| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb6ecb6018a51380d08a47460236a395c 1ce7fe77c21188624302a660a289fe1ce6e7a9e4 ec876edd163ea26b47c9b862c795844f5dd01452095287ea5cd920e3b512672a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EC876EDD163EA26B47C9B862C795844F5DD01452095287EA5CD920E3B512672A"
Last-Modified: Wed, 25 Sep 2024 21:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4796
Expires: Thu, 26 Sep 2024 11:25:07 GMT
Date: Thu, 26 Sep 2024 10:05:11 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash122c86439a687f2001d86f0863aa5508 44e2cc204a85d0adc790c7ec142f7f790c4da149 e8ff8069afa731f5f23b6b450fafa43184567010eb4f3dbf1196c707f09920b5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8FF8069AFA731F5F23B6B450FAFA43184567010EB4F3DBF1196C707F09920B5"
Last-Modified: Thu, 26 Sep 2024 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7249
Expires: Thu, 26 Sep 2024 12:06:00 GMT
Date: Thu, 26 Sep 2024 10:05:11 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc43e2541e37815678381469c9e5da2d7 8826a1dacc67c90e98c00b0b34736b52cc7724ad e3a32ce3cf72d63e19b8798f97958504386b93f037f1b1c0ee9b1bacef7b7ab7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E3A32CE3CF72D63E19B8798F97958504386B93F037F1B1C0EE9B1BACEF7B7AB7"
Last-Modified: Wed, 25 Sep 2024 02:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7150
Expires: Thu, 26 Sep 2024 12:04:22 GMT
Date: Thu, 26 Sep 2024 10:05:12 GMT
Connection: keep-alive
|
|
| status.rapidssl.com/ |  192.229.221.95 | | 471 B |
IP192.229.221.95:0
Hashf29b8044d44dc65c231374e4b60365e0 39e5887dd0ae6e8e62843d8a8fd733ee4b920111 4adaafe0759908bc9c29a054489b36d7a4d95d39bc5ff124324a08ab31ad3f9e
POST / HTTP/1.1
Host: status.rapidssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 882
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Thu, 26 Sep 2024 10:05:12 GMT
Last-Modified: Thu, 26 Sep 2024 09:50:31 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
|
|
| www.upload.ee/download/17076375/db8c85d03e121f7bcb6f/Adobe-GenP-3.4.1-CGP.7z |  57.129.39.102 | | 427 B |
URL www.upload.ee/download/17076375/db8c85d03e121f7bcb6f/Adobe-GenP-3.4.1-CGP.7z IP57.129.39.102:0
File typeHTML document, ASCII text, with very long lines (427), with no line terminators Hash61bdb0b4e5d00fc8b19adc376eb2e6c2 0fb5bcc3b1d95f41d4eaea955c1da59aa39dfeba aed12084bbfcf9821417ec16054acf2558d7490a7a43348ffed98ba885da5f66
GET /download/17076375/db8c85d03e121f7bcb6f/Adobe-GenP-3.4.1-CGP.7z HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 26 Sep 2024 10:05:12 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 427
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash001c093f798288ab84597019a8ebec01 4629f9c3ad96a32a4e7d9473eafaae470b11bc9d 87a3423abc72f0a9ef17d57a518d112dba49c15714966e28898af73881d1d31e
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "87A3423ABC72F0A9EF17D57A518D112DBA49C15714966E28898AF73881D1D31E"
Last-Modified: Wed, 25 Sep 2024 16:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7369
Expires: Thu, 26 Sep 2024 12:08:01 GMT
Date: Thu, 26 Sep 2024 10:05:12 GMT
Connection: keep-alive
|
|
| www.upload.ee/download/17076375/db8c85d03e121f7bcb6f/Adobe-GenP-3.4.1-CGP.7z | 57.129.39.102 | | 427 B |
URL www.upload.ee/download/17076375/db8c85d03e121f7bcb6f/Adobe-GenP-3.4.1-CGP.7z IP57.129.39.102:0
File typeHTML document, ASCII text, with very long lines (427), with no line terminators Hash61bdb0b4e5d00fc8b19adc376eb2e6c2 0fb5bcc3b1d95f41d4eaea955c1da59aa39dfeba aed12084bbfcf9821417ec16054acf2558d7490a7a43348ffed98ba885da5f66
GET /download/17076375/db8c85d03e121f7bcb6f/Adobe-GenP-3.4.1-CGP.7z HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 26 Sep 2024 10:05:12 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 427
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
|
|
| www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error | 57.129.39.102 | 200 OK | 8.4 kB |
URL User Request GET HTTP/1.1www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error IP57.129.39.102:443
CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4526) Hash6040d2106c7aa983cbe0059864673319 52f06c037cc2c47fc14eff98b2d93602da792419 50c646a00d5a7e923985036e4e572a6a35fd6149ae68c345a0748de6a12c063f
GET /files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/download/17076375/db8c85d03e121f7bcb6f/Adobe-GenP-3.4.1-CGP.7z
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Sep 2024 10:05:12 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 8352
Connection: keep-alive
Keep-Alive: timeout=20
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
Content-Encoding: gzip
Set-Cookie: lng=eng; expires=Thu, 24-Oct-2024 10:05:12 GMT; path=/; domain=www.upload.ee; secure; httponly; SameSite=None
Last-Modified: Thu, 26 Sep 2024 10:05:12 GMT
|
|
| www.upload.ee/static/ubr__style.css | 57.129.39.102 | 200 OK | 2.8 kB |
URL GET HTTP/1.1www.upload.ee/static/ubr__style.css IP57.129.39.102:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeASCII text, with very long lines (591), with CRLF line terminators Hash7b9692d4caecccf38e40d2333f8e00b0 8ecb4f873571250f02a5cc2ceff0a24aed25fc33 c4042306388924b75aa7d584c1e61165264967a52d09544ecba836f0d00eb9b9
GET /static/ubr__style.css HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Sep 2024 10:05:13 GMT
Content-Type: text/css
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
ETag: W/"66855297-24da"
Expires: Thu, 03 Oct 2024 10:05:13 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.upload.ee/js/js__file_upload.js | 57.129.39.102 | 200 OK | 7.7 kB |
URL GET HTTP/1.1www.upload.ee/js/js__file_upload.js IP57.129.39.102:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1853) Hash66684709338f7239056ff3302e16bc4a 7dbd501434bdc062cdc8f6744e272a7d39ca5136 5163e50a8fe4549a8ca064e266de9c8e6aebd1d848185e0931959824a4d32c0f
GET /js/js__file_upload.js HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Sep 2024 10:05:13 GMT
Content-Type: application/javascript
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
ETag: W/"66855297-651c"
Expires: Thu, 03 Oct 2024 10:05:13 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.upload.ee/images/dl_.png | 57.129.39.102 | 200 OK | 1.9 kB |
URL GET HTTP/1.1www.upload.ee/images/dl_.png IP57.129.39.102:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typePNG image data, 154 x 32, 8-bit colormap, non-interlaced Hashf3e8f284a4e98cdb91b6abfc142d94a4 fa9e618c2f56bea752ddd7e45a372c5539dadda9 2f13919383f54ca21e5b87f5644df8a875b99815c821dcbbabea352d854c6882
GET /images/dl_.png HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Sep 2024 10:05:13 GMT
Content-Type: image/png
Content-Length: 1900
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "66855297-76c"
Expires: Thu, 03 Oct 2024 10:05:13 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
|
|
| du0pud0sdlmzf.cloudfront.net/?dupud=997369 | 143.204.42.211 | 200 OK | 117 kB |
URL GET HTTP/2du0pud0sdlmzf.cloudfront.net/?dupud=997369 IP143.204.42.211:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (15945) Size117 kB (117406 bytes) Hash8c535f752093119daa7cbbf6dd0ae457 6c307a74704277d89d60f2fffe97a29afc96ab16 3c7906fc1e18716504e77648373c87f981eeded00ca6c7988b045852f347fd15
GET /?dupud=997369 HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 117406
date: Thu, 26 Sep 2024 10:00:38 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MqotDfRAej5HBsWDeQiy-ELQu7pMzXoDGQX9ANHfS0kWoKAQESsmiA==
age: 275
X-Firefox-Spdy: h2
|
|
| www.upload.ee/images/arrow.gif | 57.129.39.102 | 200 OK | 59 B |
URL GET HTTP/1.1www.upload.ee/images/arrow.gif IP57.129.39.102:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeGIF image data, version 89a, 6 x 9 Hash6675f814b94f13f91f1383707b250e36 31452650e8fce2095613a2010799bdb7548bdd51 061d01a0b85f948c6ec464870ecec4654c4bd2ff15cacda941bbbf16225ec411
GET /images/arrow.gif HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Sep 2024 10:05:13 GMT
Content-Type: image/gif
Content-Length: 59
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "66855297-3b"
Expires: Thu, 03 Oct 2024 10:05:13 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash6756f46a84fa778fc14adb98ea91d50f cd1c1c937b8f6530da2ca9f9ed24e47fe9eb2c75 1f7d36b0666cb68aaeeaf76d06a3aa9c106520eed9c191def4852b9ec18fc0c3
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Sep 2024 10:05:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=UA-6703115-1 | 142.250.74.104 | 200 OK | 75 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-6703115-1 IP142.250.74.104:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint8F:FB:38:1E:52:FC:DC:A9:59:49:87:DE:AC:8B:98:2B:57:09:5D:BA ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
File typeJavaScript source, ASCII text, with very long lines (2345) Hashfb47fc2e24e91feb211d0aece0f65d6a 7620245df98e0ffda9e039f009d5d43728f76d26 711c557efbd151718ec9723e61eb311387396497082c4fa8b1303a55ad96bd9f
GET /gtag/js?id=UA-6703115-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Sep 2024 10:05:13 GMT
expires: Thu, 26 Sep 2024 10:05:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 75054
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash6756f46a84fa778fc14adb98ea91d50f cd1c1c937b8f6530da2ca9f9ed24e47fe9eb2c75 1f7d36b0666cb68aaeeaf76d06a3aa9c106520eed9c191def4852b9ec18fc0c3
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Sep 2024 10:05:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c | 142.250.74.104 | 200 OK | 99 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c IP142.250.74.104:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint8F:FB:38:1E:52:FC:DC:A9:59:49:87:DE:AC:8B:98:2B:57:09:5D:BA ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
File typeJavaScript source, ASCII text, with very long lines (3222) Hash3132eb5e056ba0096db135034674c7fe 63b7937e5fe67335bbf34ae8fcd140b271fb37f9 feee160f9feaf9899b4c6560bab816d2b0b165130c683ea175cd57acba09357c
GET /gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Sep 2024 10:05:13 GMT
expires: Thu, 26 Sep 2024 10:05:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 98653
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ftheusysianeduk.com/YllLbUhNZigedTBoDl0aURt6NC8aIRg1EggYJScPBGsaIy5SMm0ZIQZkclR/VmlzSzgLPXZccEQqPww8Fyp2XG4LNy0CdUQvdlxmUnd5Q31ELHZcbhYpKgp1U387GTwOZHpaelVqf1h5U2p4WHw | 172.67.155.72 | 204 No Content | 0 B |
URL GET HTTP/2ftheusysianeduk.com/YllLbUhNZigedTBoDl0aURt6NC8aIRg1EggYJScPBGsaIy5SMm0ZIQZkclR/VmlzSzgLPXZccEQqPww8Fyp2XG4LNy0CdUQvdlxmUnd5Q31ELHZcbhYpKgp1U387GTwOZHpaelVqf1h5U2p4WHw IP172.67.155.72:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectftheusysianeduk.com Fingerprint56:63:2B:26:BC:DC:05:6A:8F:2C:F1:87:B3:C0:B6:12:9E:4F:62:28 ValidityFri, 06 Sep 2024 05:54:49 GMT - Thu, 05 Dec 2024 05:54:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /YllLbUhNZigedTBoDl0aURt6NC8aIRg1EggYJScPBGsaIy5SMm0ZIQZkclR/VmlzSzgLPXZccEQqPww8Fyp2XG4LNy0CdUQvdlxmUnd5Q31ELHZcbhYpKgp1U387GTwOZHpaelVqf1h5U2p4WHw HTTP/1.1
Host: ftheusysianeduk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 26 Sep 2024 10:05:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bNs3dka%2FoBSzFKJBb%2B0LQ1lgpPzXfdTwHUJnNAAhtYrDzh0OCJ3h2LCWPOSOWSFcV6IFSva8QChdOA4r%2B1MLL8GPyuKlPVQt13zqN4AIuzXl6dQYMAC9TGrAAaaipjbSzSNxRvP2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c926f2f796256b1-OSL
X-Firefox-Spdy: h2
|
|
| ftheusysianeduk.com/VW94SjF6UBs5DDY3H3lgPjk/GXAfGB4fcxQuIAxGB185CFIdKl4+WDFSQXMGZllBbEE8C0V7FyYbGT5EJlJJbFg7CRd3FyNSSWQCYUFLfB9hSQ13AHMbCCtWaF5eOkUhA0V7BmdYS34EZF5LeQNh | 172.67.155.72 | 204 No Content | 0 B |
URL GET HTTP/2ftheusysianeduk.com/VW94SjF6UBs5DDY3H3lgPjk/GXAfGB4fcxQuIAxGB185CFIdKl4+WDFSQXMGZllBbEE8C0V7FyYbGT5EJlJJbFg7CRd3FyNSSWQCYUFLfB9hSQ13AHMbCCtWaF5eOkUhA0V7BmdYS34EZF5LeQNh IP172.67.155.72:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectftheusysianeduk.com Fingerprint56:63:2B:26:BC:DC:05:6A:8F:2C:F1:87:B3:C0:B6:12:9E:4F:62:28 ValidityFri, 06 Sep 2024 05:54:49 GMT - Thu, 05 Dec 2024 05:54:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /VW94SjF6UBs5DDY3H3lgPjk/GXAfGB4fcxQuIAxGB185CFIdKl4+WDFSQXMGZllBbEE8C0V7FyYbGT5EJlJJbFg7CRd3FyNSSWQCYUFLfB9hSQ13AHMbCCtWaF5eOkUhA0V7BmdYS34EZF5LeQNh HTTP/1.1
Host: ftheusysianeduk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 26 Sep 2024 10:05:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lk749%2BxHjL%2FGPZxePhWACt2Xbu96dG7cx4onCAl2uNNva6AcgnNrNPPExbw7iZ1ueC6c%2Bv%2BdN4MIPLC0Vzv03YvNDSxJB1ZC3IJ9JeQDJF4M6TXLd32YVtcbtui2Me629lEfzV3z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c926f2f796d56b1-OSL
X-Firefox-Spdy: h2
|
|
| ftheusysianeduk.com/Y0hPV0RMdywkeTJ5PwYXUiB+NXYLMS0PEhcSfGYsBiUnOiEOO2kjLQd1dm5zV3l7cTQKLHJmYhA8LiMxEHV+cS0NLiBqYhV1fnl3V2Z8YWpXbjpqdUU8PzYjXnlpJzAXJHJmc1F/fGNxUnl8ZHNQ | 172.67.155.72 | 204 No Content | 0 B |
URL GET HTTP/2ftheusysianeduk.com/Y0hPV0RMdywkeTJ5PwYXUiB+NXYLMS0PEhcSfGYsBiUnOiEOO2kjLQd1dm5zV3l7cTQKLHJmYhA8LiMxEHV+cS0NLiBqYhV1fnl3V2Z8YWpXbjpqdUU8PzYjXnlpJzAXJHJmc1F/fGNxUnl8ZHNQ IP172.67.155.72:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectftheusysianeduk.com Fingerprint56:63:2B:26:BC:DC:05:6A:8F:2C:F1:87:B3:C0:B6:12:9E:4F:62:28 ValidityFri, 06 Sep 2024 05:54:49 GMT - Thu, 05 Dec 2024 05:54:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Y0hPV0RMdywkeTJ5PwYXUiB+NXYLMS0PEhcSfGYsBiUnOiEOO2kjLQd1dm5zV3l7cTQKLHJmYhA8LiMxEHV+cS0NLiBqYhV1fnl3V2Z8YWpXbjpqdUU8PzYjXnlpJzAXJHJmc1F/fGNxUnl8ZHNQ HTTP/1.1
Host: ftheusysianeduk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 26 Sep 2024 10:05:13 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=56J3j%2BV2SrU%2BfZWfdUrI4J2P9waDc6ItX%2F2MNyEhaSZaLiVlBUQd3dHaJex7Cy8EDddDr5mtQeElmmcVE52dH2sWec0dDErExXWjAOzZA4hmPyLM%2FAtLCKxXcGjqrroItlfVH8Z5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c926f2f896f56b1-OSL
X-Firefox-Spdy: h2
|
|
| runingamgladt.com/NllXTE5XOzQhcVdkNWo7RDVqaXxwfGUKKkNpJzkqBiozICNMP3kvIlksMyo8WTcjYiBTLXJ+CFcPAw47ezM0fhZBGwIPDXADFCt2eTsWKCp0GGI2H3QhDxkZXhEQGRtsEBINDW4PDjQGUS0PCRoPHRYaNn44Ei8Hdx9nfC91Dw0WBngcEQoXfQMFFQ1jaDw1CmMxDxsabxcPNBxhFAEGGnQxEiQfdx8NDyd4ABAgAGEQEXgsYWgBNhxnYQcbJEYSFX17VBcVGi1SGB17D3MqFg59BxAPOwNlAzkGAncYNHkZZxsfGH13Gg8nIWYAZXUXdDEdIS1ddCQNDE89EB85cGs1DRR3GD95OXc1YhobXAM1DRxVHxI7BFMYICgidw9jCAtbOhYPCEIfGgoXdAo/BiBSNTQJCWEMAAs5Dh5xJj1ZNydxOVBrPS0WfTIE | 108.157.214.39 | 200 OK | 1.2 kB |
URL GET HTTP/2runingamgladt.com/NllXTE5XOzQhcVdkNWo7RDVqaXxwfGUKKkNpJzkqBiozICNMP3kvIlksMyo8WTcjYiBTLXJ+CFcPAw47ezM0fhZBGwIPDXADFCt2eTsWKCp0GGI2H3QhDxkZXhEQGRtsEBINDW4PDjQGUS0PCRoPHRYaNn44Ei8Hdx9nfC91Dw0WBngcEQoXfQMFFQ1jaDw1CmMxDxsabxcPNBxhFAEGGnQxEiQfdx8NDyd4ABAgAGEQEXgsYWgBNhxnYQcbJEYSFX17VBcVGi1SGB17D3MqFg59BxAPOwNlAzkGAncYNHkZZxsfGH13Gg8nIWYAZXUXdDEdIS1ddCQNDE89EB85cGs1DRR3GD95OXc1YhobXAM1DRxVHxI7BFMYICgidw9jCAtbOhYPCEIfGgoXdAo/BiBSNTQJCWEMAAs5Dh5xJj1ZNydxOVBrPS0WfTIE IP108.157.214.39:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerAmazon Subjectruningamgladt.com Fingerprint6F:30:7F:C6:04:BC:47:2E:BB:3E:E9:6A:E4:22:C1:D2:5E:E7:75:58 ValidityMon, 19 Aug 2024 00:00:00 GMT - Wed, 17 Sep 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3035), with no line terminators Hashe166344c52749ff01aedf1960101a317 32fbc5b0a6f3d8ade89e2cca769b1094dac01f90 8147dc247ddf49be83ebcb74d5afcf420c58427d67aa3a6aada0093401b5e4a5
GET /NllXTE5XOzQhcVdkNWo7RDVqaXxwfGUKKkNpJzkqBiozICNMP3kvIlksMyo8WTcjYiBTLXJ+CFcPAw47ezM0fhZBGwIPDXADFCt2eTsWKCp0GGI2H3QhDxkZXhEQGRtsEBINDW4PDjQGUS0PCRoPHRYaNn44Ei8Hdx9nfC91Dw0WBngcEQoXfQMFFQ1jaDw1CmMxDxsabxcPNBxhFAEGGnQxEiQfdx8NDyd4ABAgAGEQEXgsYWgBNhxnYQcbJEYSFX17VBcVGi1SGB17D3MqFg59BxAPOwNlAzkGAncYNHkZZxsfGH13Gg8nIWYAZXUXdDEdIS1ddCQNDE89EB85cGs1DRR3GD95OXc1YhobXAM1DRxVHxI7BFMYICgidw9jCAtbOhYPCEIfGgoXdAo/BiBSNTQJCWEMAAs5Dh5xJj1ZNydxOVBrPS0WfTIE HTTP/1.1
Host: runingamgladt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1188
date: Thu, 26 Sep 2024 10:05:13 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 59202edf772149f3e7805f2a4994d252.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: aDKqJk6gSZe0wxDFjmhbWNyP1Wu7XPbHUt0SRFwSpomJ7WluKi1g_Q==
X-Firefox-Spdy: h2
|
|
| runingamgladt.com/MTc3MEFQVVRdflAKVRY0Q1sKFXN3EgV2JUQHR0UlAURTXCxLURlTLV5CU1YzXllDHi9UQxICBwFlYkgxYllYXQhGVERiFXRbc2gldVF/RCVUBwJaEXNEQXgJVgB/WnBkenNHB3tlRFgYVkBBaAIJEgV2A1hmfFUCaFV0c3kAdF59IHRNbn8ZAg58eXIAZ2dXAFlUYVwyd15mWQVfU1R5Anh8UwA1W3tmAC5jBHFBCWVYYXwvdFF+V3Vae2VHKnVOQEUVSw9VVQJ0cHpyDEF+dlg3YnZ5BRMCR1FUckl1els1AVZhXwhpBFMIA2J6Yn0FY3pSdS4IU3EdeWdjf3YxZlBfViUCQFVgBwgFc2YDCWF/Zi1lf197CFhcfHkTZ1BRWXgFZFlieWZvQ3sldltVVSlGRGdXNkJxYwExZkBPdCIDfW1SAAgDUWFnW0RYXjEMXUVyFEFxfWAoQnUBBXFXBg | 108.157.214.39 | 200 OK | 1.2 kB |
URL GET HTTP/2runingamgladt.com/MTc3MEFQVVRdflAKVRY0Q1sKFXN3EgV2JUQHR0UlAURTXCxLURlTLV5CU1YzXllDHi9UQxICBwFlYkgxYllYXQhGVERiFXRbc2gldVF/RCVUBwJaEXNEQXgJVgB/WnBkenNHB3tlRFgYVkBBaAIJEgV2A1hmfFUCaFV0c3kAdF59IHRNbn8ZAg58eXIAZ2dXAFlUYVwyd15mWQVfU1R5Anh8UwA1W3tmAC5jBHFBCWVYYXwvdFF+V3Vae2VHKnVOQEUVSw9VVQJ0cHpyDEF+dlg3YnZ5BRMCR1FUckl1els1AVZhXwhpBFMIA2J6Yn0FY3pSdS4IU3EdeWdjf3YxZlBfViUCQFVgBwgFc2YDCWF/Zi1lf197CFhcfHkTZ1BRWXgFZFlieWZvQ3sldltVVSlGRGdXNkJxYwExZkBPdCIDfW1SAAgDUWFnW0RYXjEMXUVyFEFxfWAoQnUBBXFXBg IP108.157.214.39:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerAmazon Subjectruningamgladt.com Fingerprint6F:30:7F:C6:04:BC:47:2E:BB:3E:E9:6A:E4:22:C1:D2:5E:E7:75:58 ValidityMon, 19 Aug 2024 00:00:00 GMT - Wed, 17 Sep 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3052), with no line terminators Hash1944a0531f550ff3a8871f3d06b44f44 500f7111147e9de0cb9b36fc1f1d4d1d12d54f3a bac0388e02f34e226655542014de8a529563790b814b14fb63a1b2eadb5e29ed
GET /MTc3MEFQVVRdflAKVRY0Q1sKFXN3EgV2JUQHR0UlAURTXCxLURlTLV5CU1YzXllDHi9UQxICBwFlYkgxYllYXQhGVERiFXRbc2gldVF/RCVUBwJaEXNEQXgJVgB/WnBkenNHB3tlRFgYVkBBaAIJEgV2A1hmfFUCaFV0c3kAdF59IHRNbn8ZAg58eXIAZ2dXAFlUYVwyd15mWQVfU1R5Anh8UwA1W3tmAC5jBHFBCWVYYXwvdFF+V3Vae2VHKnVOQEUVSw9VVQJ0cHpyDEF+dlg3YnZ5BRMCR1FUckl1els1AVZhXwhpBFMIA2J6Yn0FY3pSdS4IU3EdeWdjf3YxZlBfViUCQFVgBwgFc2YDCWF/Zi1lf197CFhcfHkTZ1BRWXgFZFlieWZvQ3sldltVVSlGRGdXNkJxYwExZkBPdCIDfW1SAAgDUWFnW0RYXjEMXUVyFEFxfWAoQnUBBXFXBg HTTP/1.1
Host: runingamgladt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1204
date: Thu, 26 Sep 2024 10:05:13 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 59202edf772149f3e7805f2a4994d252.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: 4NkaBlppS3yAWm3u10FDtJGM-MK8EFhllYPidAVFq0dD2MjJa9lDnA==
X-Firefox-Spdy: h2
|
|
| www.upload.ee/favicon.ico | 57.129.39.102 | 200 OK | 1.2 kB |
URL GET HTTP/1.1www.upload.ee/favicon.ico IP57.129.39.102:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerDigiCert Inc Subjectwww.upload.ee Fingerprint2A:42:9A:2D:AB:74:0A:9E:21:D8:90:F6:D3:67:65:F2:CF:22:E0:2E ValiditySun, 24 Mar 2024 00:00:00 GMT - Sat, 22 Mar 2025 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashf299cf2e651c19e48d27900ced493ccb c2d1086d517d7a26292e0d7b32da7c55b166c23b 115c8eb4840245f7aed0cb2a17fa7e91b86f79bb2f223a25af8cc533e1dedff1
GET /favicon.ico HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error
Cookie: lng=eng; _ga_LT9YQX0N49=GS1.1.1727345113.1.0.1727345113.0.0.0; _ga=GA1.1.1257406514.1727345114
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Sep 2024 10:05:13 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Wed, 03 Jul 2024 13:31:03 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "66855297-47e"
Expires: Thu, 03 Oct 2024 10:05:13 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash1e4705b2cb144879d4082a88667b1b4a 890c3276201d3f1216a6f1a82e8fc6855ae5c92e 0a44a27b4f5a15ebb17f7b83e4015cbc4af44c63f61852ae32c8936e377338d9
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Sep 2024 10:05:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash1e4705b2cb144879d4082a88667b1b4a 890c3276201d3f1216a6f1a82e8fc6855ae5c92e 0a44a27b4f5a15ebb17f7b83e4015cbc4af44c63f61852ae32c8936e377338d9
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Sep 2024 10:05:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP64.233.162.84:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:6OdN7Qag2K2mRl5DAxCGk1QAtzTw8Q:w4AqkxvaBUywugp3; Expires=Sat, 26-Sep-2026 10:05:13 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Sep 2024 10:05:13 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqc4BHYklaI_1ijRKPXxaxYTIQHL7oOvPi_BG4_I_Bihol7MpQ_SImSfSHiZk4cjkctGmWl3Yw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-3k1JvUb_gHgjgN8ARnUfZw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.162.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP64.233.162.84:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:vcSgVIcXTl1bknoI_a-z4UoTADHHbA:nGekoLLSkzzYB01e; Expires=Sat, 26-Sep-2026 10:05:13 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Sep 2024 10:05:13 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqcaipo32Y5mcovOBBjEY8LceyJn6anxjvF0MNWe5TlIKUHDBtRw18-MHzuGozvBZt1hbozgfw
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-NJgXH4T-WjaBu6JHrG8xkg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ftheusysianeduk.com/popunder.gif | 172.67.155.72 | | 58 B |
URL GET ftheusysianeduk.com/popunder.gif IP172.67.155.72:0
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectftheusysianeduk.com Fingerprint56:63:2B:26:BC:DC:05:6A:8F:2C:F1:87:B3:C0:B6:12:9E:4F:62:28 ValidityFri, 06 Sep 2024 05:54:49 GMT - Thu, 05 Dec 2024 05:54:48 GMT
File typeGIF image data, version 89a, 1 x 1 Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: ftheusysianeduk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Sep 2024 10:05:14 GMT
content-type: image/gif
content-length: 58
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 148368
last-modified: Tue, 24 Sep 2024 16:52:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gveK355LnjKr4LfOxTPlKbvlRTfnHW6fLQkEG%2FsFap5YhapckhtI4R7B%2FZ3l8M%2BiHObd6YObxV%2FzxK1FVWH1iJRHjxVZB9k8aHoLJCjuVOsEsBsFik2kSJhfMSmWOuKbFvnsIHw7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c926f327c4356b1-OSL
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash7e9f8f4f8816cec7a496c0b0d4261fef c9ff0a5157dd9197507bcf7919e7041398f9a2b9 dc1701bc5ff7bdfc6ef0bfd8383020296cc933886990242714c263f6401900d4
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Sep 2024 10:05:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqc4BHYklaI_1ijRKPXxaxYTIQHL7oOvPi_BG4_I_Bihol7MpQ_SImSfSHiZk4cjkctGmWl3Yw | 64.233.162.84 | 302 Found | 420 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqc4BHYklaI_1ijRKPXxaxYTIQHL7oOvPi_BG4_I_Bihol7MpQ_SImSfSHiZk4cjkctGmWl3Yw IP64.233.162.84:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
File typeHTML document, ASCII text, with very long lines (388) Hasha4fb71398c607cb0664bf03978f8b078 1be6f666104262f233831fd5dc49b1139d13f96c 0ad0758043b703ecfe1ac28bdab8e7b01f73b13073becdf663b1449834e95609
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ARpgrqc4BHYklaI_1ijRKPXxaxYTIQHL7oOvPi_BG4_I_Bihol7MpQ_SImSfSHiZk4cjkctGmWl3Yw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:_fP64OD5MuqyE8uER0nbJBQMcRebAA:S7DRmv_zkV9Jw8bZ;Path=/;Expires=Sat, 26-Sep-2026 10:05:14 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Sep 2024 10:05:14 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdGBMZtZa4posQBLcwE9j-8PVLbFwcPROMW_EJp5zolHO4eQWEjAXBW9Jr8vwQnqaTm_fQ9&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-180928673%3A1727345114042764&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-MfCg3wq2EGTspgZLoAF2zg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 420
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqcaipo32Y5mcovOBBjEY8LceyJn6anxjvF0MNWe5TlIKUHDBtRw18-MHzuGozvBZt1hbozgfw | 64.233.162.84 | 302 Found | 420 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqcaipo32Y5mcovOBBjEY8LceyJn6anxjvF0MNWe5TlIKUHDBtRw18-MHzuGozvBZt1hbozgfw IP64.233.162.84:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16 ValidityMon, 26 Aug 2024 07:15:53 GMT - Mon, 18 Nov 2024 07:15:52 GMT
File typeHTML document, ASCII text, with very long lines (391) Hashb14eb42ae120eec15f0ebace62b83dde e4d376b7b9dc9bbf9048a7e83e4d95a2c284331d bc7e7d9c91011b1627bba966467238ff15ff3c4d62387b2e6cad30939924e566
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ARpgrqcaipo32Y5mcovOBBjEY8LceyJn6anxjvF0MNWe5TlIKUHDBtRw18-MHzuGozvBZt1hbozgfw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:aC5DHLcMeo-LLstPoh6w1qaGoIBniA:OqvkHBd1vA9LFm91;Path=/;Expires=Sat, 26-Sep-2026 10:05:14 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Sep 2024 10:05:14 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdz477Ovhyg4tpDDWX_0CvH2VlVydtI6WhjIk5XVtr4E9kNtgCvx1ijeK4RGsdEyTENR0fY&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S487809526%3A1727345114048351&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-DOtq5kGsWUjHBF5128cwiA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 420
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| du0pud0sdlmzf.cloudfront.net/0RUxpSnomIwcsRTElDXdDfHtde05jPBsvHHg7Hj1UMDwFJRshYgwvXC8/BiQKeCYbCC81CiMaEzYOX39KI31PPgAhcVlsFiQiDndcICIKd0tjLQ0oR3FqHToVLnEfIg4kLRwkDywuTz8beCEGMBMpIAhvSAN5R3pfd3xBMkt0aVoIX3d8BSMUMDRMeEo9dF-8VTHFpWghfd3wbPF92DVB8VHVlTHhKIikKIRVgfi94SnR8WXtKdGlbehwsPgwsFT1pWwxDc2JZbA94fQ | 143.204.42.211 | | 577 B |
URL du0pud0sdlmzf.cloudfront.net/0RUxpSnomIwcsRTElDXdDfHtde05jPBsvHHg7Hj1UMDwFJRshYgwvXC8/BiQKeCYbCC81CiMaEzYOX39KI31PPgAhcVlsFiQiDndcICIKd0tjLQ0oR3FqHToVLnEfIg4kLRwkDywuTz8beCEGMBMpIAhvSAN5R3pfd3xBMkt0aVoIX3d8BSMUMDRMeEo9dF-8VTHFpWghfd3wbPF92DVB8VHVlTHhKIikKIRVgfi94SnR8WXtKdGlbehwsPgwsFT1pWwxDc2JZbA94fQ IP143.204.42.211:0
CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (816), with no line terminators Hash22054c304f333a026d20dc07ee404b81 79a35df21632a3851e34db3e8f2939c731807842 b6e20228c5f2ecfc3f1151b81d182bb23eb44e0dd3c73f18332dcb040ce0a573
GET /0RUxpSnomIwcsRTElDXdDfHtde05jPBsvHHg7Hj1UMDwFJRshYgwvXC8/BiQKeCYbCC81CiMaEzYOX39KI31PPgAhcVlsFiQiDndcICIKd0tjLQ0oR3FqHToVLnEfIg4kLRwkDywuTz8beCEGMBMpIAhvSAN5R3pfd3xBMkt0aVoIX3d8BSMUMDRMeEo9dF-8VTHFpWghfd3wbPF92DVB8VHVlTHhKIikKIRVgfi94SnR8WXtKdGlbehwsPgwsFT1pWwxDc2JZbA94fQ HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://runingamgladt.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 577
date: Thu, 26 Sep 2024 10:05:14 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lowDY0FK2jdA7TXQtPbtnfn3fcdl-arxanCDf83ZYSm1htSCxPh2Gg==
X-Firefox-Spdy: h2
|
|
| du0pud0sdlmzf.cloudfront.net/aVTBuMjc2XwBUCCFZCg8ObAddBA5zQBxXUWhHGUUZIEACXVYxHgtXET9DAVxHaEcIAF00aCVZZHNEFFYKZRYCU1kyDUhXWTYNXxRWMVJTBhEhQAFZCiNYGlNWIF4bW1VzRQ8PWjpKB15bNBVcdAJ7AEsAB31IXwMSZnJLAAc5WQBHT3ACXkoPY29YBhJmck-sABydGSwF2bAZAAh5wAl5VUjZbARcFEwJeAwdlAV4DEmcACFtFMFYBShJndlcEGWUWGw8G | 143.204.42.211 | | 616 B |
URL du0pud0sdlmzf.cloudfront.net/aVTBuMjc2XwBUCCFZCg8ObAddBA5zQBxXUWhHGUUZIEACXVYxHgtXET9DAVxHaEcIAF00aCVZZHNEFFYKZRYCU1kyDUhXWTYNXxRWMVJTBhEhQAFZCiNYGlNWIF4bW1VzRQ8PWjpKB15bNBVcdAJ7AEsAB31IXwMSZnJLAAc5WQBHT3ACXkoPY29YBhJmck-sABydGSwF2bAZAAh5wAl5VUjZbARcFEwJeAwdlAV4DEmcACFtFMFYBShJndlcEGWUWGw8G IP143.204.42.211:0
CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (881), with no line terminators Hash5a1934be09e73eded38224bc02d0921f c98118ff1f159c181e2695b6aeca00a85e873864 1006c33ebb5e3c604d59a668a898cff3a8d981810fab4ea11b30eaa0c9bd4439
GET /aVTBuMjc2XwBUCCFZCg8ObAddBA5zQBxXUWhHGUUZIEACXVYxHgtXET9DAVxHaEcIAF00aCVZZHNEFFYKZRYCU1kyDUhXWTYNXxRWMVJTBhEhQAFZCiNYGlNWIF4bW1VzRQ8PWjpKB15bNBVcdAJ7AEsAB31IXwMSZnJLAAc5WQBHT3ACXkoPY29YBhJmck-sABydGSwF2bAZAAh5wAl5VUjZbARcFEwJeAwdlAV4DEmcACFtFMFYBShJndlcEGWUWGw8G HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://runingamgladt.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 616
date: Thu, 26 Sep 2024 10:05:14 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CXjwY6bxJ_4TJb-BL9o4Zbb76DH9Fav_CBPy-FGczDmKTvpqqCaGDg==
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdGBMZtZa4posQBLcwE9j-8PVLbFwcPROMW_EJp5zolHO4eQWEjAXBW9Jr8vwQnqaTm_fQ9&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-180928673%3A1727345114042764&ddm=0 | 64.233.162.84 | 403 Forbidden | 810 B |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdGBMZtZa4posQBLcwE9j-8PVLbFwcPROMW_EJp5zolHO4eQWEjAXBW9Jr8vwQnqaTm_fQ9&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-180928673%3A1727345114042764&ddm=0 IP64.233.162.84:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint99:1A:E6:C6:9B:04:87:74:E3:DA:97:C8:29:09:15:16:CF:1F:6A:78 ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1654), with no line terminators Hash43a42802431f2d1190c489c180ed7acc 64b90e73a8c8d916227ebb8f7e3ad978e84cfd75 9c2cf92a2f4a40be5ba890302447decbf0810771b467b2ab167841278d60eacf
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdGBMZtZa4posQBLcwE9j-8PVLbFwcPROMW_EJp5zolHO4eQWEjAXBW9Jr8vwQnqaTm_fQ9&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-180928673%3A1727345114042764&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Sep 2024 10:05:14 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-JKekUv7V1YXyYrGd1DnPpg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.QGf5tTYhJFQ.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230"
Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10483
Expires: Thu, 26 Sep 2024 12:59:57 GMT
Date: Thu, 26 Sep 2024 10:05:14 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230"
Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10483
Expires: Thu, 26 Sep 2024 12:59:57 GMT
Date: Thu, 26 Sep 2024 10:05:14 GMT
Connection: keep-alive
|
|
| ukankingwithea.com/ | 172.67.192.190 | 200 OK | 532 B |
IP172.67.192.190:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
File typeASCII text, with no line terminators Hashc106b4a7a17a6f1979c15e12e7880f35 89fbb64ac5919ceeb810d058b0de95ded5a0d123 b4f38325dabef5a82c726f61cab04ed3a4cf51c0c9e1f644e4e28e7443c61d19
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Sep 2024 10:05:14 GMT
content-type: text/plain
set-cookie: csu=1295023096189306@1@1727345113; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kZlm2Wg8cj2hWeocv%2FUEz8Fs9T%2Fd%2FxGOz8vqZu95vY53S0fzqNlbN%2F1KYKDLIZ3E0vgxcjHenmxinusnyKv8xuEIt%2ByfiuIim3or3MBmRrxk8Zp%2FiBM5iO6Quv3t7Nk2EEGdUjU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c926f31ece9b8cc-AMS
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc16a3fe398c09ad4d309c60911d6a6b6 dc1148076d45d128cb6d0780ac0467aeba0902e9 5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230"
Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10483
Expires: Thu, 26 Sep 2024 12:59:57 GMT
Date: Thu, 26 Sep 2024 10:05:14 GMT
Connection: keep-alive
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdz477Ovhyg4tpDDWX_0CvH2VlVydtI6WhjIk5XVtr4E9kNtgCvx1ijeK4RGsdEyTENR0fY&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S487809526%3A1727345114048351&ddm=0 | 64.233.162.84 | 403 Forbidden | 8.6 kB |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdz477Ovhyg4tpDDWX_0CvH2VlVydtI6WhjIk5XVtr4E9kNtgCvx1ijeK4RGsdEyTENR0fY&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S487809526%3A1727345114048351&ddm=0 IP64.233.162.84:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint99:1A:E6:C6:9B:04:87:74:E3:DA:97:C8:29:09:15:16:CF:1F:6A:78 ValidityMon, 26 Aug 2024 06:33:47 GMT - Mon, 18 Nov 2024 06:33:46 GMT
File typegzip compressed data, max compression Hash3a191f06fd0e261697bad9fb478e6680 f6dfc1b9bd809f8a538b19383218a098df6f433e 06e374c6eabdb679383451e0826bed725e083b49f6138cde5ce9b525be8d613a
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ARpgrqdz477Ovhyg4tpDDWX_0CvH2VlVydtI6WhjIk5XVtr4E9kNtgCvx1ijeK4RGsdEyTENR0fY&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S487809526%3A1727345114048351&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 26 Sep 2024 10:05:14 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-1RzigUhkmlGMcYbYylF35A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.QGf5tTYhJFQ.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ftheusysianeduk.com/bDJVQjdDDTYxCjlfB3RlKng5FHJVADQveQ9mHSZZNnQtD1MBa3M2XggPbHsAXwRsZEcFVmhzER9GNDZCHw9mcgddFDwsUQMPZXIHXRQjfwZCAWFsBFocYWRCUQNnewJcAGZyDloDbXsEXARzNkcNVWhzERxGIS4KXQVndQRYB2RzA1gBbQ | 172.67.155.72 | 204 No Content | 0 B |
URL POST HTTP/2ftheusysianeduk.com/bDJVQjdDDTYxCjlfB3RlKng5FHJVADQveQ9mHSZZNnQtD1MBa3M2XggPbHsAXwRsZEcFVmhzER9GNDZCHw9mcgddFDwsUQMPZXIHXRQjfwZCAWFsBFocYWRCUQNnewJcAGZyDloDbXsEXARzNkcNVWhzERxGIS4KXQVndQRYB2RzA1gBbQ IP172.67.155.72:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectftheusysianeduk.com Fingerprint56:63:2B:26:BC:DC:05:6A:8F:2C:F1:87:B3:C0:B6:12:9E:4F:62:28 ValidityFri, 06 Sep 2024 05:54:49 GMT - Thu, 05 Dec 2024 05:54:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bDJVQjdDDTYxCjlfB3RlKng5FHJVADQveQ9mHSZZNnQtD1MBa3M2XggPbHsAXwRsZEcFVmhzER9GNDZCHw9mcgddFDwsUQMPZXIHXRQjfwZCAWFsBFocYWRCUQNnewJcAGZyDloDbXsEXARzNkcNVWhzERxGIS4KXQVndQRYB2RzA1gBbQ HTTP/1.1
Host: ftheusysianeduk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
date: Thu, 26 Sep 2024 10:05:14 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j1f%2FSPa73y%2FuVVMGg2sW%2FcQ9SvY22iEG3QDrZ%2BC7W7NXKYrLbEua7L3wnBavuayyWqA7OOVHysfqGU0ly7ieUW3J2wnczH5H5ioWHGfkBsIHjTrB0GrdFwKzfcpgsmPXFEeViQW6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c926f355f1c56b1-OSL
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 172.67.192.190 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP172.67.192.190:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Sep 2024 10:05:13 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 3017
last-modified: Thu, 26 Sep 2024 09:14:56 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Qw2DEZUAqrqpgDM48VCF26UQmw5jRuXnYWRIfHUniLLeC6rSJGVE5fNWeviYD3jpb4V278kLjaFBbp5zp9WxKEVgCSeMryNgtbfqAYFBa0G7tdNCBb2MQVo%2Fgs3U%2Fq3UzYwGn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c926f31fcfbb8cc-AMS
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 172.67.192.190 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP172.67.192.190:443
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Sep 2024 10:05:13 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 3017
last-modified: Thu, 26 Sep 2024 09:14:56 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dGGkI6wu0eTV%2FGJpZGFzX4rWZzf9%2Ba5zezLmDavU5aVmCNkHjJL6Rrb7lL3M6RLVOq1D2sfJJ8T6HeF9npAlGuPBdZWR4cpLekCl5c2xjEFrxtyf%2Bf5YfTskVk5wt%2BUaDnOWQxU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8c926f31ecf0b8cc-AMS
X-Firefox-Spdy: h2
|
|
| undefined/RVQ0b3IkNlcCTSRpVkkHNzgJSkADcQYpFjBkRBoWdSdQAx8/MhoMHiohUAkAKjpAQRwgIBFdND0ZBikHFABQPjYiFVosNyYddwEFChdYNRMmBQw5NxcjXzojcQNzOysfBlwqMQk4bjcmMidfKiQuB3U8Sw0QUyURAgNXLTQyPwM9NCoSdgUVFwZMHDkjFVc5NhRsQjozcBx3FksQEFgtOwwSej0qAyRaPh4PN3UWRwsDU18xDBZ9LTh0IEItCh8AbAIeFRVYLT4mOmE4J3RgQDcedQFyAiMDFUwDJSFmUykkECBNCyAfAGwFPAcSWCYEIBVxCycQeVAEMBQZcywLDzdsKiAmFkM6NhASARcwIhplPEEIHGI+FSYecikRAgFAFREUJGw+OgAGZgMKI3JeHB0rJAkMQB0EBhkVPyddCxo8 |  0.0.0.0 | | 0 B |
URL GET undefined/RVQ0b3IkNlcCTSRpVkkHNzgJSkADcQYpFjBkRBoWdSdQAx8/MhoMHiohUAkAKjpAQRwgIBFdND0ZBikHFABQPjYiFVosNyYddwEFChdYNRMmBQw5NxcjXzojcQNzOysfBlwqMQk4bjcmMidfKiQuB3U8Sw0QUyURAgNXLTQyPwM9NCoSdgUVFwZMHDkjFVc5NhRsQjozcBx3FksQEFgtOwwSej0qAyRaPh4PN3UWRwsDU18xDBZ9LTh0IEItCh8AbAIeFRVYLT4mOmE4J3RgQDcedQFyAiMDFUwDJSFmUykkECBNCyAfAGwFPAcSWCYEIBVxCycQeVAEMBQZcywLDzdsKiAmFkM6NhASARcwIhplPEEIHGI+FSYecikRAgFAFREUJGw+OgAGZgMKI3JeHB0rJAkMQB0EBhkVPyddCxo8 IP0.0.0.0:0
Requested byhttps://www.upload.ee/files/17076375/Adobe-GenP-3.4.1-CGP.7z.html?msg=sess_error
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /RVQ0b3IkNlcCTSRpVkkHNzgJSkADcQYpFjBkRBoWdSdQAx8/MhoMHiohUAkAKjpAQRwgIBFdND0ZBikHFABQPjYiFVosNyYddwEFChdYNRMmBQw5NxcjXzojcQNzOysfBlwqMQk4bjcmMidfKiQuB3U8Sw0QUyURAgNXLTQyPwM9NCoSdgUVFwZMHDkjFVc5NhRsQjozcBx3FksQEFgtOwwSej0qAyRaPh4PN3UWRwsDU18xDBZ9LTh0IEItCh8AbAIeFRVYLT4mOmE4J3RgQDcedQFyAiMDFUwDJSFmUykkECBNCyAfAGwFPAcSWCYEIBVxCycQeVAEMBQZcywLDzdsKiAmFkM6NhASARcwIhplPEEIHGI+FSYecikRAgFAFREUJGw+OgAGZgMKI3JeHB0rJAkMQB0EBhkVPyddCxo8 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
0.0.0.0