| epicdn.net/cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0Mzc4NjAzNbICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= |  0.0.0.0 | | 0 B |
URL GET epicdn.net/cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0Mzc4NjAzNbICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= IP0.0.0.0:0
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0Mzc4NjAzNbICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= HTTP/1.1
Host: epicdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| ukankingwithea.com/ | 104.21.16.1 | 500 Internal Server Error | 183 B |
IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeHTML document, ASCII text, with no line terminators Hash7320c1db3ab6706d7a944a0983212848 04882537a81a139c1c8802c77c05b863060c5dd0 7d5514f4c18b076095cba3eb17ab3be2c482b80454aab16367ed502a7d8d46c6
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
date: Fri, 04 Apr 2025 17:00:34 GMT
content-type: text/html
server: cloudflare
cf-cache-status: DYNAMIC
cf-ray: 92b25cd838d10b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| inoutweiledstever.org/NXdoN24aSAtEU2dELk0LYRtNBShkIiJnKls1LWU7dDgMciBwIx9ESEEeDApWB0JRBl8TBwFTUwZFTkQaVAMdRFMHR1gASFwZDlhTB1EeCl4bTkYFQANRHQpDB1EcRw9SSlkRHkEDBApfAkNbAFYDR1sDWQJE | 104.21.16.1 | 204 No Content | 0 B |
URL POST inoutweiledstever.org/NXdoN24aSAtEU2dELk0LYRtNBShkIiJnKls1LWU7dDgMciBwIx9ESEEeDApWB0JRBl8TBwFTUwZFTkQaVAMdRFMHR1gASFwZDlhTB1EeCl4bTkYFQANRHQpDB1EcRw9SSlkRHkEDBApfAkNbAFYDR1sDWQJE IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectinoutweiledstever.org FingerprintBE:BA:72:BE:B6:34:F2:F9:68:EC:C8:CF:F7:9E:6B:DC:69:FC:B8:C1 ValidityMon, 17 Feb 2025 13:24:05 GMT - Sun, 18 May 2025 14:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /NXdoN24aSAtEU2dELk0LYRtNBShkIiJnKls1LWU7dDgMciBwIx9ESEEeDApWB0JRBl8TBwFTUwZFTkQaVAMdRFMHR1gASFwZDlhTB1EeCl4bTkYFQANRHQpDB1EcRw9SSlkRHkEDBApfAkNbAFYDR1sDWQJE HTTP/1.1
Host: inoutweiledstever.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Fri, 04 Apr 2025 17:00:35 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5bCALFU%2F%2B2w%2FdR14m8y89Rjq4m1F5u%2BfEGLNwVdrmzdhZYSXMvtpocUY0uI3DIirvChbbdKwkzebU7ZYvFD6BBP6EDuu8RWO85iX89NYBh8Y6xKP3lr2dGa5OUpVqfRuswb%2FiOdn44Q%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 92b25cde4f7556c0-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| kmtendationfore.org/floater?cs=dkh2NldOeEcAYEF9QA9gRXpBAGU&abt=0&red=1&sm=83&k=schedule%203f15&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=-2&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=49.21259842519685&ref=https%3A%2F%2Fmegaup.net%2F76d26420052938e418afbc56bcf1e9bc%2FSchedule.I.v.0.3.3f15.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_X3Kk=1743786034776&crc=1 |  3.164.68.118 | 200 OK | 10 kB |
URL GET kmtendationfore.org/floater?cs=dkh2NldOeEcAYEF9QA9gRXpBAGU&abt=0&red=1&sm=83&k=schedule%203f15&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=-2&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=49.21259842519685&ref=https%3A%2F%2Fmegaup.net%2F76d26420052938e418afbc56bcf1e9bc%2FSchedule.I.v.0.3.3f15.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_X3Kk=1743786034776&crc=1 IP3.164.68.118:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerAmazon Subjectkmtendationfore.org Fingerprint1D:04:BE:FF:DA:46:50:36:23:B0:DB:DE:97:5B:D1:19:8D:F3:12:0B ValiditySat, 29 Mar 2025 00:00:00 GMT - Mon, 27 Apr 2026 23:59:59 GMT
File typeASCII text, with very long lines (10451), with no line terminators Hashe4fa085961a8e5dd23f64c95cfb1b254 cd766d721977fcae702338649cb69a5085cf2807 caef5cde516bcf84c6165588fbf43f173d859deb610e5fcc62529bc70dc6441f
GET /floater?cs=dkh2NldOeEcAYEF9QA9gRXpBAGU&abt=0&red=1&sm=83&k=schedule%203f15&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=-2&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=49.21259842519685&ref=https%3A%2F%2Fmegaup.net%2F76d26420052938e418afbc56bcf1e9bc%2FSchedule.I.v.0.3.3f15.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_X3Kk=1743786034776&crc=1 HTTP/1.1
Host: kmtendationfore.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 6812
date: Fri, 04 Apr 2025 17:00:35 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=e69jaMhBul3b0oVliHDwdrIcpb9hDNLBQRcy+aph/afh5uwImthbj4yHUdc2gBhVkSbcrOTOYV2VBxLUVI1I09msZFUHvFAkS/HlJiri1H9C+FFwFN77J2DtE3g2; Expires=Fri, 11 Apr 2025 17:00:35 GMT; Path=/
AWSALBCORS=e69jaMhBul3b0oVliHDwdrIcpb9hDNLBQRcy+aph/afh5uwImthbj4yHUdc2gBhVkSbcrOTOYV2VBxLUVI1I09msZFUHvFAkS/HlJiri1H9C+FFwFN77J2DtE3g2; Expires=Fri, 11 Apr 2025 17:00:35 GMT; Path=/; SameSite=None
csu=a32ed074-081e-4cda-ba8f-f6433f2a1e3c
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b786785c2b438022738ad59ea5d98818.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P4
x-amz-cf-id: YJuqPgw3zxGTXECvzMK5e0XWoGiAwxCc8Rlorp80_mYKft5qCaJz7w==
X-Firefox-Spdy: h2
|
|
| inoutweiledstever.org/VnRYekp5SzsJdzIfChAQZhgaHnsyJj5KLm4hDjB8BCwWGB8eH34OIzJJYU5zbkJsXDo/EGVLcnAHLBs+IwdlS2w/Gj4Vd3ACZUtkZlpqVH9wAWVLbCIEOR13Z1IoDj46SWlNfmVDYEx6ZUZuSnk | 104.21.16.1 | 204 No Content | 0 B |
URL GET inoutweiledstever.org/VnRYekp5SzsJdzIfChAQZhgaHnsyJj5KLm4hDjB8BCwWGB8eH34OIzJJYU5zbkJsXDo/EGVLcnAHLBs+IwdlS2w/Gj4Vd3ACZUtkZlpqVH9wAWVLbCIEOR13Z1IoDj46SWlNfmVDYEx6ZUZuSnk IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectinoutweiledstever.org FingerprintBE:BA:72:BE:B6:34:F2:F9:68:EC:C8:CF:F7:9E:6B:DC:69:FC:B8:C1 ValidityMon, 17 Feb 2025 13:24:05 GMT - Sun, 18 May 2025 14:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /VnRYekp5SzsJdzIfChAQZhgaHnsyJj5KLm4hDjB8BCwWGB8eH34OIzJJYU5zbkJsXDo/EGVLcnAHLBs+IwdlS2w/Gj4Vd3ACZUtkZlpqVH9wAWVLbCIEOR13Z1IoDj46SWlNfmVDYEx6ZUZuSnk HTTP/1.1
Host: inoutweiledstever.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 04 Apr 2025 17:00:34 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JI%2BJuwOdcvC%2FiVT2%2FeZ74qZfVo5ZFYAveyyFmYi9BZNgFqI%2BdsAfdKqCzlWAkSw0jxdXPN6nlSONSuqiOBfn0pdSXggRMrEVcqsxg3EkGRXMEZGheZ05zUV%2Fi%2BAAp1ORschBf3Io8E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cd9188a0b45-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=4398&min_rtt=465&rtt_var=7748&sent=14&recv=19&lost=0&retrans=0&sent_bytes=3992&recv_bytes=1951&delivery_rate=6295652&cwnd=257&unsent_bytes=0&cid=c626aff5a272df7b&ts=1192&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/flickity.css | 104.26.0.140 | 200 OK | 2.5 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/flickity.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeASCII text, with very long lines (2779), with no line terminators Hash4040ddc4592357aa95e5b03666bb80b6 b191ec1fcbdba4b6226b810d2642e7f2bf0a62b1 9d0cf79eed67f5ec9cb724a396f7dd7f11e3bce37ae2b1b60605fdf3b873ac08
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-9d9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jt3iZCV%2B4t4vLZQru8mCa5bpht7oLPJrw9Klh0xPT9sfk6kvW2dei%2BWFzrCZRuz3zf5VI6zdWCWNex5WknAhTCECc4y%2FsaeC%2FnMUSU2z%2BDxW9FZZeyF7e2RHP8g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc78bf456cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=852&min_rtt=450&rtt_var=332&sent=154&recv=53&lost=0&retrans=0&sent_bytes=179107&recv_bytes=2404&delivery_rate=18928104&cwnd=150&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1290&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css | 104.26.0.140 | 200 OK | 739 B |
URL GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeASCII text, with very long lines (817), with no line terminators Hash581dfeffe488c736df5f5405cf0dd175 f04eeb2da59fccaf703f5430cae7cd469ece1ebd 6331340282e34137079cbc55d211e8cbfd95970de3e8cdd414c3bc1714940f63
GET /themes/spirit/assets/frontend/css/mu-waiting-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: text/css
last-modified: Mon, 17 Feb 2025 00:39:28 GMT
vary: Accept-Encoding
etag: W/"67b28540-2e3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oVhtE4psea53n77fBJvbZxegEZv6h%2FcGFDfRDdL6AH1YNk7%2BcZfrMzrpciOWp%2BgEIcSbjdGil9ewY8wDdrf7Cu%2FDpblyHGZY7294WLDCqknj9tBOYz8rqrFCa7s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc79c2e56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1174&min_rtt=450&rtt_var=798&sent=159&recv=60&lost=0&retrans=0&sent_bytes=180543&recv_bytes=3155&delivery_rate=18928104&cwnd=130&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1300&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/typed.min.js | 104.26.0.140 | 200 OK | 3.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (4016), with no line terminators Hash774397f3c0e528c9236aa2aa52e7f00d 8827256327d046805954084e9b5002247e073ceb d2b259a9bb83973272b1e93c242646451df16bc3860ac6c8f3689df92ad98140
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f6d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rIxTnfrbw%2F8QrbI7WI7ROTH%2BDWqRe2PWJ1O8a7QO5UrwZilp7cHZ%2F8YyoayW2a5Vz6B6%2Fb%2FTsLnzDmGidQoUjt9nRJ22Ku%2FjPs%2F87%2Bm5eYVz7w8AsX%2BkqzwPXH4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7ac5156cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=740&min_rtt=450&rtt_var=220&sent=250&recv=105&lost=0&retrans=0&sent_bytes=282729&recv_bytes=3737&delivery_rate=29032581&cwnd=122&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1318&x=0"
X-Firefox-Spdy: h2
|
|
| rnmop.com/ie?v=4&c=GJuW9Xj5jv3aNAkSejMnBazs5e0TSXsYVAeP6o6tTV8bjq2axXRlWPEGj3XpjgR6D2OS4FRaXf4kLwVfHxx06UqKDfrUDIQpw1HMTCsDD-G_X1cZTriK4J3Ua54OJQgoFDr8U5GKM9hHuVU9snkZY5jZ6rHAlwwl0xPbjYhM7xpWdN7Gcgttf62iQTG6_FQszRBwmzBpjrt5smS-5UmbxiR4H2fezxvhbYP51OoQv6i7eip9IUiQnO1aHBphaBd8-s76Jx8N8LhtO7i5lm-cDUeCp6N9-xbLYAP67BKUjHofSiWQ5NScSmGpGLXHq2teGlg88VsCmeOt0bxlNneuKUPj2efCjJC7EyZZF9v71r-hpM4Mb_3y0iXTHXaWZ-hH8bbXetzRNP2k9uzDQQGT1trMbcjIDOPoqJfJ9LSbk_91zLtKW9iHLgrFnHjillsqKTDKsQFUSgvTk_wW0N9WtZnjrOPpnlhsaQ==&v1=79&v2=71517 |  213.239.207.252 | 301 Moved Permanently | 59 kB |
URL GET rnmop.com/ie?v=4&c=GJuW9Xj5jv3aNAkSejMnBazs5e0TSXsYVAeP6o6tTV8bjq2axXRlWPEGj3XpjgR6D2OS4FRaXf4kLwVfHxx06UqKDfrUDIQpw1HMTCsDD-G_X1cZTriK4J3Ua54OJQgoFDr8U5GKM9hHuVU9snkZY5jZ6rHAlwwl0xPbjYhM7xpWdN7Gcgttf62iQTG6_FQszRBwmzBpjrt5smS-5UmbxiR4H2fezxvhbYP51OoQv6i7eip9IUiQnO1aHBphaBd8-s76Jx8N8LhtO7i5lm-cDUeCp6N9-xbLYAP67BKUjHofSiWQ5NScSmGpGLXHq2teGlg88VsCmeOt0bxlNneuKUPj2efCjJC7EyZZF9v71r-hpM4Mb_3y0iXTHXaWZ-hH8bbXetzRNP2k9uzDQQGT1trMbcjIDOPoqJfJ9LSbk_91zLtKW9iHLgrFnHjillsqKTDKsQFUSgvTk_wW0N9WtZnjrOPpnlhsaQ==&v1=79&v2=71517 IP213.239.207.252:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerLet's Encrypt Subjectnimrute.com FingerprintE0:1D:F6:81:34:02:68:16:68:12:1A:02:F1:F0:73:EE:D7:49:2D:3B ValidityTue, 11 Feb 2025 10:57:43 GMT - Mon, 12 May 2025 10:57:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=GJuW9Xj5jv3aNAkSejMnBazs5e0TSXsYVAeP6o6tTV8bjq2axXRlWPEGj3XpjgR6D2OS4FRaXf4kLwVfHxx06UqKDfrUDIQpw1HMTCsDD-G_X1cZTriK4J3Ua54OJQgoFDr8U5GKM9hHuVU9snkZY5jZ6rHAlwwl0xPbjYhM7xpWdN7Gcgttf62iQTG6_FQszRBwmzBpjrt5smS-5UmbxiR4H2fezxvhbYP51OoQv6i7eip9IUiQnO1aHBphaBd8-s76Jx8N8LhtO7i5lm-cDUeCp6N9-xbLYAP67BKUjHofSiWQ5NScSmGpGLXHq2teGlg88VsCmeOt0bxlNneuKUPj2efCjJC7EyZZF9v71r-hpM4Mb_3y0iXTHXaWZ-hH8bbXetzRNP2k9uzDQQGT1trMbcjIDOPoqJfJ9LSbk_91zLtKW9iHLgrFnHjillsqKTDKsQFUSgvTk_wW0N9WtZnjrOPpnlhsaQ==&v1=79&v2=71517 HTTP/1.1
Host: rnmop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Fri, 04 Apr 2025 17:00:41 GMT
content-length: 0
location: https://img.vmmcdn.com/get/62987579/238427_icon.png
x-app-id: 12
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 | 142.250.178.99 | 200 OK | 25 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 IP142.250.178.99:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24984, version 1.0 Hash303a79d404d97ccbb3d803088fc387d8 66e3525b79a1a58a63fe0934f31676dd40c7f033 7e510e61c497d334da21eccda06df5d3a428c9ea94d6903b6138e7c7255aba0f
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 18:17:05 GMT
expires: Fri, 03 Apr 2026 18:17:05 GMT
cache-control: public, max-age=31536000
age: 81807
last-modified: Thu, 14 Dec 2023 02:04:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| undefined/TlZGSVMvNCUkbC9rJG8mPDp7bGEIc3QPN31lJCg4JiYweSI2PiBnMCI5My01PDkoPX0gMzJsYQhuCHoJIAMCAwYJBy17FxsbIAhhfh0HDBEbDxcmAQw+E3gFDzkkCDkqAhcuCQQGKi0XGxd2IwsYPQEeNC0REwswGBAOOWQMIX8lNzYTBQEHHwYEeBICGxAxAh1mA3gLCAQKHz0UAhMxAS8MBBsXDDEhfhd+Yg4BOToHEBs8DBt2EAEPIRw9C38xCw05NjMQJR0YECEqCRw9DCASJm4EDTl7AREIFhsyFwgbCRQIeBIPMg4fYHoVAyIGIjIXCBsPB2t9dnwUBAgdGgAEAAsMAx8vCSkPFRsAGGcHCDALEx4cESo9IhwJDCEOEWMEPwclEhoUAj03Cz0XIQopHwEbPyo+By4JGgARCwYWMRcKHSJnFhxiGwEHPgENBREIBh89Mh51JCUpJyNzAXIuMjwSDgUiJmMD | 0.0.0.0 | | 0 B |
URL GET undefined/TlZGSVMvNCUkbC9rJG8mPDp7bGEIc3QPN31lJCg4JiYweSI2PiBnMCI5My01PDkoPX0gMzJsYQhuCHoJIAMCAwYJBy17FxsbIAhhfh0HDBEbDxcmAQw+E3gFDzkkCDkqAhcuCQQGKi0XGxd2IwsYPQEeNC0REwswGBAOOWQMIX8lNzYTBQEHHwYEeBICGxAxAh1mA3gLCAQKHz0UAhMxAS8MBBsXDDEhfhd+Yg4BOToHEBs8DBt2EAEPIRw9C38xCw05NjMQJR0YECEqCRw9DCASJm4EDTl7AREIFhsyFwgbCRQIeBIPMg4fYHoVAyIGIjIXCBsPB2t9dnwUBAgdGgAEAAsMAx8vCSkPFRsAGGcHCDALEx4cESo9IhwJDCEOEWMEPwclEhoUAj03Cz0XIQopHwEbPyo+By4JGgARCwYWMRcKHSJnFhxiGwEHPgENBREIBh89Mh51JCUpJyNzAXIuMjwSDgUiJmMD IP0.0.0.0:0
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /TlZGSVMvNCUkbC9rJG8mPDp7bGEIc3QPN31lJCg4JiYweSI2PiBnMCI5My01PDkoPX0gMzJsYQhuCHoJIAMCAwYJBy17FxsbIAhhfh0HDBEbDxcmAQw+E3gFDzkkCDkqAhcuCQQGKi0XGxd2IwsYPQEeNC0REwswGBAOOWQMIX8lNzYTBQEHHwYEeBICGxAxAh1mA3gLCAQKHz0UAhMxAS8MBBsXDDEhfhd+Yg4BOToHEBs8DBt2EAEPIRw9C38xCw05NjMQJR0YECEqCRw9DCASJm4EDTl7AREIFhsyFwgbCRQIeBIPMg4fYHoVAyIGIjIXCBsPB2t9dnwUBAgdGgAEAAsMAx8vCSkPFRsAGGcHCDALEx4cESo9IhwJDCEOEWMEPwclEhoUAj03Cz0XIQopHwEbPyo+By4JGgARCwYWMRcKHSJnFhxiGwEHPgENBREIBh89Mh51JCUpJyNzAXIuMjwSDgUiJmMD HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png | 104.26.0.140 | 200 OK | 590 B |
URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hashed3d11830b3e136b384f2a0b8082f235 3b75f2a64d528165f108d62e8c30d464b76945d7 1aef6752088fe69a166d3a84375431e1041dde8fa3f9ccbde26accb220feb4a5
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:35 GMT
content-type: image/png
content-length: 590
cf-bgj: h2pri,csam-hash
etag: "67ae2ee8-24e"
last-modified: Thu, 13 Feb 2025 17:42:00 GMT
referrer-policy: no-referrer, strict-origin-when-cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LT6ameH1C8vepl6F%2FLy33BCBNGD8vhVF2%2FGMf2cKe73C8EtCXYWueR2%2Fw1cp7ubpgvHttMDjhdMRVxfY8SNmzanI7qS34V%2BAfqup6zcJalbXz7MQcF235H1%2FRNY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cddfb6956cb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1215&min_rtt=450&rtt_var=101&sent=496&recv=258&lost=0&retrans=1&sent_bytes=594886&recv_bytes=4461&delivery_rate=49812574&cwnd=180&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=5078&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.10 | 200 OK | 565 B |
URL GET fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.10:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint3C:2E:67:30:A6:95:F3:D3:61:49:AB:AC:BC:D1:CF:77:3E:33:8F:B7 ValidityThu, 20 Mar 2025 11:19:46 GMT - Thu, 12 Jun 2025 11:19:45 GMT
File typeASCII text, with very long lines (588), with no line terminators Hash283d5dd736e10a0a1b9a4054df3d4598 26a5edb8227ac0ac198ac98dab634e7cd90dee00 71e870cc32e88d059f7d4ed2cf2d71856f78c367d48853f6fb13ad3120e1530e
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 04 Apr 2025 17:00:31 GMT
date: Fri, 04 Apr 2025 17:00:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.16.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:32 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: STALE
age: 652206
last-modified: Fri, 28 Mar 2025 03:50:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bs0FEgYDnvgH2ODUIIAII9MjqComflLQbP8%2B61h0I2AWhbtGhvltPV%2Fy%2BsBng6aToadkXIUb9itNP%2BHZCx2wP99rDQBi%2B%2Bw4CjXwB7b4HNl14wHAQ7l%2FGFShtvVog5e%2FyybwUqo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92b25cd00c8d0b02-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1361&min_rtt=527&rtt_var=1345&sent=11&recv=13&lost=0&retrans=0&sent_bytes=3606&recv_bytes=1151&delivery_rate=6672811&cwnd=257&unsent_bytes=0&cid=a5513fc21d808079&ts=319&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.16.1 | 500 Internal Server Error | 183 B |
IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeHTML document, ASCII text, with no line terminators Hash7320c1db3ab6706d7a944a0983212848 04882537a81a139c1c8802c77c05b863060c5dd0 7d5514f4c18b076095cba3eb17ab3be2c482b80454aab16367ed502a7d8d46c6
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
date: Fri, 04 Apr 2025 17:00:33 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c1u5je2QGnnuP2MEf7Ef%2Fhu0%2FeiDdQr1wugy%2FiTNf%2BQ1nY0EOhiGelY4HVYYPX0khfUMMI%2Bz6XzLCgSlr4V08B7g1JjmC5WOOuHsrp8A%2BME8O8rUQcWhTWy0pGMe1LGAgp1WybM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cd4fbeb0b02-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=785&min_rtt=495&rtt_var=71&sent=166&recv=75&lost=0&retrans=2&sent_bytes=213321&recv_bytes=1294&delivery_rate=32563718&cwnd=162&unsent_bytes=0&cid=a5513fc21d808079&ts=1103&x=0"
X-Firefox-Spdy: h2
|
|
| theharityhild.buzz/NW8zUXZOTUAmKUAdX3NMFwdHJQZGVRx%2BG1AIUiQGGwFWJVlGGB07BRdDESIbU00JYFoXHF4nVA9NB39FF0MRJRdSMFo1VA9NC2JEA1wAc1oXHEYzKVwLAXNMFwkLYkVWXwczWwMKAzNbAQtRYVsMWwtmW1NZVjQTVgpQMhVWChEs | 0.0.0.0 | | 0 B |
URL GET theharityhild.buzz/NW8zUXZOTUAmKUAdX3NMFwdHJQZGVRx%2BG1AIUiQGGwFWJVlGGB07BRdDESIbU00JYFoXHF4nVA9NB39FF0MRJRdSMFo1VA9NC2JEA1wAc1oXHEYzKVwLAXNMFwkLYkVWXwczWwMKAzNbAQtRYVsMWwtmW1NZVjQTVgpQMhVWChEs IP0.0.0.0:0
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NW8zUXZOTUAmKUAdX3NMFwdHJQZGVRx%2BG1AIUiQGGwFWJVlGGB07BRdDESIbU00JYFoXHF4nVA9NB39FF0MRJRdSMFo1VA9NC2JEA1wAc1oXHEYzKVwLAXNMFwkLYkVWXwczWwMKAzNbAQtRYVsMWwtmW1NZVjQTVgpQMhVWChEs HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| ukankingwithea.com/ | 104.21.16.1 | 500 Internal Server Error | 183 B |
IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeHTML document, ASCII text, with no line terminators Hash7320c1db3ab6706d7a944a0983212848 04882537a81a139c1c8802c77c05b863060c5dd0 7d5514f4c18b076095cba3eb17ab3be2c482b80454aab16367ed502a7d8d46c6
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
date: Fri, 04 Apr 2025 17:00:32 GMT
content-type: text/html
server: cloudflare
cf-cache-status: DYNAMIC
cf-ray: 92b25cd00ca00b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.16.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:33 GMT
content-type: binary/octet-stream
server: cloudflare
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: STALE
age: 652207
last-modified: Fri, 28 Mar 2025 03:50:26 GMT
cf-ray: 92b25cd4fbe60b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| inoutweiledstever.org/UnREVm19SyclUAEsAjgjPD48BzsLNRYOWBchFW8rNx8KBywXNWIiBDZJfGRYa0V1cB07EHllX3QHMDcZJwd5ZF1iQ2I/AzQbeWRLJEl0eFR8RmpgSydJdXAZIhUja1x0BDAiAW9Fc2JeZUxyZl5gQXVn | 104.21.16.1 | 204 No Content | 0 B |
URL GET inoutweiledstever.org/UnREVm19SyclUAEsAjgjPD48BzsLNRYOWBchFW8rNx8KBywXNWIiBDZJfGRYa0V1cB07EHllX3QHMDcZJwd5ZF1iQ2I/AzQbeWRLJEl0eFR8RmpgSydJdXAZIhUja1x0BDAiAW9Fc2JeZUxyZl5gQXVn IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectinoutweiledstever.org FingerprintBE:BA:72:BE:B6:34:F2:F9:68:EC:C8:CF:F7:9E:6B:DC:69:FC:B8:C1 ValidityMon, 17 Feb 2025 13:24:05 GMT - Sun, 18 May 2025 14:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UnREVm19SyclUAEsAjgjPD48BzsLNRYOWBchFW8rNx8KBywXNWIiBDZJfGRYa0V1cB07EHllX3QHMDcZJwd5ZF1iQ2I/AzQbeWRLJEl0eFR8RmpgSydJdXAZIhUja1x0BDAiAW9Fc2JeZUxyZl5gQXVn HTTP/1.1
Host: inoutweiledstever.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 04 Apr 2025 17:00:33 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 92b25cd70e200b45-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png | 104.26.0.140 | 200 OK | 7.1 kB |
URL GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typePNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced Hash5d15526be10b904a6b48d1af04a10cc3 c09b6874359ac6d71db95593618a9acb55baa984 894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: image/png
content-length: 7137
cf-bgj: h2pri,csam-hash
etag: "67a6e29c-1be1"
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
referrer-policy: no-referrer, strict-origin-when-cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dGNTEyFXyTtQTeVESsjFKsyaLrxFxhyLGI8eAkhW%2FlOVEPnwXEGg49x%2FcIveU8yepPgovb93fEktVgd3%2BPRSn8ukZAnBgLiBLqoPIF2z%2FTxVCGi4%2BV9BqJntdE8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7ac3856cb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1300&min_rtt=450&rtt_var=729&sent=181&recv=69&lost=0&retrans=0&sent_bytes=199035&recv_bytes=3360&delivery_rate=18928104&cwnd=130&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1306&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/flickity.min.js | 104.26.0.140 | 200 OK | 54 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators Hash8c1e666176ac7bdce67d58b45823ffac 75947e4316427ce0c5e33300aeb4dc4d7d54dd09 c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-d271"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FCr0W7gNFZOuzcoTv7j9XCY75cCe%2FvndL96msLPtiIpxrWb0%2BYQM%2Bf6eZ%2BtCkS31dXiPc7afZBzuniSOdV8NnPTUERxmGVVOBCZuFa9xOOqmoGk9L9gadMqHQeQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7ac4e56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=715&min_rtt=450&rtt_var=215&sent=254&recv=106&lost=0&retrans=0&sent_bytes=284924&recv_bytes=3737&delivery_rate=29032581&cwnd=122&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1320&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/datepicker.js | 104.26.0.140 | 200 OK | 21 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators Hash8cfe207a6a21c7495cfb751c761217a6 35d686a6c4ecc9946c35444ce93e110cb0e1611c 804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-51ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KejhGsYbv7j%2FpfFF%2FYctTBbZznGdeT9LtPrVyDOAewl%2BYOG4ZxB68r7bDugtIsCGTEiHl6er0AVAkQrg99%2FF%2FMmMz2F3bmH8Z5eoX0M8fdZtW%2FRZp8krk%2BzQiDk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7ac5356cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=761&min_rtt=450&rtt_var=269&sent=266&recv=111&lost=0&retrans=0&sent_bytes=299750&recv_bytes=3737&delivery_rate=29032581&cwnd=120&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1325&x=0"
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.16.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:34 GMT
content-type: binary/octet-stream
server: cloudflare
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: STALE
age: 652208
last-modified: Fri, 28 Mar 2025 03:50:26 GMT
cf-ray: 92b25cd838cb0b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP64.233.164.84:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint2B:35:DB:61:55:FE:A9:5F:3D:C3:C0:C2:B9:5E:BA:4D:D1:45:81:CA ValidityThu, 20 Mar 2025 11:20:40 GMT - Thu, 12 Jun 2025 11:20:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:QrAIlzJzJ3wO5BV8mnuIdiD-vB4pog:3vjKS7qHRMFr-AAD; Expires=Sun, 04-Apr-2027 17:00:35 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 04 Apr 2025 17:00:35 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVuYSXvxrT-0Q_CZdyG3m39CydtLQHAGDNbjsn-eWzpl_Jttkz05nCIvtqkwr6CT5aYNepZ-
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-vbLtfsrd-sU-5ohieHNkyg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| inoutweiledstever.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 | 104.21.16.1 | 204 No Content | 0 B |
URL POST inoutweiledstever.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 IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectinoutweiledstever.org FingerprintBE:BA:72:BE:B6:34:F2:F9:68:EC:C8:CF:F7:9E:6B:DC:69:FC:B8:C1 ValidityMon, 17 Feb 2025 13:24:05 GMT - Sun, 18 May 2025 14:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: inoutweiledstever.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Fri, 04 Apr 2025 17:00:37 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f6gBqN2Fr3nJ5AJm2EovRIbeV%2BnZrmCJ%2FDD63JBkygZdJOcAxogH2KTTB%2BIuk8yWZpYBzjNaUjH3YFSjZNbk0jd49CXxXH01%2FtBX9wWrI4Crfn8YCOhVWqfePnBMCKOUnOHmvLcrf7Q%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 92b25cf098eb56c0-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| inoutweiledstever.org/R3NpNWNoTApGXhI1I2AxAx8FbFE/QSpyCy4RMWwzHh4NWAAgVR1cB3pEXwRSf0VPRQojTlgTEDMSHUAQekJPXA0hHFQTFXpCRwZXaUBfG1dhBlQERTMDCFJedlUZQRcrTlgCV3REUQNTdEFdAFQ | 104.21.16.1 | 204 No Content | 0 B |
URL GET inoutweiledstever.org/R3NpNWNoTApGXhI1I2AxAx8FbFE/QSpyCy4RMWwzHh4NWAAgVR1cB3pEXwRSf0VPRQojTlgTEDMSHUAQekJPXA0hHFQTFXpCRwZXaUBfG1dhBlQERTMDCFJedlUZQRcrTlgCV3REUQNTdEFdAFQ IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectinoutweiledstever.org FingerprintBE:BA:72:BE:B6:34:F2:F9:68:EC:C8:CF:F7:9E:6B:DC:69:FC:B8:C1 ValidityMon, 17 Feb 2025 13:24:05 GMT - Sun, 18 May 2025 14:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /R3NpNWNoTApGXhI1I2AxAx8FbFE/QSpyCy4RMWwzHh4NWAAgVR1cB3pEXwRSf0VPRQojTlgTEDMSHUAQekJPXA0hHFQTFXpCRwZXaUBfG1dhBlQERTMDCFJedlUZQRcrTlgCV3REUQNTdEFdAFQ HTTP/1.1
Host: inoutweiledstever.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 04 Apr 2025 17:00:33 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=29qcWvKlnlu%2BN3HokBi3tEeMMbYkWGp4FDlTKK12KfAhGzAxYuAtYILcxBpMwUi4x1q47ESvSKVgFpc1RQP51c8qcPXg0jtgc%2Fk03p9oamzlS7dUMy7TaPYqEEvttjpdrcMqmPjg96I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cd2e8830b45-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=583&min_rtt=465&rtt_var=120&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3231&recv_bytes=1197&delivery_rate=6295652&cwnd=254&unsent_bytes=0&cid=c626aff5a272df7b&ts=193&x=0"
X-Firefox-Spdy: h2
|
|
| inoutweiledstever.org/WTkxTFp2BlI/ZwgLCAgMNX8GFGkTXmsiCDhdZnU3On8AfAMedBc4Mz0ECX5vYAgAaiowXQx/aH9KRS0uLEoMfXwwV1cjZ39PDHx0YBcDYmx/TAx9fC1JUCtnaB9BOC41BAB7bmoOCXpqagsFdWI | 104.21.16.1 | 204 No Content | 0 B |
URL GET inoutweiledstever.org/WTkxTFp2BlI/ZwgLCAgMNX8GFGkTXmsiCDhdZnU3On8AfAMedBc4Mz0ECX5vYAgAaiowXQx/aH9KRS0uLEoMfXwwV1cjZ39PDHx0YBcDYmx/TAx9fC1JUCtnaB9BOC41BAB7bmoOCXpqagsFdWI IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectinoutweiledstever.org FingerprintBE:BA:72:BE:B6:34:F2:F9:68:EC:C8:CF:F7:9E:6B:DC:69:FC:B8:C1 ValidityMon, 17 Feb 2025 13:24:05 GMT - Sun, 18 May 2025 14:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WTkxTFp2BlI/ZwgLCAgMNX8GFGkTXmsiCDhdZnU3On8AfAMedBc4Mz0ECX5vYAgAaiowXQx/aH9KRS0uLEoMfXwwV1cjZ39PDHx0YBcDYmx/TAx9fC1JUCtnaB9BOC41BAB7bmoOCXpqagsFdWI HTTP/1.1
Host: inoutweiledstever.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 04 Apr 2025 17:00:33 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 92b25cd70e1f0b45-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png | 104.26.0.140 | 200 OK | 536 B |
URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typePNG image data, 57 x 57, 8-bit colormap, non-interlaced Hash0019444f6b6df5b4b5ed32b6b469caab 4232370d10ab54ef9bda57aa9dcb813036047b35 0509f6df067face535f028cd86200748952227161f8f244aa7864e7848553562
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:35 GMT
content-type: image/png
content-length: 536
cf-bgj: h2pri,csam-hash
etag: "67ae2e78-218"
last-modified: Thu, 13 Feb 2025 17:40:08 GMT
referrer-policy: no-referrer, strict-origin-when-cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BSCqQyNwJxZ44%2FYBbsh%2BI0aD2HDtfSrXJIdarL9DjTGE6BJDo54VsJOwHuWtIxoM3AH8OSKScNC3yR5gxpKFy6K1GmdR%2Bjqq%2BxxPdm7UJVLUDCwO2thwrEANEo8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cddeb4a56cb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=975&min_rtt=449&rtt_var=149&sent=499&recv=261&lost=0&retrans=1&sent_bytes=596048&recv_bytes=4461&delivery_rate=49812574&cwnd=183&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=5086&x=0"
X-Firefox-Spdy: h2
|
|
| inoutweiledstever.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 | 104.21.16.1 | 204 No Content | 0 B |
URL POST inoutweiledstever.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 IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectinoutweiledstever.org FingerprintBE:BA:72:BE:B6:34:F2:F9:68:EC:C8:CF:F7:9E:6B:DC:69:FC:B8:C1 ValidityMon, 17 Feb 2025 13:24:05 GMT - Sun, 18 May 2025 14:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: inoutweiledstever.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Fri, 04 Apr 2025 17:00:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HY%2BEvYvYB8b8xC%2BR8xZpUstGOedpZR%2Br%2Biv0jz3yZYH3v8ZZpNfjh%2F2NSMfB243Gdp3cFQSYYsbB3MNz4UgjxkMHV1u0RDEtZxBezjj%2FcefAiBDbBcwW6Zg%2B7DG15RbdkvGR6xiluQs%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 92b25d0909ef56c0-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
|
|
| megaup.net/themes/spirit/assets/frontend/css/theme.css | 104.26.0.140 | 200 OK | 207 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/theme.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeassembler source, ASCII text, with CRLF line terminators Size207 kB (206626 bytes) Hash06cc8983a538a05dddf526b3b7e732aa 2414173a1660589ebbba8bdc6e3d1237df6063db 27e49bfa89404d352fa4627719f2a9a3ea5c2759c2bc74e7567ff98b5a996758
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 18:30:52 GMT
vary: Accept-Encoding
etag: W/"67ab975c-32722"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tc1G5yuf3HlcT4Hc8PeXbQBB4QSvcxHmjZ1sBrZMOrNgA6Rui5k%2Bf%2FwftetqMKb%2F92S8OANG%2By4fqRVG9rjQs2AMPvwSbl4kHELFiMihEAareNt%2BPGFFhHs5B5Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc78c1956cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1061&min_rtt=450&rtt_var=668&sent=188&recv=72&lost=0&retrans=0&sent_bytes=206930&recv_bytes=3360&delivery_rate=18928104&cwnd=130&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1310&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js | 104.26.0.140 | 200 OK | 70 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (768), with CRLF line terminators Hash6fda19caa29287e6f584f0557fdeb6d4 40f58160090cd1f022704ee1352b343adb9e73b9 8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1107a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0xPy4UodeWED2TQbmasbIxDjd0hXh%2F6oXWhvuTNj2Mo28uMGMgdPniTPyfurAhp58s6j4aGUQ03gdhAtewbFZ3A01irB9K4WfelwwEqh0HjBvqaq%2BYbp6m0Zpuk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7ac4b56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=792&min_rtt=450&rtt_var=256&sent=221&recv=90&lost=0&retrans=0&sent_bytes=246487&recv_bytes=3665&delivery_rate=29032581&cwnd=122&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1315&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 | 142.250.178.99 | 200 OK | 19 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 IP142.250.178.99:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19280, version 1.0 Hash386fb59be54b2d819064af98e57cc226 9e2d14d736be97ec84bfca3513558450cd6e3249 b4855cc8ec721cbaf27f3c907345e101b1524858221c14faa79df34cb2f84991
GET /s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Apr 2025 18:03:26 GMT
expires: Fri, 03 Apr 2026 18:03:26 GMT
cache-control: public, max-age=31536000
age: 82626
last-modified: Thu, 14 Dec 2023 02:02:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| epicdn.net/cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0Mzc4NjAzNbICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= | 104.21.64.1 | 301 Moved Permanently | 76 kB |
URL GET epicdn.net/cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0Mzc4NjAzNbICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= IP104.21.64.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectepicdn.net FingerprintD5:18:DA:CE:CC:93:2A:97:C6:98:25:AA:6F:2B:37:31:43:40:CB:B7 ValidityFri, 28 Feb 2025 10:21:22 GMT - Thu, 29 May 2025 11:19:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0Mzc4NjAzNbICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= HTTP/1.1
Host: epicdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 04 Apr 2025 17:00:38 GMT
content-length: 0
location: https://epics3.net/epic/a/img/70/124/391/pSQrl5fl19lR0BAvqavUEXbz7soxdbpA4piU1ZpM.png
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vg8XLe40mw4C%2Fk1cSE7oD2qqiV4AwVCBDhuNVuklE%2BJFskpCCrU5UKY%2FH6m2kxLD3EHfgjS4nafsoVJSEr6OUSnxh6rolfawk9dLnUAcFCzRuv%2BTGHfOiEysK0xb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cf17f94b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1683&min_rtt=486&rtt_var=2288&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1395&delivery_rate=4596825&cwnd=254&unsent_bytes=0&cid=39d836e06d5a6b34&ts=73&x=0"
X-Firefox-Spdy: h2
|
|
| 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 | 0.0.0.0 | | 0 B |
URL GET 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 IP0.0.0.0:0
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /aUlJWDMIKyo1DAh0K35GGyV0fQEvbHseV1p6KzlYATk/aEIRIS92UAUmPDxVGyYnLB0HLD19AS8/KjZiWhMfP2EueCIcaR4QLQ0CAS4YHXYmHw40ZisMHBljAnETDVQgfAsvYjMKM2h0PCV5D30RPgwbVA56DBpLTHsPHGBdJQ8JYiIPeSxgODFxYGdZGBsbZwIqDC9DLRkbL2sqJRt9ASsMMRplPg4xDXIsKgIVA1ELHgl2UA8LaWkoDTENcj8TEBZhWQYRP1hZDHgddSB7eDthKwMROXUGDRE/QFEBGBZ2OA45G3QCBwg5WCMPC2hHBh95PAI4DjkbclhkfRRRAhMbGnANcBgdYTkceyBrO3ofGVICAA4JZis7BGhmLBwRAnAxGwMAUiscGw5yXXofaGkRH3swdzsILQ1SLAcbGmU8bHsadB4TGhlJCgIcCWYDKBweci4fH30BKwt5M3RPIzo3XRl0JDdRAQEhLmQIeiYXCg HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVvZJpRhJ65UvgH0fsFxu05ppU_zaarCLi-246nxp7dMeaPN54XzrrOXSOX-qhXfqOuMqFsA | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVvZJpRhJ65UvgH0fsFxu05ppU_zaarCLi-246nxp7dMeaPN54XzrrOXSOX-qhXfqOuMqFsA IP64.233.164.84:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintD9:9E:60:22:6F:83:0B:DE:8F:D6:FF:6C:5B:83:B4:22:4D:58:97:82 ValidityThu, 20 Mar 2025 11:18:50 GMT - Thu, 12 Jun 2025 11:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVvZJpRhJ65UvgH0fsFxu05ppU_zaarCLi-246nxp7dMeaPN54XzrrOXSOX-qhXfqOuMqFsA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:xIdYTPmKIitd77g_tCJruilANYNgBA:u1Rs0OZEhPHt3_Za;Path=/;Expires=Sun, 04-Apr-2027 17:00:35 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 04 Apr 2025 17:00:35 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVsaB4YBnSpTMS14m-GQCQAoRyaQ1jC3YWcWX5Onpuz0xFewhNjTfQKzO-3HLYHOA4U7Aw9GxA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-752340551%3A1743786035673088
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-EMg7lATrJbIUkEbELxsqYw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 418
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/spirit/assets/frontend/js/scripts.js | 104.26.0.140 | 200 OK | 115 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/scripts.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (914), with CRLF line terminators Size115 kB (114862 bytes) Hashce260d2170faf98639ab8e0e3758f1e2 32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1c0ae"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tmN2XZz8jwvptFCUsXA433Wqe3vPZViWdqt4CJyTo1%2BLgcSKoA5m%2BDPuRd7NMFxkIkYZD42ekfoADFtG5EjEi06uf6%2B2e%2BuKNdXim9LeXyl6S23Vmp8sXTPgBv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7cc8556cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=942&min_rtt=450&rtt_var=558&sent=317&recv=133&lost=0&retrans=0&sent_bytes=355133&recv_bytes=3737&delivery_rate=29032581&cwnd=124&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1333&x=0"
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e5421za200&tag_exp=102788824~102803279~102813109~102887799~102926062~102975949~103016951~103021830~103027016 | 142.250.74.136 | 200 OK | 323 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e5421za200&tag_exp=102788824~102803279~102813109~102887799~102926062~102975949~103016951~103021830~103027016 IP142.250.74.136:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint88:85:26:A3:0A:0B:44:C6:92:DD:7B:0B:D1:14:38:BA:26:B9:EF:D9 ValidityThu, 20 Mar 2025 11:18:39 GMT - Thu, 12 Jun 2025 11:18:38 GMT
File typeJavaScript source, ASCII text, with very long lines (6129) Size323 kB (323394 bytes) Hash73cedcec32bc7b5c1c2e9d246b0a703c 84184920e56e75157e641ee2e83478633b8f5f00 ac0ca500c6d05722a3d4d3aa5b00d87a0c8a06221656810f182e2d04785e8c8d
GET /gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e5421za200&tag_exp=102788824~102803279~102813109~102887799~102926062~102975949~103016951~103021830~103027016 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 04 Apr 2025 17:00:34 GMT
expires: Fri, 04 Apr 2025 17:00:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 113125
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css | 104.26.0.140 | 200 OK | 6.0 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeASCII text, with very long lines (6783), with no line terminators Hash626118c4eb04e35167d4bda4a48fb38c 967f7a62e92fffeb23bb7fcb1c9c3e8e815d4fa5 564e28257793342ba9736768e994a339f4690bf2dfe8b441bebe06923f77f16e
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1783"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B%2FlZ68oPeHs6nrViEEESy%2FUhRe2x2XB7gZEy16gj7HMu2QTEQJ0Bm48niyr1ut9pi5PCj1vvJtPLQAfb%2BQfKR4raTHUKgFgMbwUS29Sflm7ZDXDWRzOo5lxieAM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc78c1056cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1065&min_rtt=450&rtt_var=515&sent=177&recv=66&lost=0&retrans=0&sent_bytes=197345&recv_bytes=3155&delivery_rate=18928104&cwnd=130&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1302&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i | 142.250.74.10 | 200 OK | 39 kB |
URL GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i IP142.250.74.10:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint3C:2E:67:30:A6:95:F3:D3:61:49:AB:AC:BC:D1:CF:77:3E:33:8F:B7 ValidityThu, 20 Mar 2025 11:19:46 GMT - Thu, 12 Jun 2025 11:19:45 GMT
File typeASCII text, with very long lines (1572) Hash1570f79838476e473326cd7a3fb1d06b 81ce3aa01918d85e18534934cd967f35a7558f1a f0a8682f65670a4a8fd9a982d1b3a36521a2e74d47cece7d3b1f84f262c8b51c
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 04 Apr 2025 17:00:31 GMT
date: Fri, 04 Apr 2025 17:00:31 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP64.233.164.84:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint2B:35:DB:61:55:FE:A9:5F:3D:C3:C0:C2:B9:5E:BA:4D:D1:45:81:CA ValidityThu, 20 Mar 2025 11:20:40 GMT - Thu, 12 Jun 2025 11:20:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:kpeOhMXxVS037LVOMYwXdzUWRB1jhg:0n9I7aZvyzMAFFpO; Expires=Sun, 04-Apr-2027 17:00:35 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 04 Apr 2025 17:00:35 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVvZJpRhJ65UvgH0fsFxu05ppU_zaarCLi-246nxp7dMeaPN54XzrrOXSOX-qhXfqOuMqFsA
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-iiVUCrOQnjtQz4XMOb06Ig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVuYSXvxrT-0Q_CZdyG3m39CydtLQHAGDNbjsn-eWzpl_Jttkz05nCIvtqkwr6CT5aYNepZ- | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVuYSXvxrT-0Q_CZdyG3m39CydtLQHAGDNbjsn-eWzpl_Jttkz05nCIvtqkwr6CT5aYNepZ- IP64.233.164.84:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintD9:9E:60:22:6F:83:0B:DE:8F:D6:FF:6C:5B:83:B4:22:4D:58:97:82 ValidityThu, 20 Mar 2025 11:18:50 GMT - Thu, 12 Jun 2025 11:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVuYSXvxrT-0Q_CZdyG3m39CydtLQHAGDNbjsn-eWzpl_Jttkz05nCIvtqkwr6CT5aYNepZ- HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:GspsEVpIeceVFjbHnrYY6wKX8_O3AQ:542TVGqNrYkglrDe;Path=/;Expires=Sun, 04-Apr-2027 17:00:35 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 04 Apr 2025 17:00:35 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVswukIgJ10hmlzKyGHEB9JxwepXmDM4iEJ6tWdb7REF-b8vxg13S7-llA0Bemu4Ww67LCyazQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S856458045%3A1743786035687617
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-6q4Vx6DEEbVcHyYreXCsjQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 411
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/spirit/assets/frontend/js/granim.min.js | 104.26.0.140 | 200 OK | 11 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators Hash714368d20c70f8c91b0a596e128dac07 563954ec3a896fc129d014f01836245829f6d01d e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-298b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LX6MUpUI7%2FtuVGFKKwhnVVzVumo5yhiv7ofK8tEGTx6NicZOfc1rIr4cO0DmEKRz7%2B4w5Wjc%2FIergQqMgKQ4smtQA3SjGnwf1exsAME1jbyuwes9h7OtnwTyzns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7bc6d56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=707&min_rtt=450&rtt_var=183&sent=308&recv=130&lost=0&retrans=0&sent_bytes=348395&recv_bytes=3737&delivery_rate=29032581&cwnd=124&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1329&x=0"
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-108868042-1 | 142.250.74.136 | 200 OK | 264 kB |
URL GET www.googletagmanager.com/gtag/js?id=UA-108868042-1 IP142.250.74.136:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint88:85:26:A3:0A:0B:44:C6:92:DD:7B:0B:D1:14:38:BA:26:B9:EF:D9 ValidityThu, 20 Mar 2025 11:18:39 GMT - Thu, 12 Jun 2025 11:18:38 GMT
File typeJavaScript source, ASCII text, with very long lines (5436) Size264 kB (263911 bytes) Hashe98b3a1fd3008792d6610ec5b54c9209 3637ea88e6a249a9768e43182ec12b1ca9073618 2c150ed6545c03ea51fa65de475824faa60739c661860ba2109248ee33e99526
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 04 Apr 2025 17:00:31 GMT
expires: Fri, 04 Apr 2025 17:00:31 GMT
cache-control: private, max-age=900
last-modified: Fri, 04 Apr 2025 15:57:07 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 93236
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.99 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.99:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Mar 2025 13:00:46 GMT
expires: Tue, 31 Mar 2026 13:00:46 GMT
cache-control: public, max-age=31536000
age: 359987
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.99 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.99:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Mar 2025 13:00:46 GMT
expires: Tue, 31 Mar 2026 13:00:46 GMT
cache-control: public, max-age=31536000
age: 359987
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 | 104.26.0.140 | 200 OK | 80 kB |
URL GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80148, version 331.17301 Hashc500da19d776384ba69573ae6fe274e7 6290834672aba86d5b6c1c73b30b57c9c53996f7 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:34 GMT
content-type: font/woff2
content-length: 80148
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-13914"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Jg54gkbQ7n0Wj1CKeRDB3x89CY2LPVAuNUPQJwTuqTLZjR2OUhd7Sm5trj1CDYRx6BpS35bPyD0N3ZCoTSgXu5yChzH%2BC6Q6kUaek6to7vurKmzzwd47xNxwQA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cdb2f6f56cb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=1854&min_rtt=450&rtt_var=1480&sent=436&recv=198&lost=0&retrans=1&sent_bytes=514020&recv_bytes=4241&delivery_rate=6435555&cwnd=166&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=4642&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVsaB4YBnSpTMS14m-GQCQAoRyaQ1jC3YWcWX5Onpuz0xFewhNjTfQKzO-3HLYHOA4U7Aw9GxA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-752340551%3A1743786035673088 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVsaB4YBnSpTMS14m-GQCQAoRyaQ1jC3YWcWX5Onpuz0xFewhNjTfQKzO-3HLYHOA4U7Aw9GxA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-752340551%3A1743786035673088 IP64.233.164.84:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintD9:9E:60:22:6F:83:0B:DE:8F:D6:FF:6C:5B:83:B4:22:4D:58:97:82 ValidityThu, 20 Mar 2025 11:18:50 GMT - Thu, 12 Jun 2025 11:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVsaB4YBnSpTMS14m-GQCQAoRyaQ1jC3YWcWX5Onpuz0xFewhNjTfQKzO-3HLYHOA4U7Aw9GxA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-752340551%3A1743786035673088 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 04 Apr 2025 17:00:35 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-eJtJB1P7ZVlWgA6EZrpseg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en._0nmwHM1LT0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| img.vmmcdn.com/get/62987579/238427_icon.png | 138.201.51.142 | 200 OK | 59 kB |
URL GET img.vmmcdn.com/get/62987579/238427_icon.png IP138.201.51.142:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerLet's Encrypt Subjectimg.vmmcdn.com FingerprintD1:4A:55:51:D2:8A:01:AB:76:9F:1B:AD:F1:F7:00:8A:F5:BF:C1:FC ValidityFri, 14 Feb 2025 07:05:29 GMT - Thu, 15 May 2025 07:05:28 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash669eb036e71ef2df4b1a7d3fa9e5ebb7 6a8686b1ce7276b8c6732245e340dbe38b30eb04 89edf6961767b760b3ff755a803457eee41b5f2df863cdeca95165bf4a126732
GET /get/62987579/238427_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 04 Apr 2025 17:00:42 GMT
Content-Type: image/png
Content-Length: 59035
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 10:47:59 GMT
Cache-Control: public, max-age=604800
ETag: "639eefdf-e69b"
X-Proxy-Cache: HIT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Request-Headers: x-requested-with
Access-Control-Allow-Headers: x-requested-with
Accept-Ranges: bytes
|
|
| megaup.net/themes/spirit/assets/images/logo/logo.png | 104.26.0.140 | 200 OK | 5.9 kB |
URL GET megaup.net/themes/spirit/assets/images/logo/logo.png IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typePNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced Hashfa360a47a62ae74a0a3d8c0f3e6f7f12 168c72a918b04b735f8e0f8a72223a16f0eda358 1d3a3c84dd36871d1009693761f441537117d5ee62c8e775d7d52c77d4c46de4
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: image/png
content-length: 5900
cf-bgj: h2pri,csam-hash
etag: "67a6e29c-170c"
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
referrer-policy: no-referrer, strict-origin-when-cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CI4CEgJ3%2B34y%2B%2FQK5BfMlgXImH9nqlvNDxkCwXnRn00mnY9i3yMslY6a%2FgOjABco%2Bzqt7zGPr%2BNc3NftaeS8As%2FgEwswyJxyFFyhdBbJIt3WjZ7W0YAnbZypjy0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7ac3a56cb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=811&min_rtt=450&rtt_var=250&sent=213&recv=85&lost=0&retrans=0&sent_bytes=240077&recv_bytes=3462&delivery_rate=29032581&cwnd=122&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1312&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js | 104.26.0.140 | 200 OK | 87 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators Hash5b5a269bd363e0886c17d855c2aab241 042dd055cd289215835a58507c9531f808e1648a 1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-152b9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ywLMykoQH6ePRfIc8YvuyFsSucDTnXRzOTR8lb%2B1LpE6jYUNcpRXe83FD6Q8VNl%2F5PVzjH4bjUUPSwnlbeYO6VGARf564bESke7hjxlKWg1p69F4CMuWa9BrDbA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7ac4256cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=986&min_rtt=450&rtt_var=754&sent=280&recv=117&lost=0&retrans=0&sent_bytes=313431&recv_bytes=3737&delivery_rate=29032581&cwnd=120&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1326&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js | 104.26.0.140 | 200 OK | 14 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators Hash0eef6fe46d14f860d5666d2c7b13a564 7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe 95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-3626"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2eL%2BAxyC2oEVNqGr0wy4bojCf1LTIcd2hWkU%2B780Pyf3XE5kPhElTRQKrA%2FgEKUKq7HznyOdYISpOn%2B4dPgEtxz%2FwEwZLibCf9DfYlvI6yy3DalC0%2FpUeyv4OXk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7bc7356cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=761&min_rtt=450&rtt_var=269&sent=274&recv=111&lost=0&retrans=0&sent_bytes=307888&recv_bytes=3737&delivery_rate=29032581&cwnd=120&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1325&x=0"
X-Firefox-Spdy: h2
|
|
| undefined/aDZJZ2cJVCoKWAkLK0ESGlp0QlUuE3shA1sFKwYMAEY/VxYQXi9JBARZPAMBGlknE0kGUz1CVS4OGiM1IWIkUxU/TxAIMjxOLSsvJm4vJlYfUw8XEjpyJhUkIGATKzQDZhkyNQV/CBRfLV8AXiY7bAwDM1gPCwwQD3IfXxQOTwcIIAJ8GAM/XX8DITIFfR8pEj1lEBMyW10aLDQHey02JR15Pl5WP2UqVyURZBAsMBxVDQAhBVAiE1EqcQhSJRFsGC0dA1IrNj1cfwsXEypYIUJVLm4kPiIKbnkUBTlsfSg2C1sICR8abhgINQ1YfTABD3Q9ATQQQgsJSg8ODiBXIHURXgMOdDlTPVhCfyUkUEQNNCkKVBEQCA1RG1IBBAN8JS8ERBEvDzt/HRArJFo6EAZZQQYlPxwAGC8AO2YRKQFOXDoICRgLOjQpEF4KVgMjXQ | 0.0.0.0 | | 0 B |
URL GET undefined/aDZJZ2cJVCoKWAkLK0ESGlp0QlUuE3shA1sFKwYMAEY/VxYQXi9JBARZPAMBGlknE0kGUz1CVS4OGiM1IWIkUxU/TxAIMjxOLSsvJm4vJlYfUw8XEjpyJhUkIGATKzQDZhkyNQV/CBRfLV8AXiY7bAwDM1gPCwwQD3IfXxQOTwcIIAJ8GAM/XX8DITIFfR8pEj1lEBMyW10aLDQHey02JR15Pl5WP2UqVyURZBAsMBxVDQAhBVAiE1EqcQhSJRFsGC0dA1IrNj1cfwsXEypYIUJVLm4kPiIKbnkUBTlsfSg2C1sICR8abhgINQ1YfTABD3Q9ATQQQgsJSg8ODiBXIHURXgMOdDlTPVhCfyUkUEQNNCkKVBEQCA1RG1IBBAN8JS8ERBEvDzt/HRArJFo6EAZZQQYlPxwAGC8AO2YRKQFOXDoICRgLOjQpEF4KVgMjXQ IP0.0.0.0:0
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /aDZJZ2cJVCoKWAkLK0ESGlp0QlUuE3shA1sFKwYMAEY/VxYQXi9JBARZPAMBGlknE0kGUz1CVS4OGiM1IWIkUxU/TxAIMjxOLSsvJm4vJlYfUw8XEjpyJhUkIGATKzQDZhkyNQV/CBRfLV8AXiY7bAwDM1gPCwwQD3IfXxQOTwcIIAJ8GAM/XX8DITIFfR8pEj1lEBMyW10aLDQHey02JR15Pl5WP2UqVyURZBAsMBxVDQAhBVAiE1EqcQhSJRFsGC0dA1IrNj1cfwsXEypYIUJVLm4kPiIKbnkUBTlsfSg2C1sICR8abhgINQ1YfTABD3Q9ATQQQgsJSg8ODiBXIHURXgMOdDlTPVhCfyUkUEQNNCkKVBEQCA1RG1IBBAN8JS8ERBEvDzt/HRArJFo6EAZZQQYlPxwAGC8AO2YRKQFOXDoICRgLOjQpEF4KVgMjXQ HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| kmtendationfore.org/multi?cs=QzVtaFB3BFhRZnoBXlpjdgVYWGM&abt=0&red=1&sm=76&k=schedule%203f15&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=-2&fs=1&mbkb=49.21259842519685&ref=https%3A%2F%2Fmegaup.net%2F76d26420052938e418afbc56bcf1e9bc%2FSchedule.I.v.0.3.3f15.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_una1=1743786034796&crc=1 | 3.164.68.118 | 200 OK | 15 B |
URL GET kmtendationfore.org/multi?cs=QzVtaFB3BFhRZnoBXlpjdgVYWGM&abt=0&red=1&sm=76&k=schedule%203f15&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=-2&fs=1&mbkb=49.21259842519685&ref=https%3A%2F%2Fmegaup.net%2F76d26420052938e418afbc56bcf1e9bc%2FSchedule.I.v.0.3.3f15.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_una1=1743786034796&crc=1 IP3.164.68.118:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerAmazon Subjectkmtendationfore.org Fingerprint1D:04:BE:FF:DA:46:50:36:23:B0:DB:DE:97:5B:D1:19:8D:F3:12:0B ValiditySat, 29 Mar 2025 00:00:00 GMT - Mon, 27 Apr 2026 23:59:59 GMT
File typeASCII text, with no line terminators Hashd39207bea620cffa8e65d3b12e8f1547 220ebce5a61ee5d771133e1cd20c469443ccfd76 f058a19c34ccdfbb47e68ba58b254ffa5d774fdaeeaa0b1fb9f19d3c055c0a21
GET /multi?cs=QzVtaFB3BFhRZnoBXlpjdgVYWGM&abt=0&red=1&sm=76&k=schedule%203f15&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=-2&fs=1&mbkb=49.21259842519685&ref=https%3A%2F%2Fmegaup.net%2F76d26420052938e418afbc56bcf1e9bc%2FSchedule.I.v.0.3.3f15.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_una1=1743786034796&crc=1 HTTP/1.1
Host: kmtendationfore.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 41
date: Fri, 04 Apr 2025 17:00:35 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=jSpTmbzUfM/opOxVaOeXnoo3ARTlepvCFOg53ixTUgzIbuIFfA8vz6nmC6Ai5yfFKcXINr5SNdjofwHwYqoXBZAjA+LKRY0cru6toaURi9GH6D91mXBsh15xt7Sy; Expires=Fri, 11 Apr 2025 17:00:35 GMT; Path=/
AWSALBCORS=jSpTmbzUfM/opOxVaOeXnoo3ARTlepvCFOg53ixTUgzIbuIFfA8vz6nmC6Ai5yfFKcXINr5SNdjofwHwYqoXBZAjA+LKRY0cru6toaURi9GH6D91mXBsh15xt7Sy; Expires=Fri, 11 Apr 2025 17:00:35 GMT; Path=/; SameSite=None
csu=5f477e06-620b-4fad-964b-6bc4920d7971
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b786785c2b438022738ad59ea5d98818.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P4
x-amz-cf-id: fwRJ2be5U76UnoO4JvVYLVl5yzLsbPAKXyqf9J2Z5T2txTW60ttBmg==
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.99 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.99:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Mar 2025 13:00:46 GMT
expires: Tue, 31 Mar 2026 13:00:46 GMT
cache-control: public, max-age=31536000
age: 359987
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dhertouchingthe.org/NVYxNGxUNFJZU1RrUxIZRzoMEV5zcwNyCAZlU1UHXSZHBB1NPlcaD1k5RFAKRzlfQEJbM0URXnMza2IcRRtpfSt7B1VsOGcTS3A9TRBkBhhsFWRmKH4+RWEqczECcCpsAnR3HH0OSVc+Uxd/dyRkJUBiKnwRc3APdDJzZS58PF1wK3RnCXw5RgFmcxxlDmN5IGUAYGwqQiUEYi13A3NwWHkSdG4oeT5dUStjMVtzKVIMc04LcwBJcT5TFEllOEIxAHFdUjNyYBh4F0tmPVEQWmE9cwBIfABSNXBgOVAHXVA0VDFVcjoEMkBjLXM1Z2xVVDUAUDRUPhwBNX0Qf0E4dB9GZStdDGJhPmcwAEQWY2dVRSsFMmliBEEPcF82eTdadTlkEGQNKHMfa3cCDDRVBC5jNwBfLmRnZ0Y4dBhydRZ4NGd2PX4fWkMoexBjRDRnb3JlFQwDcHVKXyVeWhwINUVVAVwTV1AUZSRbXA | 3.164.240.116 | 200 OK | 3.1 kB |
URL GET dhertouchingthe.org/NVYxNGxUNFJZU1RrUxIZRzoMEV5zcwNyCAZlU1UHXSZHBB1NPlcaD1k5RFAKRzlfQEJbM0URXnMza2IcRRtpfSt7B1VsOGcTS3A9TRBkBhhsFWRmKH4+RWEqczECcCpsAnR3HH0OSVc+Uxd/dyRkJUBiKnwRc3APdDJzZS58PF1wK3RnCXw5RgFmcxxlDmN5IGUAYGwqQiUEYi13A3NwWHkSdG4oeT5dUStjMVtzKVIMc04LcwBJcT5TFEllOEIxAHFdUjNyYBh4F0tmPVEQWmE9cwBIfABSNXBgOVAHXVA0VDFVcjoEMkBjLXM1Z2xVVDUAUDRUPhwBNX0Qf0E4dB9GZStdDGJhPmcwAEQWY2dVRSsFMmliBEEPcF82eTdadTlkEGQNKHMfa3cCDDRVBC5jNwBfLmRnZ0Y4dBhydRZ4NGd2PX4fWkMoexBjRDRnb3JlFQwDcHVKXyVeWhwINUVVAVwTV1AUZSRbXA IP3.164.240.116:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerAmazon Subjectdhertouchingthe.org Fingerprint43:3B:2E:F6:C4:AA:BE:B9:59:F9:06:79:26:87:DC:08:A2:74:BF:52 ValiditySat, 29 Mar 2025 00:00:00 GMT - Mon, 27 Apr 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3092), with no line terminators Hashfd5fa4b18e09e7a146506048358fed55 92b1ec3b333d49b589778193e5ad6948b7d16cac 1e95df3382491a2dd19ef664b40b431b17170c0a7fcee1f58847e57ddbede909
GET /NVYxNGxUNFJZU1RrUxIZRzoMEV5zcwNyCAZlU1UHXSZHBB1NPlcaD1k5RFAKRzlfQEJbM0URXnMza2IcRRtpfSt7B1VsOGcTS3A9TRBkBhhsFWRmKH4+RWEqczECcCpsAnR3HH0OSVc+Uxd/dyRkJUBiKnwRc3APdDJzZS58PF1wK3RnCXw5RgFmcxxlDmN5IGUAYGwqQiUEYi13A3NwWHkSdG4oeT5dUStjMVtzKVIMc04LcwBJcT5TFEllOEIxAHFdUjNyYBh4F0tmPVEQWmE9cwBIfABSNXBgOVAHXVA0VDFVcjoEMkBjLXM1Z2xVVDUAUDRUPhwBNX0Qf0E4dB9GZStdDGJhPmcwAEQWY2dVRSsFMmliBEEPcF82eTdadTlkEGQNKHMfa3cCDDRVBC5jNwBfLmRnZ0Y4dBhydRZ4NGd2PX4fWkMoexBjRDRnb3JlFQwDcHVKXyVeWhwINUVVAVwTV1AUZSRbXA HTTP/1.1
Host: dhertouchingthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1211
date: Fri, 04 Apr 2025 17:00:32 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=YHxj39yNj9ViTSwnNEWorbJBs4ROUXDCo4GszALUUrviQojJ1+j0gBwBV7paov2R/OYhqRey08Bo0YMPLzBD/wwGS9WqgLxs/dEdlobSTZTcMwCBDAUJtojXk1t+; Expires=Fri, 11 Apr 2025 17:00:32 GMT; Path=/
AWSALBCORS=YHxj39yNj9ViTSwnNEWorbJBs4ROUXDCo4GszALUUrviQojJ1+j0gBwBV7paov2R/OYhqRey08Bo0YMPLzBD/wwGS9WqgLxs/dEdlobSTZTcMwCBDAUJtojXk1t+; Expires=Fri, 11 Apr 2025 17:00:32 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 6ace45570fc87085b524f709878ee4a8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: FHcCZqxAuv9VkUJtSPLaRCF_enXed-wCBytuOagUgvTXSM83yBWQ-A==
X-Firefox-Spdy: h2
|
|
| inoutweiledstever.org/QnZRUXFtSTIiTAxGHGMnFRkVMhYMBQkQRHE0BjUrAxgcFSsUHXclGCZLaWZHcUdpdwErEmxjSGQFJTAFNwVsYFcrGDc+TGQAbGBfclhnYV92UCRsQGQCITAWf0d3IQU2GmxgRnZFZmlHckVjZEVw | 104.21.16.1 | 204 No Content | 0 B |
URL GET inoutweiledstever.org/QnZRUXFtSTIiTAxGHGMnFRkVMhYMBQkQRHE0BjUrAxgcFSsUHXclGCZLaWZHcUdpdwErEmxjSGQFJTAFNwVsYFcrGDc+TGQAbGBfclhnYV92UCRsQGQCITAWf0d3IQU2GmxgRnZFZmlHckVjZEVw IP104.21.16.1:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectinoutweiledstever.org FingerprintBE:BA:72:BE:B6:34:F2:F9:68:EC:C8:CF:F7:9E:6B:DC:69:FC:B8:C1 ValidityMon, 17 Feb 2025 13:24:05 GMT - Sun, 18 May 2025 14:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /QnZRUXFtSTIiTAxGHGMnFRkVMhYMBQkQRHE0BjUrAxgcFSsUHXclGCZLaWZHcUdpdwErEmxjSGQFJTAFNwVsYFcrGDc+TGQAbGBfclhnYV92UCRsQGQCITAWf0d3IQU2GmxgRnZFZmlHckVjZEVw HTTP/1.1
Host: inoutweiledstever.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 04 Apr 2025 17:00:34 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 92b25cd84f730b45-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.99 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.99:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Mar 2025 13:00:46 GMT
expires: Tue, 31 Mar 2026 13:00:46 GMT
cache-control: public, max-age=31536000
age: 359986
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 | 104.26.0.140 | 200 OK | 4.3 kB |
URL GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 4292, version 1.0 Hashae072782b361d2afdbf43db08d3cfb73 f3db2e65b53d97491672f8631e21d6d05905cc88 31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:32 GMT
content-type: font/woff2
content-length: 4292
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-10c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CtJWmhY21PBAmgcnScjZpoe21%2FGltClj%2F%2F5c4Q65fvKS90jCnepV8fSWE07GYcZay50%2B1oNgvl54abl3poD3BzQ8ceG44853jPFN5acKFHOMIkNa0etQLujvRRs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25ccdacb756cb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=2617&min_rtt=450&rtt_var=2573&sent=430&recv=192&lost=0&retrans=1&sent_bytes=509185&recv_bytes=4074&delivery_rate=801328&cwnd=166&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=2472&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip | 104.26.0.140 | 200 OK | 620 kB |
URL User Request GET megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip IP104.26.0.140:443
CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
Size620 kB (620447 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, no-cache, private
pragma: no-cache
access-control-allow-origin: https://megaup.net
access-control-allow-headers: Content-Type, Content-Range, Content-Disposition, Content-Description
access-control-allow-credentials: true
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cf-cache-status: BYPASS
set-cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg; expires=Sat, 05 Apr 2025 17:00:30 GMT; Max-Age=86400; path=/; domain=megaup.net; secure; HttpOnly; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0uptO8A9MfNMDOtusFqiu1ZhzglZmLCbfjLRI3WhAq1RaAb8rS0Ob5DldXeXBpDwuuC43akkW4HN6qZkX0DnWdgceNaX%2BTBGRCPyCA6pIFPfp3WWt2vcx7tCMzA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cbfd91c56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1174&min_rtt=680&rtt_var=781&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3197&recv_bytes=1163&delivery_rate=4869955&cwnd=254&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=594&x=0"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.99 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.99:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Mar 2025 13:00:46 GMT
expires: Tue, 31 Mar 2026 13:00:46 GMT
cache-control: public, max-age=31536000
age: 359986
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js | 104.26.0.140 | 200 OK | 6.0 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (6203), with no line terminators Hashe2cb768d67ad989791afcb5f2865e847 3f744595f23463b6be98a9b767f17ffc513d2b2a 1c03002798c2de182a135a060de3bc4c751bf5e33163369ef266ea484037aa4e
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-178c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6W1rKgYKD8%2Fe5v7pPz9ok4Ev6M53378nKtq6LV55Ee%2Bj2jRQ%2B9I3RM3KpLsa4hmWLeUewmbA9ZfyESD6oU7vZ%2Bxl4si1S7mjy9ZzeqTJvvnqP5rKp48y8c2PHLQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7cc8256cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=852&min_rtt=450&rtt_var=502&sent=313&recv=132&lost=0&retrans=0&sent_bytes=351858&recv_bytes=3737&delivery_rate=29032581&cwnd=124&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1330&x=0"
X-Firefox-Spdy: h2
|
|
| epics3.net/epic/a/img/70/124/391/pSQrl5fl19lR0BAvqavUEXbz7soxdbpA4piU1ZpM.png | 193.108.118.133 | 200 OK | 76 kB |
URL GET epics3.net/epic/a/img/70/124/391/pSQrl5fl19lR0BAvqavUEXbz7soxdbpA4piU1ZpM.png IP193.108.118.133:443 ASN#63023 AS-GLOBALTELEHOST
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerLet's Encrypt Subjectepics3.net Fingerprint55:A8:15:7C:87:BB:82:13:31:02:85:AC:99:DE:AE:E7:62:8C:1A:30 ValidityMon, 17 Mar 2025 19:58:02 GMT - Sun, 15 Jun 2025 19:58:01 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash5700d0b8a43d33538c3714b2d723c7cf 135461cd9c6a56030a4660908153ed1f9b5ef7cc 2f4619c6786796e83b7e6755acdf2d3739b8751c7bf8335f1f75e487046881bf
GET /epic/a/img/70/124/391/pSQrl5fl19lR0BAvqavUEXbz7soxdbpA4piU1ZpM.png HTTP/1.1
Host: epics3.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-length: 76175
content-type: image/png
etag: "5700d0b8a43d33538c3714b2d723c7cf"
last-modified: Tue, 25 Jun 2024 19:56:42 GMT
server: MinIO
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-bucket-region: eu-west-1
x-amz-id-2: aa035ed9341bcb4d51e1f9d7818ca90eec60261354b87fa2e4d17e04ccf6bcd3
x-amz-request-id: 18332C29BE9AD250
x-content-type-options: nosniff
x-ratelimit-limit: 18403
x-ratelimit-remaining: 18394
x-xss-protection: 1; mode=block
x-amz-meta-mm-source-mtime: 2024-06-25T19:56:41.809Z
date: Fri, 04 Apr 2025 17:00:38 GMT
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/socicon.css | 104.26.0.140 | 200 OK | 9.8 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/socicon.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeASCII text, with very long lines (11480), with no line terminators Hasha2aeb76876fb10c62f38b8bb21242fc9 1d843adccd2e9b1feebf6cc09cb6766f64fa7bb3 ce98772e66c03b967c0b721551cf842b96e35f60cabf01a6a9dbdf3d80c497ff
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css | 104.26.0.140 | 200 OK | 3.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeASCII text, with very long lines (4346), with no line terminators Hash569fda5171f960b5f17a7f219ebbfce8 00c5980c3d7f1186409dd7bca6efe168aaf123b5 1f1ba95edeff0d0da398b23e1ef0832985223e0d2facd1b0136c87be7bd935ea
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f31"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Twyf5Zpo2igIJu2AOOxgV3K0XXFNC0TZvtGjDJkSE%2FFKzccE%2Fa0IBE0vaMnVxTy8t3kUqxGu2wKPZ2kk%2FOE%2B4S%2BWEZbBvD9nKgzBHy5RGGQRq%2Bt7SEXcKR%2BaO%2BI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc77bda56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=898&min_rtt=479&rtt_var=407&sent=147&recv=51&lost=0&retrans=0&sent_bytes=175363&recv_bytes=2404&delivery_rate=18928104&cwnd=152&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1286&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/iconsmind.css | 104.26.0.140 | 200 OK | 103 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeASCII text, with CRLF line terminators Size103 kB (102727 bytes) Hashc9b1c618a7b12bd7ecf6034164b29164 f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99 fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-19147"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uv8dP2CA5XPPRsXx1PjUrtBITycxhJg2tP8VgDASM%2FuE0W2tRac4Wcj%2BwKFshF5jMP87Eg240Ep4mL%2B2K1lDbj%2BGg78kNg2Bvz9C%2FiUdJkl8tOkL8NDVSyX5jNU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc78c0756cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=700&min_rtt=450&rtt_var=165&sent=237&recv=98&lost=0&retrans=0&sent_bytes=267080&recv_bytes=3665&delivery_rate=29032581&cwnd=122&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1316&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/sw.js | 104.26.0.140 | 200 OK | 103 kB |
IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size103 kB (103036 bytes) Hash9ee51131e416458b88d6da4e6e6959ca a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4 db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 22:15:30 GMT
vary: Accept-Encoding
etag: W/"63a23402-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 1892
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bufCP6sW62V9XkWzRf%2FurBLXApRM6qnuKjSvQ3HTLfs5xz8O2vpHUbLBLSMsZMLulnDCbLJtMUF%2F73vwr9XHlqS4qIXpal%2BQGtxvCwmfu3EkPSmRvQoJXpoAXgA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7cc9556cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=773&min_rtt=450&rtt_var=384&sent=336&recv=143&lost=0&retrans=0&sent_bytes=379704&recv_bytes=3737&delivery_rate=29032581&cwnd=124&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1342&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/img/background.jpg | 104.26.0.140 | 200 OK | 86 kB |
URL GET megaup.net/themes/spirit/assets/frontend/img/background.jpg IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3 Hash1b0874b56457a14258e3bd22805266c6 26ff3d095376d43cb78388e700707cdaf6ac75eb 5c5e0d52eb281e1ceae07f53c931982e8e014b9a535df9c98246157167e29285
GET /themes/spirit/assets/frontend/img/background.jpg HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:32 GMT
content-type: image/jpeg
content-length: 86513
cf-bgj: h2pri,csam-hash
etag: "67aafdca-151f1"
last-modified: Tue, 11 Feb 2025 07:35:38 GMT
referrer-policy: no-referrer, strict-origin-when-cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 3040
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tz%2F3KimWfbASU3IVGauGhs2vm2Y79tcQSeeH0u61FmcDWjJ02WEoCs1X3an%2BuI%2FZanVR5H%2Ba9L8l4TQmk1sTKQqf5Pt9z4JLpDyfcacyPCrCSsT9a6aUMuk%2BFdc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25ccc5ade56cb-OSL
server-timing: cfL4;desc="?proto=TCP&rtt=688&min_rtt=450&rtt_var=62&sent=366&recv=159&lost=0&retrans=0&sent_bytes=420227&recv_bytes=3839&delivery_rate=35490196&cwnd=126&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=2054&x=0"
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVswukIgJ10hmlzKyGHEB9JxwepXmDM4iEJ6tWdb7REF-b8vxg13S7-llA0Bemu4Ww67LCyazQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S856458045%3A1743786035687617 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVswukIgJ10hmlzKyGHEB9JxwepXmDM4iEJ6tWdb7REF-b8vxg13S7-llA0Bemu4Ww67LCyazQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S856458045%3A1743786035687617 IP64.233.164.84:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subject*.google.com FingerprintD9:9E:60:22:6F:83:0B:DE:8F:D6:FF:6C:5B:83:B4:22:4D:58:97:82 ValidityThu, 20 Mar 2025 11:18:50 GMT - Thu, 12 Jun 2025 11:18:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVswukIgJ10hmlzKyGHEB9JxwepXmDM4iEJ6tWdb7REF-b8vxg13S7-llA0Bemu4Ww67LCyazQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S856458045%3A1743786035687617 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 04 Apr 2025 17:00:35 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-HCdI4la2_c_CAcdfAP8qhg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en._0nmwHM1LT0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css | 104.26.0.140 | 200 OK | 59 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeASCII text, with very long lines (58929), with CRLF line terminators Hash879812fc22af75aa3ae7b5666ca4f4b8 df27469a952b7ee36cc03db471c6198f577186a8 c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-e6ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xGKn2uzZqD00VBPRWnUzvz3sQY%2BRjDT50TewinrMphMOZFa6zb5N3XvQ%2F9mO3oEBWh7QrxJGHgMxiEpgE8295ioFIco5FkLA54eUcBQErYMvxnhDK6u55ieb1Qs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc79c2a56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1174&min_rtt=450&rtt_var=798&sent=162&recv=60&lost=0&retrans=0&sent_bytes=181450&recv_bytes=3155&delivery_rate=18928104&cwnd=130&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1301&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/custom.css | 104.26.0.140 | 200 OK | 8.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/custom.css IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeASCII text, with very long lines (9784), with no line terminators Hashc50f9610960dafcc645bf7eb021524a8 e5785e9f90fb01ff449433f699ef3758f1f5783b 67ee3e100881d490b2e95cfd8f03574ab24d95bcc8effa11b9726188249b8dae
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 19:56:14 GMT
vary: Accept-Encoding
etag: W/"67abab5e-22e8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fa91qRWFkw12MjQvvGSHKt7oFVJBx%2Bp3CDo85xDjdZEqSs%2FucrbnAu9LczKvHXpib4cymPaQijDWNXVwWE8Tcrme818aE0xNA1OGBqegyZzuVE%2F1%2F6tAmX2qy0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc79c2d56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=1174&min_rtt=450&rtt_var=798&sent=173&recv=60&lost=0&retrans=0&sent_bytes=194788&recv_bytes=3155&delivery_rate=18928104&cwnd=130&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1301&x=0"
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/countdown.min.js | 104.26.0.140 | 200 OK | 5.4 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js IP104.26.0.140:443
Requested byhttps://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip CertificateIssuerGoogle Trust Services Subjectmegaup.net FingerprintD1:0D:1F:7C:74:36:FE:3E:F0:18:C3:17:61:6A:99:81:06:7C:A8:26 ValidityThu, 27 Feb 2025 16:36:48 GMT - Wed, 28 May 2025 17:30:06 GMT
File typeJavaScript source, ASCII text, with very long lines (5507), with no line terminators Hash0a9988ecd74ad96d83a8e257f5f5e0f1 2f85fdf86f65c0a2a477ef02af754827b7a5a069 c292f5ba20b0ba73fcd40289791f0e0be99c49d83fc5226881da97ad78e9c061
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/76d26420052938e418afbc56bcf1e9bc/Schedule.I.v.0.3.3f15.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ejjejjtrlqv2p571r89p7vrjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 04 Apr 2025 17:00:31 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-14f0"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
cache-control: max-age=14400
cf-cache-status: HIT
age: 3039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QbzZF0iFn%2BG5lastCKKY4JolJINoga0p8FKjZiPPobdScaZ2JHYH%2BJ77rtrXdqwjDJuwdTdboxrFQrfExSjupC%2BcQFcw1wYDDHNHSo4roYqPJ9gImrONPdTX45E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92b25cc7cc7f56cb-OSL
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=734&min_rtt=450&rtt_var=182&sent=304&recv=129&lost=0&retrans=0&sent_bytes=345260&recv_bytes=3737&delivery_rate=29032581&cwnd=124&unsent_bytes=0&cid=cd39eaeb2e23ec6e&ts=1328&x=0"
X-Firefox-Spdy: h2
|
|
0.0.0.0