GET megaup.net/themes/flow/images/main_logo_inverted.png
200 OK 7.1 kB URL GET HTTP/2 megaup.net/themes/flow/images/main_logo_inverted.png
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/images/loading_small.gif
200 OK 184 kB URL GET HTTP/2 megaup.net/themes/flow/images/loading_small.gif
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type GIF image data, version 89a, 64 x 64
Size 184 kB (184355 bytes)
Hash b0dd5b3af9c4c0644d7bddee83716209
30002468d0266b893b3559b8d0d260c6cbf0ad7c
2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d
GET /themes/flow/images/loading_small.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: image/gif
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
200 OK 5.7 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (15714), with CRLF line terminators
Hash 38c5167c8052d0c73892c3742b16e903
213ef9210b4a5c4e73a242e832a08f4abef69a74
743b919a337dfbb6d1e8648d0793532d47f8af48059e17f7e32ae8738c7614a7
GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3ead"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK 84 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4
ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File type JavaScript source, ASCII text, with very long lines (5268)
Hash 891ee2f68c74327aeb3d3a2d52017f61
bc6aae2a6426aa5fa98bc34f6f9666416f4f2f98
9dcc438c642e2e5d3eec97629773338ae904731d42b64e11be65e95467a16f0a
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 Jan 2025 02:48:46 GMT
expires: Fri, 10 Jan 2025 02:48:46 GMT
cache-control: private, max-age=900
last-modified: Fri, 10 Jan 2025 01:37:22 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 83497
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
200 OK 8.8 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1285)
Hash c2474adb496ade0e96aa9400a3974307
9ab48147ecad83275d147a61dea8df8a968e5a0e
fa77538239ff2758ff9fa8ef646cad3e9ca818dd13fbf15ff3ca8a8bee173c69
GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-5c6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
200 OK 1.9 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 72e348954c20cc27df3e9d9bd3a4905f
e50ad79ab0949f7e40e8d0dc4ed38476220f79f0
9c9f251d98edd1208a6c45aee90ff4011ed964e87e8bb622ae7a45249f1dae43
GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1099"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET jobfukectivetr.com/NkVFT0UZeiY8eFITNRshBxMALndkAycaA0YkdR0vYgJ8PhRxHGM7LFJ4cnl0B31zaTVfIXh+Y0UxJDswRXh0aSxYIypyY0B4dGF2Amt2eWsCYzBydBAxNS4iC3RjPzFCKXh+cgVzcXhyBXdyfXQA
204 No Content 0 B URL GET HTTP/2 jobfukectivetr.com/NkVFT0UZeiY8eFITNRshBxMALndkAycaA0YkdR0vYgJ8PhRxHGM7LFJ4cnl0B31zaTVfIXh+Y0UxJDswRXh0aSxYIypyY0B4dGF2Amt2eWsCYzBydBAxNS4iC3RjPzFCKXh+cgVzcXhyBXdyfXQA
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NkVFT0UZeiY8eFITNRshBxMALndkAycaA0YkdR0vYgJ8PhRxHGM7LFJ4cnl0B31zaTVfIXh+Y0UxJDswRXh0aSxYIypyY0B4dGF2Amt2eWsCYzBydBAxNS4iC3RjPzFCKXh+cgVzcXhyBXdyfXQA HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 10 Jan 2025 02:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uTsiQkxZqlFheoXk5sF1fBc8LL7nbzTbryiC4O7tsnZ1%2BYRs8DYPKiHE2zWFxkFMoL9j%2FvPC4ojmN66jTow%2BbCh80RhLv%2Bm9BcZ%2FVnzEKWFYAgPLw1DWGVKS03cq2UrtRFoCv%2BU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff9599f4afd568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5669&min_rtt=468&rtt_var=10412&sent=10&recv=13&lost=0&retrans=0&sent_bytes=3293&recv_bytes=1881&delivery_rate=7387755&cwnd=254&unsent_bytes=0&cid=e34efd99a1adc13c&ts=137&x=0"
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/jquery.fileupload.js
200 OK 12 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash b85ba9fdc07788f5208002e4588c1e2a
f4a5b283e901f573f1237b6a096da4c295e8a65b
f809de94a782db6c7c5bc85db8bc8f6b05b1a473f736080b3ea8377fd6ed35cc
GET /themes/flow/js/jquery.fileupload.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-dbd4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/jquery-ui.js
200 OK 108 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery-ui.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (840)
Size 108 kB (108521 bytes)
Hash ec9758d9508e2fd22ddbdc6d5a28f214
0ed7df6cc32be8f9687cda3cd6e109e5de44339e
ba0103f765802f299bc7dca5c35d9a00359a0abb10cac136f43caf9c0bf98b7c
GET /themes/flow/js/jquery-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6a684"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/global.js
200 OK 1.1 kB URL GET HTTP/2 megaup.net/themes/flow/js/global.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
Hash b62957c3c4788544cad00a761303b836
0436c4efedfe2075b24a87ff969034b2e258e609
ef8a1ff709899584c91496da397de0b0fcab774e3b6d258ccca9997e592e84d3
GET /themes/flow/js/global.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-d59"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31836, version 1.1
Hash 4514fa5a5b3d1e0b14aa32a7d068124a
e634977bfabc20ed15fe7ed03d3876cf68834b93
5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: font/woff
content-length: 31836
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c5c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
200 OK 31 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31344, version 1.1
Hash 21f79e4c0fbe54a555170aa70bb4c8b7
9d4aaf2016cd21f16bc45089a48de84dba951fa7
2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: font/woff
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
200 OK 76 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (464), with CRLF line terminators
Hash 35045d45f7d1dde1f90457c5d73700c5
a7fcee0ab1da615e828e51967c474ae91d768569
d72616e59f2ba832c54a0e734cdf0a79cb8730f81a07b5de43864c15a240e221
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET jobfukectivetr.com/QTkyUEhuBlEjdQ9uBzkfBl53Bx4bXmUBBiRvZWkRA1VaMREXARQkISUEC2RxeQ8GdjgoXQ9hcGdKRjE8NEoPYW4oV1Q/dWdPD2FmcRcAfn1nTA9hbjVJUzd1cB9CJDwtBANne3cNBWd7cw4AZ3s
204 No Content 0 B URL GET HTTP/2 jobfukectivetr.com/QTkyUEhuBlEjdQ9uBzkfBl53Bx4bXmUBBiRvZWkRA1VaMREXARQkISUEC2RxeQ8GdjgoXQ9hcGdKRjE8NEoPYW4oV1Q/dWdPD2FmcRcAfn1nTA9hbjVJUzd1cB9CJDwtBANne3cNBWd7cw4AZ3s
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /QTkyUEhuBlEjdQ9uBzkfBl53Bx4bXmUBBiRvZWkRA1VaMREXARQkISUEC2RxeQ8GdjgoXQ9hcGdKRjE8NEoPYW4oV1Q/dWdPD2FmcRcAfn1nTA9hbjVJUzd1cB9CJDwtBANne3cNBWd7cw4AZ3s HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 10 Jan 2025 02:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2FDEh32YdtVVH6ScuV4M40Y%2BgCrTzqFHgwLNZ7WoLpydO4niYk20kQlALc7jSyriDZByvy2Hsbbmuuyj0PnxrO10ezaF%2BHVsSDDoUUqpQ1qS6NtesfKtUVAOy1Y6USxPm9SkHuM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959a02b4e568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=8623&min_rtt=443&rtt_var=13554&sent=14&recv=17&lost=0&retrans=0&sent_bytes=5154&recv_bytes=2067&delivery_rate=7387755&cwnd=257&unsent_bytes=0&cid=e34efd99a1adc13c&ts=265&x=0"
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
200 OK 4.2 kB URL GET HTTP/2 megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (8746)
Hash 55db0ff82a3b6b247844ae0d07d85fc6
9bc5c7dc92ef0b31d212a66bbdff591e484f427c
404b016f5c9a369726eec56a280c93478da17a52ed0f1fee116838330772ec70
GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2296"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/css/colors/flow.css
200 OK 607 B URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/colors/flow.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash b0043a6c7a7969f6d9d76e9684005150
38c6010b1a1110baf5efb78b05d4b99784aa2836
91e4749e45a517ca4168cf9573eef0ee72fa93a9b7b96892844e9935afc832af
GET /themes/flow/frontend_assets/css/colors/flow.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-a83"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
200 OK 26 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2241), with CRLF line terminators
Hash 1e4ba2a9c6f022f7c920cd2e76d95bd4
f15cbf023a4a1e1c810eff679cc9b35b81a6f2c2
afff7cdd8f6f0ca43b26573840f5ec5d3302dc1fc2b2209a1163e3978c9d012c
GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-981"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET rvardsusyseinp.org/VDZMRHM1VC8pTDULLmIGJlpxYUESE34CF2dTJzcVLFoqcxEiDyRqEDhZOSAVJlkiMF06UzhhQRJzGCkfDWQiFQcWXBUjIC5ZDRQ7IHIpAkIkVScSHBNlIy42OnsJFCARYAM8H2Z9DgFFAEwFdTQtdxYeITdTBS0mMHMIKFZmdA0pQiNzISMXHV8GDhU/DnwOCztGGgxHPnEldSY1YQ0SODNCICcfHQALEBAgZR8VKRlfAQE/I281FBsSWQQAH2NxHwEnGWUjHT9kTj0FNhJRGxxCZGQLHSE1bigWFQdCdSA2BV8NACoucgswETVyeQkWEGw5Jx8SDwd3XmUGHgAEMlAUEUIwB3V2FzgHPhNBM14JF0MXeH4KNBdwOCsXZGRpdjEDcSR3JgxOFhQabHEHM0tnZiACSxgECjMkOgMcCCsgcGouADtYPHkiPloAASUZBidxRTI
200 OK 1.2 kB URL GET HTTP/2 rvardsusyseinp.org/VDZMRHM1VC8pTDULLmIGJlpxYUESE34CF2dTJzcVLFoqcxEiDyRqEDhZOSAVJlkiMF06UzhhQRJzGCkfDWQiFQcWXBUjIC5ZDRQ7IHIpAkIkVScSHBNlIy42OnsJFCARYAM8H2Z9DgFFAEwFdTQtdxYeITdTBS0mMHMIKFZmdA0pQiNzISMXHV8GDhU/DnwOCztGGgxHPnEldSY1YQ0SODNCICcfHQALEBAgZR8VKRlfAQE/I281FBsSWQQAH2NxHwEnGWUjHT9kTj0FNhJRGxxCZGQLHSE1bigWFQdCdSA2BV8NACoucgswETVyeQkWEGw5Jx8SDwd3XmUGHgAEMlAUEUIwB3V2FzgHPhNBM14JF0MXeH4KNBdwOCsXZGRpdjEDcSR3JgxOFhQabHEHM0tnZiACSxgECjMkOgMcCCsgcGouADtYPHkiPloAASUZBidxRTI
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerAmazon
Subjectrvardsusyseinp.org
Fingerprint28:4E:4F:6A:20:8D:63:DF:2E:D8:F3:C3:0C:47:9B:0A:29:80:90:9B
ValiditySun, 10 Nov 2024 00:00:00 GMT - Tue, 09 Dec 2025 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3039), with no line terminators
Hash 6d25729f3fcfa58f30641f4ff5c7fc2d
c62795cb081b79b66c68ca587c98593c988f59a6
0b47c48ec14ed50d562a9ff6c24e247cfaf9520552b0ef889b83302d860ce66b
GET /VDZMRHM1VC8pTDULLmIGJlpxYUESE34CF2dTJzcVLFoqcxEiDyRqEDhZOSAVJlkiMF06UzhhQRJzGCkfDWQiFQcWXBUjIC5ZDRQ7IHIpAkIkVScSHBNlIy42OnsJFCARYAM8H2Z9DgFFAEwFdTQtdxYeITdTBS0mMHMIKFZmdA0pQiNzISMXHV8GDhU/DnwOCztGGgxHPnEldSY1YQ0SODNCICcfHQALEBAgZR8VKRlfAQE/I281FBsSWQQAH2NxHwEnGWUjHT9kTj0FNhJRGxxCZGQLHSE1bigWFQdCdSA2BV8NACoucgswETVyeQkWEGw5Jx8SDwd3XmUGHgAEMlAUEUIwB3V2FzgHPhNBM14JF0MXeH4KNBdwOCsXZGRpdjEDcSR3JgxOFhQabHEHM0tnZiACSxgECjMkOgMcCCsgcGouADtYPHkiPloAASUZBidxRTI HTTP/1.1
Host: rvardsusyseinp.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1192
date: Fri, 10 Jan 2025 02:48:47 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=R23aXhrfDbDph4hm93p6Oj+6buyCElZnOsAjtNtO1Zv5giU9Hk1sp7LQRlYRfVClkoY5k71OuT5URYzyomPFjtnnDrc4jvku0okYlwKk5JmFWCSCggJJrxCTyadb; Expires=Fri, 17 Jan 2025 02:48:47 GMT; Path=/
AWSALBCORS=R23aXhrfDbDph4hm93p6Oj+6buyCElZnOsAjtNtO1Zv5giU9Hk1sp7LQRlYRfVClkoY5k71OuT5URYzyomPFjtnnDrc4jvku0okYlwKk5JmFWCSCggJJrxCTyadb; Expires=Fri, 17 Jan 2025 02:48:47 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c26999728b9b80253ea8308df470deba.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: ThWuGKlD4sGnSrBkkVy8aFyAh0IwvCSaokMKyVxw-phV7YIYS_Kt4A==
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
200 OK 207 kB URL GET HTTP/2 megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1288)
Size 207 kB (206571 bytes)
Hash d31e0426a59b32581835680633809ea3
98caf983b9349fcf2a32d6512f998ea9a557a90e
c7fe89a030ea54a29616f0a473366e07d109dfb775f2afa050c2de82e3606fba
GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3bd2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET www.googletagmanager.com/td?id=G-Z9TE2LW16Q&v=3&t=t&pid=1373450980&dl=megaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&tdp=G-Z9TE2LW16Q;124836801;1;1;0&frm=0&slo=29&hlo=34&lst=3&pcid=_UA-108868042-1&z=0
204 No Content 0 B URL GET HTTP/3 www.googletagmanager.com/td?id=G-Z9TE2LW16Q&v=3&t=t&pid=1373450980&dl=megaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&tdp=G-Z9TE2LW16Q;124836801;1;1;0&frm=0&slo=29&hlo=34&lst=3&pcid=_UA-108868042-1&z=0
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4
ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /td?id=G-Z9TE2LW16Q&v=3&t=t&pid=1373450980&dl=megaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&tdp=G-Z9TE2LW16Q;124836801;1;1;0&frm=0&slo=29&hlo=34&lst=3&pcid=_UA-108868042-1&z=0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 10 Jan 2025 02:48:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:59:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgtc:59:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
200 OK 951 B URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 114 x 114, 8-bit colormap, non-interlaced
Hash 76852bc6b2c028db97322a74e85bd020
ed52fb4de0d51f93277bbaae42fa80ba5f92c31e
8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884
GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2; _ga_Z9TE2LW16Q=GS1.1.1736477327.1.0.1736477327.0.0.0; _ga=GA1.1.1278880682.1736477328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:48 GMT
content-type: image/png
content-length: 951
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-3b7"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
200 OK 603 B URL d3eksfxlf7bv9h.cloudfront.net/2MjFFMUpRXitXdUZYIQx9BAB0CXwUQTdULA9cIFYrR0FrXy9GFy9CJVxBeGB/dlYKBRlHYCpibEZLIQx6FF0kXy0PFyBfKQ8AY1AuUAxxFz5CXi4MIEJbIEErXVs9VGxHUHhcJUhYKV0rFwMDBGQCFHcBYkoAdBR5cBR3ASZbXzBJbwABPQl8bQdxFHlwFH-cBOEQUdnBzBB91GG8AASJUKVleYAMMAAF0AXoDAXQUeAJXLEMvVF49FHh0CHMfehREeAA
IP
File type ASCII text, with very long lines (855), with no line terminators
Hash d56a1c3dc193b215a55523c988c05bdd
e0db7be3796365cd7c2603566711be5fac626b21
6d60fd08e9e957e8f372b2621e4dfb3d811cabf981e2ee5698d02b9888dd2437
GET /2MjFFMUpRXitXdUZYIQx9BAB0CXwUQTdULA9cIFYrR0FrXy9GFy9CJVxBeGB/dlYKBRlHYCpibEZLIQx6FF0kXy0PFyBfKQ8AY1AuUAxxFz5CXi4MIEJbIEErXVs9VGxHUHhcJUhYKV0rFwMDBGQCFHcBYkoAdBR5cBR3ASZbXzBJbwABPQl8bQdxFHlwFH-cBOEQUdnBzBB91GG8AASJUKVleYAMMAAF0AXoDAXQUeAJXLEMvVF49FHh0CHMfehREeAA HTTP/1.1
Host: d3eksfxlf7bv9h.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rvardsusyseinp.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 603
date: Fri, 10 Jan 2025 02:48:48 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: zQmwosNui7xpfv_Mvx3azUQABWHYDxuOfH__NGUrwgJiGVzRm-jUdA==
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
200 OK 4.6 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
Hash 615432b34216ce48aa41b027c9b08f6a
b7b6647aa22a1786013d97ea2c321d0d32d7abe8
f5af895f7beb65666327d0629ed30cebe00dddebabbe9d25be29106234e827a5
GET /themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-8d4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint98:0E:78:CA:A9:88:A5:88:8F:AE:50:2B:BA:25:CE:33:AA:4E:D8:19
ValidityMon, 09 Dec 2024 08:38:08 GMT - Mon, 03 Mar 2025 08:38:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:YuU1xzDTRt5S__TJjRo20GZPQ5uHww:cbAa1JrREnRLYtk3; Expires=Sun, 10-Jan-2027 02:48:48 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 Jan 2025 02:48:48 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AeZLP99F2pHpzKAXp4UkGGaOWbR3mJmgic57CJnAMUDzNFppyOkFFGW7Waw3sIxiLN7xzICVFfjZ
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-ReDVK1Q-0qOG-n4rlGLDfA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint98:0E:78:CA:A9:88:A5:88:8F:AE:50:2B:BA:25:CE:33:AA:4E:D8:19
ValidityMon, 09 Dec 2024 08:38:08 GMT - Mon, 03 Mar 2025 08:38:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:a1YHp8q98skO9ne6eeVo2u-vBCSJEw:6N_ZwFl4LVm1BiEw; Expires=Sun, 10-Jan-2027 02:48:48 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 Jan 2025 02:48:48 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AeZLP9-hMzQMQ9ES8CEBWfYDZO8wiP1W0EN2vP8Ztgk70gBKzfbNP7bwfF9Dt4Qie3t34PCMIRdu
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-SdyfCnw2b9VFrofB-NpzaA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/gauge.min.js
200 OK 5.8 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/gauge.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1259)
Hash aafe893df6f86140460a76d58dcecfe2
fe1a74890dc8f040f5f681041663b96d983163f6
2d9574ce1b6890bd6ccf1ef3d04fe1328f35c5bbced7b6b331459119ef4fe480
GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45b8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
200 OK 236 kB URL User Request GET HTTP/2 megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
IP
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (59102), with CRLF, LF line terminators
Size 236 kB (236069 bytes)
Hash ba9a48a9001c7f82a9e5f4269466331f
81b0ad9b34aadde99755c439c5a963f46645377c
e5677d2892fc12705d996fd39b60c60686294c0d1439176dc4f3f5ba05cfb409
GET /db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=agupq3pvdi5dhofsul839enjn2; expires=Sat, 11-Jan-2025 02:48:46 GMT; Max-Age=86400; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
POST jobfukectivetr.com/RXhDMFFqRyBDbBISAXgAd001cj8TARUCIgcbC0QyHA8NSTIDG2VEOCFFewJkfElyFiEsHH4DY2MLN1ElMAt+AmF1T2VZPyMXfgJ3M0VzHmhrSm0GdzBFcgRpckl0A2lyQXAAZXNNcRYlNRkkDWBjCDdEPXhJdANncU90A2N9SnID
204 No Content 0 B URL POST HTTP/3 jobfukectivetr.com/RXhDMFFqRyBDbBISAXgAd001cj8TARUCIgcbC0QyHA8NSTIDG2VEOCFFewJkfElyFiEsHH4DY2MLN1ElMAt+AmF1T2VZPyMXfgJ3M0VzHmhrSm0GdzBFcgRpckl0A2lyQXAAZXNNcRYlNRkkDWBjCDdEPXhJdANncU90A2N9SnID
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /RXhDMFFqRyBDbBISAXgAd001cj8TARUCIgcbC0QyHA8NSTIDG2VEOCFFewJkfElyFiEsHH4DY2MLN1ElMAt+AmF1T2VZPyMXfgJ3M0VzHmhrSm0GdzBFcgRpckl0A2lyQXAAZXNNcRYlNRkkDWBjCDdEPXhJdANncU90A2N9SnID HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Fri, 10 Jan 2025 02:48:48 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0D4rSjEI5ZNvynUedI5hHHrggmJUWNhjIiKN%2B5UvuziWy4wCLdW9QSC2qRbLm3rOEAfPAp8%2FYQeeI5DVNeAjEjQ9egLKazeluCi3AnpKFu%2F%2BMHymO%2BO33dnX3s6z66fDvfUHhYM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959a55d2c5690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9566&min_rtt=1592&rtt_var=11921&sent=18&recv=12&lost=0&retrans=1&sent_bytes=6331&recv_bytes=2046&delivery_rate=24256&cwnd=12000&unsent_bytes=0&cid=79f52af7082c01f9&ts=935&x=1", cfExtPri, cfHdrFlush;dur=0
GET getrunkhomuto.info/multi?cs=VWpmUHNiXl9nQGZeVWZEYlpeaEU&abt=0&red=1&sm=76&k=download%20file%20cryptcustdn%20nswtch%20base%20ziperto&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1487173879304652&agec=1736477327&fs=1&mbkb=358.42293906810033&ref=https%3A%2F%2Fmegaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_CF6q=1736477328218&crc=1
200 OK 1.9 kB URL GET HTTP/2 getrunkhomuto.info/multi?cs=VWpmUHNiXl9nQGZeVWZEYlpeaEU&abt=0&red=1&sm=76&k=download%20file%20cryptcustdn%20nswtch%20base%20ziperto&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1487173879304652&agec=1736477327&fs=1&mbkb=358.42293906810033&ref=https%3A%2F%2Fmegaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_CF6q=1736477328218&crc=1
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerAmazon
Subjectgetrunkhomuto.info
Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E
ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
File type ASCII text, with very long lines (3917), with no line terminators
Hash 4dd682cc226fe1a6ecfb93165be78f10
34a219713b9da3a94a3700345f7898b086890383
f773d7ebbebb89a8cdb3803df51a921c0cbfca5661686904102943cd81eccd0d
GET /multi?cs=VWpmUHNiXl9nQGZeVWZEYlpeaEU&abt=0&red=1&sm=76&k=download%20file%20cryptcustdn%20nswtch%20base%20ziperto&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1487173879304652&agec=1736477327&fs=1&mbkb=358.42293906810033&ref=https%3A%2F%2Fmegaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_CF6q=1736477328218&crc=1 HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1890
date: Fri, 10 Jan 2025 02:48:48 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=7nW05BsUU1Bu4CroMlLIwac3QOVyxPfkCyhtjdFMixfY1bJlH6GCZi59uCltNq7QJ5rfpSQNJ3MNWkWAT7AivPg5FaLhYKjbZ+jAoFBITgsIZWi3d32pl3vs8ZLm; Expires=Fri, 17 Jan 2025 02:48:48 GMT; Path=/
AWSALBCORS=7nW05BsUU1Bu4CroMlLIwac3QOVyxPfkCyhtjdFMixfY1bJlH6GCZi59uCltNq7QJ5rfpSQNJ3MNWkWAT7AivPg5FaLhYKjbZ+jAoFBITgsIZWi3d32pl3vs8ZLm; Expires=Fri, 17 Jan 2025 02:48:48 GMT; Path=/; SameSite=None
csu=f7834048-e486-4a24-9a5a-51c5e50f0999
csu=1487173879304652
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: 4NCk4ZFvJ2i9dfjH8kq9SbqvEdnYU-fZZxlLq3QLJjhYn4O_8cCPZw==
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31568, version 1.1
Hash e0c4ac0e73196bd0469c5c33304b7773
bb071565f82907d117b0732dca8013409162c67d
ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af
GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2; _ga_Z9TE2LW16Q=GS1.1.1736477327.1.0.1736477327.0.0.0; _ga=GA1.1.1278880682.1736477328
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:48 GMT
content-type: font/woff
content-length: 31568
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7b50"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/sw.js
200 OK 61 kB IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 9ee51131e416458b88d6da4e6e6959ca
a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4
db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:15:31 GMT
vary: Accept-Encoding
etag: W/"63a1dfa3-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AeZLP9-hMzQMQ9ES8CEBWfYDZO8wiP1W0EN2vP8Ztgk70gBKzfbNP7bwfF9Dt4Qie3t34PCMIRdu
302 Found 421 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AeZLP9-hMzQMQ9ES8CEBWfYDZO8wiP1W0EN2vP8Ztgk70gBKzfbNP7bwfF9Dt4Qie3t34PCMIRdu
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint15:E2:48:E6:6F:85:45:68:E8:83:EA:14:E1:CE:84:66:EA:C7:F1:82
ValidityMon, 09 Dec 2024 08:36:18 GMT - Mon, 03 Mar 2025 08:36:17 GMT
File type HTML document, ASCII text, with very long lines (394)
Hash 54112816490ed3243ee31718f14e5180
cb53b0f7fb70182923c915490193278478280236
419b7f32e76d622efd2f47b166036904892e06b94aa7d6e6e6970e395fab54ca
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AeZLP9-hMzQMQ9ES8CEBWfYDZO8wiP1W0EN2vP8Ztgk70gBKzfbNP7bwfF9Dt4Qie3t34PCMIRdu HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:1FdN-fKk_b24-d99EKEVsAmI9gYFPw:w4ZO-8bak0YJES4B;Path=/;Expires=Sun, 10-Jan-2027 02:48:48 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 Jan 2025 02:48:48 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AeZLP98hRFvWHPlSGBUee5GZsRLA3FiZgvoJQrDIb8kI6f5WjAA944IMFuOUHobxnKllqco4DRyTPA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1059184183%3A1736477328641611&ddm=1
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-HzrO3eb9zvrzkUI_LxZTPg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 421
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AeZLP99F2pHpzKAXp4UkGGaOWbR3mJmgic57CJnAMUDzNFppyOkFFGW7Waw3sIxiLN7xzICVFfjZ
302 Found 420 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AeZLP99F2pHpzKAXp4UkGGaOWbR3mJmgic57CJnAMUDzNFppyOkFFGW7Waw3sIxiLN7xzICVFfjZ
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint15:E2:48:E6:6F:85:45:68:E8:83:EA:14:E1:CE:84:66:EA:C7:F1:82
ValidityMon, 09 Dec 2024 08:36:18 GMT - Mon, 03 Mar 2025 08:36:17 GMT
File type HTML document, ASCII text, with very long lines (389)
Hash ddc78ab72b7540b9cbd527a62b3c2526
13bfd1b69664ce0c79bef7de30bbc9dd379ff644
9895ff4428c2ca863ae9a96e892e1fc3dc47e697491cb746ce2b5912454e6267
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AeZLP99F2pHpzKAXp4UkGGaOWbR3mJmgic57CJnAMUDzNFppyOkFFGW7Waw3sIxiLN7xzICVFfjZ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:ri4XaeDEB_3m9TkANkWEWxk8Ta4hiQ:6WkTiCGBbCifa1_Q;Path=/;Expires=Sun, 10-Jan-2027 02:48:48 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 Jan 2025 02:48:48 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9-bfj5MReZb6ITgJU5xYuGFczjSJutecsDgc57M6ZNrWcbAWX_n2BCFPBdh2vvaf9WoeJFRbw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-15167144%3A1736477328645036&ddm=1
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-8AqD0xA8IejuTBcTmdDhUg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 420
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST jobfukectivetr.com/NE5kR2EbcQc0XFEiDBA1cwg0JiZ+fjJ3WEIXPDMzZwkiLwRYB0IzCFBzU3FVBXpVYRFdKll2R0c6BTMUR3NXd1EFaA0pB1tzVHdRBWgSelAafVBpUgJgUGEUCX9Qf1YFeVd/Vg19VHNXAXxCMxFVKVl2R0Q6ECtcBXlXcVUDeVd1WAZ8UQ
204 No Content 0 B URL POST HTTP/3 jobfukectivetr.com/NE5kR2EbcQc0XFEiDBA1cwg0JiZ+fjJ3WEIXPDMzZwkiLwRYB0IzCFBzU3FVBXpVYRFdKll2R0c6BTMUR3NXd1EFaA0pB1tzVHdRBWgSelAafVBpUgJgUGEUCX9Qf1YFeVd/Vg19VHNXAXxCMxFVKVl2R0Q6ECtcBXlXcVUDeVd1WAZ8UQ
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /NE5kR2EbcQc0XFEiDBA1cwg0JiZ+fjJ3WEIXPDMzZwkiLwRYB0IzCFBzU3FVBXpVYRFdKll2R0c6BTMUR3NXd1EFaA0pB1tzVHdRBWgSelAafVBpUgJgUGEUCX9Qf1YFeVd/Vg19VHNXAXxCMxFVKVl2R0Q6ECtcBXlXcVUDeVd1WAZ8UQ HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Fri, 10 Jan 2025 02:48:49 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FWYhs7EYLQYGdl5UssS9kU220GDH85dcY8y5GCLHmgoEdmGQR8EHU4zLtYjZZSc34G%2Bw615jiRkAqG0%2BnFJBs3J0wwuvuJQrPXhGFjIMMCeXP3EKHaPbLumJNDtHgZk3FJK6YlQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959abdf445690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8626&min_rtt=1592&rtt_var=10820&sent=20&recv=14&lost=0&retrans=1&sent_bytes=6987&recv_bytes=2480&delivery_rate=28572&cwnd=12000&unsent_bytes=0&cid=79f52af7082c01f9&ts=1970&x=1", cfExtPri, cfHdrFlush;dur=0
GET megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31900, version 1.1
Hash 1b285c8e5b7445a8e434b2cdf036bab2
c97d4772fbb5c5637d466b5f991bc7ec28830b32
09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825
GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2; _ga_Z9TE2LW16Q=GS1.1.1736477327.1.0.1736477327.0.0.0; _ga=GA1.1.1278880682.1736477328
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:49 GMT
content-type: font/woff
content-length: 31900
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c9c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AeZLP98hRFvWHPlSGBUee5GZsRLA3FiZgvoJQrDIb8kI6f5WjAA944IMFuOUHobxnKllqco4DRyTPA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1059184183%3A1736477328641611&ddm=1
403 Forbidden 813 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AeZLP98hRFvWHPlSGBUee5GZsRLA3FiZgvoJQrDIb8kI6f5WjAA944IMFuOUHobxnKllqco4DRyTPA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1059184183%3A1736477328641611&ddm=1
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint15:E2:48:E6:6F:85:45:68:E8:83:EA:14:E1:CE:84:66:EA:C7:F1:82
ValidityMon, 09 Dec 2024 08:36:18 GMT - Mon, 03 Mar 2025 08:36:17 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1654), with no line terminators
Hash 4eb5f1abbc5227ad0060374e5c3f1b07
6490b62b5a5df24d15f89ae0fb3d77f9aee9e1a6
ed52d50c322d48c6d6ef7a396bbdcacfc7711fab45d0ed344591a883a8dc2f6e
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AeZLP98hRFvWHPlSGBUee5GZsRLA3FiZgvoJQrDIb8kI6f5WjAA944IMFuOUHobxnKllqco4DRyTPA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1059184183%3A1736477328641611&ddm=1 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 Jan 2025 02:48:48 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-dqJ60Kz3CCbVl6FmiJ6TJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/recaptcha/api.js https://translate.google.com/translate_a/element.js https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.GVgXMoL7NYg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31836, version 1.1
Hash 4514fa5a5b3d1e0b14aa32a7d068124a
e634977bfabc20ed15fe7ed03d3876cf68834b93
5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2; _ga_Z9TE2LW16Q=GS1.1.1736477327.1.0.1736477327.0.0.0; _ga=GA1.1.1278880682.1736477328
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:50 GMT
content-type: font/woff
content-length: 31836
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c5c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/jquery.dataTables.min.js
200 OK 51 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.dataTables.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (768)
Hash 737f853e9fd6a31d62f5028e88663c9f
cf144f2ab49f53a69fbfe10d3588fc23437d2736
6c3ca64b7acfdd29b3ca6f1b9b46696369abd462d4546182085c347f72211841
GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-10fe4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/jquery.tmpl.min.js
200 OK 135 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.tmpl.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (971), with no line terminators
Size 135 kB (134847 bytes)
Hash 411df7e2bc659d35015f7fdb7432b331
848575bfa595b60987cf60ce9efca64ede45a20b
9509c1e67bedbaded059d0aa8d5cee65cee3c9e3f43a5952a7a233cbc10810ae
GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/jquery.fileupload-ui.js
200 OK 36 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-ui.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 6d74ec0b03e02825fef8093d64629489
de746f1c7aeb0927541e1d55bdea4672bb47aa73
5d4a5378ed9f8bf68dbfb6246761e6d44e2b11fa626d8b4f8d1d6a779f037cd2
GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-61ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31980, version 1.1
Hash 99ac81a158028ac2023fb3350d2497e7
f08c12c91ab29282a616c3ba8e533f49b5b433ca
92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d
GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2; _ga_Z9TE2LW16Q=GS1.1.1736477327.1.0.1736477327.0.0.0; _ga=GA1.1.1278880682.1736477328
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:50 GMT
content-type: font/woff
content-length: 31980
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7cec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET xml.adservtday.com/thumbnail?i=dFqFwpvs0bA_0&p=1736477328.220815&imgt=icon
302 Found 0 B URL GET HTTP/1.1 xml.adservtday.com/thumbnail?i=dFqFwpvs0bA_0&p=1736477328.220815&imgt=icon
IP
ASN #27257 WEBAIR-INTERNET
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerLet's Encrypt
Subjectadservtday.com
Fingerprint0C:D2:39:51:83:24:F2:7C:28:38:C0:83:59:EB:A6:B8:20:37:3A:C7
ValidityMon, 30 Dec 2024 07:39:17 GMT - Sun, 30 Mar 2025 07:39:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=dFqFwpvs0bA_0&p=1736477328.220815&imgt=icon HTTP/1.1
Host: xml.adservtday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 10 Jan 2025 02:48:51 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.servingserved.com/n337/ad/32/69/48/e1/71/fa/e3/62/61/d9/a4/83/10/86/2b/ad/cd/b9/2e/ac/8b/13/2a/c2/4f/a3/a2/77/7c/4d/5b/300x250_cd.jpeg
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9-bfj5MReZb6ITgJU5xYuGFczjSJutecsDgc57M6ZNrWcbAWX_n2BCFPBdh2vvaf9WoeJFRbw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-15167144%3A1736477328645036&ddm=1
403 Forbidden 7.1 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9-bfj5MReZb6ITgJU5xYuGFczjSJutecsDgc57M6ZNrWcbAWX_n2BCFPBdh2vvaf9WoeJFRbw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-15167144%3A1736477328645036&ddm=1
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint15:E2:48:E6:6F:85:45:68:E8:83:EA:14:E1:CE:84:66:EA:C7:F1:82
ValidityMon, 09 Dec 2024 08:36:18 GMT - Mon, 03 Mar 2025 08:36:17 GMT
File type gzip compressed data, max compression
Hash e6073631cec142df844f534e17c32ac2
0d36988a62d3356b2459a9c54d0c3b5b68ca207d
8f677d203c9fdc3bd1c9f786f0adf1e5686b53f4763ecb648a461471e0541e59
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AeZLP9-bfj5MReZb6ITgJU5xYuGFczjSJutecsDgc57M6ZNrWcbAWX_n2BCFPBdh2vvaf9WoeJFRbw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-15167144%3A1736477328645036&ddm=1 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 10 Jan 2025 02:48:48 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-SqoS317J9RRkfC_75e3Tyw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/recaptcha/api.js https://translate.google.com/translate_a/element.js https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.GVgXMoL7NYg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
200 OK 5.2 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 76cff321a3da409f04f1b9d25319ab78
f9de6b54f2eeeb85ea43693bee32dc930a252649
9930043ffb4753c135a12f6be97e24ef56fdfd5aaf1af6a204d99937a7ba8ef2
GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET static.servingserved.com/n337/ad/fa/1b/0d/4c/4e/52/f5/36/33/5d/5a/9e/7c/25/c2/3b/80/d0/26/8a/0c/a4/e1/7c/8d/50/2e/c3/9c/66/43/192x192_92.jpeg
200 OK 4.9 kB URL GET HTTP/1.1 static.servingserved.com/n337/ad/fa/1b/0d/4c/4e/52/f5/36/33/5d/5a/9e/7c/25/c2/3b/80/d0/26/8a/0c/a4/e1/7c/8d/50/2e/c3/9c/66/43/192x192_92.jpeg
IP
ASN #20940 Akamai International B.V.
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerLet's Encrypt
Subjectstatic.servingserved.com
FingerprintDB:B9:DE:E0:C9:DD:D5:A9:3F:BB:E5:17:DB:F8:C6:E1:12:F5:F5:2D
ValidityTue, 10 Dec 2024 16:38:12 GMT - Mon, 10 Mar 2025 16:38:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3
Hash 00562c1fd512e1427c98bad4cfafd0c4
fdf0e2916ca57ddf1a378333d1d427e20289c071
fa1b0d4c4e52f536335d5a9e7c25c23b80d0268a0ca4e17c8d502ec39c664392
GET /n337/ad/fa/1b/0d/4c/4e/52/f5/36/33/5d/5a/9e/7c/25/c2/3b/80/d0/26/8a/0c/a4/e1/7c/8d/50/2e/c3/9c/66/43/192x192_92.jpeg HTTP/1.1
Host: static.servingserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/jpeg
Content-Length: 4908
Last-Modified: Tue, 16 Apr 2024 19:39:16 GMT
ETag: "661ed3e4-132c"
Accept-Ranges: bytes
Cache-Control: max-age=24209
Expires: Fri, 10 Jan 2025 09:32:23 GMT
Date: Fri, 10 Jan 2025 02:48:54 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
POST jobfukectivetr.com/NFZTTGIbaTA/X3pnAQ4BcjkQFQx6FAo7OFgyOCQNcDs3fDMGG3U4C1Bra35XDWdiahJdMm5/UBIlJy0WQSVuflIEY3UlDFI5bn5SBGBjfFMHZHZ7IVwiJzwREWUSaVByc2EKGlk6fS0GRzMhOhZQNypiAVs7dn4kQD4mIQBaNzogRwcQOmlRcAcLDw9yMjB/KFYPDHxHBmAjaVFwZ2R/VABhZH9QDHhhflIMZ2ZpUAI/PisWEWUXJQFbOHZ7IVojPyBHAxVlfFUEZ2p7UgJvYXhTDGFhelUDcCVxUhpvfX5MAnAmcVMAbmR9VQduZHVRBGJleVASIiMtBQlndTwWQDpufVUHYGd7VQdlZ3pVAg
204 No Content 0 B URL POST HTTP/3 jobfukectivetr.com/NFZTTGIbaTA/X3pnAQ4BcjkQFQx6FAo7OFgyOCQNcDs3fDMGG3U4C1Bra35XDWdiahJdMm5/UBIlJy0WQSVuflIEY3UlDFI5bn5SBGBjfFMHZHZ7IVwiJzwREWUSaVByc2EKGlk6fS0GRzMhOhZQNypiAVs7dn4kQD4mIQBaNzogRwcQOmlRcAcLDw9yMjB/KFYPDHxHBmAjaVFwZ2R/VABhZH9QDHhhflIMZ2ZpUAI/PisWEWUXJQFbOHZ7IVojPyBHAxVlfFUEZ2p7UgJvYXhTDGFhelUDcCVxUhpvfX5MAnAmcVMAbmR9VQduZHVRBGJleVASIiMtBQlndTwWQDpufVUHYGd7VQdlZ3pVAg
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /NFZTTGIbaTA/X3pnAQ4BcjkQFQx6FAo7OFgyOCQNcDs3fDMGG3U4C1Bra35XDWdiahJdMm5/UBIlJy0WQSVuflIEY3UlDFI5bn5SBGBjfFMHZHZ7IVwiJzwREWUSaVByc2EKGlk6fS0GRzMhOhZQNypiAVs7dn4kQD4mIQBaNzogRwcQOmlRcAcLDw9yMjB/KFYPDHxHBmAjaVFwZ2R/VABhZH9QDHhhflIMZ2ZpUAI/PisWEWUXJQFbOHZ7IVojPyBHAxVlfFUEZ2p7UgJvYXhTDGFhelUDcCVxUhpvfX5MAnAmcVMAbmR9VQduZHVRBGJleVASIiMtBQlndTwWQDpufVUHYGd7VQdlZ3pVAg HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Fri, 10 Jan 2025 02:48:54 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=11V6mhMKW8NUavaANQYxanP2zrF96VQSp36gYWiiBXfQ342jr6cOkKm%2FMYVcZsi0MtIT37kHuIoK%2FlDe0igETCxC%2Fzt%2Fy4Vlr64e4p4CXj0HFE1Ztf1%2BtVMity%2BVGMT4z4wRt6c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959cdcb6a5690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11483&min_rtt=1592&rtt_var=11038&sent=24&recv=18&lost=0&retrans=1&sent_bytes=8294&recv_bytes=3665&delivery_rate=4440&cwnd=12000&unsent_bytes=0&cid=79f52af7082c01f9&ts=7409&x=1", cfExtPri, cfHdrFlush;dur=0
GET ukankingwithea.com/
200 OK 27 B IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintE8:14:F0:35:7D:16:C6:75:8B:49:F3:D0:CD:D7:52:BF:0E:4A:BA:B8
ValidityWed, 01 Jan 2025 13:14:55 GMT - Tue, 01 Apr 2025 14:13:37 GMT
File type ASCII text, with no line terminators
Hash 733a15e9dbddabc104dbaef9196197c5
fe6690563bc3583e24361b62457919eac57bc372
8659dd7af7a02263b3767de391b45050931cac1adfabcad0c4e07023b68f7058
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: text/plain
set-cookie: csu=1487173879304652@1@1736477327; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zD%2BPIajDdh%2FW9BddDl7QxZQT0vhQNHkXnnUBNH33cr2ag5h8wJv80A4Ge%2FQRS5LtEIBqZv4uZNxqp5TcCg0UTgxOa27dozkwKCoPnXp%2F9d1aHSmDdso9qI%2F4ntnV0vtdrgHEmKg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff9599f3f5456a3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=778&min_rtt=414&rtt_var=142&sent=161&recv=59&lost=0&retrans=0&sent_bytes=211194&recv_bytes=1429&delivery_rate=140687593&cwnd=254&unsent_bytes=0&cid=4a937be23ae9ba4e&ts=150&x=0"
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css
200 OK 118 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with very long lines (540), with CRLF line terminators
Size 118 kB (117787 bytes)
Hash 26bfa8a47d74b90e1fc4632710026e85
2993c7f968fb5e5be8d256d5c7271fe64c87326d
69c6352bd7a8de550563a81b40dab2234fa30ff0ae9e90a8b5c896dea033ca3b
GET /themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cc1b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undefined/VGU5ZXg1B1oIRzVYW0MNJgkEQEoSQAsjHGcAUhYeLAlfUhoiXFFLGzgKTAEeJgpXEVY6AE1AShIddiApZTJXJxofVEpdLGQSTTAvMCx6Cz0ZBAkgHRogWkBKEiNeMAgBIQk3LAA0Wys6AihgCUAkLQg8SBchSiYhPQEBKRACCnU9IQctUgosERwNLiAcDn8DOiw/cgkyOjNVVQkCCF0nMD0zayo9ZChgDj0lLQgrTQUhaDAgBy9aKzoCBmAOOWMxbzAKAB90Bi4XMGgEPA0rWAIucVd/NB88Fm0yDBYtYQFLMlVwLDMSEgknLRYNe1cXHSRxLwk2IGgBHGdIXUBKEjReAkoFVgAhHQxVfQE9FTdgNBwlIwhVFgwPbzM7MyxxBBMRLF0kKiU0a1RKFjFOPys9I20rKTMBXQs2PjdRP0gRHAArOwVDUxYXOhUEBAoOBnARHQQMei0WJjI
0 B URL GET undefined/VGU5ZXg1B1oIRzVYW0MNJgkEQEoSQAsjHGcAUhYeLAlfUhoiXFFLGzgKTAEeJgpXEVY6AE1AShIddiApZTJXJxofVEpdLGQSTTAvMCx6Cz0ZBAkgHRogWkBKEiNeMAgBIQk3LAA0Wys6AihgCUAkLQg8SBchSiYhPQEBKRACCnU9IQctUgosERwNLiAcDn8DOiw/cgkyOjNVVQkCCF0nMD0zayo9ZChgDj0lLQgrTQUhaDAgBy9aKzoCBmAOOWMxbzAKAB90Bi4XMGgEPA0rWAIucVd/NB88Fm0yDBYtYQFLMlVwLDMSEgknLRYNe1cXHSRxLwk2IGgBHGdIXUBKEjReAkoFVgAhHQxVfQE9FTdgNBwlIwhVFgwPbzM7MyxxBBMRLF0kKiU0a1RKFjFOPys9I20rKTMBXQs2PjdRP0gRHAArOwVDUxYXOhUEBAoOBnARHQQMei0WJjI
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /VGU5ZXg1B1oIRzVYW0MNJgkEQEoSQAsjHGcAUhYeLAlfUhoiXFFLGzgKTAEeJgpXEVY6AE1AShIddiApZTJXJxofVEpdLGQSTTAvMCx6Cz0ZBAkgHRogWkBKEiNeMAgBIQk3LAA0Wys6AihgCUAkLQg8SBchSiYhPQEBKRACCnU9IQctUgosERwNLiAcDn8DOiw/cgkyOjNVVQkCCF0nMD0zayo9ZChgDj0lLQgrTQUhaDAgBy9aKzoCBmAOOWMxbzAKAB90Bi4XMGgEPA0rWAIucVd/NB88Fm0yDBYtYQFLMlVwLDMSEgknLRYNe1cXHSRxLwk2IGgBHGdIXUBKEjReAkoFVgAhHQxVfQE9FTdgNBwlIwhVFgwPbzM7MyxxBBMRLF0kKiU0a1RKFjFOPys9I20rKTMBXQs2PjdRP0gRHAArOwVDUxYXOhUEBAoOBnARHQQMei0WJjI HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET xml.adservtday.com/thumbnail?i=QXCmFdc3JbY_0&p=1736477328.220815&imgt=icon
302 Found 4.9 kB URL GET HTTP/1.1 xml.adservtday.com/thumbnail?i=QXCmFdc3JbY_0&p=1736477328.220815&imgt=icon
IP
ASN #27257 WEBAIR-INTERNET
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerLet's Encrypt
Subjectadservtday.com
Fingerprint0C:D2:39:51:83:24:F2:7C:28:38:C0:83:59:EB:A6:B8:20:37:3A:C7
ValidityMon, 30 Dec 2024 07:39:17 GMT - Sun, 30 Mar 2025 07:39:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=QXCmFdc3JbY_0&p=1736477328.220815&imgt=icon HTTP/1.1
Host: xml.adservtday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 10 Jan 2025 02:48:54 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.servingserved.com/n337/ad/fa/1b/0d/4c/4e/52/f5/36/33/5d/5a/9e/7c/25/c2/3b/80/d0/26/8a/0c/a4/e1/7c/8d/50/2e/c3/9c/66/43/192x192_92.jpeg
GET getrunkhomuto.info/floater?cs=SDEwVnB9BwJnSXkAB25CcQIFZUk&abt=0&red=1&sm=83&k=download%20file%20cryptcustdn%20nswtch%20base%20ziperto&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1487173879304652&agec=1736477327&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=358.42293906810033&ref=https%3A%2F%2Fmegaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_aI4u=1736477328216&crc=1
200 OK 3.5 kB URL GET HTTP/2 getrunkhomuto.info/floater?cs=SDEwVnB9BwJnSXkAB25CcQIFZUk&abt=0&red=1&sm=83&k=download%20file%20cryptcustdn%20nswtch%20base%20ziperto&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1487173879304652&agec=1736477327&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=358.42293906810033&ref=https%3A%2F%2Fmegaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_aI4u=1736477328216&crc=1
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerAmazon
Subjectgetrunkhomuto.info
Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E
ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
File type ASCII text, with very long lines (3491), with no line terminators
Hash fac9b7a02a2bf30df841b59089f92124
093628e2c5a624e77bd56170d8fd3f0975cf817d
d27b3c1d28b62be6608a721405a733435a6a7e5a712394d0a5bd7df59e937817
GET /floater?cs=SDEwVnB9BwJnSXkAB25CcQIFZUk&abt=0&red=1&sm=83&k=download%20file%20cryptcustdn%20nswtch%20base%20ziperto&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1487173879304652&agec=1736477327&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=358.42293906810033&ref=https%3A%2F%2Fmegaup.net%2Fdb9ff91d2fccce4eb80ea77c77f3eafe%2FCRYPTCUSTDN-(USA)-NSwTcH-%5BBASE%5D-NSP-Ziperto.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_aI4u=1736477328216&crc=1 HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2101
date: Fri, 10 Jan 2025 02:48:48 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=LswdqtDwxsFPUXo+OrKTtbWpDy1G1qLcmfBWp7wZcYDfFG0shNEiXR2ZbXp7PMZ/1cbCOD+QuVqudk6f1Ya1wijkL0BjZ6KtcFD0qrG1HjemjmT3zsUgzi84+Bef; Expires=Fri, 17 Jan 2025 02:48:48 GMT; Path=/
AWSALBCORS=LswdqtDwxsFPUXo+OrKTtbWpDy1G1qLcmfBWp7wZcYDfFG0shNEiXR2ZbXp7PMZ/1cbCOD+QuVqudk6f1Ya1wijkL0BjZ6KtcFD0qrG1HjemjmT3zsUgzi84+Bef; Expires=Fri, 17 Jan 2025 02:48:48 GMT; Path=/; SameSite=None
csu=4b81f44b-8960-4641-bd80-27b6eea7a436
csu=1487173879304652
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: Si0hBFZAiEitlUctSJzqj0vt4BiUh0AgdHRFHjhiVHN_VGheaY2Ntg==
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
200 OK 339 B URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (375), with no line terminators
Hash e60adfdae6f5cf19011dbe4154390a71
e91fc65490f58b7072d25b8edeed4b213e72ad96
0633957c46201ad0d4143ecfcb0c12d9c400a8edadb2670026573d8f8c2ba2f2
GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-153"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
200 OK 18 kB URL GET HTTP/2 megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45f5"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/jquery.fileupload-resize.js
200 OK 8.1 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-resize.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (8281), with no line terminators
Hash fe90ec8075308aa0695b41a01faa8d7c
9ef0157a99a6efd2a8672b699dbf4225d8fa67ad
782f2530cd4df35901bcdba4dab3cd8769f7cebfcfa96cec776cbcdc10d66062
GET /themes/flow/js/jquery.fileupload-resize.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1f7f"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undefined/UGdIRzkxBSsqBjFaKmFMIgt1YgsWQnoBXWMCIzRfKAsucFsmXiBpWjwIPSNfIggmMxc+AjxiCxYeER9dKTUAAnoXJT8ubTgyLQFXPC0eLH8SAx0rcRIQCS9/YRApAUAdNg4GXTMsIBZvBTUvdHE3XwATTh4jHQMAGCMvIE8XCxkweicxAxZUGQMJBVIGAh4kfBc1DnJoFQQfAVAKKh4RfBcpCnNyAw8vd34nNgACQCMFDxVzBSoaBVoXD3hiCxIgCXdbFVUOA3NgLSsjfwIzGnZWaDYOBWoBNhISbGAELQtraDIMdl1iNhoraQIlPA9vBi0KBVUCMxowFBEeHgFwYjR7DV8FMX0fXTsiDwJRFREALGsWKQAdewUiLARdBSEZElISVw4wXhYhMQ5cFzECBng7DxAQbBoOCgFBF0EiNFY+F3UAC2EvfQ1AHgo
0 B URL GET undefined/UGdIRzkxBSsqBjFaKmFMIgt1YgsWQnoBXWMCIzRfKAsucFsmXiBpWjwIPSNfIggmMxc+AjxiCxYeER9dKTUAAnoXJT8ubTgyLQFXPC0eLH8SAx0rcRIQCS9/YRApAUAdNg4GXTMsIBZvBTUvdHE3XwATTh4jHQMAGCMvIE8XCxkweicxAxZUGQMJBVIGAh4kfBc1DnJoFQQfAVAKKh4RfBcpCnNyAw8vd34nNgACQCMFDxVzBSoaBVoXD3hiCxIgCXdbFVUOA3NgLSsjfwIzGnZWaDYOBWoBNhISbGAELQtraDIMdl1iNhoraQIlPA9vBi0KBVUCMxowFBEeHgFwYjR7DV8FMX0fXTsiDwJRFREALGsWKQAdewUiLARdBSEZElISVw4wXhYhMQ5cFzECBng7DxAQbBoOCgFBF0EiNFY+F3UAC2EvfQ1AHgo
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /UGdIRzkxBSsqBjFaKmFMIgt1YgsWQnoBXWMCIzRfKAsucFsmXiBpWjwIPSNfIggmMxc+AjxiCxYeER9dKTUAAnoXJT8ubTgyLQFXPC0eLH8SAx0rcRIQCS9/YRApAUAdNg4GXTMsIBZvBTUvdHE3XwATTh4jHQMAGCMvIE8XCxkweicxAxZUGQMJBVIGAh4kfBc1DnJoFQQfAVAKKh4RfBcpCnNyAw8vd34nNgACQCMFDxVzBSoaBVoXD3hiCxIgCXdbFVUOA3NgLSsjfwIzGnZWaDYOBWoBNhISbGAELQtraDIMdl1iNhoraQIlPA9vBi0KBVUCMxowFBEeHgFwYjR7DV8FMX0fXTsiDwJRFREALGsWKQAdewUiLARdBSEZElISVw4wXhYhMQ5cFzECBng7DxAQbBoOCgFBF0EiNFY+F3UAC2EvfQ1AHgo HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
200 OK 5.4 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (6528), with no line terminators
Hash 86379ef62388dc773f0c909c8678823c
5eff5eeda891aeb71ef023ab40006f5e9be33642
4152201489950049e566388267c82b03eda1810018354b17055593f250d1e658
GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1547"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
200 OK 7.4 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (7733), with no line terminators
Hash aaaac23173da082efba2d6874d01cf03
b14b1cd1e6bf4cf4a324182e4ee3fe3ec370b896
85ede8080213e13bdc68570d742105289541dfc11847ea8cab78c5575bac71e9
GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET jobfukectivetr.com/TEJNbkFjfS4dfBUVNT0MGhgYOSwNAy9fAygYHAIqGwR0AAAhemsaKCh/dVx0dXN8SDElJnBdc2oxOQ81OTFwXHF8dWsHLyotcFxnOn99QHhicGNYZzl/fEg1PCMqU3BqMjkaLXFzel13eHV6XXN7cHtc
204 No Content 0 B URL GET HTTP/2 jobfukectivetr.com/TEJNbkFjfS4dfBUVNT0MGhgYOSwNAy9fAygYHAIqGwR0AAAhemsaKCh/dVx0dXN8SDElJnBdc2oxOQ81OTFwXHF8dWsHLyotcFxnOn99QHhicGNYZzl/fEg1PCMqU3BqMjkaLXFzel13eHV6XXN7cHtc
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TEJNbkFjfS4dfBUVNT0MGhgYOSwNAy9fAygYHAIqGwR0AAAhemsaKCh/dVx0dXN8SDElJnBdc2oxOQ81OTFwXHF8dWsHLyotcFxnOn99QHhicGNYZzl/fEg1PCMqU3BqMjkaLXFzel13eHV6XXN7cHtc HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 10 Jan 2025 02:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=30qq5hSM8AZxlLZfi2ElnLKicwgXvBXJZfeCiArGGZgD1NRdyUX71aEkQsXuctVqyxWQL5mZ0jzTtpcHo%2BmUkdJz%2FL6rztngd8F%2Fij%2B0voTM52bTMZgaWJv0GHRX15FaF%2BRp8K4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959a00b43568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=9791&min_rtt=468&rtt_var=14955&sent=13&recv=16&lost=0&retrans=0&sent_bytes=4728&recv_bytes=2067&delivery_rate=7387755&cwnd=257&unsent_bytes=0&cid=e34efd99a1adc13c&ts=248&x=0"
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/canvas-to-blob.min.js
200 OK 1.0 kB URL GET HTTP/2 megaup.net/themes/flow/js/canvas-to-blob.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1052), with no line terminators
Hash a6496a71738d7a150a3e065ee0e12fe3
5312d1558e59026ae5f14cb04f8bc87248f23826
7700f942a6370cef00334962637f3de505a110832c554efdaab8aa645b10359d
GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-408"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/css/stylesheet.css
200 OK 28 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/stylesheet.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 8568ee885222fb5ef651a99221bfd347
0dc1b30d1a58c3cdafab8b38da04f3fc2462ee46
3b35d09fae892be2b76a67f47bbbcbe289b05a2850e02295f70f9c2e537d927a
GET /themes/flow/frontend_assets/css/stylesheet.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6c82"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
200 OK 21 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format, TrueType, length 20972, version 1.0
Hash cad75e2dacc6794c4e6b14727d4a989d
694d04c8f643df4100c23efc1463ac9f4e732f60
ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887
GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: font/woff
content-length: 20972
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-51ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
POST jobfukectivetr.com/M3BsTkccTw89emY1WRgjdgQAKwBXNg8jARZCKhcsS0UNFnZUIl8HYUcZCHN/AUVVf3YVAAUqegBCSj0zUgQZPXoBQFx7YVoeCiF6AUBceHcDQV98YgQzBDozQwNJfQYWQiprdXUIASJpUhQfKzVFBAgvPh0TAyNiATYYJjJeEgIvLl9VXwguFkMoKgFCNhs+MUBADg8YA1VeeDcWQyh/cABGWHlwAEJUYHUBQFR/chZCWicqVARJfQNaEwMgYgQzXX1zBUZffxgFQ1R4dgtJSXkEBUBbfnYKR1x4fgFEXXZwAUZbeWFFTVxgfh1CQnhhRk1den8EQVt9fwRJX35zBUVeaDNDEQtzdhUAGDorDkFbfXEHR1t9dANGVHg
204 No Content 0 B URL POST HTTP/3 jobfukectivetr.com/M3BsTkccTw89emY1WRgjdgQAKwBXNg8jARZCKhcsS0UNFnZUIl8HYUcZCHN/AUVVf3YVAAUqegBCSj0zUgQZPXoBQFx7YVoeCiF6AUBceHcDQV98YgQzBDozQwNJfQYWQiprdXUIASJpUhQfKzVFBAgvPh0TAyNiATYYJjJeEgIvLl9VXwguFkMoKgFCNhs+MUBADg8YA1VeeDcWQyh/cABGWHlwAEJUYHUBQFR/chZCWicqVARJfQNaEwMgYgQzXX1zBUZffxgFQ1R4dgtJSXkEBUBbfnYKR1x4fgFEXXZwAUZbeWFFTVxgfh1CQnhhRk1den8EQVt9fwRJX35zBUVeaDNDEQtzdhUAGDorDkFbfXEHR1t9dANGVHg
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /M3BsTkccTw89emY1WRgjdgQAKwBXNg8jARZCKhcsS0UNFnZUIl8HYUcZCHN/AUVVf3YVAAUqegBCSj0zUgQZPXoBQFx7YVoeCiF6AUBceHcDQV98YgQzBDozQwNJfQYWQiprdXUIASJpUhQfKzVFBAgvPh0TAyNiATYYJjJeEgIvLl9VXwguFkMoKgFCNhs+MUBADg8YA1VeeDcWQyh/cABGWHlwAEJUYHUBQFR/chZCWicqVARJfQNaEwMgYgQzXX1zBUZffxgFQ1R4dgtJSXkEBUBbfnYKR1x4fgFEXXZwAUZbeWFFTVxgfh1CQnhhRk1den8EQVt9fwRJX35zBUVeaDNDEQtzdhUAGDorDkFbfXEHR1t9dANGVHg HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Fri, 10 Jan 2025 02:48:50 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IFKWqontocgDMNgW3WsxFtoKUZSHtvrAUk4uSVT%2Fnz3viMdxZOtRAqz4cLF0AFcO8FRUIEjBtaVUL%2F7TOVhQprFRpb528g6iUom6th9O9qhbFeNJf6yeuWgV90nxpeIaCb13vUE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959b4cae05690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10150&min_rtt=1592&rtt_var=11161&sent=22&recv=16&lost=0&retrans=1&sent_bytes=7643&recv_bytes=3079&delivery_rate=4502&cwnd=12000&unsent_bytes=0&cid=79f52af7082c01f9&ts=3407&x=1", cfExtPri, cfHdrFlush;dur=0
GET megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css
200 OK 23 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (305), with CRLF line terminators
Hash f8398a4ad2442f1943b62d93f89249b6
280150fc79d01a95808b1c16ca8749e8d8cda85e
7c10acbcb15a2f181df3ad0d009a44f892e406bbfc8f94df12f8a47a71b696e5
GET /themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-59d6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css
200 OK 48 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 6678bbbf8814eac6d7f987ad2a32111a
aa9021d4f27c58d5ffe5a8545c20b47232d7d0cb
9b36949876f75f2961b55a066b1f9695ec8c3772771d700e951736b1fba45cbe
GET /themes/flow/frontend_assets/css/animations/animate.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-bc86"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undefined/angwbVILGlMAbQtFUksnGBQNSGAsXQIrNlkdWx40EhRWWjAcQVhDMQYXRQk0GBdeGXwEHURIYCw+USpnEytlNB4rKkcbNzgPeCs8OF0CKwosHHsLYSA3eAoTGTF2OBYsAQQDGjhNUycrJxtjLzVcM2E0Nz4PABQRPBMVXxAMO1w3HiguRiA6IzNkXj4NOnFVMSYWRCIREg9BCGMGMXUUYgEuZh0HOjtUOxMSSEohJTs7dV8qWjRcGTEPL34MCgYXSAljBjRhPCYAL1xZNyM7VwkUBhwHCTooL2IvCB0gdRkQKUp+DAoNORVfFDNJQxsBWUFfOhcOIFVeCzo7SEAXAzNlXDEkMERfBTxNcwgaMCJjXRBfMXEoMSwBCB0XLwxxKWFTHWEoGBw1ATs0TBJDAjwaRXQZM100BQJjKB8
0 B URL GET undefined/angwbVILGlMAbQtFUksnGBQNSGAsXQIrNlkdWx40EhRWWjAcQVhDMQYXRQk0GBdeGXwEHURIYCw+USpnEytlNB4rKkcbNzgPeCs8OF0CKwosHHsLYSA3eAoTGTF2OBYsAQQDGjhNUycrJxtjLzVcM2E0Nz4PABQRPBMVXxAMO1w3HiguRiA6IzNkXj4NOnFVMSYWRCIREg9BCGMGMXUUYgEuZh0HOjtUOxMSSEohJTs7dV8qWjRcGTEPL34MCgYXSAljBjRhPCYAL1xZNyM7VwkUBhwHCTooL2IvCB0gdRkQKUp+DAoNORVfFDNJQxsBWUFfOhcOIFVeCzo7SEAXAzNlXDEkMERfBTxNcwgaMCJjXRBfMXEoMSwBCB0XLwxxKWFTHWEoGBw1ATs0TBJDAjwaRXQZM100BQJjKB8
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /angwbVILGlMAbQtFUksnGBQNSGAsXQIrNlkdWx40EhRWWjAcQVhDMQYXRQk0GBdeGXwEHURIYCw+USpnEytlNB4rKkcbNzgPeCs8OF0CKwosHHsLYSA3eAoTGTF2OBYsAQQDGjhNUycrJxtjLzVcM2E0Nz4PABQRPBMVXxAMO1w3HiguRiA6IzNkXj4NOnFVMSYWRCIREg9BCGMGMXUUYgEuZh0HOjtUOxMSSEohJTs7dV8qWjRcGTEPL34MCgYXSAljBjRhPCYAL1xZNyM7VwkUBhwHCTooL2IvCB0gdRkQKUp+DAoNORVfFDNJQxsBWUFfOhcOIFVeCzo7SEAXAzNlXDEkMERfBTxNcwgaMCJjXRBfMXEoMSwBCB0XLwxxKWFTHWEoGBw1ATs0TBJDAjwaRXQZM100BQJjKB8 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET megaup.net/themes/flow/js/load-image.min.js
200 OK 2.5 kB URL GET HTTP/2 megaup.net/themes/flow/js/load-image.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2582), with no line terminators
Hash a695bcdeef4ab1f27d01d2175ab9ddcd
442e6298bf7092455528a2b81e721aaf7a72ef09
ac92521ad4d3d0191d63ce8dda671b9e78c7c7e1d5f0b3fb2cf5424461f3f315
GET /themes/flow/js/load-image.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-9f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
200 OK 85 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (23470)
Hash 04426bc66c09c8881b5b329310e903e9
ff7f2f64ed5938023a91050e27f22f77becba78c
ebf4e570b96d611fa540bb8745ba518a1005d50c4589a2c2cf3a60a97151a184
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14cc1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET jobfukectivetr.com/dmMxZ09ZXFIUciQmBBYZGCVLAiM4C2AJK0A0ZiUIFVAENC0dABcTJhJeCVB5RVIJQT8fBwxVdlAQRQY7AxAMVmkfDVcIclAVDFZhRk0HV2FCRURaflAXQQYoS1IXFzsCDwxWeEVVBVB4RVEGVXxP
204 No Content 0 B URL GET HTTP/2 jobfukectivetr.com/dmMxZ09ZXFIUciQmBBYZGCVLAiM4C2AJK0A0ZiUIFVAENC0dABcTJhJeCVB5RVIJQT8fBwxVdlAQRQY7AxAMVmkfDVcIclAVDFZhRk0HV2FCRURaflAXQQYoS1IXFzsCDwxWeEVVBVB4RVEGVXxP
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dmMxZ09ZXFIUciQmBBYZGCVLAiM4C2AJK0A0ZiUIFVAENC0dABcTJhJeCVB5RVIJQT8fBwxVdlAQRQY7AxAMVmkfDVcIclAVDFZhRk0HV2FCRURaflAXQQYoS1IXFzsCDwxWeEVVBVB4RVEGVXxP HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 10 Jan 2025 02:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hIYqyNh1r%2BQoL3AlpIU8b02XVHHo17vYZshjIU%2FP53G5gzGrwqEF7zjlSkcFc98hr%2BEzqiP83qeaK%2BVfj5r3crJIK99lWnNLybHtcRvn2DAxlxNlDAMznaZ7yHLpsm4Fztg%2FBLM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff9599f9b19568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6401&min_rtt=468&rtt_var=9273&sent=11&recv=14&lost=0&retrans=0&sent_bytes=3874&recv_bytes=2067&delivery_rate=7387755&cwnd=255&unsent_bytes=0&cid=e34efd99a1adc13c&ts=174&x=0"
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/custom/custom.js
200 OK 5.2 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/custom/custom.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (5537), with no line terminators
Hash f11b915d430ce9e1d2470ce7a88c8df7
9f1fbcd5391969567e9b0c14467d637446cb69ed
13d1a0a149018d6e707511272a19e324ca469919e8546570cfef14f24c2219e6
GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1420"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
200 OK 102 kB URL GET HTTP/3 ukankingwithea.com/asd100.bin
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintE8:14:F0:35:7D:16:C6:75:8B:49:F3:D0:CD:D7:52:BF:0E:4A:BA:B8
ValidityWed, 01 Jan 2025 13:14:55 GMT - Tue, 01 Apr 2025 14:13:37 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Cookie: csu=1487173879304652@1@1736477327
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: binary/octet-stream
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FDppDi1MPSKdMK%2Bx%2FGgrfWgi1j5eVkvQF8sYyg04toShYlUF5BV9k0PPUogwoKXvnczUHFNLGc55d%2FZVFx6fYQ5iTBLliMZ8%2BsCyn4ZRt%2F7quOrnQp5m3uyLHdDC%2BUJGffOkZ7s%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 2199
last-modified: Fri, 10 Jan 2025 02:12:08 GMT
cf-ray: 8ff959a07efb712d-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
GET megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css
200 OK 2.8 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (3129), with no line terminators
Hash 51c9993916aaff91429614ae79394a6b
51383b05a8ada15406d7eff96fc706c47cfb581b
7c418339961aab6dec877ed3760307367e9deea17a1fbd175e611c215e48634f
GET /themes/flow/frontend_assets/css/isotope/isotope-style.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-af3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/jquery.iframe-transport.js
200 OK 9.3 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.iframe-transport.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (9459), with no line terminators
Hash e703222aaa30359454a64b070b20b7a5
bbe0de722f2f9eb912ba3fc0d960e35b3ef58b4e
917390ec2f9d9d63aaa67ee2078e601f84538945732e4a89d3be346728f80fca
GET /themes/flow/js/jquery.iframe-transport.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2427"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/retina/retina.js
200 OK 1.3 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/retina/retina.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1353), with no line terminators
Hash 63539576529cb2ba2cf10de877f1e8cc
78cf75b3bc45e3da2e5753c4d47582957b222e1c
f3bf2760a81cfb66c729ad39451b437da09f7e0a04fe93ffc34e23194d813619
GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-52e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
200 OK 102 kB URL GET HTTP/2 ukankingwithea.com/asd100.bin
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintE8:14:F0:35:7D:16:C6:75:8B:49:F3:D0:CD:D7:52:BF:0E:4A:BA:B8
ValidityWed, 01 Jan 2025 13:14:55 GMT - Tue, 01 Apr 2025 14:13:37 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 2199
last-modified: Fri, 10 Jan 2025 02:12:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gg75ntRC2b%2BS4EG6SfC4KYvnZV6%2BNvTZ3J0RE9f7malpszDQG%2BTSpaM5Tg8UFBpanLcUefBIzFlInXHTP0Ui2ue%2FFyM6ARwbwh5gwv%2FxmdWTUReAP%2BAQszYFGwKCYwTQuwq1Hk4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ff9599f3f5056a3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=969&min_rtt=414&rtt_var=1108&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3219&recv_bytes=1143&delivery_rate=7956043&cwnd=254&unsent_bytes=0&cid=4a937be23ae9ba4e&ts=25&x=0"
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 27 B IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintE8:14:F0:35:7D:16:C6:75:8B:49:F3:D0:CD:D7:52:BF:0E:4A:BA:B8
ValidityWed, 01 Jan 2025 13:14:55 GMT - Tue, 01 Apr 2025 14:13:37 GMT
File type ASCII text, with no line terminators
Hash b122863b88c7469ae8b854eb32fb1b83
174ab1263c35c00a28978cacfcd043b0a93cf4c2
5ed6674be6d0f15406951769236fd3678e661a17297566929cc31092fdb9e4bb
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: text/plain
set-cookie: csu=1327167161876137@1@1736477327; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cu7Z239UF5ObraQ%2B4zjyqN%2B%2Bs8pHdkCWec50YgDhIov5EbBEcq5dwjUIfLcSn7bzykOr%2FoGDwClzx%2BTiLKK1L1FcxiAW2NtKff9i%2Bvih4coLBkVlWsKHa3c8jutOI543t1mVy80%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959a00f9e56a3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=909&min_rtt=414&rtt_var=263&sent=238&recv=72&lost=0&retrans=0&sent_bytes=314974&recv_bytes=1429&delivery_rate=140687593&cwnd=254&unsent_bytes=0&cid=4a937be23ae9ba4e&ts=275&x=0"
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e5190za200
200 OK 286 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e5190za200
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
FingerprintFA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4
ValidityMon, 02 Dec 2024 08:35:56 GMT - Mon, 24 Feb 2025 08:35:55 GMT
File type JavaScript source, ASCII text, with very long lines (5960)
Size 286 kB (285723 bytes)
Hash c67cd055059243440538fde66f4279c2
391211b4b16512aba4c3b94e457b186009b8032a
e3091ce613302e03dababc56151b17d77565c7ae00346ef8c60682b9f75e05af
GET /gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e5190za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 Jan 2025 02:48:47 GMT
expires: Fri, 10 Jan 2025 02:48:47 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 100167
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/flow/frontend_assets/css/responsive.css
200 OK 3.7 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/responsive.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (3795), with no line terminators
Hash 984d21bc996f9907b59b8e80308d1d33
6d00958737d36f4d07a0920a303d230dad004a43
94ca9c89c3f698aa1a6247d089d9d866002358183a4e8376eba5452cb5182f1f
GET /themes/flow/frontend_assets/css/responsive.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-e56"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/css/custom.css
200 OK 14 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/custom.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Hash 5c6cc304ddf594371c91e46020c2dec5
5b8d133530fe6092bcd642ab20c028dd869ab45d
cb11ef787fc18b87a0420239ee788379f6218b79ac81fa012ecad676ae1cb144
GET /themes/flow/frontend_assets/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3577"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
200 OK 53 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-ce4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
200 OK 102 kB URL GET HTTP/2 ukankingwithea.com/asd100.bin
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintE8:14:F0:35:7D:16:C6:75:8B:49:F3:D0:CD:D7:52:BF:0E:4A:BA:B8
ValidityWed, 01 Jan 2025 13:14:55 GMT - Tue, 01 Apr 2025 14:13:37 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 2199
last-modified: Fri, 10 Jan 2025 02:12:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8jBpVB2gxlsFnPDOQwQdAswOpLhxTQMsJd2FTZ3ak5XtLbIwWLvYqBldtXsHjwdyKj4zJLKJ4SZHbmtXbL6liM3Oq1fLZy48hfPL4BaoBjmvRAC3gGXE9jAsYfFJalWzyeIsq%2BQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ff9599f8f7356a3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=727&min_rtt=414&rtt_var=251&sent=85&recv=25&lost=0&retrans=0&sent_bytes=107645&recv_bytes=1286&delivery_rate=45407665&cwnd=254&unsent_bytes=0&cid=4a937be23ae9ba4e&ts=77&x=0"
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 27 B IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintE8:14:F0:35:7D:16:C6:75:8B:49:F3:D0:CD:D7:52:BF:0E:4A:BA:B8
ValidityWed, 01 Jan 2025 13:14:55 GMT - Tue, 01 Apr 2025 14:13:37 GMT
File type ASCII text, with no line terminators
Hash 025e480858d4de94bbc699be6ea68be3
d36ff69e41251fdadf5de6e5cabac0ad224a160a
31f16e60d065d78ab4b0f7dfe78e35ddf4344fd734146b1d5a4a3a6bbce9da04
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: text/plain
set-cookie: csu=1902876581628550@1@1736477327; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lklmGT2FuM3ianHeFnfhuiQDvnD2OloN596GWv48I8fCgU4j4txodaCXXJ%2FNt3YHzDEoQJZ8oS4LdJHtNmDxUc%2Bz5ZW%2FXYrwqdvj7k1qPw%2BbcWjqXqMcd4ClNtUBbowiIwWmE0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff9599f8f7656a3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1420&min_rtt=414&rtt_var=1220&sent=241&recv=73&lost=0&retrans=1&sent_bytes=315703&recv_bytes=1429&delivery_rate=140687593&cwnd=254&unsent_bytes=0&cid=4a937be23ae9ba4e&ts=308&x=0"
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/js/jquery-1.11.0.min.js
200 OK 96 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery-1.11.0.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32341)
Hash 8fc25e27d42774aeae6edbc0a18b72aa
b66ed708717bf0b4a005a4d0113af8843ef3b8ff
b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682
GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1787d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
200 OK 29 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (28941)
Hash ba847811448ef90d98d272aeccef2a95
5814e91bb6276f4de8b7951c965f2f190a03978d
898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1
GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET jobfukectivetr.com/Qm5pV2dtUQokWhFdBSQwLjRMZSUROAE+PgpbJgBVcwMMAiUgDC4CQTYHDWpQdFpYY1ZkHgAzWnNIGiMGNhsaalZkBwcxCH9IH2pWbF1deVR0QF1xEn9fTyMXIwlUZkEyGh07WnNZWmFTdVlaZVBxX1k
204 No Content 0 B URL GET HTTP/3 jobfukectivetr.com/Qm5pV2dtUQokWhFdBSQwLjRMZSUROAE+PgpbJgBVcwMMAiUgDC4CQTYHDWpQdFpYY1ZkHgAzWnNIGiMGNhsaalZkBwcxCH9IH2pWbF1deVR0QF1xEn9fTyMXIwlUZkEyGh07WnNZWmFTdVlaZVBxX1k
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Qm5pV2dtUQokWhFdBSQwLjRMZSUROAE+PgpbJgBVcwMMAiUgDC4CQTYHDWpQdFpYY1ZkHgAzWnNIGiMGNhsaalZkBwcxCH9IH2pWbF1deVR0QF1xEn9fTyMXIwlUZkEyGh07WnNZWmFTdVlaZVBxX1k HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
date: Fri, 10 Jan 2025 02:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z2OM83XWctp6S9lp2PyMRcSYu0spPJGowRRAgt%2FMpKZq8BzBE4Ew9xNjb3Pyz7s2wzTT%2B3N04El8EBL2sU2Y49lec7X6YUS6ukaeCaijnR3zoMbCldgKjM6kS7TVL38QcnEEhAY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959a07b8b5690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3680&min_rtt=1592&rtt_var=2088&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4167&recv_bytes=1305&delivery_rate=372998&cwnd=12000&unsent_bytes=0&cid=79f52af7082c01f9&ts=152&x=1", cfExtPri, cfHdrFlush;dur=0
GET static.servingserved.com/n337/ad/32/69/48/e1/71/fa/e3/62/61/d9/a4/83/10/86/2b/ad/cd/b9/2e/ac/8b/13/2a/c2/4f/a3/a2/77/7c/4d/5b/300x250_cd.jpeg
200 OK 6.3 kB URL GET HTTP/1.1 static.servingserved.com/n337/ad/32/69/48/e1/71/fa/e3/62/61/d9/a4/83/10/86/2b/ad/cd/b9/2e/ac/8b/13/2a/c2/4f/a3/a2/77/7c/4d/5b/300x250_cd.jpeg
IP
ASN #20940 Akamai International B.V.
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerLet's Encrypt
Subjectstatic.servingserved.com
FingerprintDB:B9:DE:E0:C9:DD:D5:A9:3F:BB:E5:17:DB:F8:C6:E1:12:F5:F5:2D
ValidityTue, 10 Dec 2024 16:38:12 GMT - Mon, 10 Mar 2025 16:38:11 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x250, components 3
Hash 59ed953c79dcaea508919a4e61c63d96
9ba8e5a06af9ba761b6095d2fdae37c0ce05bec4
326948e171fae36261d9a48310862badcdb92eac8b132ac24fa3a2777c4d5bcd
GET /n337/ad/32/69/48/e1/71/fa/e3/62/61/d9/a4/83/10/86/2b/ad/cd/b9/2e/ac/8b/13/2a/c2/4f/a3/a2/77/7c/4d/5b/300x250_cd.jpeg HTTP/1.1
Host: static.servingserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/jpeg
Content-Length: 6269
Last-Modified: Tue, 16 Apr 2024 19:38:46 GMT
ETag: "661ed3c6-187d"
Accept-Ranges: bytes
Cache-Control: max-age=14460
Expires: Fri, 10 Jan 2025 06:49:51 GMT
Date: Fri, 10 Jan 2025 02:48:51 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
GET ukankingwithea.com/asd100.bin
200 OK 102 kB URL GET HTTP/2 ukankingwithea.com/asd100.bin
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintE8:14:F0:35:7D:16:C6:75:8B:49:F3:D0:CD:D7:52:BF:0E:4A:BA:B8
ValidityWed, 01 Jan 2025 13:14:55 GMT - Tue, 01 Apr 2025 14:13:37 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 2199
last-modified: Fri, 10 Jan 2025 02:12:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYRFJQ6bvZOK3BrVBA3snlBSrQ3YyEIQsZILR9%2BHix4eiMq6152Ms8dMdlfZFm7terIzZ%2FzcPQAOeEUdT%2B%2FfLT1OCf8pRtuGaQ0Hc8H1g25a2i5o1GR9ci%2Bqq5dolP7O5Pxbwr8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ff959a00f9d56a3-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=784&min_rtt=414&rtt_var=119&sent=163&recv=60&lost=0&retrans=0&sent_bytes=211795&recv_bytes=1429&delivery_rate=140687593&cwnd=254&unsent_bytes=0&cid=4a937be23ae9ba4e&ts=154&x=0"
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico
200 OK 1.2 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash e95c130b43ef6c32b9c9459aff5706c1
51b8b0d3ae3eabd9c31e65098acfa9ba18e9bb30
6c3dde0843949903d807800c8d6706e357fd762d29885946bacac881d4abfb35
GET /themes/flow/frontend_assets/images/icons/favicon/favicon.ico HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2; _ga_Z9TE2LW16Q=GS1.1.1736477327.1.0.1736477327.0.0.0; _ga=GA1.1.1278880682.1736477328
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:48 GMT
content-type: image/x-icon
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-47e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/styles/file-upload.css
200 OK 8.7 kB URL GET HTTP/2 megaup.net/themes/flow/styles/file-upload.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with very long lines (9188), with no line terminators
Hash e6aa00105765c90499065e7b4953475e
c214db0a0c9ceda57bef567789961817554e01c9
33af7cdbf9e003d6a268f344b7d9fd8fc39d19b0a412b9eaa4487d509a4a54b1
GET /themes/flow/styles/file-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 27 B IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintE8:14:F0:35:7D:16:C6:75:8B:49:F3:D0:CD:D7:52:BF:0E:4A:BA:B8
ValidityWed, 01 Jan 2025 13:14:55 GMT - Tue, 01 Apr 2025 14:13:37 GMT
File type ASCII text, with no line terminators
Hash 733a15e9dbddabc104dbaef9196197c5
fe6690563bc3583e24361b62457919eac57bc372
8659dd7af7a02263b3767de391b45050931cac1adfabcad0c4e07023b68f7058
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Cookie: csu=1487173879304652@1@1736477327
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 Jan 2025 02:48:47 GMT
content-type: text/plain
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7YUZZXBR8mPxeNxaedkP4xnDVHUmDeK%2B883hYXDt3KBoxaV9jviJlRT6QeQLkr6TurGGBYzYgOYL1u9DjKDgrCNbn7e1LHXkCYFYQ6WEI4OUD9T9J7BCOrYbJHq0sTvO9yal7Aw%3D"}],"group":"cf-nel","max_age":604800}
set-cookie: csu=1487173879304652@2@1736477327; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 8ff959a07efc712d-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET jobfukectivetr.com/TmU2dVFhWlUGbCoPbEYzIidyNBQYA1cgMgY0cC84GhJgNgkZDhABOCpYDkdkd1QHUyEnAQtGY2gWQhQlOxYLRHcnC1AabGgTC0V/d0sEW2doEAtEdzoVVxJsf0NGASUiWAdCYnhRAUJifFIEQGY
204 No Content 0 B URL GET HTTP/2 jobfukectivetr.com/TmU2dVFhWlUGbCoPbEYzIidyNBQYA1cgMgY0cC84GhJgNgkZDhABOCpYDkdkd1QHUyEnAQtGY2gWQhQlOxYLRHcnC1AabGgTC0V/d0sEW2doEAtEdzoVVxJsf0NGASUiWAdCYnhRAUJifFIEQGY
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TmU2dVFhWlUGbCoPbEYzIidyNBQYA1cgMgY0cC84GhJgNgkZDhABOCpYDkdkd1QHUyEnAQtGY2gWQhQlOxYLRHcnC1AabGgTC0V/d0sEW2doEAtEdzoVVxJsf0NGASUiWAdCYnhRAUJifFIEQGY HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 10 Jan 2025 02:48:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VXhne%2BILMJ8%2BUpqNMoGGAYLyKepYGpSqpvbDm2czcCXux699Ku8il4p81fseJmniZwnTMcYAXrIOEWx%2FTATG%2FVjifrb%2BSVyOQU7%2FqZnYTqiYwCkwShgUasIfYjcQ3FAjxw4M%2Fvo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8ff959a00b3f568e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=11121&min_rtt=468&rtt_var=16395&sent=12&recv=15&lost=0&retrans=0&sent_bytes=4299&recv_bytes=2067&delivery_rate=7387755&cwnd=256&unsent_bytes=0&cid=e34efd99a1adc13c&ts=247&x=0"
X-Firefox-Spdy: h2
GET jobfukectivetr.com/popunder.gif
200 OK 0 B URL GET jobfukectivetr.com/popunder.gif
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerGoogle Trust Services
Subjectjobfukectivetr.com
FingerprintDF:EC:FB:7B:F7:49:A8:4A:CB:53:6A:D1:53:84:E1:BB:CF:33:9D:49
ValidityMon, 06 Jan 2025 09:58:02 GMT - Sun, 06 Apr 2025 10:56:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /popunder.gif HTTP/1.1
Host: jobfukectivetr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 Jan 2025 02:48:48 GMT
content-type: image/gif
content-length: 58
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 101461
last-modified: Wed, 08 Jan 2025 22:37:47 GMT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UNf%2Fbc9w2Qc7EdA%2FPSJsSJX0%2BEhyBzJ4xEGbZWh%2BzZWxr0YmzaHRJL2zac6CuLJwKojsk0%2BICImm%2BCT%2FUUS53KgDa6xqmZDLng3DoKdcw1AsM%2F%2BDwvpSCqOk5f7fsZeZqobitVw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ff959a53d1c5690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10114&min_rtt=1592&rtt_var=14434&sent=16&recv=10&lost=0&retrans=1&sent_bytes=5522&recv_bytes=1618&delivery_rate=5898&cwnd=12000&unsent_bytes=0&cid=79f52af7082c01f9&ts=801&x=1", cfExtPri, cfHdrFlush;dur=0
GET megaup.net/themes/flow/js/jquery.fileupload-process.js
200 OK 5.3 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-process.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (5466), with no line terminators
Hash 84f8554400d04b9a321a8f255455db13
2769a1ca8116367636343875b340505939ceff71
43958ee1d314b9876d5cd635dfd55f2b14aaacb83ee73ee276c1a96120d6dfd0
GET /themes/flow/js/jquery.fileupload-process.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/flow/frontend_assets/css/fonts.css
200 OK 1.7 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/fonts.css
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (1734), with no line terminators
Hash 4d22ff28e999a5c332705be886a5984b
8f458405367020346f614bbe41d21da151fdfa87
65e973e0ec1ed64f42a2ad48e4d02a34c9db54a7340761d86c53149a508e9b32
GET /themes/flow/frontend_assets/css/fonts.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-690"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET rvardsusyseinp.org/bUhXMnoMKjRfRQx1NRQPHyRqF0grbWV0Hl4tPEEcFSQxBRgbcT8cGQEnIlYcHyc5RlQDLSMXSCt6Glg8KwUCQig1ISNqHjgSDnsrFXEVczhdCw9FLzwcM2c2LHE0ezw0OgUCPB8QLgs9KzFucTA7MBVXPS9tZXQeAREccCgBAA5xCgQqEmg2JBkvBDwreDxqA10YEUs4CwMGCjs0eRZHLywwL3QAWAsPW04gARJ4GCQNEkAiOztuZD0VAAJ6Eg4CAlojJh5nQDwaBRNwPTwLEXoZLxE8XTsJCgUHGS8aZHMpNyoPSDgnKiBzOD0ZOwoYPCwvdDIBPxF6Vw4KGHcrOCw5cAAvCm4DPSpwFnMpJx0cZBYIERZ/NywJEQI7NScTcyI8HTJzMDUEEn8MOw5jCzwlIGdxMiAuMlooKC0Wc1wHOzhcClAZYnYdInwERysCGw
200 OK 3.0 kB URL GET HTTP/2 rvardsusyseinp.org/bUhXMnoMKjRfRQx1NRQPHyRqF0grbWV0Hl4tPEEcFSQxBRgbcT8cGQEnIlYcHyc5RlQDLSMXSCt6Glg8KwUCQig1ISNqHjgSDnsrFXEVczhdCw9FLzwcM2c2LHE0ezw0OgUCPB8QLgs9KzFucTA7MBVXPS9tZXQeAREccCgBAA5xCgQqEmg2JBkvBDwreDxqA10YEUs4CwMGCjs0eRZHLywwL3QAWAsPW04gARJ4GCQNEkAiOztuZD0VAAJ6Eg4CAlojJh5nQDwaBRNwPTwLEXoZLxE8XTsJCgUHGS8aZHMpNyoPSDgnKiBzOD0ZOwoYPCwvdDIBPxF6Vw4KGHcrOCw5cAAvCm4DPSpwFnMpJx0cZBYIERZ/NywJEQI7NScTcyI8HTJzMDUEEn8MOw5jCzwlIGdxMiAuMlooKC0Wc1wHOzhcClAZYnYdInwERysCGw
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerAmazon
Subjectrvardsusyseinp.org
Fingerprint28:4E:4F:6A:20:8D:63:DF:2E:D8:F3:C3:0C:47:9B:0A:29:80:90:9B
ValiditySun, 10 Nov 2024 00:00:00 GMT - Tue, 09 Dec 2025 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3063), with no line terminators
Hash 60ae74c24e5c076522742868553d23b0
172d9470effe54191fe89cb795fcbdc6db9f5f25
b11cf2e31ea596c48ad1fdb5f14999ab0c5921030dfb336ef1015a9d4d7ba61f
GET /bUhXMnoMKjRfRQx1NRQPHyRqF0grbWV0Hl4tPEEcFSQxBRgbcT8cGQEnIlYcHyc5RlQDLSMXSCt6Glg8KwUCQig1ISNqHjgSDnsrFXEVczhdCw9FLzwcM2c2LHE0ezw0OgUCPB8QLgs9KzFucTA7MBVXPS9tZXQeAREccCgBAA5xCgQqEmg2JBkvBDwreDxqA10YEUs4CwMGCjs0eRZHLywwL3QAWAsPW04gARJ4GCQNEkAiOztuZD0VAAJ6Eg4CAlojJh5nQDwaBRNwPTwLEXoZLxE8XTsJCgUHGS8aZHMpNyoPSDgnKiBzOD0ZOwoYPCwvdDIBPxF6Vw4KGHcrOCw5cAAvCm4DPSpwFnMpJx0cZBYIERZ/NywJEQI7NScTcyI8HTJzMDUEEn8MOw5jCzwlIGdxMiAuMlooKC0Wc1wHOzhcClAZYnYdInwERysCGw HTTP/1.1
Host: rvardsusyseinp.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1189
date: Fri, 10 Jan 2025 02:48:47 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=q0ZW1wqlcsBIsh5x0y8AFqV/wvZFZkd4keze6TCkWqb1yQuMaKA/nQfGf6DRIYU8cT2JTaGjMAB7PNuS+gmts1O18ri0Vrg7Iw/HFldAePkoeVOcMiC+VCOj7VGQ; Expires=Fri, 17 Jan 2025 02:48:47 GMT; Path=/
AWSALBCORS=q0ZW1wqlcsBIsh5x0y8AFqV/wvZFZkd4keze6TCkWqb1yQuMaKA/nQfGf6DRIYU8cT2JTaGjMAB7PNuS+gmts1O18ri0Vrg7Iw/HFldAePkoeVOcMiC+VCOj7VGQ; Expires=Fri, 17 Jan 2025 02:48:47 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 c26999728b9b80253ea8308df470deba.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: bCGW8TWolX7WYDpu3liu9w6BYZdzqVu42vYlJBS6jDI0IVlitpXOnQ==
X-Firefox-Spdy: h2
GET theharityhild.buzz/NTZLZ1ZOFDgQCUBEJ0VsF14%2FEyZGDGRIO1BRKhImG1guE3lGQWUNJRcaaRQ7UxRxVnoXRSYRdA8Uf0llFxppEzdSaSIDdA8Uc1RkAwV4RXoXRT4FCVxSeUVsF1BzVGVWBn8FewNTewV7AVIpV3sMAnNQe1MALgIzVlMoBDVWU2ka
0 B URL GET theharityhild.buzz/NTZLZ1ZOFDgQCUBEJ0VsF14%2FEyZGDGRIO1BRKhImG1guE3lGQWUNJRcaaRQ7UxRxVnoXRSYRdA8Uf0llFxppEzdSaSIDdA8Uc1RkAwV4RXoXRT4FCVxSeUVsF1BzVGVWBn8FewNTewV7AVIpV3sMAnNQe1MALgIzVlMoBDVWU2ka
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NTZLZ1ZOFDgQCUBEJ0VsF14%2FEyZGDGRIO1BRKhImG1guE3lGQWUNJRcaaRQ7UxRxVnoXRSYRdA8Uf0llFxppEzdSaSIDdA8Uc1RkAwV4RXoXRT4FCVxSeUVsF1BzVGVWBn8FewNTewV7AVIpV3sMAnNQe1MALgIzVlMoBDVWU2ka HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET megaup.net/themes/flow/js/jquery.fileupload-validate.js
200 OK 4.1 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-validate.js
IP
Requested by https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4192), with no line terminators
Hash 4ad5c2f2ed0230271d44a12b09ea1361
2070df63b71eda62f5a90b091595ef67595273b7
84047dced279f3c811d4cb54e6a5dc9310569b51eba58aec89f03ced7bfadafc
GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/db9ff91d2fccce4eb80ea77c77f3eafe/CRYPTCUSTDN-(USA)-NSwTcH-[BASE]-NSP-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=agupq3pvdi5dhofsul839enjn2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 Jan 2025 02:48:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-fea"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
91.209.70.182
142.250.74.168
104.21.39.86
23.36.77.89
0.0.0.0