%3A1752840829642332
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-yKTCLgj-UNS0BkMaEQ1TTg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 415
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiN2DVGe0TVgGafsUzzCdi4EmQXr-uevBvId93T5Dvo_DPkxLU9ZOlVuts2Uk8nagQiqXOgx_g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-484165956%3A1752840829687156
142.251.9.84403 Forbidden 0 B URL
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiN2DVGe0TVgGafsUzzCdi4EmQXr-uevBvId93T5Dvo_DPkxLU9ZOlVuts2Uk8nagQiqXOgx_g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-484165956%3A1752840829687156
IP / ASN
142.251.9.84
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32
Validity Mon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiN2DVGe0TVgGafsUzzCdi4EmQXr-uevBvId93T5Dvo_DPkxLU9ZOlVuts2Uk8nagQiqXOgx_g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-484165956%3A1752840829687156 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 18 Jul 2025 12:13:49 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-0icVkeut28hdAI1lESDqLg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4ikenfs4_uY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
142.250.74.35200 OK 28 kB URL
fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-BoldOpe
First Seen 2023-05-02
Last Seen 2025-07-30
Times Seen 878
Size 28 kB (28192 bytes)
MD5 7e08cc656863d52bcb5cd34805ac605b
SHA1 f6e1c78441d4ca2ef589ce79e48d3dbf9dca9a0d
SHA256 0782a52179d0e25f19c39b43253795b25787d65abdbd8bfa38be0f21a4512748
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:31:53 GMT
expires: Fri, 17 Jul 2026 10:31:53 GMT
cache-control: public, max-age=31536000
age: 92517
last-modified: Wed, 11 Oct 2017 21:49:43 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET multiup.io/build/runtime.0b137493.js
104.21.112.1200 OK 1.4 kB URL
multiup.io/build/runtime.0b137493.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, ASCII text, with very long lines (1399), with no line terminators
First Seen 2023-03-08
Last Seen 2025-07-30
Times Seen 846
Size 1.4 kB (1399 bytes)
MD5 0b4fc9b3ef5d80f5ed570385eee3fa4c
SHA1 397c84c672e54103fa082f592f83e8afb6961af5
SHA256 582c9d450dcfaf9d550547fc8e22f5da17262c8f4ce6d283c0357e94e4803937
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/runtime.0b137493.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Gpa4atlY2gyavMoF6et04QWu5nDBl0m5lD9D055Mg48THYK6IL6EB4YOdrWEgMEzTaGXRqnDMmKXi7vaS7Kx%2FszJRk8GrOwv"}]}
age: 3619
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"6481d6c5-577"
content-encoding: br
cf-ray: 9611e52a08e1b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
142.250.74.35200 OK 28 kB URL
fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-BoldOpe
First Seen 2023-05-02
Last Seen 2025-07-30
Times Seen 878
Size 28 kB (28192 bytes)
MD5 7e08cc656863d52bcb5cd34805ac605b
SHA1 f6e1c78441d4ca2ef589ce79e48d3dbf9dca9a0d
SHA256 0782a52179d0e25f19c39b43253795b25787d65abdbd8bfa38be0f21a4512748
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:31:53 GMT
expires: Fri, 17 Jul 2026 10:31:53 GMT
cache-control: public, max-age=31536000
age: 92516
last-modified: Wed, 11 Oct 2017 21:49:43 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET multiup.io/build/images/gray_jean.ced81a01.png
104.21.112.1200 OK 14 kB URL
multiup.io/build/images/gray_jean.ced81a01.png
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type PNG image data, 150 x 150, 8-bit grayscale, non-interlaced
First Seen 2023-04-30
Last Seen 2025-07-30
Times Seen 849
Size 14 kB (13475 bytes)
MD5 e3d55104d9a9f186da3df4f730b77f4d
SHA1 7e5e6e302e5ac36d5d45ed171cda5c3ccb182d13
SHA256 7037cba1540dc0d8eaec93c3d6f978f6757b72ed63177e6c458f738872fa3224
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/images/gray_jean.ced81a01.png HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/build/app.3a8e05b1.css
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: image/png
content-length: 13475
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6h%2FReIXQQjMkKJ1WP7LdWecE%2Bnj83OO5l5aXwcmGXxHQQQKgoJACuEIKUeY1m1qUMclOjTuG7iK6E6%2F2KO0HGtJ4%2BmSX1DW43ulW9pxGyNTcYaMNcnTVFiNqV0V1"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
etag: "6481d6c5-34a3"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
age: 3619
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 9611e52c6ec156b7-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2854&min_rtt=537&rtt_var=3070&sent=156&recv=223&lost=0&retrans=0&sent_bytes=12941&recv_bytes=12451&delivery_rate=670458&ss_exit_cwnd=14911&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=aefb289be85659c8&ts=801&inflight_dur=41&x=40"
GET undefined/QmJRZXIjADIITSNfM0MHMA5sQEAER2MjFnEPZwYAKBc0ARR0DX8GHi0XNQMALQwlSxwnFnRXNHYGBDcBIVEUMjk1KwcxFQcWEiBHAzAZVBMQUj0nKyoVEyMwDFcQNCsmIwJVKANTaQY5cg0LJBotExkgRnQrJig3BBUIUDATNzQiJgcGGh0BLzcrJCUEUikjKyUjAi0KCFcCDSskJD8JFhQwEDc4LiQZMwUDDgQ3RicmKFUzChoTNBYrEhY9QhQKCQ48GCM4VTEEGmUmPHIOEzQgMRUCMDQAMBk3MRNTAyIwKQ4TNCMLFhAOJAQ3GQYHFAkfIyIETyEtJAc7FjYnBCAXJh0LIwNREQsnPSQ/cyBjPTMHKgQtETYzOi8wIw4pBCQHBmEmChsxGQwGCDMFATomJGAhIxcwYT0kGCYDNjsEIwM0JgkaAzIjOCxgPUImBAMyOxg2OiRUKBE+CwJ/KQciGiYVHSQbLwoVPDUqNQ
0.0.0.0 0 B URL
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
IP / ASN
0.0.0.0
#0
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /QmJRZXIjADIITSNfM0MHMA5sQEAER2MjFnEPZwYAKBc0ARR0DX8GHi0XNQMALQwlSxwnFnRXNHYGBDcBIVEUMjk1KwcxFQcWEiBHAzAZVBMQUj0nKyoVEyMwDFcQNCsmIwJVKANTaQY5cg0LJBotExkgRnQrJig3BBUIUDATNzQiJgcGGh0BLzcrJCUEUikjKyUjAi0KCFcCDSskJD8JFhQwEDc4LiQZMwUDDgQ3RicmKFUzChoTNBYrEhY9QhQKCQ48GCM4VTEEGmUmPHIOEzQgMRUCMDQAMBk3MRNTAyIwKQ4TNCMLFhAOJAQ3GQYHFAkfIyIETyEtJAc7FjYnBCAXJh0LIwNREQsnPSQ/cyBjPTMHKgQtETYzOi8wIw4pBCQHBmEmChsxGQwGCDMFATomJGAhIxcwYT0kGCYDNjsEIwM0JgkaAzIjOCxgPUImBAMyOxg2OiRUKBE+CwJ/KQciGiYVHSQbLwoVPDUqNQ HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET xz.pipidroods.com/sPxGIrHdA0S/125824
23.109.170.89200 OK 5 B URL
xz.pipidroods.com/sPxGIrHdA0S/125824
IP / ASN
23.109.170.89
#7979 SERVERS-COM
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type ASCII text, with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 7456
Size 5 B (5 bytes)
MD5 f7a2939527fd9e68723da600e96d76bd
SHA1 a9e717b6364d2895ee0a716050db32ca0ef1bb42
SHA256 d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a
Certificate Info
Issuer Let's Encrypt
Subject xz.pipidroods.com
Fingerprint D3:6F:30:24:1A:FA:8F:7D:31:D0:70:C1:D0:FE:6F:0F:FC:A1:9D:81
Validity Sun, 15 Jun 2025 22:00:36 GMT - Sat, 13 Sep 2025 22:00:35 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sPxGIrHdA0S/125824 HTTP/1.1
Host: xz.pipidroods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 18 Jul 2025 12:13:48 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 5
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Origin
Access-Control-Expose-Headers: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Megageocheckolololo, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires, Credentials
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, OPTIONS
Accept-Ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GGI10=G/IAAASeD7dNK/dmKv8IjKne3vVF23LHD4p/239bRbcCCoMg63NMJOcmHtdgLENcdVb9C/8fcU22F4TMszPXDn3bi0JM1sszQtMiPRle3iuF+nW+PadvTJQWghuEE2erh7OxP8CGug0ouFXNMz9sX8bofOhPVVBMTsv72LAiF5aGU46qKWF8uZ1fb+RKCE0MoKV13JEH4pvoZXocf6ywyRddqbWmm1R6/v8=; max-age=3600000; path=/; secure; SameSite=None
GUI4=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; max-age=3600000; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET multiup.io/assets/javascripts/theme.init.js
104.21.112.1200 OK 12 kB URL
multiup.io/assets/javascripts/theme.init.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, ASCII text, with CRLF line terminators
First Seen 2023-03-09
Last Seen 2025-07-30
Times Seen 261
Size 12 kB (12419 bytes)
MD5 12b8112503f03174141accfaddfea377
SHA1 32cd1f053775dd6e57d59b62891c42a8e15337a0
SHA256 cd154ef50731da006417c6efeb24ed614d9d6a16533768009b3f4bc1023c7fdc
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /assets/javascripts/theme.init.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: application/javascript
server: cloudflare
last-modified: Mon, 29 May 2017 18:26:32 GMT
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Yl45SKgyYrOnrWgOhptgDpX0yhT%2FGN6L9iy6xo%2BHHu%2BLCwuN8stcsKutvN08uTEdrtSl8uB5aka4ZV3Kzi2aXoTZuiUvQEip"}]}
age: 3619
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"592c67d8-3083"
content-encoding: br
cf-ray: 9611e52a18f6b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET undaymidydle.com/Zkp4MUJJdRtCfzEkCHcRHC4MYhoCMzkDOiwuS0IHBA8AAyQ3G15FKwJ3SQB7UH5ABWQWIxwMc15sC0UjEj8LDHNAIxZXLVtsDgxzSHpWA2xTbA0Mc0A+CFAlW3teQTYSJkUAdVN4QAVyXnhACXNe
104.21.16.1204 No Content 0 B URL
undaymidydle.com/Zkp4MUJJdRtCfzEkCHcRHC4MYhoCMzkDOiwuS0IHBA8AAyQ3G15FKwJ3SQB7UH5ABWQWIxwMc15sC0UjEj8LDHNAIxZXLVtsDgxzSHpWA2xTbA0Mc0A+CFAlW3teQTYSJkUAdVN4QAVyXnhACXNe
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
GET /Zkp4MUJJdRtCfzEkCHcRHC4MYhoCMzkDOiwuS0IHBA8AAyQ3G15FKwJ3SQB7UH5ABWQWIxwMc15sC0UjEj8LDHNAIxZXLVtsDgxzSHpWA2xTbA0Mc0A+CFAlW3teQTYSJkUAdVN4QAVyXnhACXNe HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 18 Jul 2025 12:13:48 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rb257AUV0lMxKL7cnWlS0XjXbNnZCEJeS8qSqAeWwA0Pr5QbOlfBbJj6pJhsfQjjk1TtBpdxDCi%2Fp2v0RgYdV67DnOLmkvm75ZRf9eCV"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9611e52c5cea56b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET multiup.io/build/fonts/fontawesome-webfont.20fd1704.woff2
104.21.112.1200 OK 77 kB URL
multiup.io/build/fonts/fontawesome-webfont.20fd1704.woff2
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 164877
Size 77 kB (77160 bytes)
MD5 af7ae505a9eed503f8b8e6982036873e
SHA1 d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
SHA256 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/fonts/fontawesome-webfont.20fd1704.woff2 HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/build/app.3a8e05b1.css
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 18 Jul 2025 12:13:49 GMT
content-type: application/font-woff2
content-length: 77160
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vNU7U5PJ%2Bn1o1g6Nq1lVuZAiDTfzT5PMOfLfP0zQU5xM%2B%2FvK%2FTtO%2But63fS59WvCsgnIRaQYE6BZZNrD9IUwk61vDuQMQJhpi%2FV29tTYMZRyF1o%2BaKWwHO0S4MUE"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
etag: "6481d6c5-12d68"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 9611e52cdec256b7-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1985&min_rtt=0&rtt_var=2164&sent=168&recv=228&lost=0&retrans=0&sent_bytes=27433&recv_bytes=13011&delivery_rate=1463839&ss_exit_cwnd=14911&ss_exit_reason=2&cwnd=20191&unsent_bytes=0&cid=aefb289be85659c8&ts=974&inflight_dur=52&x=40"
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.251.9.84302 Found 0 B URL
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP / ASN
142.251.9.84
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 15:3C:A5:EB:88:20:49:7C:8B:43:37:D0:94:67:48:E3:A9:C4:CB:41
Validity Mon, 23 Jun 2025 08:42:16 GMT - Mon, 15 Sep 2025 08:42:15 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:2ZmbomNYUFkWboowzN7z78D6HkX2Eg:R_2sNPBjTHTTwRrZ; Expires=Sun, 18-Jul-2027 12:13:49 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 18 Jul 2025 12:13:49 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiOvOqnBca7h8lSX7GQDfxaM_EQjWfJNrfZmNsMey6HNgioOb2s6WCToYVU9OlYO-k78M2PnOw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-_-DuqdJbbRKBNh3v95_gUw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST cloudflareinsights.com/cdn-cgi/rum
104.16.79.73204 No Content 0 B URL
cloudflareinsights.com/cdn-cgi/rum
IP / ASN
104.16.79.73
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject cloudflareinsights.com
Fingerprint 9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
Validity Wed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
POST /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1146
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 18 Jul 2025 12:13:50 GMT
access-control-allow-origin: https://multiup.io
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 9611e534bc705689-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNdWfPvvXcN7PthGtpVstDb0cL42iyAaAWeADkkjvDo0PpwQdi6uJ2Xj4NJ1xbpLEIEq9xAhg
142.251.9.84302 Found 0 B URL
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNdWfPvvXcN7PthGtpVstDb0cL42iyAaAWeADkkjvDo0PpwQdi6uJ2Xj4NJ1xbpLEIEq9xAhg
IP / ASN
142.251.9.84
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 15:3C:A5:EB:88:20:49:7C:8B:43:37:D0:94:67:48:E3:A9:C4:CB:41
Validity Mon, 23 Jun 2025 08:42:16 GMT - Mon, 15 Sep 2025 08:42:15 GMT
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNdWfPvvXcN7PthGtpVstDb0cL42iyAaAWeADkkjvDo0PpwQdi6uJ2Xj4NJ1xbpLEIEq9xAhg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:gRMkkoOMt92jRdAmyDy-hWznsdUgsw:XxpaQAbvUQNq8SJ9;Path=/;Expires=Sun, 18-Jul-2027 12:13:49 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 18 Jul 2025 12:13:49 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiN2DVGe0TVgGafsUzzCdi4EmQXr-uevBvId93T5Dvo_DPkxLU9ZOlVuts2Uk8nagQiqXOgx_g&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-484165956%3A1752840829687156
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-0uyLSBELUuvXXJ6bryl04Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 420
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
OPTIONS cloudflareinsights.com/cdn-cgi/rum
104.16.79.73200 OK 0 B URL
cloudflareinsights.com/cdn-cgi/rum
IP / ASN
104.16.79.73
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject cloudflareinsights.com
Fingerprint 9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
Validity Wed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
OPTIONS /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://multiup.io/
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:50 GMT
content-type: text/plain
access-control-allow-origin: https://multiup.io
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 9611e5348c2f5689-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
142.250.74.35200 OK 26 kB URL
fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu
First Seen 2023-04-09
Last Seen 2025-07-30
Times Seen 902
Size 26 kB (26488 bytes)
MD5 c045b73d86803686f4cd1cc3f9ceba59
SHA1 92d652578c531e2c3d9db4622584f6a1ab2c225a
SHA256 927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17857
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:23:31 GMT
expires: Fri, 17 Jul 2026 10:23:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:44 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 93019
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.251.9.84302 Found 0 B URL
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP / ASN
142.251.9.84
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 15:3C:A5:EB:88:20:49:7C:8B:43:37:D0:94:67:48:E3:A9:C4:CB:41
Validity Mon, 23 Jun 2025 08:42:16 GMT - Mon, 15 Sep 2025 08:42:15 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:5lDtVoxuIcKYejHYIZz5pk2vVSBJ-w:z-yxsxoffFxJMgtp; Expires=Sun, 18-Jul-2027 12:13:49 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 18 Jul 2025 12:13:49 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNdWfPvvXcN7PthGtpVstDb0cL42iyAaAWeADkkjvDo0PpwQdi6uJ2Xj4NJ1xbpLEIEq9xAhg
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-zitA19r78FurT_qtjySvlg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET multiup.io/build/app.3a8e05b1.css
104.21.112.1200 OK 622 kB URL
multiup.io/build/app.3a8e05b1.css
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type ASCII text, with very long lines (61854)
First Seen 2023-04-22
Last Seen 2025-07-30
Times Seen 253
Size 622 kB (621844 bytes)
MD5 8cb6aed291b0b6f3837bd1593ac8db7a
SHA1 2b585c217008e290a59c19840d7ca43997fc7f6e
SHA256 c90d1244813a964cb1c495da3bbe5b2c21d37732f5b1c2ad3e5a2f9868339a6e
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/app.3a8e05b1.css HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: text/css
server: cloudflare
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Nu8%2BxRwznKt745yUTXTgyD6y7Q%2B4KwFtJpuximauk71CADvc0h4DXl7VeGBqfajPhREDFGTy98Hr19HChPfXbsOWhdDCqtDB"}]}
age: 4448
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"6481d6c5-97d14"
content-encoding: br
cf-ray: 9611e52a08d3b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET undaymidydle.com/ZlpMU25JZS8gUygxFiA/VjkONwIeaygkIFQNFBleIjQOBg0+G2onBwJnfWJXU2J6a0gWMyhuX0ApODIaEylxYkgPNCo8U0AscWJAVW5iYFhIbGomU1d8OCMPAWd9dR4SLiBuX1FvfmtaVmJ+a1ZWbg
104.21.16.1204 No Content 0 B URL
undaymidydle.com/ZlpMU25JZS8gUygxFiA/VjkONwIeaygkIFQNFBleIjQOBg0+G2onBwJnfWJXU2J6a0gWMyhuX0ApODIaEylxYkgPNCo8U0AscWJAVW5iYFhIbGomU1d8OCMPAWd9dR4SLiBuX1FvfmtaVmJ+a1ZWbg
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
GET /ZlpMU25JZS8gUygxFiA/VjkONwIeaygkIFQNFBleIjQOBg0+G2onBwJnfWJXU2J6a0gWMyhuX0ApODIaEylxYkgPNCo8U0AscWJAVW5iYFhIbGomU1d8OCMPAWd9dR4SLiBuX1FvfmtaVmJ+a1ZWbg HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 18 Jul 2025 12:13:48 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Bi2T4ExVZEYGMM8ro40b%2Bv%2FoPO57R6E69%2BQLiprX9fxhb7fqOoK4EL5IBOcaCML6VUAKgsORtVLvXHXsyIhrqxC6LSiHYdjwlLjqRvzD"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9611e52c4ce556b1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET multiup.io/assets/javascripts/theme.custom.js
104.21.112.1200 OK 5.5 kB URL
multiup.io/assets/javascripts/theme.custom.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, ASCII text
First Seen 2023-03-09
Last Seen 2025-07-30
Times Seen 260
Size 5.5 kB (5475 bytes)
MD5 1dcaf4e6787e765638bc4efbe93d4d20
SHA1 61c72e21b6cb876b88796a8171888a22c98145fc
SHA256 bafb4c01920ef2f70e7576877c4ae8337430bab45d9989bccdb5aa8ceac1c3b6
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /assets/javascripts/theme.custom.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sat, 13 Jun 2020 12:23:25 GMT
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kdERPA4YTagxGJZRA3%2FghG3tRLnnw74wY1bKsCCV9amuKYtm%2FV9hVPSMI0LdhJQjo%2F8N07dqqj3EiR5H%2FOPuCs6JG53PkCxA"}]}
age: 3619
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"5ee4c53d-1563"
content-encoding: br
cf-ray: 9611e52a18f2b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
104.21.112.1200 OK 53 kB URL
multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Resource Info
File type HTML document, Unicode text, UTF-8 text, with very long lines (2342)
First Seen 2025-07-18
Last Seen 2025-07-18
Times Seen 1
Size 53 kB (53120 bytes)
MD5 721e0b1f79c2dc75888fe30efe6e30e5
SHA1 a0a1717c952de4520caa7ba687e5fef3d88aaa8f
SHA256 479402dee87b1d662708bf3f97d2f4f6c3c69dee52566fd4a9dc5280d43b5c94
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=0, must-revalidate, private
pragma: no-cache
expires: Fri, 18 Jul 2025 12:13:48 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GJZOqVXSmGjznNQ7Gte7uRIWHuMPDIvChBuIPB%2FUTJZAnAJz7oVFbljAxDxiJnJJj3Um9zRgsASrbKxoCbJDNsK%2B%2F%2Bdh1LmE"}]}
cf-cache-status: BYPASS
content-encoding: br
set-cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t; HttpOnly; SameSite=Lax; Secure; Path=/
cf-ray: 9611e5263ba0b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET multiup.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
104.21.112.1200 OK 1.2 kB URL
multiup.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, ASCII text, with very long lines (1238)
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 96861
Size 1.2 kB (1239 bytes)
MD5 9e8f56e8e1806253ba01a95cfc3d392c
SHA1 a8af90d7482e1e99d03de6bf88fed2315c5dd728
SHA256 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: application/javascript
expires: Fri, 18 Jul 2025 13:01:48 GMT
cache-control: public
vary: accept-encoding
x-frame-options: DENY
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tbJBQgbxvyDWFB%2Ba3jwitkoXR9uzz%2FV7HnHxthMmMf3PnP1yUe1GU8RMOZZW6p6DLDF94J9nVOwh0FaIY4DJWXNU3tLegDcL"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: 9611e52a08ddb4f9-OSL
X-Firefox-Spdy: h2
GET multiup.io/build/610.15f042f0.js
104.21.112.1200 OK 1.1 MB URL
multiup.io/build/610.15f042f0.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)
First Seen 2025-04-23
Last Seen 2025-07-26
Times Seen 89
Size 1.1 MB (1101152 bytes)
MD5 fe3f68c85d255e587ff9a4d14da9ef07
SHA1 56017729e52791b6c2b91379ea90b566aa67687f
SHA256 8e67e8bd6f91fb909b2defcfb6cada085a618b13647df2760c5f7ac025a83ab8
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/610.15f042f0.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=atmQLavXRy%2B%2BtZwqibWfkxoUo%2Bt7HAOsw3SeR72SGRGbLKTYIRyIucO%2BbvTSsGDIwH80WD3IWm6ta2p6xcVyNQUPVN9y0CUA"}]}
age: 3619
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"6481d6c5-10cd60"
content-encoding: br
cf-ray: 9611e52a08e3b4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET multiup.io/assets/javascripts/theme.js
104.21.112.1200 OK 113 kB URL
multiup.io/assets/javascripts/theme.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type JavaScript source, ASCII text, with very long lines (2076), with CRLF line terminators
First Seen 2023-03-09
Last Seen 2025-07-30
Times Seen 260
Size 113 kB (112659 bytes)
MD5 960ba50181ebb13aa94e4ce229800a3e
SHA1 480e746ad1870f9d026e141a736e5b3092a641ef
SHA256 5b997a5c4edb2871e7a5fcd1da037ef83063fd7707dec8cb1f5ef72b9cbb10c5
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /assets/javascripts/theme.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Cookie: PHPSESSID=7leuc5an2mejr89521u5imnt4t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Jul 2025 12:13:48 GMT
content-type: application/javascript
server: cloudflare
last-modified: Sat, 30 Dec 2017 09:43:01 GMT
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=taVicKAHuv2ncLOTk6bnGu6pbImhfCpxC6fZ5%2FVKaFJXqqr1yK0PgJjNlbNqrFeioPQA0BlzElUL0X2GQx84O8oYcJfGwwnL"}]}
age: 3619
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"5a475fa5-1b813"
content-encoding: br
cf-ray: 9611e52a18eeb4f9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNjAxkM99PasTtHkwX6g-CWLAPbmRmBnclRq9kNCgqgI8wKV1cUsOaW7R8LFCPicWIlBm3XKg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-536014785%3A1752840829642332
142.251.9.84403 Forbidden 0 B URL
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNjAxkM99PasTtHkwX6g-CWLAPbmRmBnclRq9kNCgqgI8wKV1cUsOaW7R8LFCPicWIlBm3XKg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-536014785%3A1752840829642332
IP / ASN
142.251.9.84
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5606204
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 15:3C:A5:EB:88:20:49:7C:8B:43:37:D0:94:67:48:E3:A9:C4:CB:41
Validity Mon, 23 Jun 2025 08:42:16 GMT - Mon, 15 Sep 2025 08:42:15 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNjAxkM99PasTtHkwX6g-CWLAPbmRmBnclRq9kNCgqgI8wKV1cUsOaW7R8LFCPicWIlBm3XKg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-536014785%3A1752840829642332 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 18 Jul 2025 12:13:49 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-ueiXvoykEI-c-t1O4UohTg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4ikenfs4_uY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
142.250.74.35200 OK 28 kB URL
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/6eab63c7467187a5a22d98713342091a/The.Forgotten.City.Build.9300715.7z
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open Sans LightRegular1.10;1ASC;OpenSan
First Seen 2023-05-02
Last Seen 2025-07-30
Times Seen 858
Size 28 kB (27604 bytes)
MD5 177cc92d2e8027712a8c1724abd272cd
SHA1 861b3593521709d9fa8a8efb6f40817dd7fa9337
SHA256 2289b94b0f245d3078128fbdd2a5c59648ddd94ac1a7dd749b2375596ac8d562
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:28:13 GMT
expires: Fri, 17 Jul 2026 10:28:13 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:35 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 92737
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2