| megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js |  5.34.214.148 | 200 OK | 14 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators Hash0eef6fe46d14f860d5666d2c7b13a564 7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe 95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-3626"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MjSUuaydXqLgIo3Zd7FDtfKgXZOy0FAjolQIW8d9OIvjoFaS33QMokl6IBXBobMfNGN_dnRBg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2094512927%3A1746709318721906 |  64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MjSUuaydXqLgIo3Zd7FDtfKgXZOy0FAjolQIW8d9OIvjoFaS33QMokl6IBXBobMfNGN_dnRBg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2094512927%3A1746709318721906 IP64.233.164.84:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51 ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MjSUuaydXqLgIo3Zd7FDtfKgXZOy0FAjolQIW8d9OIvjoFaS33QMokl6IBXBobMfNGN_dnRBg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2094512927%3A1746709318721906 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 May 2025 13:01:58 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-eWEXgSkxfgXLYg-22g9Ugw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RMx9xN09MaA.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| s.viinjjlt.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==?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4390%2F390%2F6809355c18042t1745433948r2084.jpg |  0.0.0.0 | | 0 B |
URL GET s.viinjjlt.com/n/2852/ozihu7svifnhu4lfpf5ec2qapnuxmydsibgvwacaijhglelrqclwm4d4fbjuawzjfrtx64samjkcspdxmj5ektidabfeogzwjevvw5aigfmu4vsclr7hw33yllamsidnvohztdenrko43dltkccnlbnaifofi42zghjxwerag3wo35h2rh4md4zkfo32hehsoqbprbeysbvt5l23yfedy773tcbfkubgijjtmtoy6gxxotr5d5fxe4tykbyevhtz5riuvqlapx6uxr4dihzhfyg7ptqel72pwf2pjyfyog2vcz75x57lsupwpztu7ccl4sj66643kjjlawkt4cjetldagjzhf6hfrb7fdptoi3ruqxwhnre7av6oiorvepevlh3iv2ozo2bdhqfp2l4hhitpi6pfcsa4giz6isbznnbjlubd2nzmqrsw5fzxmn3bg3bhvuon2kqlte5pws3gbnlparavmscc6ptm46lhkw2tszm3omuf4tkiiref4l5eczckkwd3lnjbwscwjbbhgu6goiyuiv2d6hajubsnaoncuzfep5oea36cjcbq26nelfggi7pckiumrmyv55o2isvkgd5hhkssocjgyremklh4flxwnlaew5rlemkwwuzpnfyw64qviqavif2gdmzem7alenptc6lrkmkf27bjmtmec4htguypar2w6nzhzwrrx2pmounqjgskvu2rxnflz6ok5rfnitcbplchrxk42rk5w5luyi3ljjeksb3oe2sh3rklravpxdi6zk2u6bdpf3voqot3xkf4rz2lqnswifgdgrdtbryau7jofrkriqd6frqs43ysgecsy5jhmisusqigkbduogzvcpvgwr6ekvfpwzduhamqz3snl2jvnsupzw2mtrvz5evq====?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4390%2F390%2F6809355c18042t1745433948r2084.jpg IP0.0.0.0:0
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectviinjjlt.com FingerprintC6:75:0A:57:57:BF:D5:FA:91:4E:E1:AE:FB:AC:BF:41:AD:99:1C:EC ValidityWed, 07 May 2025 18:56:43 GMT - Tue, 05 Aug 2025 19:55:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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==?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4390%2F390%2F6809355c18042t1745433948r2084.jpg HTTP/1.1
Host: s.viinjjlt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| megaup.net/themes/spirit/assets/frontend/img/background.jpg | 5.34.214.148 | 200 OK | 86 kB |
URL GET megaup.net/themes/spirit/assets/frontend/img/background.jpg IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3 Hash1b0874b56457a14258e3bd22805266c6 26ff3d095376d43cb78388e700707cdaf6ac75eb 5c5e0d52eb281e1ceae07f53c931982e8e014b9a535df9c98246157167e29285
GET /themes/spirit/assets/frontend/img/background.jpg HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: image/jpeg
content-length: 86513
last-modified: Tue, 11 Feb 2025 07:35:38 GMT
vary: Accept-Encoding
etag: "67aafdca-151f1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.35:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 May 2025 13:00:47 GMT
expires: Tue, 05 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 259270
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| forethema.com/eVFIRzJWbis0DzYZHgtQLzoCFXpIBxEWAzo0Hj9VPTowfmoUJm4zWx1scHUHQGB5YUIQNXV0AF8iPCZGDCJ1dQJJZm4uXB8+dXUUD2x4aQtXY2ZxFAxseWFGCTAvegNfITwzXkRgf3METmFxdANOYX90 | 188.114.97.1 | 204 No Content | 0 B |
URL GET forethema.com/eVFIRzJWbis0DzYZHgtQLzoCFXpIBxEWAzo0Hj9VPTowfmoUJm4zWx1scHUHQGB5YUIQNXV0AF8iPCZGDCJ1dQJJZm4uXB8+dXUUD2x4aQtXY2ZxFAxseWFGCTAvegNfITwzXkRgf3METmFxdANOYX90 IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eVFIRzJWbis0DzYZHgtQLzoCFXpIBxEWAzo0Hj9VPTowfmoUJm4zWx1scHUHQGB5YUIQNXV0AF8iPCZGDCJ1dQJJZm4uXB8+dXUUD2x4aQtXY2ZxFAxseWFGCTAvegNfITwzXkRgf3METmFxdANOYX90 HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 08 May 2025 13:01:57 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=how40Ew%2FGTCRr53GaUCyeOg%2BwOe99V7L0XPgiD%2BE7boFdCXnKyxdv08z1vo0HyLKYanIk50XYepqcx9jY866OywapEwnf8k2Kexr%2BmEpQ%2FGCX%2F3vQqWYizOm9vzPnP%2Fg"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c92610af605695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MixVJE0QuaMAcmCbSmQUNe1MXy4OQXoUl-5SWFiX-o9KRnGUf5PqerYJqCWqrtJfft_TyLi_A&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1439572155%3A1746709318727175 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MixVJE0QuaMAcmCbSmQUNe1MXy4OQXoUl-5SWFiX-o9KRnGUf5PqerYJqCWqrtJfft_TyLi_A&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1439572155%3A1746709318727175 IP64.233.164.84:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint9E:10:08:9D:11:84:1F:9C:2D:04:7B:3F:CB:2F:96:53:7F:73:BC:51 ValidityMon, 21 Apr 2025 08:40:46 GMT - Mon, 14 Jul 2025 08:40:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MixVJE0QuaMAcmCbSmQUNe1MXy4OQXoUl-5SWFiX-o9KRnGUf5PqerYJqCWqrtJfft_TyLi_A&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1439572155%3A1746709318727175 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 May 2025 13:01:58 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-6g7NUcH2WEAvBYc3uj3Kzw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RMx9xN09MaA.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ukankingwithea.com/ | 104.21.112.1 | 200 OK | 27 B |
IP104.21.112.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeASCII text, with no line terminators Hashb40fcd2397b43b388e333c2d5d74256d 1448e3387b80c73f04250963f4ea77517fa7a60a 05908bce3d7fae20a9ec888b2e607d48b470c93aee50bfb1fa46ed3ab9d5de03
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 08 May 2025 13:01:58 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3bS1suqx1LC0%2F6CRukG85vpSV9MHQNc6fF1KKnaZnEw64ZT2ndS9HCSwVwH1bFsgK8arCB%2F%2FCM0wqT%2BB8VU6OUS9mbpH6%2FfXLEjxnNBPbUFouixQ%2FCdUL88rGRfqVI55QNFQKV0%3D"}]}
content-encoding: br
set-cookie: csu=1258392764698138@1@1746709318; SameSite=None; Secure; Max-Age=31104000
cf-ray: 93c926178a660b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| forethema.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 | 188.114.97.1 | 204 No Content | 0 B |
URL POST forethema.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 IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /WjZJZE91CSoXcg9zEykYMVohAHwqXyozGSJQJBA4AFhwUi4CQW8QJj4LcVZ6Ywd4Qj8zUnRXfXxFPQU7L0V0Vn9qA28NITxZdFZ/agB5VHpsBWxTDDJCPRQ8fwUIQX0cE3siPTRbJhRhOVkkQX0cXyxBfBxAbFcLbhN7Uix/BQ0WImp6H1QeMmE6KzoQAXwBChxiEBMKD2wlICgODh1SHxRuDiwoa1p8FQQ/Rzs1KQxYDzN/IHg6AyY4UCIgLRJxGC0oL04nVQUYAShRdythOg4nE3R+BXtseRsONjsHHyI9Cn14JicPD38jJw1SBlEpb10aICcSBgBVJwB4KAsXGFgiUXgqUh5cfiIDOT0Wbnc4FTwXGxxdCQJQIyAhP0AYVgAvbDoAOmpHJA8jEWUlERYvejxRBjxhKjN6Im4CPTUCdBBJDRRiKwF9KG8wBwsuWgMuPjV8DBAHCw4ZJgMrewURPjAFeyMoEnQKEQUQWBESFhZaEFIYGwcdFAhuZA8NG25HcQ8MG1sNEy5jenkWfA9cOQIdMUd4HXZsaRhJKhFXBQMNGXUiCyJqUTEpCW9fDQAgGUQhNy4DVwwwN24bGwYubl86Cz8DA3kgGxYPKlIAG1ILMzszcns3C2p7eQsBL04DKzUNBwcMPjMHFgV4MFQmECUbdT43LjZ/fgItG0YlAiIRbj8RCzF/BjUBNAccMHluUjsHAz1+EA5iKURwPA0yehEIPQJXPRY2b1VwAicTQDsmCwNFfgIsAlwgKx8qXRMoLR4HfFF3NGcZCT0QYH4xemJSGRI7MkYKKHYzeBwDKH8FDUF8HhN7UjlrE3ogeGMTe1I5aBN6IHhrA3hTam11JxEjNhN+J3xrAnpcf2MEe116bwRxXH9iB3BCOWcGZ11haBh/QjpnB3tRd2kPe1N5bgBwXH5pDm8QPztRdFVpKkI9CHJrAX1SeGoPelZ6bgZ9 HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Thu, 08 May 2025 13:02:05 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=MQB7TdLDi1NcoFeJiPPE9GMY8T3%2BILLZLsMrDvboA%2F%2FfaXROCbflmrBsKnCYxZHPqEpKq7Mt6qfzcQaebh9bW9xjGCWph1P9EZQX1UefeR5WSceQGtQBtc4VXqsTds88"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c92643dfd0568d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip | 5.34.214.148 | 200 OK | 79 kB |
URL User Request GET megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip IP5.34.214.148:443
CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (52057) Hashad361f5fc21f50a067edc5aefdc36b6c d89e9edd74676c91b0867cd920e58e9f1390a97c b2e89a24bf9f66457f3c8f4b55e9cbbac8861d18bf2d1fdc42b0acbec3554a6e
GET /859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv; expires=Fri, 09 May 2025 13:01:55 GMT; Max-Age=86400; path=/; domain=megaup.net; secure; HttpOnly; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
access-control-allow-origin: https://megaup.net
access-control-allow-headers: Content-Type, Content-Range, Content-Disposition, Content-Description
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css | 5.34.214.148 | 200 OK | 77 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (65319), with CRLF line terminators Hash9b67b9ffbfcbe226a8c413fa740fd91c 7837bd0c312897e46311aaf472947f3e23d75df2 2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-12c7a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 | 142.250.178.35 | 200 OK | 25 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 IP142.250.178.35:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24984, version 1.0 Hash303a79d404d97ccbb3d803088fc387d8 66e3525b79a1a58a63fe0934f31676dd40c7f033 7e510e61c497d334da21eccda06df5d3a428c9ea94d6903b6138e7c7255aba0f
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 May 2025 18:17:26 GMT
expires: Fri, 01 May 2026 18:17:26 GMT
cache-control: public, max-age=31536000
age: 585871
last-modified: Thu, 14 Dec 2023 02:04:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png | 5.34.214.148 | 200 OK | 590 B |
URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hashed3d11830b3e136b384f2a0b8082f235 3b75f2a64d528165f108d62e8c30d464b76945d7 1aef6752088fe69a166d3a84375431e1041dde8fa3f9ccbde26accb220feb4a5
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:58 GMT
content-type: image/png
content-length: 590
last-modified: Thu, 13 Feb 2025 17:42:00 GMT
vary: Accept-Encoding
etag: "67ae2ee8-24e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/typed.min.js | 5.34.214.148 | 200 OK | 3.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3949), with no line terminators Hash2f6185a8a32a50b2b3e04849f44359d4 0e5501588c5c0d1c9462f34b0d56c21abff5bfef 914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f6d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e5561za200&tag_exp=101509156~103101750~103101752~103116026~103200004~103233424~103251618~103251620~103252644~103252646~103284320~103284322~103301114~103301116 | 142.250.74.168 | 200 OK | 333 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e5561za200&tag_exp=101509156~103101750~103101752~103116026~103200004~103233424~103251618~103251620~103252644~103252646~103284320~103284322~103301114~103301116 IP142.250.74.168:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
File typeJavaScript source, ASCII text, with very long lines (6125) Size333 kB (332565 bytes) Hash68b5ae405e498e0eb616c2a4cce4f096 17bac32ca39fea44a605988596ad663e1811df9b 1801741ad6b48b2f7d3159fe9b02a1fd680cc31a65d15ccdfaa1f44a9caee980
GET /gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e5561za200&tag_exp=101509156~103101750~103101752~103116026~103200004~103233424~103251618~103251620~103252644~103252646~103284320~103284322~103301114~103301116 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 May 2025 13:01:57 GMT
expires: Thu, 08 May 2025 13:01:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 116328
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MiCbPPLbQI_yoYbQ1jT3SStihuqv9j6sskDK4Sw_iMXbFf8u1d030zOuJkXvapUB8a839Ed2Q | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MiCbPPLbQI_yoYbQ1jT3SStihuqv9j6sskDK4Sw_iMXbFf8u1d030zOuJkXvapUB8a839Ed2Q IP64.233.164.84:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MiCbPPLbQI_yoYbQ1jT3SStihuqv9j6sskDK4Sw_iMXbFf8u1d030zOuJkXvapUB8a839Ed2Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:q5ioqnoO28nFw4pMYbccl5yVciiISw:OvPRZ70_dRxsu3pe;Path=/;Expires=Sat, 08-May-2027 13:01:58 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 May 2025 13:01:58 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MjSUuaydXqLgIo3Zd7FDtfKgXZOy0FAjolQIW8d9OIvjoFaS33QMokl6IBXBobMfNGN_dnRBg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2094512927%3A1746709318721906
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-PuEYdRSTOzyUjisr8Xb7JQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 417
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-108868042-1 | 142.250.74.168 | 200 OK | 274 kB |
URL GET www.googletagmanager.com/gtag/js?id=UA-108868042-1 IP142.250.74.168:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
File typeJavaScript source, ASCII text, with very long lines (5432) Size274 kB (274117 bytes) Hashe940c6ce341a98498a66e3487a43a94f baeb7e8e2921cca2ee3933eea61cd88611ddc1df 3d74b665c73b380e1cbcc5f1a39dc80a530d3adb09c7d1d4a8bb0cf801f5e4fd
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 May 2025 13:01:56 GMT
expires: Thu, 08 May 2025 13:01:56 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 May 2025 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 96585
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| forethema.com/WVJ5YzR2bRoQCTsFPFJ7ERwaNnUUEypSXA4QDg9/DmMeJ3dpC18XXT1vQVEBYGNIRUQwNkRQBn8hDQJALCFEUhIwPB8MCX8kRFMaYHxLTQJ/J0RSEi0iGAQJaHQJF0A1b0hUAG9lSVoHaGVJVAQ | 188.114.97.1 | 204 No Content | 0 B |
URL GET forethema.com/WVJ5YzR2bRoQCTsFPFJ7ERwaNnUUEypSXA4QDg9/DmMeJ3dpC18XXT1vQVEBYGNIRUQwNkRQBn8hDQJALCFEUhIwPB8MCX8kRFMaYHxLTQJ/J0RSEi0iGAQJaHQJF0A1b0hUAG9lSVoHaGVJVAQ IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WVJ5YzR2bRoQCTsFPFJ7ERwaNnUUEypSXA4QDg9/DmMeJ3dpC18XXT1vQVEBYGNIRUQwNkRQBn8hDQJALCFEUhIwPB8MCX8kRFMaYHxLTQJ/J0RSEi0iGAQJaHQJF0A1b0hUAG9lSVoHaGVJVAQ HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 08 May 2025 13:01:57 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uTSYcCtT1iGa0vrL82JMnkJNaTIDdq4DR4iYXkVjTlNOuLA2R6Ft6q4xr2Rcw5tskJIQvlN6ky5%2BjmLN8ruOJeM%2BrVa4jlYF3qjLzvkFcOLDWbsNYARjtgj02zBbl6QP"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c92610ffcb5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| undefined/QlE0cTIjM1ccDSNsVldHMD0JVAAEdAY3VnE+U0lGc2kHGAM0M1NfUS4+QRVUMD5aBRwsNEBUAAQ2YjZaCQgGKAEAKGU3ZREQdj1edzdtN3Q7B2I7SwUVUzZzBTpyPUUTGX0jWikVZTxVFjh1IHEWPm0VSwQFeBlZCxd3BloBOHUZdywYVzxzJjNuNAYvEFMWSBQGQzZxBjViFAIXGXkwQnEHBDBaAQlXPnERZXY7VXoZVyddDwdfGVkWCVwlZiscdjtzIRt9CUY0BGIoBAoWDSNkLwdtK3QMFW4IQjQEYihYAwJmJ2csF1YydxgEbjNwegcEP1wJPBlIYBQ4bRRQcxBaK2Q2dAYzZhQLDSVqKgV1JXcOGGUJdhg4AUVnczVfJno2BWJCdCM0UyRiCDYEAnYAZEwmVToCYiZwBTRfJGYjB19XWDE+WgEPAGROAHA1G0ETWAAl | 0.0.0.0 | | 0 B |
URL GET undefined/QlE0cTIjM1ccDSNsVldHMD0JVAAEdAY3VnE+U0lGc2kHGAM0M1NfUS4+QRVUMD5aBRwsNEBUAAQ2YjZaCQgGKAEAKGU3ZREQdj1edzdtN3Q7B2I7SwUVUzZzBTpyPUUTGX0jWikVZTxVFjh1IHEWPm0VSwQFeBlZCxd3BloBOHUZdywYVzxzJjNuNAYvEFMWSBQGQzZxBjViFAIXGXkwQnEHBDBaAQlXPnERZXY7VXoZVyddDwdfGVkWCVwlZiscdjtzIRt9CUY0BGIoBAoWDSNkLwdtK3QMFW4IQjQEYihYAwJmJ2csF1YydxgEbjNwegcEP1wJPBlIYBQ4bRRQcxBaK2Q2dAYzZhQLDSVqKgV1JXcOGGUJdhg4AUVnczVfJno2BWJCdCM0UyRiCDYEAnYAZEwmVToCYiZwBTRfJGYjB19XWDE+WgEPAGROAHA1G0ETWAAl IP0.0.0.0:0
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /QlE0cTIjM1ccDSNsVldHMD0JVAAEdAY3VnE+U0lGc2kHGAM0M1NfUS4+QRVUMD5aBRwsNEBUAAQ2YjZaCQgGKAEAKGU3ZREQdj1edzdtN3Q7B2I7SwUVUzZzBTpyPUUTGX0jWikVZTxVFjh1IHEWPm0VSwQFeBlZCxd3BloBOHUZdywYVzxzJjNuNAYvEFMWSBQGQzZxBjViFAIXGXkwQnEHBDBaAQlXPnERZXY7VXoZVyddDwdfGVkWCVwlZiscdjtzIRt9CUY0BGIoBAoWDSNkLwdtK3QMFW4IQjQEYihYAwJmJ2csF1YydxgEbjNwegcEP1wJPBlIYBQ4bRRQcxBaK2Q2dAYzZhQLDSVqKgV1JXcOGGUJdhg4AUVnczVfJno2BWJCdCM0UyRiCDYEAnYAZEwmVToCYiZwBTRfJGYjB19XWDE+WgEPAGROAHA1G0ETWAAl HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css | 5.34.214.148 | 200 OK | 59 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (58929), with CRLF line terminators Hash879812fc22af75aa3ae7b5666ca4f4b8 df27469a952b7ee36cc03db471c6198f577186a8 c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-e6ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/custom.css | 5.34.214.148 | 200 OK | 8.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/custom.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeassembler source, ASCII text, with CRLF line terminators Hash68443327ebd1d8f35857bbb29d3ce6df d34e37d8cebc246854f05dde78abc32b5ad5d9fe 98cf7514d65d87963ee938b6f83493b4429f8005a5f6814ba226a7b89c80aa45
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 19:56:14 GMT
vary: Accept-Encoding
etag: W/"67abab5e-22e8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png | 5.34.214.148 | 200 OK | 7.1 kB |
URL GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typePNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced Hash5d15526be10b904a6b48d1af04a10cc3 c09b6874359ac6d71db95593618a9acb55baa984 894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: image/png
content-length: 7137
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js | 5.34.214.148 | 200 OK | 6.0 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators Hashc9e3a210d83398f301b3a7049c259676 8e227bb40fe120841829a7fef0ffeb091d179a91 aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-178c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP64.233.164.84:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:pok9jQwvwbYXNH0duuc_xSvQ__biUA:ogDc5b2f8yDWSpMA; Expires=Sat, 08-May-2027 13:01:58 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 May 2025 13:01:58 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKV5MiCbPPLbQI_yoYbQ1jT3SStihuqv9j6sskDK4Sw_iMXbFf8u1d030zOuJkXvapUB8a839Ed2Q
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-mTI1YlaSbQn2m7lKtAooCg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.112.1 | 404 Not Found | 159 B |
URL GET ukankingwithea.com/asd100.bin IP104.21.112.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashfb9666f93e418b95fea8fdbc20e80af9 d4eefca1b299cc266a80e83c9e39c4261cb87583 c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 08 May 2025 13:01:58 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: HIT
age: 171
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xX6LMELtN0gJ%2FIwzuKUi%2FH9WiJ4ayCyEvtp%2FD%2Fu8HZmcqim7YtcXF4qXdiKXOoB77K5kBeG7YJQDnMVTtdiKcXum8z4FjGS%2By4tKBQeNVGwS%2BlxpWyZPmOXxWI%2FKAyTmyyVD3kk%3D"}]}
content-encoding: br
cf-ray: 93c9261729f30b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| forethema.com/ZFREbmlLaycdVClnChgwDxkIPz8INScvPyYMKDxYJT8gNjxXFWIaAABpc1hYVWxySBkNMHlfTxcgJRocF2l3XllVci0ADwtpdF5ZVXIyU1hKZ3BAWlJ6cEgcWWV2W1FXbXZZX1BifVZYV2xiGhkFM3lfTxQgMAJUVWNwWF5UbXdfUFdlcA | 188.114.97.1 | 204 No Content | 0 B |
URL POST forethema.com/ZFREbmlLaycdVClnChgwDxkIPz8INScvPyYMKDxYJT8gNjxXFWIaAABpc1hYVWxySBkNMHlfTxcgJRocF2l3XllVci0ADwtpdF5ZVXIyU1hKZ3BAWlJ6cEgcWWV2W1FXbXZZX1BifVZYV2xiGhkFM3lfTxQgMAJUVWNwWF5UbXdfUFdlcA IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ZFREbmlLaycdVClnChgwDxkIPz8INScvPyYMKDxYJT8gNjxXFWIaAABpc1hYVWxySBkNMHlfTxcgJRocF2l3XllVci0ADwtpdF5ZVXIyU1hKZ3BAWlJ6cEgcWWV2W1FXbXZZX1BifVZYV2xiGhkFM3lfTxQgMAJUVWNwWF5UbXdfUFdlcA HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Thu, 08 May 2025 13:01:59 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2BGrduYBmYkLaxPmUSF4ZuF4SaEnM47D2dgel7M7eoX2i0sap8o9I%2BVixpX7Gm4YWHXsxd9Z2vg011cyYwJOzij4NUpgA9Rccv05sRrEGJ3IZuwhZql9okPoJFDU7gR9p"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c9261e4fdd568d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.178.42 | 200 OK | 565 B |
URL GET fonts.googleapis.com/icon?family=Material+Icons IP142.250.178.42:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
Hash736c83e15fc300de505f6ce9762a9396 31c0f11ada78e92970ff42d990116d77c169c6d7 c31266310101d0b1607937a7baf07f1601b7637bd2373176696488a07d7b4302
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 May 2025 13:01:56 GMT
date: Thu, 08 May 2025 13:01:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.35:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 May 2025 13:00:47 GMT
expires: Tue, 05 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 259270
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| undefined/bWNYeVMMATsUbAxeOl8mHw9lXGErRmo/N14MP0EnXFtrEGIbAT9XMAEMLR01Hww2DX0DBixcYSsMO0ojIDcfTQIrMBEIBjwADDIbKzQKPCtIUR4fBTc1GxNnHSAdTQsmMCspEQoTMTA0HisAOgpIUR44AV0oOyoCSFEeKQAZRmo7NgRbKS0+AlceOzclBR8WECgLCQswOAQPPxBUGwBIBg8oG0wHP1IvTQMsJgErKTwEHwEKDiwhCjUsIm0IHDxaFz8qIFEaAWs6Lw8VMCM2YRA1KBcaKj48VBoBYwgqIgo3OwgwQRoFEw8qGxVaABViJgIAQSA7CDBBHBoAPC0bQAsoIQcrBT4XJDoxDUwjCxogLgAlFH1LESolAjMXNVI8K2I/WwIsJy8wMQojKTE/LzI1VzcoBh1aPj9mLjA2SCM1JhUaGTlXFD8BOFM5LyRcMGtAZzwmFhocNSU+XzkeDDYJbgUyFihhWyIBTQ | 0.0.0.0 | | 0 B |
URL GET undefined/bWNYeVMMATsUbAxeOl8mHw9lXGErRmo/N14MP0EnXFtrEGIbAT9XMAEMLR01Hww2DX0DBixcYSsMO0ojIDcfTQIrMBEIBjwADDIbKzQKPCtIUR4fBTc1GxNnHSAdTQsmMCspEQoTMTA0HisAOgpIUR44AV0oOyoCSFEeKQAZRmo7NgRbKS0+AlceOzclBR8WECgLCQswOAQPPxBUGwBIBg8oG0wHP1IvTQMsJgErKTwEHwEKDiwhCjUsIm0IHDxaFz8qIFEaAWs6Lw8VMCM2YRA1KBcaKj48VBoBYwgqIgo3OwgwQRoFEw8qGxVaABViJgIAQSA7CDBBHBoAPC0bQAsoIQcrBT4XJDoxDUwjCxogLgAlFH1LESolAjMXNVI8K2I/WwIsJy8wMQojKTE/LzI1VzcoBh1aPj9mLjA2SCM1JhUaGTlXFD8BOFM5LyRcMGtAZzwmFhocNSU+XzkeDDYJbgUyFihhWyIBTQ IP0.0.0.0:0
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bWNYeVMMATsUbAxeOl8mHw9lXGErRmo/N14MP0EnXFtrEGIbAT9XMAEMLR01Hww2DX0DBixcYSsMO0ojIDcfTQIrMBEIBjwADDIbKzQKPCtIUR4fBTc1GxNnHSAdTQsmMCspEQoTMTA0HisAOgpIUR44AV0oOyoCSFEeKQAZRmo7NgRbKS0+AlceOzclBR8WECgLCQswOAQPPxBUGwBIBg8oG0wHP1IvTQMsJgErKTwEHwEKDiwhCjUsIm0IHDxaFz8qIFEaAWs6Lw8VMCM2YRA1KBcaKj48VBoBYwgqIgo3OwgwQRoFEw8qGxVaABViJgIAQSA7CDBBHBoAPC0bQAsoIQcrBT4XJDoxDUwjCxogLgAlFH1LESolAjMXNVI8K2I/WwIsJy8wMQojKTE/LzI1VzcoBh1aPj9mLjA2SCM1JhUaGTlXFD8BOFM5LyRcMGtAZzwmFhocNSU+XzkeDDYJbgUyFihhWyIBTQ HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| forethema.com/Y2FYcWFMXjsCXDc3Ehk4NCdgKFAHOw8pCQ80aTM4BlMsKTQPMH4FCAdcYENUWlBpVxEKBWVCU0USLBAVFhJlQ1FTVn4YDwUOZUNHFVxoX1hNU3ZHRxZcaVcVEwA/TFBFESwFDV5Qb0VXVFFhQlBbVWFD | 188.114.97.1 | 204 No Content | 0 B |
URL POST forethema.com/Y2FYcWFMXjsCXDc3Ehk4NCdgKFAHOw8pCQ80aTM4BlMsKTQPMH4FCAdcYENUWlBpVxEKBWVCU0USLBAVFhJlQ1FTVn4YDwUOZUNHFVxoX1hNU3ZHRxZcaVcVEwA/TFBFESwFDV5Qb0VXVFFhQlBbVWFD IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Y2FYcWFMXjsCXDc3Ehk4NCdgKFAHOw8pCQ80aTM4BlMsKTQPMH4FCAdcYENUWlBpVxEKBWVCU0USLBAVFhJlQ1FTVn4YDwUOZUNHFVxoX1hNU3ZHRxZcaVcVEwA/TFBFESwFDV5Qb0VXVFFhQlBbVWFD HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Thu, 08 May 2025 13:01:58 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=LroeNNslqo%2B%2B0ZSxmQF6hAwZ%2BmauDeXTzNq6tzmBSp7lnyWWgrdAr9g2Jaw2mF%2FM%2Flr8%2F3b6vQa7WTbuI9VqOBROxpFJ5yhB%2B8G1DgE6O4maFApKgNH1qlVHXuZER4oZ"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c92619c972568d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| megaup.net/themes/spirit/assets/frontend/css/theme.css | 5.34.214.148 | 200 OK | 207 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/theme.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeassembler source, ASCII text, with CRLF line terminators Size207 kB (206626 bytes) Hash06cc8983a538a05dddf526b3b7e732aa 2414173a1660589ebbba8bdc6e3d1237df6063db 27e49bfa89404d352fa4627719f2a9a3ea5c2759c2bc74e7567ff98b5a996758
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 18:30:52 GMT
vary: Accept-Encoding
etag: W/"67ab975c-32722"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js | 5.34.214.148 | 200 OK | 87 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators Hash5b5a269bd363e0886c17d855c2aab241 042dd055cd289215835a58507c9531f808e1648a 1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-152b9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/scripts.js | 5.34.214.148 | 200 OK | 115 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/scripts.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (914), with CRLF line terminators Size115 kB (114862 bytes) Hashce260d2170faf98639ab8e0e3758f1e2 32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1c0ae"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 | 5.34.214.148 | 200 OK | 80 kB |
URL GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80148, version 331.17301 Hashc500da19d776384ba69573ae6fe274e7 6290834672aba86d5b6c1c73b30b57c9c53996f7 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:57 GMT
content-type: font/woff2
content-length: 80148
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-13914"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/flickity.css | 5.34.214.148 | 200 OK | 2.5 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/flickity.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash244d315064064270eabbbb7ac9f6c700 21ad53d3efbb40154293190173ee0c497ed7651c ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-9d9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/flickity.min.js | 5.34.214.148 | 200 OK | 54 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators Hash8c1e666176ac7bdce67d58b45823ffac 75947e4316427ce0c5e33300aeb4dc4d7d54dd09 c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-d271"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.112.1 | 200 OK | 26 B |
IP104.21.112.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeASCII text, with no line terminators Hash2d4a446417bf820f4bf2dcc0fc80d133 18558940b8a81267f2884677b1cbca585afe6b1a 81154241cdec208e9a0003b4544172d2de07e6f025a65366843c2a3906f09c37
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 08 May 2025 13:01:58 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zJ5yob2k5A2zQmO75k0dmRFJcn7Qk8kya1b6z6cNDjvlzqWxP9s6WgkWKgd64xx5aVxlOkzAEENE9GG%2BSdFqFPNOsFPpI6cBQyIouOVIgYcO%2FsixtUMkXzhgbjqcShvCGOdNCIM%3D"}]}
content-encoding: br
set-cookie: csu=941288497951161@1@1746709318; SameSite=None; Secure; Max-Age=31104000
cf-ray: 93c926174a2f0b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/images/logo/logo.png | 5.34.214.148 | 200 OK | 5.9 kB |
URL GET megaup.net/themes/spirit/assets/images/logo/logo.png IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typePNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced Hashfa360a47a62ae74a0a3d8c0f3e6f7f12 168c72a918b04b735f8e0f8a72223a16f0eda358 1d3a3c84dd36871d1009693761f441537117d5ee62c8e775d7d52c77d4c46de4
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: image/png
content-length: 5900
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-170c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tomlldahehun.org/multi?cs=YU9CYnhXf3NVSFZ9dVRLWH9wUE0&abt=0&red=1&sm=76&k=schedule&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F859d025ffc850b5e0f19ff978444b0ed%2FSchedule.I.v0.3.5f3.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_MqbP=1746709318501&crc=1 | 52.85.49.8 | 200 OK | 15 B |
URL GET tomlldahehun.org/multi?cs=YU9CYnhXf3NVSFZ9dVRLWH9wUE0&abt=0&red=1&sm=76&k=schedule&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F859d025ffc850b5e0f19ff978444b0ed%2FSchedule.I.v0.3.5f3.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_MqbP=1746709318501&crc=1 IP52.85.49.8:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerAmazon Subjecttomlldahehun.org Fingerprint6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File typeASCII text, with no line terminators Hashd39207bea620cffa8e65d3b12e8f1547 220ebce5a61ee5d771133e1cd20c469443ccfd76 f058a19c34ccdfbb47e68ba58b254ffa5d774fdaeeaa0b1fb9f19d3c055c0a21
GET /multi?cs=YU9CYnhXf3NVSFZ9dVRLWH9wUE0&abt=0&red=1&sm=76&k=schedule&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F859d025ffc850b5e0f19ff978444b0ed%2FSchedule.I.v0.3.5f3.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_MqbP=1746709318501&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 41
date: Thu, 08 May 2025 13:01:58 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=dGYZJAPADTIwGAXOaTfta55k/SRTr1IRCU/jpRDOMLUgKqPr4SxUWocoL8HCOcrtEEP2cPSn0gAOP6cWs7SfM0i2E2uFQg1+QOxX4tV2B9d7YX9cKEe4KF6rltAn; Expires=Thu, 15 May 2025 13:01:58 GMT; Path=/
AWSALBCORS=dGYZJAPADTIwGAXOaTfta55k/SRTr1IRCU/jpRDOMLUgKqPr4SxUWocoL8HCOcrtEEP2cPSn0gAOP6cWs7SfM0i2E2uFQg1+QOxX4tV2B9d7YX9cKEe4KF6rltAn; Expires=Thu, 15 May 2025 13:01:58 GMT; Path=/; SameSite=None
csu=6e346464-3c03-49a6-85b5-01939155c7d4
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 88944815e9efa1cfbf5b6acdd146175a.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: -NBzIdjuAHo68MrbhldSUJiaK3dnT-_GqFtjPLgo9g8IAkRvkmz3tw==
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i | 142.250.178.42 | 200 OK | 39 kB |
URL GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i IP142.250.178.42:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeASCII text, with very long lines (1572) Hash1570f79838476e473326cd7a3fb1d06b 81ce3aa01918d85e18534934cd967f35a7558f1a f0a8682f65670a4a8fd9a982d1b3a36521a2e74d47cece7d3b1f84f262c8b51c
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 May 2025 13:01:56 GMT
date: Thu, 08 May 2025 13:01:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.35:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 May 2025 13:00:47 GMT
expires: Tue, 05 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 259270
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| forethema.com/R3g2UGVoR1UjWBA/UWAyKhRDCCQFDGFiCRY6YSgEJS5zFwQRCxAkDCNFD2Rcf04CdhUuHAthXWELQjERMgsLYUMuFlA/WGEOC2FLd1YEflBhDQthQzMIVzdYdl5GJBErRQdnUXFPBmlWdk8HYFU | 188.114.97.1 | 204 No Content | 0 B |
URL GET forethema.com/R3g2UGVoR1UjWBA/UWAyKhRDCCQFDGFiCRY6YSgEJS5zFwQRCxAkDCNFD2Rcf04CdhUuHAthXWELQjERMgsLYUMuFlA/WGEOC2FLd1YEflBhDQthQzMIVzdYdl5GJBErRQdnUXFPBmlWdk8HYFU IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /R3g2UGVoR1UjWBA/UWAyKhRDCCQFDGFiCRY6YSgEJS5zFwQRCxAkDCNFD2Rcf04CdhUuHAthXWELQjERMgsLYUMuFlA/WGEOC2FLd1YEflBhDQthQzMIVzdYdl5GJBErRQdnUXFPBmlWdk8HYFU HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 08 May 2025 13:01:57 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Ks%2FmFkJKWmQVYkXo%2B%2F3jRrT6jr54blAFkiN2s6NLTq7yWhFb6YnN%2B4eLCt0cXPbPuAJCQ9NiGizDy8RpCabMXaFD2I6GAd7EL94Tm%2Byi%2BNVrlt66XCxIGXHZYOd5LeCB"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c926111ff95695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.112.1 | 200 OK | 26 B |
IP104.21.112.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeASCII text, with no line terminators Hashe969b24262af0ab483c0f3bd83af6dfe 03ea6523a3c89c20b1fbaead2e35c71caa352a29 73e0ca8816668dba4b4941dffbd3e3d8c7a01c35efaa908623bfce2158c2e751
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 08 May 2025 13:01:58 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6qNgFrcPHaW6b4SdCRnkzlK2YSuFchBhkZzfar5DrJLB4deGgRC71mC665s8WIl503MX3OEmKGkJSNl%2BfOxpVyfdXVr2N%2FqGr4kG5uJevNpLPhojiu2ipxGTCeisqfOY32bwp6s%3D"}]}
content-encoding: br
set-cookie: csu=533956542857717@1@1746709318; SameSite=None; Secure; Max-Age=31104000
cf-ray: 93c9261729ee0b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/datepicker.js | 5.34.214.148 | 200 OK | 21 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators Hash8cfe207a6a21c7495cfb751c761217a6 35d686a6c4ecc9946c35444ce93e110cb0e1611c 804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-51ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| otherwallowssheh.com/Y01LWkkCLyg3dgJwKXw8ESF2f3slaHkcLVAiLGI9UnV4M3gVLyx0Kg8iPj4vESIlLmcNKD9/eyUHGSADMywhAyI7Hg4XCjcDKRF4AA8oCwdGfwkPLiElGjB5MxgDKi8oKnoCBAgHIxgPLjcNGRw5Ghg2CgAqIwgAMgR+Fy41NyodIgYZCBcZBX0zOwMPOiQMMSIkExkxOw95HB0oOiwWKhscfB0lCD4PICokHDIQHCwMehIHJhc7EngHexMjCDIVMi4sLyZzHwgyKSMNIS18CjcqBxUyNh4qD3ocEAQPbmgPIQgBMwgrdCkYJAgOKjYlUxQsGGxRCwMMcRMPA3c9Mw8aDxEFGzsVKjIXOg0RMSQKEnE6HAwTCychOBwqGzVuaA8yNQVrCAoqGwwaGykqNiEUKRoQbFEPHD0TUQwlbxkhBS8PAwslHxMfU34fLRghDHgiLCQFKA8GDy4DfCMQIiUqdAEqLWo/O35/AA | 108.156.60.113 | 200 OK | 3.1 kB |
URL GET otherwallowssheh.com/Y01LWkkCLyg3dgJwKXw8ESF2f3slaHkcLVAiLGI9UnV4M3gVLyx0Kg8iPj4vESIlLmcNKD9/eyUHGSADMywhAyI7Hg4XCjcDKRF4AA8oCwdGfwkPLiElGjB5MxgDKi8oKnoCBAgHIxgPLjcNGRw5Ghg2CgAqIwgAMgR+Fy41NyodIgYZCBcZBX0zOwMPOiQMMSIkExkxOw95HB0oOiwWKhscfB0lCD4PICokHDIQHCwMehIHJhc7EngHexMjCDIVMi4sLyZzHwgyKSMNIS18CjcqBxUyNh4qD3ocEAQPbmgPIQgBMwgrdCkYJAgOKjYlUxQsGGxRCwMMcRMPA3c9Mw8aDxEFGzsVKjIXOg0RMSQKEnE6HAwTCychOBwqGzVuaA8yNQVrCAoqGwwaGykqNiEUKRoQbFEPHD0TUQwlbxkhBS8PAwslHxMfU34fLRghDHgiLCQFKA8GDy4DfCMQIiUqdAEqLWo/O35/AA IP108.156.60.113:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerAmazon Subjectotherwallowssheh.com Fingerprint52:7D:EB:90:FF:40:99:73:4C:BD:63:35:F3:8D:F7:40:1E:9C:7B:E6 ValidityMon, 21 Apr 2025 00:00:00 GMT - Wed, 20 May 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3056), with no line terminators Hash254979e3eb14b591e1e09c99839eb82c 0cedb077f1f3f1a2270651686fca977f7063d583 7cff9bb81afc67752f392e2eda1d22b381dbe58a58821514be3e6e0edead182c
GET /Y01LWkkCLyg3dgJwKXw8ESF2f3slaHkcLVAiLGI9UnV4M3gVLyx0Kg8iPj4vESIlLmcNKD9/eyUHGSADMywhAyI7Hg4XCjcDKRF4AA8oCwdGfwkPLiElGjB5MxgDKi8oKnoCBAgHIxgPLjcNGRw5Ghg2CgAqIwgAMgR+Fy41NyodIgYZCBcZBX0zOwMPOiQMMSIkExkxOw95HB0oOiwWKhscfB0lCD4PICokHDIQHCwMehIHJhc7EngHexMjCDIVMi4sLyZzHwgyKSMNIS18CjcqBxUyNh4qD3ocEAQPbmgPIQgBMwgrdCkYJAgOKjYlUxQsGGxRCwMMcRMPA3c9Mw8aDxEFGzsVKjIXOg0RMSQKEnE6HAwTCychOBwqGzVuaA8yNQVrCAoqGwwaGykqNiEUKRoQbFEPHD0TUQwlbxkhBS8PAwslHxMfU34fLRghDHgiLCQFKA8GDy4DfCMQIiUqdAEqLWo/O35/AA HTTP/1.1
Host: otherwallowssheh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1204
date: Thu, 08 May 2025 13:01:57 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=IwQlFRbNM7ayIY/pIiSZlvaNPN3lYya+MiIS6J4AmWfLS86F52gZU5cCS2Dijaj16FS+pE4jHp69kd6tINJ2+gESofvpRtQv6K6ll2fdTb18QpRUpXpyVsal3XWr; Expires=Thu, 15 May 2025 13:01:57 GMT; Path=/
AWSALBCORS=IwQlFRbNM7ayIY/pIiSZlvaNPN3lYya+MiIS6J4AmWfLS86F52gZU5cCS2Dijaj16FS+pE4jHp69kd6tINJ2+gESofvpRtQv6K6ll2fdTb18QpRUpXpyVsal3XWr; Expires=Thu, 15 May 2025 13:01:57 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ac059d7185137233d6f58dd3345e3798.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: YKWognV_vbI14HVpsHV9zsfOGcLOKxzi16QilmP5ZFoU8pySF4P_-g==
X-Firefox-Spdy: h2
|
|
| forethema.com/SzJCWVRkDSEqaQRkFBM1eUEAA2dyZhUYbSVXBGgwCHUEIQMnVWQtPS8PdW9legp0fyQiVn9ocjhGIy0hOA9zfz0lVC1kcj0Pc3dnfxxxb3p/FDdkZW1GMjgzdgNkKSA/Xn9oY38EdWlteAN1aWB8 | 188.114.97.1 | 204 No Content | 0 B |
URL GET forethema.com/SzJCWVRkDSEqaQRkFBM1eUEAA2dyZhUYbSVXBGgwCHUEIQMnVWQtPS8PdW9legp0fyQiVn9ocjhGIy0hOA9zfz0lVC1kcj0Pc3dnfxxxb3p/FDdkZW1GMjgzdgNkKSA/Xn9oY38EdWlteAN1aWB8 IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SzJCWVRkDSEqaQRkFBM1eUEAA2dyZhUYbSVXBGgwCHUEIQMnVWQtPS8PdW9legp0fyQiVn9ocjhGIy0hOA9zfz0lVC1kcj0Pc3dnfxxxb3p/FDdkZW1GMjgzdgNkKSA/Xn9oY38EdWlteAN1aWB8 HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 08 May 2025 13:01:57 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OzUcRaapoMbqe8EGo1qZco%2Bb2VYeipsGFRx9q%2FMjkH87%2BfKKWkUKjMZXwxZlJs2%2BpZFg6vgIFkYbnBPDWIM%2Bk2A3eQs7SE9qnt6kB%2B3FrePXhEwfqdWXKzS%2BEA1WywS%2B"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c92610ffcf5695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tomlldahehun.org/floater?cs=S1BNV2t6YXtvU35nf2ZSfWl7ZF4&abt=0&red=1&sm=83&k=schedule&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F859d025ffc850b5e0f19ff978444b0ed%2FSchedule.I.v0.3.5f3.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_Rfka=1746709318494&crc=1 | 52.85.49.8 | 200 OK | 9.7 kB |
URL GET tomlldahehun.org/floater?cs=S1BNV2t6YXtvU35nf2ZSfWl7ZF4&abt=0&red=1&sm=83&k=schedule&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F859d025ffc850b5e0f19ff978444b0ed%2FSchedule.I.v0.3.5f3.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_Rfka=1746709318494&crc=1 IP52.85.49.8:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerAmazon Subjecttomlldahehun.org Fingerprint6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File typeASCII text, with very long lines (9683), with no line terminators Hash7c03c65605677d5d921af722200c9fe4 69bfe57968d521c6a19936eb2ef5bf1423bd8794 e4a730f344805b089d4b453360f3e84a0d1af6d1993ae9f8f047c339d8054a52
GET /floater?cs=S1BNV2t6YXtvU35nf2ZSfWl7ZF4&abt=0&red=1&sm=83&k=schedule&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F859d025ffc850b5e0f19ff978444b0ed%2FSchedule.I.v0.3.5f3.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_Rfka=1746709318494&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 6555
date: Thu, 08 May 2025 13:01:59 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=F5+sDKbk340wN/kDYvvnSN2OtsSFagg/5MOqWTeVbioxScikfYHa9YmQl+WwmnJKUYuLILJ4ft1aq6j3IkjVBpThE8Q2+TRoh51fZ9H1/6a1ZjgS26TiqwN0aYwJ; Expires=Thu, 15 May 2025 13:01:58 GMT; Path=/
AWSALBCORS=F5+sDKbk340wN/kDYvvnSN2OtsSFagg/5MOqWTeVbioxScikfYHa9YmQl+WwmnJKUYuLILJ4ft1aq6j3IkjVBpThE8Q2+TRoh51fZ9H1/6a1ZjgS26TiqwN0aYwJ; Expires=Thu, 15 May 2025 13:01:58 GMT; Path=/; SameSite=None
csu=34c49b6f-ee4c-4d7f-ab3a-c5f84db55cec
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 88944815e9efa1cfbf5b6acdd146175a.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C2
x-amz-cf-id: EbjFYxDOP9weCF1umCWALB_NR8BuB5qamRfx3mC2fJXPn7r_2e9WJg==
X-Firefox-Spdy: h2
|
|
| i.cdnfimgs.com/image/osp/4390/390/6809355c18042t1745433948r2084.jpg | 45.133.44.36 | 200 OK | 10 kB |
URL GET i.cdnfimgs.com/image/osp/4390/390/6809355c18042t1745433948r2084.jpg IP45.133.44.36:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerLet's Encrypt Subjecti.cdnfimgs.com Fingerprint97:B4:EE:30:86:38:1F:9C:D6:F7:C9:03:F8:21:2D:F3:7E:1F:71:A5 ValidityThu, 20 Mar 2025 06:33:17 GMT - Wed, 18 Jun 2025 06:33:16 GMT
File typeJPEG image data, baseline, precision 8, 192x192, components 3 Hashcb798003b1180559474d18a90ba0b272 90f948fb64c9ab055aaeecfb0974d199e9a3f88b 39e92dfaf4511203841083fae6e8b8b59c7e2ab8cf00e54c6e9c0d658e82d7aa
GET /image/osp/4390/390/6809355c18042t1745433948r2084.jpg HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 08 May 2025 13:02:01 GMT
content-type: image/jpeg
content-length: 10295
server: nginx
last-modified: Tue, 29 Apr 2025 10:14:11 GMT
etag: "6810a673-2837"
cache-control: max-age=1209600
expires: Thu, 22 May 2025 13:02:01 GMT
x-cdn-host-id: ds5059
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css | 5.34.214.148 | 200 OK | 3.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash30265c8089a8f3e871d0873ef6a5b944 2804a2fe5a6a956626ce6a46adf6b1a0676ee13d f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f31"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js | 5.34.214.148 | 200 OK | 70 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (768), with CRLF line terminators Hash6fda19caa29287e6f584f0557fdeb6d4 40f58160090cd1f022704ee1352b343adb9e73b9 8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1107a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.35:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 May 2025 13:00:47 GMT
expires: Tue, 05 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 259270
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| forethema.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 | 188.114.97.1 | 204 No Content | 0 B |
URL POST forethema.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 IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Thu, 08 May 2025 13:02:01 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=myClUtFC%2BVHks%2F4mFKzUxrPdccgx5D%2FJiSlqHYqiunxIwlsazvKvlHRdbyG19XS2skRpyYlF196oY8Dagl5Aguq7DjIbcBk8%2BrTRs1bFuqpzLfDheb5jQ%2BEorIYkmbi5"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c9262ae88f568d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| d3og8t183i1vbg.cloudfront.net/?itgod=761186 | 3.167.7.138 | 200 OK | 489 kB |
URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186 IP3.167.7.138:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size489 kB (489379 bytes) Hash1933fc04325c498df82b79180cc49f20 fa64b2d07f688288f8f7d0286fb94aac722d1079 534619807cdb31cec5f73a869e2df6042a9aa9a10585cb4c2c71558808da0737
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151940
date: Thu, 08 May 2025 13:01:58 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: FcnkMRwemVY5kGuIwvH16E-t0lZ7NnuPzBg_6wlqKsHvGeHDkP96ow==
X-Firefox-Spdy: h2
|
|
| s.viinjjlt.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==?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4390%2F390%2F6809355c18042t1745433948r2084.jpg | 172.67.216.130 | 302 Found | 10 kB |
URL GET s.viinjjlt.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==?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4390%2F390%2F6809355c18042t1745433948r2084.jpg IP172.67.216.130:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectviinjjlt.com FingerprintC6:75:0A:57:57:BF:D5:FA:91:4E:E1:AE:FB:AC:BF:41:AD:99:1C:EC ValidityWed, 07 May 2025 18:56:43 GMT - Tue, 05 Aug 2025 19:55:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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==?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F4390%2F390%2F6809355c18042t1745433948r2084.jpg HTTP/1.1
Host: s.viinjjlt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 08 May 2025 13:02:01 GMT
content-length: 0
location: https://i.cdnfimgs.com/image/osp/4390/390/6809355c18042t1745433948r2084.jpg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=V0gyRQajUQn8xs5pdjQZhGDEXwKUuLAIH1T%2Bb%2BjwYObo%2BX%2BeAHanrf2nooGAIFK7Pnr9DfHQpiaaLe80ExgzwswYczJjpssNVnCXWz%2FrCrrMc8l0YWc9TaAFLFCExGNr%2Fg%3D%3D"}]}
cf-ray: 93c9262b8aaa569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/stack-interface.css | 5.34.214.148 | 200 OK | 3.2 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash4541b29b6040bc31b760f98e914fd1d7 0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba 6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-c58"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css | 5.34.214.148 | 200 OK | 6.0 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash25cfe48e07622a00154b677afcbaeb47 23e3ae1bd04ad1d00d25d30e39815104ceeae52f 709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1783"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/sw.js | 5.34.214.148 | 200 OK | 103 kB |
IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size103 kB (103036 bytes) Hash9ee51131e416458b88d6da4e6e6959ca a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4 db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 22:15:30 GMT
vary: Accept-Encoding
etag: W/"63a23402-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| theharityhild.buzz/Z0FlMmocYxZFNRIzCRBQRSkRRhoUe0odBwImBEcaSS8ARkUUNktYGUVtR0EHAWNfA0ZFMghESF1jURxZRW1HRgsAHgxWSF1jXQFYUXJWEEZFMhBQNQ4lVxBQRSddAVkEcVFQR1EkVVBHUyUHAkdedV0FRwF3AFcPBCQGUQkEJEdP | 0.0.0.0 | | 0 B |
URL GET theharityhild.buzz/Z0FlMmocYxZFNRIzCRBQRSkRRhoUe0odBwImBEcaSS8ARkUUNktYGUVtR0EHAWNfA0ZFMghESF1jURxZRW1HRgsAHgxWSF1jXQFYUXJWEEZFMhBQNQ4lVxBQRSddAVkEcVFQR1EkVVBHUyUHAkdedV0FRwF3AFcPBCQGUQkEJEdP IP0.0.0.0:0
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Z0FlMmocYxZFNRIzCRBQRSkRRhoUe0odBwImBEcaSS8ARkUUNktYGUVtR0EHAWNfA0ZFMghESF1jURxZRW1HRgsAHgxWSF1jXQFYUXJWEEZFMhBQNQ4lVxBQRSddAVkEcVFQR1EkVVBHUyUHAkdedV0FRwF3AFcPBCQGUQkEJEdP HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css | 5.34.214.148 | 200 OK | 739 B |
URL GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hasha19cdfde4cca33ccafc0b8bfd518bebb df1830e07033d0ae31288f62892121778fc7c765 a347474d3c97d5440c2f06c86c314eb1e9c2a20e2b84e8367d57743fe77a8115
GET /themes/spirit/assets/frontend/css/mu-waiting-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Mon, 17 Feb 2025 00:39:28 GMT
vary: Accept-Encoding
etag: W/"67b28540-2e3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| forethema.com/SmhmYkFlVwURfAU8LDYXHVw2IywAAT4FdQsyISwlCyksCht7G0AWKC5VXlV3eVleRDEjDFtQeGwbEgM1PxtbU2cjBgANfGweW1NvekZQUm9+ThNfcGwcFgMmd1lAEjU+BFtTdn5eUVJ4eVlRUnl8 | 188.114.97.1 | 204 No Content | 0 B |
URL GET forethema.com/SmhmYkFlVwURfAU8LDYXHVw2IywAAT4FdQsyISwlCyksCht7G0AWKC5VXlV3eVleRDEjDFtQeGwbEgM1PxtbU2cjBgANfGweW1NvekZQUm9+ThNfcGwcFgMmd1lAEjU+BFtTdn5eUVJ4eVlRUnl8 IP188.114.97.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectforethema.com Fingerprint2A:F6:E9:9E:4B:5B:74:48:2C:CC:6D:B4:B4:11:33:9E:22:FD:F4:0B ValidityFri, 04 Apr 2025 11:54:24 GMT - Thu, 03 Jul 2025 12:52:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SmhmYkFlVwURfAU8LDYXHVw2IywAAT4FdQsyISwlCyksCht7G0AWKC5VXlV3eVleRDEjDFtQeGwbEgM1PxtbU2cjBgANfGweW1NvekZQUm9+ThNfcGwcFgMmd1lAEjU+BFtTdn5eUVJ4eVlRUnl8 HTTP/1.1
Host: forethema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 08 May 2025 13:01:57 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hli8C9XBawIXWeWOSm68M02jyGL%2BlYC4EI4fBjvPNnwn8PxC%2B30JwjrdJiWS7DpRFIS7XcWKgj03Oqn%2Ff0%2BCFlG4tZe%2ByUGFpiL71%2FJLAbsvAwpwnuR1REdkcHSZBuf8"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 93c92610af615695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 | 142.250.178.35 | 200 OK | 19 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 IP142.250.178.35:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19280, version 1.0 Hash386fb59be54b2d819064af98e57cc226 9e2d14d736be97ec84bfca3513558450cd6e3249 b4855cc8ec721cbaf27f3c907345e101b1524858221c14faa79df34cb2f84991
GET /s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 May 2025 18:04:31 GMT
expires: Fri, 01 May 2026 18:04:31 GMT
cache-control: public, max-age=31536000
age: 586646
last-modified: Thu, 14 Dec 2023 02:02:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 | 5.34.214.148 | 200 OK | 4.3 kB |
URL GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 4292, version 1.0 Hashae072782b361d2afdbf43db08d3cfb73 f3db2e65b53d97491672f8631e21d6d05905cc88 31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:57 GMT
content-type: font/woff2
content-length: 4292
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-10c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| rnmop.com/ie?v=4&c=rm0LV0QhWsOuJ75eEFTYwEUZlDgT8T6PNXGHg1l5qKeqrQfVnFW0zNsgibfkDbHGQIguxn1JB7a58qWsjhIB7a46ORjya1VFrPK1BhU96GhWdO5f5kSDhH0I1hZNaoXBnk57pdW81x5pYY4AqqsM-U9FXfjDnevQ2OuZsdu0qmklKSluYuLu5IfWcW5xXKYzXBY-BNTbe2rYycDtlJJqoJEtHQ8PBLqMLuqj32GgHBCuJJnXvYLlY6WA1TpG4RFiT4q8kCAmDwa9L0r3UjpfRkq1y96_Q-eKaLgBCCkom0gxMF5iDdoCrhSaYaETx4-Rba4isopY50DTL9c6OAdBWtiD2SD0M0oNuxJOzW1Nhqi1_a7jbotjACwSalI7fbAplfmKXvuDkIOQNn1UT64drcLgHYj-sr9XBhLXlrXatry5c9fhIvrBDYs7fcXjiOPpkZLbD1558nQPmrJV7U58dPvthpCL9iNUgg==&v1=79&v2=71517 |  176.9.142.140 | 301 Moved Permanently | 59 kB |
URL GET rnmop.com/ie?v=4&c=rm0LV0QhWsOuJ75eEFTYwEUZlDgT8T6PNXGHg1l5qKeqrQfVnFW0zNsgibfkDbHGQIguxn1JB7a58qWsjhIB7a46ORjya1VFrPK1BhU96GhWdO5f5kSDhH0I1hZNaoXBnk57pdW81x5pYY4AqqsM-U9FXfjDnevQ2OuZsdu0qmklKSluYuLu5IfWcW5xXKYzXBY-BNTbe2rYycDtlJJqoJEtHQ8PBLqMLuqj32GgHBCuJJnXvYLlY6WA1TpG4RFiT4q8kCAmDwa9L0r3UjpfRkq1y96_Q-eKaLgBCCkom0gxMF5iDdoCrhSaYaETx4-Rba4isopY50DTL9c6OAdBWtiD2SD0M0oNuxJOzW1Nhqi1_a7jbotjACwSalI7fbAplfmKXvuDkIOQNn1UT64drcLgHYj-sr9XBhLXlrXatry5c9fhIvrBDYs7fcXjiOPpkZLbD1558nQPmrJV7U58dPvthpCL9iNUgg==&v1=79&v2=71517 IP176.9.142.140:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerLet's Encrypt Subjectnimrute.com FingerprintE2:D9:3C:CF:D5:57:A7:A2:2A:60:4E:99:80:79:B1:7A:F2:04:4F:7D ValidityMon, 05 May 2025 05:34:31 GMT - Sun, 03 Aug 2025 05:34:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=rm0LV0QhWsOuJ75eEFTYwEUZlDgT8T6PNXGHg1l5qKeqrQfVnFW0zNsgibfkDbHGQIguxn1JB7a58qWsjhIB7a46ORjya1VFrPK1BhU96GhWdO5f5kSDhH0I1hZNaoXBnk57pdW81x5pYY4AqqsM-U9FXfjDnevQ2OuZsdu0qmklKSluYuLu5IfWcW5xXKYzXBY-BNTbe2rYycDtlJJqoJEtHQ8PBLqMLuqj32GgHBCuJJnXvYLlY6WA1TpG4RFiT4q8kCAmDwa9L0r3UjpfRkq1y96_Q-eKaLgBCCkom0gxMF5iDdoCrhSaYaETx4-Rba4isopY50DTL9c6OAdBWtiD2SD0M0oNuxJOzW1Nhqi1_a7jbotjACwSalI7fbAplfmKXvuDkIOQNn1UT64drcLgHYj-sr9XBhLXlrXatry5c9fhIvrBDYs7fcXjiOPpkZLbD1558nQPmrJV7U58dPvthpCL9iNUgg==&v1=79&v2=71517 HTTP/1.1
Host: rnmop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: fasthttp
date: Thu, 08 May 2025 13:02:05 GMT
content-length: 0
location: https://img.vmmcdn.com/get/62987579/238427_icon.png
x-app-id: 43
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/granim.min.js | 5.34.214.148 | 200 OK | 11 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators Hash714368d20c70f8c91b0a596e128dac07 563954ec3a896fc129d014f01836245829f6d01d e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-298b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/countdown.min.js | 5.34.214.148 | 200 OK | 5.4 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators Hash76a923d3d69255c45cd24bf9b100244f eb3c96f9901692f1a03500ea632963a16afdb985 8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-14f0"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| d3og8t183i1vbg.cloudfront.net/?itgod=761186 | 3.167.7.138 | 200 OK | 489 kB |
URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186 IP3.167.7.138:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size489 kB (489379 bytes) Hash77693af507b1d670561356df2cc5a417 1b339ad37f0597a66d055f2b10b6baf737515bd2 e153900a0e4a691f78e06cd5cabe9f9445eab7c76a03462638698631d44b4182
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151939
date: Thu, 08 May 2025 13:01:56 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: RbZdoiDP7Pv72ESqc15G49aS6HExLI_A7SEYP_QQvZnoaUwSxmYGDg==
X-Firefox-Spdy: h2
|
|
| img.vmmcdn.com/get/62987579/238427_icon.png | 138.201.51.142 | 200 OK | 59 kB |
URL GET img.vmmcdn.com/get/62987579/238427_icon.png IP138.201.51.142:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerLet's Encrypt Subjectimg.vmmcdn.com Fingerprint9F:87:EB:AE:5E:1A:E9:B1:A9:B7:C3:A2:C2:7D:99:49:6C:57:0D:3A ValidityTue, 15 Apr 2025 15:09:14 GMT - Mon, 14 Jul 2025 15:09:13 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash669eb036e71ef2df4b1a7d3fa9e5ebb7 6a8686b1ce7276b8c6732245e340dbe38b30eb04 89edf6961767b760b3ff755a803457eee41b5f2df863cdeca95165bf4a126732
GET /get/62987579/238427_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 08 May 2025 13:02:05 GMT
Content-Type: image/png
Content-Length: 59035
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 10:47:59 GMT
Cache-Control: public, max-age=604800
ETag: "639eefdf-e69b"
X-Proxy-Cache: HIT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Request-Headers: x-requested-with
Access-Control-Allow-Headers: x-requested-with
Accept-Ranges: bytes
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP64.233.164.84:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:YgcBPfivZGCztk2x5b8ICnr16y62FQ:QSy-djcg0akTREFM; Expires=Sat, 08-May-2027 13:01:58 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 May 2025 13:01:58 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mi2cyIljyKDRYYtTu4NTGYfL_cLjfpj03VVohvLyzZr9eMdMt3nsdUeOj4hcAnkbotQ0sW7tA
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-XleRpst8_P204voone-H7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png | 5.34.214.148 | 200 OK | 536 B |
URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typePNG image data, 57 x 57, 8-bit colormap, non-interlaced Hash0019444f6b6df5b4b5ed32b6b469caab 4232370d10ab54ef9bda57aa9dcb813036047b35 0509f6df067face535f028cd86200748952227161f8f244aa7864e7848553562
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:58 GMT
content-type: image/png
content-length: 536
last-modified: Thu, 13 Feb 2025 17:40:08 GMT
vary: Accept-Encoding
etag: "67ae2e78-218"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.112.1 | 404 Not Found | 159 B |
URL GET ukankingwithea.com/asd100.bin IP104.21.112.1:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:15:28:2A:F2:F8:5D:3A:DE:6D:1D:DC:CF:6D:06:BA:00:3A:63:70 ValidityTue, 29 Apr 2025 13:46:48 GMT - Mon, 28 Jul 2025 14:44:24 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashfb9666f93e418b95fea8fdbc20e80af9 d4eefca1b299cc266a80e83c9e39c4261cb87583 c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 08 May 2025 13:01:58 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: HIT
age: 171
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=meBNU2HLSNaZJGmjQGgzBptx1DVTQu%2B5ED6O8jrnwPdPaSdVMYDg5uEgg%2F%2Fru1rfXtPNNUeYpY3n95ht0Cah9OKLt3Mc0qXDXC3fsh5yUONX5uwEOQ15OpkcE2oA9XlV0C7GUBc%3D"}]}
content-encoding: br
cf-ray: 93c9261729f60b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mi2cyIljyKDRYYtTu4NTGYfL_cLjfpj03VVohvLyzZr9eMdMt3nsdUeOj4hcAnkbotQ0sW7tA | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mi2cyIljyKDRYYtTu4NTGYfL_cLjfpj03VVohvLyzZr9eMdMt3nsdUeOj4hcAnkbotQ0sW7tA IP64.233.164.84:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint59:74:47:4D:79:55:0E:D6:C9:C5:58:53:27:7B:B5:9B:F6:02:63:84 ValidityMon, 21 Apr 2025 08:42:44 GMT - Mon, 14 Jul 2025 08:42:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKV5Mi2cyIljyKDRYYtTu4NTGYfL_cLjfpj03VVohvLyzZr9eMdMt3nsdUeOj4hcAnkbotQ0sW7tA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:f_xaPmV7qB9nVL7ucl1KATuH1f00lA:vr21mHapjhkEAly0;Path=/;Expires=Sat, 08-May-2027 13:01:58 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 May 2025 13:01:58 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKV5MixVJE0QuaMAcmCbSmQUNe1MXy4OQXoUl-5SWFiX-o9KRnGUf5PqerYJqCWqrtJfft_TyLi_A&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1439572155%3A1746709318727175
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-RiToITNWWrpN3z08WDQPSA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 420
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/socicon.css | 5.34.214.148 | 200 OK | 9.8 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/socicon.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash910a42ce112991b31b30a735f1006a5f 6c8b4769270f1c86bb1c7a6b54325465395ba614 010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-266e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/iconsmind.css | 5.34.214.148 | 200 OK | 103 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css IP5.34.214.148:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Size103 kB (102727 bytes) Hashc9b1c618a7b12bd7ecf6034164b29164 f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99 fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=u1rhckijj2su6h5fmavcg2ltdv
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 08 May 2025 13:01:56 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-19147"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.178.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.178.35:443
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 May 2025 13:00:47 GMT
expires: Tue, 05 May 2026 13:00:47 GMT
cache-control: public, max-age=31536000
age: 259270
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| undefined/cFpFSlYROCYnaRFnJ2wjAjZ4b2Q2f3cMMkM1InIiQWJ2I2cGOCJkNRw1MC4wAjUrPngePzFvZDYdISAEPhQSHwAnIwseARcQIQEHGD4XCxBAGAMYByIefBsXQC4fARA5HwR6BBoNMgsVNTMhDRUYMgApHkArCQ8bSQsyCxIULQ8oBwcQCgEHGAwQDDEDDTIAGjUzLSgUGykDK2chGAMLOkUfPQ8RJyMcAxMyMhQBED0XAgwTAB89Cw4zCQcrHghjHAMAIhsXAhxEHXQcAjI0dS4TGGMkAQAfCQcYEFVoAwgHAxkAEm42DAATNxYIBx0YMhxgeBAyCAwsAR53NggHNQx3KxcUDAEtHEUfAxNmNQJ9DBAHGxcsOCIPFxsUGhgQMgIyNHQZFzIMIwM+MgIICwxJGAMcETICdQ8HNQsAAWcHAgB7HxkOEAgTEzQyDQMmPQArZjIDFz1wGikqJCZNEgoQIQAsID8VPzQ | 0.0.0.0 | | 0 B |
URL GET undefined/cFpFSlYROCYnaRFnJ2wjAjZ4b2Q2f3cMMkM1InIiQWJ2I2cGOCJkNRw1MC4wAjUrPngePzFvZDYdISAEPhQSHwAnIwseARcQIQEHGD4XCxBAGAMYByIefBsXQC4fARA5HwR6BBoNMgsVNTMhDRUYMgApHkArCQ8bSQsyCxIULQ8oBwcQCgEHGAwQDDEDDTIAGjUzLSgUGykDK2chGAMLOkUfPQ8RJyMcAxMyMhQBED0XAgwTAB89Cw4zCQcrHghjHAMAIhsXAhxEHXQcAjI0dS4TGGMkAQAfCQcYEFVoAwgHAxkAEm42DAATNxYIBx0YMhxgeBAyCAwsAR53NggHNQx3KxcUDAEtHEUfAxNmNQJ9DBAHGxcsOCIPFxsUGhgQMgIyNHQZFzIMIwM+MgIICwxJGAMcETICdQ8HNQsAAWcHAgB7HxkOEAgTEzQyDQMmPQArZjIDFz1wGikqJCZNEgoQIQAsID8VPzQ IP0.0.0.0:0
Requested byhttps://megaup.net/859d025ffc850b5e0f19ff978444b0ed/Schedule.I.v0.3.5f3.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cFpFSlYROCYnaRFnJ2wjAjZ4b2Q2f3cMMkM1InIiQWJ2I2cGOCJkNRw1MC4wAjUrPngePzFvZDYdISAEPhQSHwAnIwseARcQIQEHGD4XCxBAGAMYByIefBsXQC4fARA5HwR6BBoNMgsVNTMhDRUYMgApHkArCQ8bSQsyCxIULQ8oBwcQCgEHGAwQDDEDDTIAGjUzLSgUGykDK2chGAMLOkUfPQ8RJyMcAxMyMhQBED0XAgwTAB89Cw4zCQcrHghjHAMAIhsXAhxEHXQcAjI0dS4TGGMkAQAfCQcYEFVoAwgHAxkAEm42DAATNxYIBx0YMhxgeBAyCAwsAR53NggHNQx3KxcUDAEtHEUfAxNmNQJ9DBAHGxcsOCIPFxsUGhgQMgIyNHQZFzIMIwM+MgIICwxJGAMcETICdQ8HNQsAAWcHAgB7HxkOEAgTEzQyDQMmPQArZjIDFz1wGikqJCZNEgoQIQAsID8VPzQ HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
0.0.0.0