GET megaup.net/d35925a45dd343da86a2751d477f367e/
5.34.214.148200 OK 80 kB URL User Request GET HTTPS
megaup.net/d35925a45dd343da86a2751d477f367e/
IP / ASN
5.34.214.148
#42532 SIA VEESP
Resource Information
File type HTML document, Unicode text, UTF-8 text, with very long lines (51204)
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 80 kB (80238 bytes)
MD5 aaaec0b5cd98b6cfebe61d60be2829b5
SHA1 bec963e7d6bce3b4006266da28dfcdd3e4dffbad
SHA256 f34be494116d48747c1160936589db049b7d6b014ab1eaf4fa11d4e819ecaeb3
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /d35925a45dd343da86a2751d477f367e/ HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv; expires=Tue, 22 Jul 2025 10:07:58 GMT; Max-Age=86400; path=/; domain=megaup.net; secure; HttpOnly; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
access-control-allow-origin: https://megaup.net
access-control-allow-headers: Content-Type, Content-Range, Content-Disposition, Content-Description
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
5.34.214.148200 OK 6.0 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-11
Times Seen 1809
Size 6.0 kB (6019 bytes)
MD5 25cfe48e07622a00154b677afcbaeb47
SHA1 23e3ae1bd04ad1d00d25d30e39815104ceeae52f
SHA256 709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1783"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 48 kB URL GET HTTPS
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-11
Times Seen 34809
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Information
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:06:40 GMT
expires: Fri, 17 Jul 2026 10:06:40 GMT
cache-control: public, max-age=31536000
age: 345678
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
5.34.214.148200 OK 5.4 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 2691
Size 5.4 kB (5360 bytes)
MD5 76a923d3d69255c45cd24bf9b100244f
SHA1 eb3c96f9901692f1a03500ea632963a16afdb985
SHA256 8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-14f0"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET sswalesmentb.com/UUptcEN+dQ4DfhwNGQEUOiErJ3IbIAgHBTAdX0F6EyYZEhombBkZJ2x9W0FyaXxLACo1d1xWMCUrGQUwbHtLGS03JVBWNWx7Q0N3f3lbXnV3P1BBZSU6DBd+YGwdBDc9d1xHdmJ6VEJ3ZnNfRXE
172.67.189.68204 No Content 0 B URL GET HTTPS
sswalesmentb.com/UUptcEN+dQ4DfhwNGQEUOiErJ3IbIAgHBTAdX0F6EyYZEhombBkZJ2x9W0FyaXxLACo1d1xWMCUrGQUwbHtLGS03JVBWNWx7Q0N3f3lbXnV3P1BBZSU6DBd+YGwdBDc9d1xHdmJ6VEJ3ZnNfRXE
IP / ASN
172.67.189.68
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject sswalesmentb.com
Fingerprint A3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
Validity Wed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
GET /UUptcEN+dQ4DfhwNGQEUOiErJ3IbIAgHBTAdX0F6EyYZEhombBkZJ2x9W0FyaXxLACo1d1xWMCUrGQUwbHtLGS03JVBWNWx7Q0N3f3lbXnV3P1BBZSU6DBd+YGwdBDc9d1xHdmJ6VEJ3ZnNfRXE HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 21 Jul 2025 10:07:59 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=P3%2FEfbQt93Q331QurXj4PLA85EtY5KBdIPv7nKdm9MdtIijxlFPZ1u5%2F7N72ID0wMmS7n1WRLwWQo3WL9G4BmeytvmCOky5OLUJOr%2B3u"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9629e4fbba9c56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
5.34.214.148200 OK 80 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 80148, version 331.17301
First Seen 2023-04-05
Last Seen 2025-08-11
Times Seen 6573
Size 80 kB (80148 bytes)
MD5 c500da19d776384ba69573ae6fe274e7
SHA1 6290834672aba86d5b6c1c73b30b57c9c53996f7
SHA256 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:59 GMT
content-type: font/woff2
content-length: 80148
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-13914"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOM4TDEEkhWn_M9gmR7H5RAE7dgTUfU1CAJV0dy_BGp4OQ87dPhQHDjn3ZeyF0WvgtDVYCopQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1273669844%3A1753092479797399
173.194.73.84403 Forbidden 0 B URL GET HTTPS
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOM4TDEEkhWn_M9gmR7H5RAE7dgTUfU1CAJV0dy_BGp4OQ87dPhQHDjn3ZeyF0WvgtDVYCopQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1273669844%3A1753092479797399
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject *.google.com
Fingerprint AB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
Validity Mon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOM4TDEEkhWn_M9gmR7H5RAE7dgTUfU1CAJV0dy_BGp4OQ87dPhQHDjn3ZeyF0WvgtDVYCopQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1273669844%3A1753092479797399 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 21 Jul 2025 10:07:59 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-F8Q9D7kMMa7pJS68JP36SA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4ikenfs4_uY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET xml.yhisladyloveheh.org/thumbnail?i=ugCr2meo-gM_0&p=1753092480.220815&imgt=icon
0.0.0.0 0 B URL GET HTTP
xml.yhisladyloveheh.org/thumbnail?i=ugCr2meo-gM_0&p=1753092480.220815&imgt=icon
IP / ASN
0.0.0.0
#0
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=ugCr2meo-gM_0&p=1753092480.220815&imgt=icon HTTP/1.1
Host: xml.yhisladyloveheh.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET megaup.net/themes/spirit/assets/frontend/css/socicon.css
5.34.214.148200 OK 9.8 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/socicon.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-11
Times Seen 1763
Size 9.8 kB (9838 bytes)
MD5 910a42ce112991b31b30a735f1006a5f
SHA1 6c8b4769270f1c86bb1c7a6b54325465395ba614
SHA256 010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-266e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
142.250.74.10200 OK 39 kB URL GET HTTPS
fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
IP / ASN
142.250.74.10
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with very long lines (1572)
First Seen 2025-06-02
Last Seen 2025-08-11
Times Seen 734
Size 39 kB (39341 bytes)
MD5 0812d3cfd3d7800435f05536b513ecfd
SHA1 e70839be86f9de0d31aa6b5f0903da7c1fc7c286
SHA256 00e20cfbdec23113781e1620e51b3e336b15acd9a3c026a184390736b26dab70
Certificate Information
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint DC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B
Validity Mon, 23 Jun 2025 08:41:28 GMT - Mon, 15 Sep 2025 08:41:27 GMT
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 21 Jul 2025 10:07:58 GMT
date: Mon, 21 Jul 2025 10:07:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
5.34.214.148200 OK 7.1 kB URL GET HTTPS
megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
First Seen 2023-04-07
Last Seen 2025-08-11
Times Seen 4064
Size 7.1 kB (7137 bytes)
MD5 5d15526be10b904a6b48d1af04a10cc3
SHA1 c09b6874359ac6d71db95593618a9acb55baa984
SHA256 894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: image/png
content-length: 7137
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
142.250.74.35200 OK 27 kB URL GET HTTPS
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 26596, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-11
Times Seen 5835
Size 27 kB (26596 bytes)
MD5 dae1850484b86d299c31bc08aaa563cf
SHA1 dca808d6d16965c40bfba4e4b3c8a819f843890d
SHA256 8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370
Certificate Information
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Jul 2025 22:51:35 GMT
expires: Thu, 16 Jul 2026 22:51:35 GMT
cache-control: public, max-age=31536000
age: 386183
last-modified: Wed, 28 May 2025 17:52:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
5.34.214.148200 OK 3.9 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-11
Times Seen 1841
Size 3.9 kB (3889 bytes)
MD5 30265c8089a8f3e871d0873ef6a5b944
SHA1 2804a2fe5a6a956626ce6a46adf6b1a0676ee13d
SHA256 f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f31"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
5.34.214.148200 OK 54 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 2238
Size 54 kB (53873 bytes)
MD5 8c1e666176ac7bdce67d58b45823ffac
SHA1 75947e4316427ce0c5e33300aeb4dc4d7d54dd09
SHA256 c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-d271"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js
5.34.214.148200 OK 21 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/datepicker.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 4327
Size 21 kB (20975 bytes)
MD5 8cfe207a6a21c7495cfb751c761217a6
SHA1 35d686a6c4ecc9946c35444ce93e110cb0e1611c
SHA256 804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-51ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
5.34.214.148200 OK 14 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 2257
Size 14 kB (13862 bytes)
MD5 0eef6fe46d14f860d5666d2c7b13a564
SHA1 7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe
SHA256 95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-3626"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undefined/eG5WM0oZDDVedRlTNBU/CgJrFng+S2R1LksBMQs+SVZlWnsODDEdKRQBI1csCgE4R2QWCyIWeD4sBANzFDoOZiExLyVBGRIjO3ISOiM1ABAcC2Z1IigWNVwPSwE/cgkXOxtZczQnLnIwGT9uFng6KT9Yb0ooAXALTw04ajgdPRcWeD4vIQI4OTpmQR0wXwJ4M0wiHVgiECUxQD8rJgxDCDsFDlYkDCoZcRhOJzFceTAtJVkIPwYechIIIjBlCEkIZgN8MC09QQkSARFqJEk4H0QMEQgAZXIqOToWeD4/Hgd5IQBnZQUQGSZWHD4BBFQcCThlAwQbNiJyLBIKP1UcVTsldDM1VxVaGyo3OEQkGSsyABoqIDlhLSJLZHEcFgI0V3giLzADHx8lMWonPwMcCgNLVxBXJEE4MHYcSg86V3M9F2IKCzsdN2N4CDYVAxhIC2ZHcy0UHEocOUg8QCUWHmteBE1XGAcfACI+
0.0.0.0 0 B URL GET HTTP
undefined/eG5WM0oZDDVedRlTNBU/CgJrFng+S2R1LksBMQs+SVZlWnsODDEdKRQBI1csCgE4R2QWCyIWeD4sBANzFDoOZiExLyVBGRIjO3ISOiM1ABAcC2Z1IigWNVwPSwE/cgkXOxtZczQnLnIwGT9uFng6KT9Yb0ooAXALTw04ajgdPRcWeD4vIQI4OTpmQR0wXwJ4M0wiHVgiECUxQD8rJgxDCDsFDlYkDCoZcRhOJzFceTAtJVkIPwYechIIIjBlCEkIZgN8MC09QQkSARFqJEk4H0QMEQgAZXIqOToWeD4/Hgd5IQBnZQUQGSZWHD4BBFQcCThlAwQbNiJyLBIKP1UcVTsldDM1VxVaGyo3OEQkGSsyABoqIDlhLSJLZHEcFgI0V3giLzADHx8lMWonPwMcCgNLVxBXJEE4MHYcSg86V3M9F2IKCzsdN2N4CDYVAxhIC2ZHcy0UHEocOUg8QCUWHmteBE1XGAcfACI+
IP / ASN
0.0.0.0
#0
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /eG5WM0oZDDVedRlTNBU/CgJrFng+S2R1LksBMQs+SVZlWnsODDEdKRQBI1csCgE4R2QWCyIWeD4sBANzFDoOZiExLyVBGRIjO3ISOiM1ABAcC2Z1IigWNVwPSwE/cgkXOxtZczQnLnIwGT9uFng6KT9Yb0ooAXALTw04ajgdPRcWeD4vIQI4OTpmQR0wXwJ4M0wiHVgiECUxQD8rJgxDCDsFDlYkDCoZcRhOJzFceTAtJVkIPwYechIIIjBlCEkIZgN8MC09QQkSARFqJEk4H0QMEQgAZXIqOToWeD4/Hgd5IQBnZQUQGSZWHD4BBFQcCThlAwQbNiJyLBIKP1UcVTsldDM1VxVaGyo3OEQkGSsyABoqIDlhLSJLZHEcFgI0V3giLzADHx8lMWonPwMcCgNLVxBXJEE4MHYcSg86V3M9F2IKCzsdN2N4CDYVAxhIC2ZHcy0UHEocOUg8QCUWHmteBE1XGAcfACI+ HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ukankingwithea.com/asd100.bin
104.21.96.1404 Not Found 159 B URL GET HTTPS
ukankingwithea.com/asd100.bin
IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2023-04-13
Last Seen 2025-08-11
Times Seen 1219
Size 159 B (159 bytes)
MD5 fb9666f93e418b95fea8fdbc20e80af9
SHA1 d4eefca1b299cc266a80e83c9e39c4261cb87583
SHA256 c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
Certificate Information
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Mon, 21 Jul 2025 10:07:59 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CoUXKaQlZREPggnvice5%2F9kWLyXGSSApTObm4OTfE0T%2B87MjWI%2FywuRAkH%2BW89Vgo2WZy631o%2Bm%2FtemkvoDZTdm9MVPTJYmLtzpKzJl%2F270%3D"}]}
content-encoding: br
cf-ray: 9629e4ff0fcd0b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.96.1200 OK 27 B URL GET HTTPS
ukankingwithea.com/
IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with no line terminators
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 27 B (27 bytes)
MD5 50bd7c255a8f81cdced2cb823627bfac
SHA1 67c1b4b8a7062449b8c40ce650cd598199b7f942
SHA256 7b6e5e76660d6a343bca948c4ddee14662e261ad8fb0a1ecce0c3873cfb2cdbf
Certificate Information
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 21 Jul 2025 10:07:59 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PlouM48lWL%2FzaTFY9o%2FnA0MYZYlX57F8DCglCEFLWX5xiEZQh7ZQMQbh5oD2guGWkWu7pdHcoVoaIgco1y3h8n9eCtd9cfytYE7pA8AE4N8%3D"}]}
content-encoding: br
set-cookie: csu=1669208924675140@1@1753092479; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9629e4ff0fd00b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
5.34.214.148200 OK 103 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-11
Times Seen 1950
Size 103 kB (102727 bytes)
MD5 c9b1c618a7b12bd7ecf6034164b29164
SHA1 f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99
SHA256 fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-19147"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js
5.34.214.148200 OK 3.9 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/typed.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (3949), with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 4971
Size 3.9 kB (3949 bytes)
MD5 2f6185a8a32a50b2b3e04849f44359d4
SHA1 0e5501588c5c0d1c9462f34b0d56c21abff5bfef
SHA256 914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f6d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
3.167.7.138200 OK 489 kB URL GET HTTPS
d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP / ASN
3.167.7.138
#0
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 2
Size 489 kB (489387 bytes)
MD5 1c2cba2c54512d2c7eee0713ae4cc2bf
SHA1 adf8d3509aa845c0bf43a69ede3a20f4a1174fc2
SHA256 3f8a331d211bd6f88b7aaed11fb3aad8353b4b238ec4f1d51b68d27e6d5ef5c5
Certificate Information
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151952
date: Mon, 21 Jul 2025 10:07:58 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 4e0a1f367f79652e0e7d03fa585de7b2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: eSqBDEV4ct5Hkd9kIy9iS-XbdavfVzqczyZcZMsa3vQZRDSRGv8RTA==
X-Firefox-Spdy: h2
GET sswalesmentb.com/cWRwcDNeWxMDDjwxCCFqJAc3FHQVNhYXW0k+JjIWQyYyQ0MeMjg1FQUNFE0LQ1FJQQJXFBkUDkJWVgNHEBAFAw5AQhkeVR5ZVgYOQUpJXgFfUlYFDkBCBABSFllBVkMFEBxNAkZRQ0AKQ1BHSQFGVA
172.67.189.68204 No Content 0 B URL GET HTTPS
sswalesmentb.com/cWRwcDNeWxMDDjwxCCFqJAc3FHQVNhYXW0k+JjIWQyYyQ0MeMjg1FQUNFE0LQ1FJQQJXFBkUDkJWVgNHEBAFAw5AQhkeVR5ZVgYOQUpJXgFfUlYFDkBCBABSFllBVkMFEBxNAkZRQ0AKQ1BHSQFGVA
IP / ASN
172.67.189.68
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject sswalesmentb.com
Fingerprint A3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
Validity Wed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
GET /cWRwcDNeWxMDDjwxCCFqJAc3FHQVNhYXW0k+JjIWQyYyQ0MeMjg1FQUNFE0LQ1FJQQJXFBkUDkJWVgNHEBAFAw5AQhkeVR5ZVgYOQUpJXgFfUlYFDkBCBABSFllBVkMFEBxNAkZRQ0AKQ1BHSQFGVA HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 21 Jul 2025 10:07:59 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zL4YCZh0BkvWEOnmAOTeORnbCZYnLehI%2BQB0KbR4po8ZdD0JakH1KoYmnKnlwl0nixzj1mtOKBFxrvvHvFoLa3Oi7gyR8ct8ZbE%2B9SQ6"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9629e4fbcad256bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 48 kB URL GET HTTPS
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-11
Times Seen 34809
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Information
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:06:40 GMT
expires: Fri, 17 Jul 2026 10:06:40 GMT
cache-control: public, max-age=31536000
age: 345679
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET sswalesmentb.com/V2s0VHd4VFcnSgE8bhMSEFJAARkNJGwDPTIIX2EWDi1yZCQRWxIgHjNWDWBOb10Acgc+DwllT3EYQDUDIhgJZVE+BVI7SnEdCWVZZ0UGekJxHgllUSMbVTNKZk1EIAM7VgVjQmRbDWZDYFIGbUE
172.67.189.68204 No Content 0 B URL GET HTTPS
sswalesmentb.com/V2s0VHd4VFcnSgE8bhMSEFJAARkNJGwDPTIIX2EWDi1yZCQRWxIgHjNWDWBOb10Acgc+DwllT3EYQDUDIhgJZVE+BVI7SnEdCWVZZ0UGekJxHgllUSMbVTNKZk1EIAM7VgVjQmRbDWZDYFIGbUE
IP / ASN
172.67.189.68
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject sswalesmentb.com
Fingerprint A3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
Validity Wed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
GET /V2s0VHd4VFcnSgE8bhMSEFJAARkNJGwDPTIIX2EWDi1yZCQRWxIgHjNWDWBOb10Acgc+DwllT3EYQDUDIhgJZVE+BVI7SnEdCWVZZ0UGekJxHgllUSMbVTNKZk1EIAM7VgVjQmRbDWZDYFIGbUE HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 21 Jul 2025 10:07:59 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=85lzL1kQ7puLK7MuByJIetzqqeGtgzVOtQSbSJ5Obgqn7H%2B6TFVItgKHWjXCYXxnmFw2VAOZf9hYmCxaFX82ZX07MiIDCNOJddtA9POz"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9629e4fbdada56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
5.34.214.148200 OK 536 B URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type PNG image data, 57 x 57, 8-bit colormap, non-interlaced
First Seen 2025-04-01
Last Seen 2025-08-11
Times Seen 1396
Size 536 B (536 bytes)
MD5 0019444f6b6df5b4b5ed32b6b469caab
SHA1 4232370d10ab54ef9bda57aa9dcb813036047b35
SHA256 0509f6df067face535f028cd86200748952227161f8f244aa7864e7848553562
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:59 GMT
content-type: image/png
content-length: 536
last-modified: Thu, 13 Feb 2025 17:40:08 GMT
vary: Accept-Encoding
etag: "67ae2e78-218"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
5.34.214.148200 OK 739 B URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with CRLF line terminators
First Seen 2025-04-06
Last Seen 2025-08-11
Times Seen 1308
Size 739 B (739 bytes)
MD5 a19cdfde4cca33ccafc0b8bfd518bebb
SHA1 df1830e07033d0ae31288f62892121778fc7c765
SHA256 a347474d3c97d5440c2f06c86c314eb1e9c2a20e2b84e8367d57743fe77a8115
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/mu-waiting-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Mon, 17 Feb 2025 00:39:28 GMT
vary: Accept-Encoding
etag: W/"67b28540-2e3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/icon?family=Material+Icons
142.250.74.10200 OK 565 B URL GET HTTPS
fonts.googleapis.com/icon?family=Material+Icons
IP / ASN
142.250.74.10
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text
First Seen 2025-01-17
Last Seen 2025-08-11
Times Seen 10932
Size 565 B (565 bytes)
MD5 736c83e15fc300de505f6ce9762a9396
SHA1 31c0f11ada78e92970ff42d990116d77c169c6d7
SHA256 c31266310101d0b1607937a7baf07f1601b7637bd2373176696488a07d7b4302
Certificate Information
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint DC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B
Validity Mon, 23 Jun 2025 08:41:28 GMT - Mon, 15 Sep 2025 08:41:27 GMT
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 21 Jul 2025 10:07:58 GMT
date: Mon, 21 Jul 2025 10:07:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
104.21.96.1404 Not Found 159 B URL GET HTTPS
ukankingwithea.com/asd100.bin
IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2023-04-13
Last Seen 2025-08-11
Times Seen 1219
Size 159 B (159 bytes)
MD5 fb9666f93e418b95fea8fdbc20e80af9
SHA1 d4eefca1b299cc266a80e83c9e39c4261cb87583
SHA256 c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
Certificate Information
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Mon, 21 Jul 2025 10:07:59 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=SqiFSfsdaU8EZkSafBqd902UIcK3NZKlnUj726zISkRyuG%2F9ehZCYtsycPrvsUkORvqZpeHAgj7gQx8c0bCdCAtB4n7%2F%2FHPbcmoObVDt4kk%3D"}]}
content-encoding: br
cf-ray: 9629e4feffaf0b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.96.1200 OK 27 B URL GET HTTPS
ukankingwithea.com/
IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with no line terminators
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 27 B (27 bytes)
MD5 2142b5ea4a571b92aeaeb9fe781d7725
SHA1 f1a450ef213ad2989d896643f29420bf7f74046a
SHA256 3d42c7e9ba2b0a8f7cdd2319792807ec83f85762d8ecbfedc624a0fe6de07d0e
Certificate Information
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 21 Jul 2025 10:07:59 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NJ15%2B1JE8nQcK57enfV7CmCa0Dfy4b%2F8pVJ6TBZwnohm%2FRUJ7k35Y1LVy26%2B9eQS7LyGsaq%2Bco6O2zGVja6nTrxQYCbOWcXMORZCNuvHim4%3D"}]}
content-encoding: br
set-cookie: csu=1075223694549170@1@1753092479; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9629e4feffaa0b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nriceukwater.org/floater?cs=VE5QdVVjdmdFbG1%2BZURsYnhoQGM&abt=0&red=1&sm=83&k=2025%20ssrmovies%20ballerina%20amzn%20dual%20audio%20hindi%20true%20x264%20esubs&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1271565890020034&agec=1753092480&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd35925a45dd343da86a2751d477f367e%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_MtFp=1753092480388&crc=1
54.240.174.106200 OK 1.6 kB URL GET HTTPS
nriceukwater.org/floater?cs=VE5QdVVjdmdFbG1%2BZURsYnhoQGM&abt=0&red=1&sm=83&k=2025%20ssrmovies%20ballerina%20amzn%20dual%20audio%20hindi%20true%20x264%20esubs&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1271565890020034&agec=1753092480&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd35925a45dd343da86a2751d477f367e%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_MtFp=1753092480388&crc=1
IP / ASN
54.240.174.106
#16509 AMAZON-02
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with very long lines (1643), with no line terminators
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 1.6 kB (1643 bytes)
MD5 c3c6b54b2ec97198aacdae2bfdd88d3f
SHA1 8e5a9d4e434de711439fc3f8a3baed7ad6a962de
SHA256 33d97b525b5a1812dca589e85f1224502d3482658255f18bf2ea786beee2500d
Certificate Information
Issuer Amazon
Subject nriceukwater.org
Fingerprint D4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3
Validity Wed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
GET /floater?cs=VE5QdVVjdmdFbG1%2BZURsYnhoQGM&abt=0&red=1&sm=83&k=2025%20ssrmovies%20ballerina%20amzn%20dual%20audio%20hindi%20true%20x264%20esubs&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1271565890020034&agec=1753092480&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd35925a45dd343da86a2751d477f367e%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_MtFp=1753092480388&crc=1 HTTP/1.1
Host: nriceukwater.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 1112
date: Mon, 21 Jul 2025 10:08:00 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=qzmTNgePLi4dtDKrL7piA0auEoI10Ig+soCv24uu1KpI7/HWNL1fW7WViP4tdz8f3AsJAvyic8zCq/PVdDYR/qf4FcxwSGKeWOxCb8+ZNIAp/4w0E3PPZlQCrrEa; Expires=Mon, 28 Jul 2025 10:08:00 GMT; Path=/
AWSALBCORS=qzmTNgePLi4dtDKrL7piA0auEoI10Ig+soCv24uu1KpI7/HWNL1fW7WViP4tdz8f3AsJAvyic8zCq/PVdDYR/qf4FcxwSGKeWOxCb8+ZNIAp/4w0E3PPZlQCrrEa; Expires=Mon, 28 Jul 2025 10:08:00 GMT; Path=/; SameSite=None
csu=ca2c292c-4e6f-475e-a536-98943e316d91
csu=1271565890020034
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VROrTRa8j9yDTrsrZ02DiAra-dhFqR3R7d6Xb2D6xTXsikduStBcNQ==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
5.34.214.148200 OK 6.0 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 2234
Size 6.0 kB (6028 bytes)
MD5 c9e3a210d83398f301b3a7049c259676
SHA1 8e227bb40fe120841829a7fef0ffeb091d179a91
SHA256 aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-178c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET theharityhild.buzz/M0luanRIax0dK0Y7AkhOESEaHgRAc0FFGVYuDx8EHScLHltAPkAABxFlTBkZVWtUW1gROgMcVglrWkRHEWVMHhVUFgcOVglrVllGBXpdSFgROhsIK1otXEhOES9WWUdQeVoIWQUsXghZBy0MWlkKfVZdWVV%2FCw8RUCwNCRdQLEwX
34.41.139.193200 OK 0 B URL GET HTTPS
theharityhild.buzz/M0luanRIax0dK0Y7AkhOESEaHgRAc0FFGVYuDx8EHScLHltAPkAABxFlTBkZVWtUW1gROgMcVglrWkRHEWVMHhVUFgcOVglrVllGBXpdSFgROhsIK1otXEhOES9WWUdQeVoIWQUsXghZBy0MWlkKfVZdWVV%2FCw8RUCwNCRdQLEwX
IP / ASN
34.41.139.193
#396982 GOOGLE-CLOUD-PLATFORM
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer ZeroSSL
Subject *.theharityhild.buzz
Fingerprint D7:A3:95:2E:55:27:58:09:40:C1:B4:BA:1F:ED:FA:B4:82:6C:83:AE
Validity Wed, 25 Jun 2025 00:00:00 GMT - Tue, 23 Sep 2025 23:59:59 GMT
GET /M0luanRIax0dK0Y7AkhOESEaHgRAc0FFGVYuDx8EHScLHltAPkAABxFlTBkZVWtUW1gROgMcVglrWkRHEWVMHhVUFgcOVglrVllGBXpdSFgROhsIK1otXEhOES9WWUdQeVoIWQUsXghZBy0MWlkKfVZdWVV%2FCw8RUCwNCRdQLEwX HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 21 Jul 2025 10:07:59 GMT
Connection: close
GET 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
0.0.0.0 0 B URL GET HTTP
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
IP / ASN
0.0.0.0
#0
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET 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 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET sswalesmentb.com/TjRZU0ZhCzogextiFx0SCGY0MnU+DDsELiRREWIyFAYPYiMZfX8nLyoJYWFzdwVodTYnUGRgdGhHLTIyO0dkYXZ+A386KChbZGFgOAlpfX9gBndlYDsJaHUyPlU+bndoRC0nKnMFbmZ1fg1rZ3F3Bm5g
172.67.189.68204 No Content 0 B URL GET HTTPS
sswalesmentb.com/TjRZU0ZhCzogextiFx0SCGY0MnU+DDsELiRREWIyFAYPYiMZfX8nLyoJYWFzdwVodTYnUGRgdGhHLTIyO0dkYXZ+A386KChbZGFgOAlpfX9gBndlYDsJaHUyPlU+bndoRC0nKnMFbmZ1fg1rZ3F3Bm5g
IP / ASN
172.67.189.68
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject sswalesmentb.com
Fingerprint A3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
Validity Wed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
GET /TjRZU0ZhCzogextiFx0SCGY0MnU+DDsELiRREWIyFAYPYiMZfX8nLyoJYWFzdwVodTYnUGRgdGhHLTIyO0dkYXZ+A386KChbZGFgOAlpfX9gBndlYDsJaHUyPlU+bndoRC0nKnMFbmZ1fg1rZ3F3Bm5g HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 21 Jul 2025 10:07:59 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zynahvUzgqevxciggklcEo6YGgUEG36%2FI1ixLqdQfKfQ7Ae4RpsOuBtZYKT29uMJa3cZ7UdWR6C2k%2Bss8leO%2FBbIoZI8XCS8kEsBZB7U"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9629e4fbbaa956bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 48 kB URL GET HTTPS
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-11
Times Seen 34809
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Information
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:06:40 GMT
expires: Fri, 17 Jul 2026 10:06:40 GMT
cache-control: public, max-age=31536000
age: 345678
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js
5.34.214.148200 OK 11 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/granim.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 2236
Size 11 kB (10635 bytes)
MD5 714368d20c70f8c91b0a596e128dac07
SHA1 563954ec3a896fc129d014f01836245829f6d01d
SHA256 e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-298b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/scripts.js
5.34.214.148200 OK 115 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/scripts.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (914), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 1964
Size 115 kB (114862 bytes)
MD5 ce260d2170faf98639ab8e0e3758f1e2
SHA1 32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f
SHA256 ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1c0ae"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
5.34.214.148200 OK 590 B URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
First Seen 2025-04-01
Last Seen 2025-08-11
Times Seen 1396
Size 590 B (590 bytes)
MD5 ed3d11830b3e136b384f2a0b8082f235
SHA1 3b75f2a64d528165f108d62e8c30d464b76945d7
SHA256 1aef6752088fe69a166d3a84375431e1041dde8fa3f9ccbde26accb220feb4a5
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:59 GMT
content-type: image/png
content-length: 590
last-modified: Thu, 13 Feb 2025 17:42:00 GMT
vary: Accept-Encoding
etag: "67ae2ee8-24e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET nriceukwater.org/multi?cs=czZQY1hDBGNQbkAOZFVsQw9lU20&abt=0&red=1&sm=76&k=2025%20ssrmovies%20ballerina%20amzn%20dual%20audio%20hindi%20true%20x264%20esubs&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1271565890020034&agec=1753092480&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd35925a45dd343da86a2751d477f367e%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_dZek=1753092480390&crc=1
54.240.174.106200 OK 3.9 kB URL GET HTTPS
nriceukwater.org/multi?cs=czZQY1hDBGNQbkAOZFVsQw9lU20&abt=0&red=1&sm=76&k=2025%20ssrmovies%20ballerina%20amzn%20dual%20audio%20hindi%20true%20x264%20esubs&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1271565890020034&agec=1753092480&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd35925a45dd343da86a2751d477f367e%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_dZek=1753092480390&crc=1
IP / ASN
54.240.174.106
#16509 AMAZON-02
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with very long lines (3934), with no line terminators
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 3.9 kB (3934 bytes)
MD5 7e9186edc6e0d9bef9e54350ef8db0a7
SHA1 1a65fe1262a17c46c7e1f0b079bcb1e6a81313bc
SHA256 ab68fd859e4a5e90a3103791730d4b970a1742f239f4f8efe8ed0c0c1abfee6d
Certificate Information
Issuer Amazon
Subject nriceukwater.org
Fingerprint D4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3
Validity Wed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
GET /multi?cs=czZQY1hDBGNQbkAOZFVsQw9lU20&abt=0&red=1&sm=76&k=2025%20ssrmovies%20ballerina%20amzn%20dual%20audio%20hindi%20true%20x264%20esubs&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1271565890020034&agec=1753092480&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd35925a45dd343da86a2751d477f367e%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_dZek=1753092480390&crc=1 HTTP/1.1
Host: nriceukwater.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1960
date: Mon, 21 Jul 2025 10:08:00 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=HrfCqFq3aoF5unaBAIRYTpDKPmwTSRDe90lB4SYy11wc+MnS8ylA61RF6cNncdbv8cnB4zqH/1nBkt7dhTfJJReJaleBdkz6wC4BbWmSqi8yeoyvFNSUXstI87m8; Expires=Mon, 28 Jul 2025 10:08:00 GMT; Path=/
AWSALBCORS=HrfCqFq3aoF5unaBAIRYTpDKPmwTSRDe90lB4SYy11wc+MnS8ylA61RF6cNncdbv8cnB4zqH/1nBkt7dhTfJJReJaleBdkz6wC4BbWmSqi8yeoyvFNSUXstI87m8; Expires=Mon, 28 Jul 2025 10:08:00 GMT; Path=/; SameSite=None
csu=8fa5dbe9-627d-4672-9ed8-f436fc277ac2
csu=1271565890020034
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BKTkkG2na8aa7z6e8F3YTTOTjejDoLGFLOozPOw0qURjh2KlFLeF3g==
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 48 kB URL GET HTTPS
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-11
Times Seen 34809
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Information
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:06:40 GMT
expires: Fri, 17 Jul 2026 10:06:40 GMT
cache-control: public, max-age=31536000
age: 345678
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 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
0.0.0.0 0 B URL GET HTTP
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
IP / ASN
0.0.0.0
#0
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET 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 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET lationsandind.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
3.164.206.102200 OK 3.1 kB URL GET HTTPS
lationsandind.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
IP / ASN
3.164.206.102
#16509 AMAZON-02
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type HTML document, ASCII text, with very long lines (3083), with no line terminators
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 3.1 kB (3083 bytes)
MD5 3be604424a073214a63ec3baddf083b0
SHA1 9ce5b3c5ab6890b711815f72a805ce2de6ab4774
SHA256 008fd343fa1da6da21ba52f0bcfa92fa84b89e0a27dc6f549794e4478543227c
Certificate Information
Issuer Amazon
Subject lationsandind.com
Fingerprint AA:5C:87:B0:46:CF:D9:ED:4F:BB:56:55:62:90:F2:CD:7B:2E:F4:D7
Validity Fri, 27 Jun 2025 00:00:00 GMT - Sun, 26 Jul 2026 23:59:59 GMT
GET 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 HTTP/1.1
Host: lationsandind.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1226
date: Mon, 21 Jul 2025 10:07:59 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=t3KAdYu77fq8qqL1TVtQ9ANAZ5uPQOg/hHUzy591Ye6VS4t8KoG78aBpIiLFmgb82vSaJM3/XtHVUZmqqczsvIpBKLqhr5FR8NJ3xWv7zW+K03z4X/0uAop1tQT9; Expires=Mon, 28 Jul 2025 10:07:59 GMT; Path=/
AWSALBCORS=t3KAdYu77fq8qqL1TVtQ9ANAZ5uPQOg/hHUzy591Ye6VS4t8KoG78aBpIiLFmgb82vSaJM3/XtHVUZmqqczsvIpBKLqhr5FR8NJ3xWv7zW+K03z4X/0uAop1tQT9; Expires=Mon, 28 Jul 2025 10:07:59 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 273ac87f74c1d256483a0897b3badd66.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P5
x-amz-cf-id: mrSgJL_V9iisN3_NjF4df3t5qU_DI_vjOKZIh9P2rNyhf8s3TGF-bQ==
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e57h0h2za200&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211
142.250.178.72200 OK 347 kB URL GET HTTPS
www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e57h0h2za200&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211
IP / ASN
142.250.178.72
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (6006)
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 347 kB (346989 bytes)
MD5 5426e01191eb88d684d9b8340880287e
SHA1 44470829023fa3bc065e018566cf4cc67766dbfe
SHA256 5942508a898e38f7ded4af259090a6f4b8cea50b0846677154ba193ed00cf7e9
Certificate Information
Issuer Google Trust Services
Subject *.google-analytics.com
Fingerprint 3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20
Validity Mon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
GET /gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e57h0h2za200&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 21 Jul 2025 10:07:59 GMT
expires: Mon, 21 Jul 2025 10:07:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 120921
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPwKNGpjKZ55lvcqwsWhgqZhicmWWIcNlYABvO3h8mm8bNzT-WVZYjpWHqgjS7TTB7aCJnlGg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-385172174%3A1753092479797424
173.194.73.84403 Forbidden 0 B URL GET HTTPS
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPwKNGpjKZ55lvcqwsWhgqZhicmWWIcNlYABvO3h8mm8bNzT-WVZYjpWHqgjS7TTB7aCJnlGg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-385172174%3A1753092479797424
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject *.google.com
Fingerprint AB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
Validity Mon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPwKNGpjKZ55lvcqwsWhgqZhicmWWIcNlYABvO3h8mm8bNzT-WVZYjpWHqgjS7TTB7aCJnlGg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-385172174%3A1753092479797424 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 21 Jul 2025 10:07:59 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-bkXsJQ3MiiAGV5IWageBwg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4ikenfs4_uY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/spirit/assets/images/logo/logo.png
5.34.214.148200 OK 5.9 kB URL GET HTTPS
megaup.net/themes/spirit/assets/images/logo/logo.png
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
First Seen 2025-04-01
Last Seen 2025-08-11
Times Seen 1362
Size 5.9 kB (5900 bytes)
MD5 fa360a47a62ae74a0a3d8c0f3e6f7f12
SHA1 168c72a918b04b735f8e0f8a72223a16f0eda358
SHA256 1d3a3c84dd36871d1009693761f441537117d5ee62c8e775d7d52c77d4c46de4
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: image/png
content-length: 5900
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-170c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
5.34.214.148200 OK 87 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 3039
Size 87 kB (86713 bytes)
MD5 5b5a269bd363e0886c17d855c2aab241
SHA1 042dd055cd289215835a58507c9531f808e1648a
SHA256 1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-152b9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/sw.js
5.34.214.148200 OK 103 kB URL GET HTTPS
megaup.net/sw.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-03-09
Last Seen 2025-08-11
Times Seen 3835
Size 103 kB (103036 bytes)
MD5 9ee51131e416458b88d6da4e6e6959ca
SHA1 a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4
SHA256 db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 22:15:30 GMT
vary: Accept-Encoding
etag: W/"63a23402-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
5.34.214.148200 OK 4.3 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 4292, version 1.0
First Seen 2023-04-20
Last Seen 2025-08-11
Times Seen 4939
Size 4.3 kB (4292 bytes)
MD5 ae072782b361d2afdbf43db08d3cfb73
SHA1 f3db2e65b53d97491672f8631e21d6d05905cc88
SHA256 31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: font/woff2
content-length: 4292
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-10c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET static.yhisladyloveheh.org/n337/ad/250x250_Q9KZuyHG.png
23.36.77.113200 OK 30 kB URL GET HTTPS
static.yhisladyloveheh.org/n337/ad/250x250_Q9KZuyHG.png
IP / ASN
23.36.77.113
#20940 Akamai International B.V.
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type PNG image data, 250 x 250, 8-bit colormap, non-interlaced
First Seen 2023-04-23
Last Seen 2025-08-10
Times Seen 1601
Size 30 kB (29780 bytes)
MD5 1133d3aaa0866ea57a5b44ecccd3283b
SHA1 96417ace0d02687e054a2fba6c9cb197162eb0ea
SHA256 62aee0fd8036247bfc2fca571d6e6328621f8639e4d939807cb555111f6bd039
Certificate Information
Issuer Let's Encrypt
Subject static.yhisladyloveheh.org
Fingerprint 39:A4:B6:4F:3B:C3:A8:F4:74:1F:DF:C9:E5:2C:EC:02:8A:E6:5A:1F
Validity Wed, 02 Jul 2025 13:55:31 GMT - Tue, 30 Sep 2025 13:55:30 GMT
GET /n337/ad/250x250_Q9KZuyHG.png HTTP/1.1
Host: static.yhisladyloveheh.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 29780
Last-Modified: Tue, 11 Apr 2023 12:57:12 GMT
ETag: "64355928-7454"
Accept-Ranges: bytes
Cache-Control: max-age=31635
Expires: Mon, 21 Jul 2025 18:55:18 GMT
Date: Mon, 21 Jul 2025 10:08:03 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
5.34.214.148200 OK 77 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with very long lines (65319), with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-11
Times Seen 2198
Size 77 kB (76922 bytes)
MD5 9b67b9ffbfcbe226a8c413fa740fd91c
SHA1 7837bd0c312897e46311aaf472947f3e23d75df2
SHA256 2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-12c7a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
173.194.73.84302 Found 0 B URL GET HTTPS
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BC:3A:20:55:47:6C:AF:90:A0:22:C3:30:DA:31:36:4A:92:62:DE:3D
Validity Mon, 23 Jun 2025 08:42:22 GMT - Mon, 15 Sep 2025 08:42:21 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:YIyw3q89ZBEeABENEZ2b9oZLVuzaHw:1OPGnwbAZBVeLtAh; Expires=Wed, 21-Jul-2027 10:07:59 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 21 Jul 2025 10:07:59 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNrg9ajbK3SiD5zfAu1JIwRuXR1Vw6xQkSVuq7CPyvOnoEhdEXabGNtRG0byM8PS5htZ3VNTA
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-HiC19TG7aNUlfKzzBuuwuQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMIVA8YRXEJG7lmEX0mRYPGNJOmqcHnBc2ILh0QMixMEJs7-GhSs0MMlnt47Jyw9_gXRfy76A
173.194.73.84302 Found 0 B URL GET HTTPS
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMIVA8YRXEJG7lmEX0mRYPGNJOmqcHnBc2ILh0QMixMEJs7-GhSs0MMlnt47Jyw9_gXRfy76A
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BC:3A:20:55:47:6C:AF:90:A0:22:C3:30:DA:31:36:4A:92:62:DE:3D
Validity Mon, 23 Jun 2025 08:42:22 GMT - Mon, 15 Sep 2025 08:42:21 GMT
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMIVA8YRXEJG7lmEX0mRYPGNJOmqcHnBc2ILh0QMixMEJs7-GhSs0MMlnt47Jyw9_gXRfy76A HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:TxppuZNuPg22AXgsgAcPSwvDsFcSBQ:XpeBhknXDHB0ADe3;Path=/;Expires=Wed, 21-Jul-2027 10:07:59 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 21 Jul 2025 10:07:59 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOM4TDEEkhWn_M9gmR7H5RAE7dgTUfU1CAJV0dy_BGp4OQ87dPhQHDjn3ZeyF0WvgtDVYCopQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1273669844%3A1753092479797399
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-AX5ov6KpnlnB_CI2gddq_A' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 416
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET sswalesmentb.com/eFpEdUZXZScGey0fCj4kLDIjFh4UPwAYCE88KAYLIRI0UHQ+AhVFYAwzIEh+T2x3RH5eKi0Re0pjYgYyGS4xBntJfC0bIBdnYgN7SXR0W3BIdHBTM0VrYgE2GT15RGAILjAZe0ltcUZ2QWhwQn9KYnA
172.67.189.68204 No Content 0 B URL GET HTTPS
sswalesmentb.com/eFpEdUZXZScGey0fCj4kLDIjFh4UPwAYCE88KAYLIRI0UHQ+AhVFYAwzIEh+T2x3RH5eKi0Re0pjYgYyGS4xBntJfC0bIBdnYgN7SXR0W3BIdHBTM0VrYgE2GT15RGAILjAZe0ltcUZ2QWhwQn9KYnA
IP / ASN
172.67.189.68
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject sswalesmentb.com
Fingerprint A3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
Validity Wed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
GET /eFpEdUZXZScGey0fCj4kLDIjFh4UPwAYCE88KAYLIRI0UHQ+AhVFYAwzIEh+T2x3RH5eKi0Re0pjYgYyGS4xBntJfC0bIBdnYgN7SXR0W3BIdHBTM0VrYgE2GT15RGAILjAZe0ltcUZ2QWhwQn9KYnA HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 21 Jul 2025 10:07:59 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=oYSucvvv0tbWzeEZozGp%2FPRlJe8otFJCi%2Fa2ToiFUxS8byJlotDoiG3tAaN6WwUTjTN9ZyRFdDyo7e6Tu31%2FbxE4PbVdqBuB5XVNT7F2"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9629e4fbdae756bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
173.194.73.84302 Found 0 B URL GET HTTPS
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BC:3A:20:55:47:6C:AF:90:A0:22:C3:30:DA:31:36:4A:92:62:DE:3D
Validity Mon, 23 Jun 2025 08:42:22 GMT - Mon, 15 Sep 2025 08:42:21 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:MGWuJ_XKMw78_2Sa6bmpUgdu8nKwmQ:LGi671s_FwijtNqJ; Expires=Wed, 21-Jul-2027 10:07:59 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 21 Jul 2025 10:07:59 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMIVA8YRXEJG7lmEX0mRYPGNJOmqcHnBc2ILh0QMixMEJs7-GhSs0MMlnt47Jyw9_gXRfy76A
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-3EEwqCoxbs4oIHm_DEy6aA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
3.167.7.138200 OK 489 kB URL GET HTTPS
d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP / ASN
3.167.7.138
#0
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 2
Size 489 kB (489387 bytes)
MD5 3d1c7aae5f3c12dfeb19904089b74f39
SHA1 0342cee6f56c0c05dc773be653d46f60e7d21453
SHA256 b7a1f772c00975e3c859f571646e1233bd7c253ef6965e31efb65729b1411e56
Certificate Information
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151951
date: Mon, 21 Jul 2025 10:07:59 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: Zcv6gm7ZaEARWtswIqrGXuX2k0lGUjG_T2ongKBxqynR5w63Elvrcw==
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNrg9ajbK3SiD5zfAu1JIwRuXR1Vw6xQkSVuq7CPyvOnoEhdEXabGNtRG0byM8PS5htZ3VNTA
173.194.73.84302 Found 0 B URL GET HTTPS
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNrg9ajbK3SiD5zfAu1JIwRuXR1Vw6xQkSVuq7CPyvOnoEhdEXabGNtRG0byM8PS5htZ3VNTA
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BC:3A:20:55:47:6C:AF:90:A0:22:C3:30:DA:31:36:4A:92:62:DE:3D
Validity Mon, 23 Jun 2025 08:42:22 GMT - Mon, 15 Sep 2025 08:42:21 GMT
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiNrg9ajbK3SiD5zfAu1JIwRuXR1Vw6xQkSVuq7CPyvOnoEhdEXabGNtRG0byM8PS5htZ3VNTA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:tGDLSAuhVy2-H2OqYY9OOeK05PAy2Q:0Kz3H2TlmVr-CFXo;Path=/;Expires=Wed, 21-Jul-2027 10:07:59 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 21 Jul 2025 10:07:59 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPwKNGpjKZ55lvcqwsWhgqZhicmWWIcNlYABvO3h8mm8bNzT-WVZYjpWHqgjS7TTB7aCJnlGg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-385172174%3A1753092479797424
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-GaHagiChqjyEPfN_ilI67g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 418
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
5.34.214.148200 OK 59 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with very long lines (58929), with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-11
Times Seen 2202
Size 59 kB (59119 bytes)
MD5 879812fc22af75aa3ae7b5666ca4f4b8
SHA1 df27469a952b7ee36cc03db471c6198f577186a8
SHA256 c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-e6ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/custom.css
5.34.214.148200 OK 8.9 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/custom.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type assembler source, ASCII text, with CRLF line terminators
First Seen 2025-04-06
Last Seen 2025-08-11
Times Seen 1308
Size 8.9 kB (8936 bytes)
MD5 68443327ebd1d8f35857bbb29d3ce6df
SHA1 d34e37d8cebc246854f05dde78abc32b5ad5d9fe
SHA256 98cf7514d65d87963ee938b6f83493b4429f8005a5f6814ba226a7b89c80aa45
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 19:56:14 GMT
vary: Accept-Encoding
etag: W/"67abab5e-22e8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
142.250.178.72200 OK 290 kB URL GET HTTPS
www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP / ASN
142.250.178.72
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (5911)
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 290 kB (289855 bytes)
MD5 eb1af8a4116f9d4a4a495188423d8924
SHA1 28bfc0e46e16194c7b8f6f7547b24799b4695bc3
SHA256 a1566360aac45e4daa26dae3938aa83ed33d09c7cce5242eec6dd6024dbc59ca
Certificate Information
Issuer Google Trust Services
Subject *.google-analytics.com
Fingerprint 3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20
Validity Mon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 21 Jul 2025 10:07:58 GMT
expires: Mon, 21 Jul 2025 10:07:58 GMT
cache-control: private, max-age=900
last-modified: Mon, 21 Jul 2025 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 101995
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST sswalesmentb.com/RUI1dllqfVYFZBZwAEAMEC4NIDJ0KlY+EyAWBzQuIxRdNQMNehMCMCF/DURsfHMEUCksJghFa2MxQRctMDEIRGl1dRMfNyMtCER/M38FWGBrcBtAfzB/BERudHcDQ2F8cgVEaXVxAVAtNSNSS2hjMkECNXhzAkNqdXsHQmF1cQ1B
172.67.189.68204 No Content 0 B URL POST HTTPS
sswalesmentb.com/RUI1dllqfVYFZBZwAEAMEC4NIDJ0KlY+EyAWBzQuIxRdNQMNehMCMCF/DURsfHMEUCksJghFa2MxQRctMDEIRGl1dRMfNyMtCER/M38FWGBrcBtAfzB/BERudHcDQ2F8cgVEaXVxAVAtNSNSS2hjMkECNXhzAkNqdXsHQmF1cQ1B
IP / ASN
172.67.189.68
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject sswalesmentb.com
Fingerprint A3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
Validity Wed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
POST /RUI1dllqfVYFZBZwAEAMEC4NIDJ0KlY+EyAWBzQuIxRdNQMNehMCMCF/DURsfHMEUCksJghFa2MxQRctMDEIRGl1dRMfNyMtCER/M38FWGBrcBtAfzB/BERudHcDQ2F8cgVEaXVxAVAtNSNSS2hjMkECNXhzAkNqdXsHQmF1cQ1B HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Mon, 21 Jul 2025 10:08:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xzCtysfOLjDiTyI8KZY6k2vPxMH6aE7uC2SdK%2FbPKkIQpo%2FcmcZEke20HTPw%2BrO2a%2B9UKpui%2F0gMVe0pGJiqdoRBkT5avP5Y3sENULem%2BKSs%2FEuceSz5k%2BuydG1caD%2Fe71eQ"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 9629e5027ae5b518-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4346&min_rtt=708&rtt_var=4160&sent=163&recv=245&lost=0&retrans=0&sent_bytes=14025&recv_bytes=13866&delivery_rate=486545&ss_exit_cwnd=14921&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=2f21fedf3f8b4e3b&ts=1067&inflight_dur=63&x=40"
GET fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
142.250.74.35200 OK 19 kB URL GET HTTPS
fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 19276, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-11
Times Seen 1346
Size 19 kB (19276 bytes)
MD5 266d9ceb5c3c51971e2a9e13b7ec5883
SHA1 091a3b35321cb3e7b11034a091964e795c4b74ac
SHA256 f93e2585efd0318f328e3431482382c66dfe89ac387060e88116cdd18a18b933
Certificate Information
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:11:47 GMT
expires: Fri, 17 Jul 2026 10:11:47 GMT
cache-control: public, max-age=31536000
age: 345371
last-modified: Wed, 28 May 2025 17:52:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.96.1200 OK 27 B URL GET HTTPS
ukankingwithea.com/
IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with no line terminators
First Seen 2025-07-21
Last Seen 2025-07-21
Times Seen 1
Size 27 B (27 bytes)
MD5 c91d3de179a5dc622a2d197620debe43
SHA1 ac565203ea1ddb11a9ef8b415657180efd23c47f
SHA256 dc5d24c625ed3940286157a615fadb46c2c6bd802f86cb49dcbcddc003eb0fb2
Certificate Information
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 21 Jul 2025 10:08:00 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zM51jIOBaN1Bw9q%2FVK5nqjfrg7sjNaDU4TYAp9U%2BehHiTq%2B4Dw1CDYuBusnr18ZaYlI8XTkvwIdaMOL%2FZRPQ8FBhkF5DtYTz6xNzR8MWPno%3D"}]}
content-encoding: br
set-cookie: csu=1271565890020034@1@1753092480; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9629e4ff2fe50b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET xml.yhisladyloveheh.org/thumbnail?i=ugCr2meo-gM_0&p=1753092480.220815&imgt=icon
198.134.116.29302 Found 30 kB URL GET HTTPS
xml.yhisladyloveheh.org/thumbnail?i=ugCr2meo-gM_0&p=1753092480.220815&imgt=icon
IP / ASN
198.134.116.29
#27257 WEBAIR-INTERNET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 30 kB (29780 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Let's Encrypt
Subject yhisladyloveheh.org
Fingerprint 5E:BF:A2:98:64:CD:AA:9E:FD:7F:82:C6:5F:4C:A8:99:64:D4:F9:F7
Validity Wed, 02 Jul 2025 13:30:22 GMT - Tue, 30 Sep 2025 13:30:21 GMT
GET /thumbnail?i=ugCr2meo-gM_0&p=1753092480.220815&imgt=icon HTTP/1.1
Host: xml.yhisladyloveheh.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 21 Jul 2025 10:08:03 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.yhisladyloveheh.org/n337/ad/250x250_Q9KZuyHG.png
GET megaup.net/themes/spirit/assets/frontend/css/flickity.css
5.34.214.148200 OK 2.5 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/flickity.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-11
Times Seen 1795
Size 2.5 kB (2521 bytes)
MD5 244d315064064270eabbbb7ac9f6c700
SHA1 21ad53d3efbb40154293190173ee0c497ed7651c
SHA256 ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-9d9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
5.34.214.148200 OK 70 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JavaScript source, ASCII text, with very long lines (768), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-11
Times Seen 2245
Size 70 kB (69754 bytes)
MD5 6fda19caa29287e6f584f0557fdeb6d4
SHA1 40f58160090cd1f022704ee1352b343adb9e73b9
SHA256 8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1107a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 48 kB URL GET HTTPS
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-11
Times Seen 34809
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Information
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 10:06:40 GMT
expires: Fri, 17 Jul 2026 10:06:40 GMT
cache-control: public, max-age=31536000
age: 345678
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
5.34.214.148200 OK 3.2 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type Unicode text, UTF-8 text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-11
Times Seen 1777
Size 3.2 kB (3160 bytes)
MD5 4541b29b6040bc31b760f98e914fd1d7
SHA1 0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba
SHA256 6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-c58"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/theme.css
5.34.214.148200 OK 207 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/css/theme.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type assembler source, ASCII text, with CRLF line terminators
First Seen 2025-04-01
Last Seen 2025-08-11
Times Seen 1363
Size 207 kB (206626 bytes)
MD5 06cc8983a538a05dddf526b3b7e732aa
SHA1 2414173a1660589ebbba8bdc6e3d1237df6063db
SHA256 27e49bfa89404d352fa4627719f2a9a3ea5c2759c2bc74e7567ff98b5a996758
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 18:30:52 GMT
vary: Accept-Encoding
etag: W/"67ab975c-32722"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/background.jpg
5.34.214.148200 OK 86 kB URL GET HTTPS
megaup.net/themes/spirit/assets/frontend/img/background.jpg
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3
First Seen 2025-04-01
Last Seen 2025-08-11
Times Seen 1396
Size 86 kB (86513 bytes)
MD5 1b0874b56457a14258e3bd22805266c6
SHA1 26ff3d095376d43cb78388e700707cdaf6ac75eb
SHA256 5c5e0d52eb281e1ceae07f53c931982e8e014b9a535df9c98246157167e29285
Certificate Information
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/img/background.jpg HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d35925a45dd343da86a2751d477f367e/
DNT: 1
Connection: keep-alive
Cookie: filehosting=m4ojusuo5d3kjgggl8qu902rkv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 21 Jul 2025 10:07:58 GMT
content-type: image/jpeg
content-length: 86513
last-modified: Tue, 11 Feb 2025 07:35:38 GMT
vary: Accept-Encoding
etag: "67aafdca-151f1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
POST sswalesmentb.com/em12ZWpVUhUWVzQ1I1UlPwo1MTs3JBU0EjwsJwkSO107KC4iWVARAx5QTldfQ1xHQxoTCUtWWFweAgQeDx5LV1pKWFAMBBwCS1daSltGVVtJX1NSKRIZAhUZX143QFg8SEQjEhcBWBwCEx4aBA4DARkTDxIIHksFCApTVywOBQMICBQMHwlPSSsfQFk+GBEmGEgAEwpHHSApVU9IWwZAWT5cQVBZSlREUVJKQ0RXWkJcQ0BYTAQbAh5fXjIMCRUDU1IpFBgaCU9NLkVXWU5fTlNdSl9FVlhKXUFWWkNLAFhaVFRYV0RMSwNYW0haR1BcT1VPVVpIXUZWXlwZBgQNR1xQFR4OAUtUXU9eRlxYTlVEUlpN
172.67.189.68204 No Content 0 B URL POST HTTPS
sswalesmentb.com/em12ZWpVUhUWVzQ1I1UlPwo1MTs3JBU0EjwsJwkSO107KC4iWVARAx5QTldfQ1xHQxoTCUtWWFweAgQeDx5LV1pKWFAMBBwCS1daSltGVVtJX1NSKRIZAhUZX143QFg8SEQjEhcBWBwCEx4aBA4DARkTDxIIHksFCApTVywOBQMICBQMHwlPSSsfQFk+GBEmGEgAEwpHHSApVU9IWwZAWT5cQVBZSlREUVJKQ0RXWkJcQ0BYTAQbAh5fXjIMCRUDU1IpFBgaCU9NLkVXWU5fTlNdSl9FVlhKXUFWWkNLAFhaVFRYV0RMSwNYW0haR1BcT1VPVVpIXUZWXlwZBgQNR1xQFR4OAUtUXU9eRlxYTlVEUlpN
IP / ASN
172.67.189.68
#13335 CLOUDFLARENET
Requested by https://megaup.net/d35925a45dd343da86a2751d477f367e/
Resource Information
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-11
Times Seen 5764799
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Information
Issuer Google Trust Services
Subject sswalesmentb.com
Fingerprint A3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
Validity Wed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
POST /em12ZWpVUhUWVzQ1I1UlPwo1MTs3JBU0EjwsJwkSO107KC4iWVARAx5QTldfQ1xHQxoTCUtWWFweAgQeDx5LV1pKWFAMBBwCS1daSltGVVtJX1NSKRIZAhUZX143QFg8SEQjEhcBWBwCEx4aBA4DARkTDxIIHksFCApTVywOBQMICBQMHwlPSSsfQFk+GBEmGEgAEwpHHSApVU9IWwZAWT5cQVBZSlREUVJKQ0RXWkJcQ0BYTAQbAh5fXjIMCRUDU1IpFBgaCU9NLkVXWU5fTlNdSl9FVlhKXUFWWkNLAFhaVFRYV0RMSwNYW0haR1BcT1VPVVpIXUZWXlwZBgQNR1xQFR4OAUtUXU9eRlxYTlVEUlpN HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Mon, 21 Jul 2025 10:08:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m8dcIhEYPphq27ByLKDPG1v0%2BSQJFAGuAypBwPi8jBEX2d3gN2fK%2Bp5I%2BlEvHTMlOLyM9tj3YE4PXWq48P1V8GJ%2Bu1fB31XBZYlYMsEotBUhpSn6ckpUP2z%2BsIuuEndcvuc6"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 9629e510fdbbb518-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4081&min_rtt=708&rtt_var=3650&sent=165&recv=247&lost=0&retrans=0&sent_bytes=14664&recv_bytes=14473&delivery_rate=486545&ss_exit_cwnd=14921&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=2f21fedf3f8b4e3b&ts=3398&inflight_dur=86&x=40"