GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
200 OK 87 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators
Hash 5b5a269bd363e0886c17d855c2aab241
042dd055cd289215835a58507c9531f808e1648a
1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-152b9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
200 OK 490 kB URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 490 kB (489871 bytes)
Hash f509a47edcc2da191e1779ff51180508
f32c5dc4b2a323891dbd49cad42a14f7d9022312
41c81858bb3dfb0a89f9fcac8f42e5a7277b6f6e8419ddd2a080da79dec0465b
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 152082
date: Wed, 02 Jul 2025 23:21:50 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 094188bf05865a3d323dcbfb7173f1f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: NGu2i5cbJn0qVuBF-3KjAQ0P4crM11aY3hCaXiJFZkjbNctBiw6J_A==
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
200 OK 490 kB URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 490 kB (489871 bytes)
Hash ad5e3e51b60fa2527a5c183bc6c3e97b
6859c7d4f9977fd1e871fb7182bac5efcd20afad
fd062224f4900e0bab8973c71bd872f4f92c15b920b5df7a6f652f70bbdedb76
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 152084
date: Wed, 02 Jul 2025 23:21:51 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 094188bf05865a3d323dcbfb7173f1f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: Oaaj9rNz4BnlEGtejntM6qlnlFEdlYzWmBtZ_dSuwXc5v7xg07acEw==
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 26 B IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintBC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
ValidityFri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
File type ASCII text, with no line terminators
Hash f3beb683209877cecf50784ee7f3d768
b284c22af0f4871aa222efabd440629431d6a93e
eee3894a161581515fd7c341f6ec24ed83182c5c3a8cc7139afb08754174e788
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9EgOtrZr86f3lbU8%2BLyVVfwIy9RrgODUe1BSBD8TWWcxVwNwsbjWjNKhw9tgfMZJzIdT0776NqU3OUpWf3krLGQfrlIg595znzV48hFvYwI%3D"}]}
content-encoding: br
set-cookie: csu=317031060397218@1@1751498511; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9591e1bfc816b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST riraconianstar.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
204 No Content 0 B URL POST riraconianstar.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
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectriraconianstar.com
FingerprintDB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
ValidityWed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Wed, 02 Jul 2025 23:21:54 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wDM8lHq46be6sO6IWO%2F%2FwJSZroS4OyS4d9pT1LVHs5v4MhHaeV0L7P9qzFEgGpsdU%2BdBl6bwzBllLOdEy3cboHAT0k7zqz5EQKpLKfVL6KBOy9XjYBwkmmRnxsvvOcx7uJ9rFWU%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 9591e1d4399b569b-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3718&min_rtt=596&rtt_var=2562&sent=86&recv=117&lost=0&retrans=0&sent_bytes=10339&recv_bytes=8689&delivery_rate=482473&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=19477&unsent_bytes=0&cid=440bbdb9f6edf850&ts=3752&inflight_dur=77&x=40"
GET riraconianstar.com/ZVpSc0RKZTEAeQYNBDQmV28QJRwrAAQYDj0+PkoeNxwIBBNUNXQHLQFna0d9XWxmVTQMPm9CfEMpJhIwEClvQmIMNDQceUMsb0JqVXRgXXFDL29CYhEqMxR5VHwiBzAJZ2NEcVRua0txVGpqQ3Q
204 No Content 0 B URL GET riraconianstar.com/ZVpSc0RKZTEAeQYNBDQmV28QJRwrAAQYDj0+PkoeNxwIBBNUNXQHLQFna0d9XWxmVTQMPm9CfEMpJhIwEClvQmIMNDQceUMsb0JqVXRgXXFDL29CYhEqMxR5VHwiBzAJZ2NEcVRua0txVGpqQ3Q
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectriraconianstar.com
FingerprintDB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
ValidityWed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ZVpSc0RKZTEAeQYNBDQmV28QJRwrAAQYDj0+PkoeNxwIBBNUNXQHLQFna0d9XWxmVTQMPm9CfEMpJhIwEClvQmIMNDQceUMsb0JqVXRgXXFDL29CYhEqMxR5VHwiBzAJZ2NEcVRua0txVGpqQ3Q HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 23:21:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZH7EByGMK%2FhNU0vyestiLGwNd7YHcoS04W7Y0r6SmtguxUeIMYPKsGB08qm4yAGAC2kazr%2Ff4RD8gQAMiDIhuC0B9o4UA4b5MDvxF0CBwd0%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9591e1bd0c6c568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
200 OK 3.2 kB URL GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 4541b29b6040bc31b760f98e914fd1d7
0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba
6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-c58"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
POST riraconianstar.com/eVg0NDRWZ1dHCS81TGJuFAJYYmMrDWFjci8Ccn5SIA5YXGEvDRJAXR1lDAYBQGkFEkQQPAkHBl8rQFVADCsJBgRJbxJdWh83CQYSD2UEGg1XahoCEgxlBQAMS2wNDQZBYQcCAkhsBxJACTlTCQVfKEBAWERpAwEFTWEMAQVLaAYF
204 No Content 0 B URL POST riraconianstar.com/eVg0NDRWZ1dHCS81TGJuFAJYYmMrDWFjci8Ccn5SIA5YXGEvDRJAXR1lDAYBQGkFEkQQPAkHBl8rQFVADCsJBgRJbxJdWh83CQYSD2UEGg1XahoCEgxlBQAMS2wNDQZBYQcCAkhsBxJACTlTCQVfKEBAWERpAwEFTWEMAQVLaAYF
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectriraconianstar.com
FingerprintDB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
ValidityWed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /eVg0NDRWZ1dHCS81TGJuFAJYYmMrDWFjci8Ccn5SIA5YXGEvDRJAXR1lDAYBQGkFEkQQPAkHBl8rQFVADCsJBgRJbxJdWh83CQYSD2UEGg1XahoCEgxlBQAMS2wNDQZBYQcCAkhsBxJACTlTCQVfKEBAWERpAwEFTWEMAQVLaAYF HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Wed, 02 Jul 2025 23:21:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rpYQijmRcumMco4PXkYLmi5t%2Bu6W%2FXcZUZSjjeu%2BLxPSCOeVX2VAFBJ0BgvFtBDoeRpdtefwuWfRToRFwSWSdzgDEP1YU6ggdg3FCkblxZUTUSFqbOZYvUDSznv6im0Re5zw%2Fvw%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 9591e1c438fc569b-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3977&min_rtt=596&rtt_var=2724&sent=83&recv=114&lost=0&retrans=0&sent_bytes=9678&recv_bytes=7038&delivery_rate=482473&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18868&unsent_bytes=0&cid=440bbdb9f6edf850&ts=1186&inflight_dur=55&x=40"
GET nriceukwater.org/floater?cs=WERqM1hrfVsBb299Wwdhb3FeBGs&abt=0&red=1&sm=83&k=farming%20simulator&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1482499289366143&agec=1751498511&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd7a4972495e192195fd9201841c18881%2FFarming.Simulator.25.v1.9.0.1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_gCFq=1751498512022&crc=1
200 OK 11 kB URL GET nriceukwater.org/floater?cs=WERqM1hrfVsBb299Wwdhb3FeBGs&abt=0&red=1&sm=83&k=farming%20simulator&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1482499289366143&agec=1751498511&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd7a4972495e192195fd9201841c18881%2FFarming.Simulator.25.v1.9.0.1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_gCFq=1751498512022&crc=1
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerAmazon
Subjectnriceukwater.org
FingerprintD4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3
ValidityWed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
File type ASCII text, with very long lines (11179), with no line terminators
Hash 4d96a6eab69a3a0e050987913bbd9dc5
968271adf17b081d9fdda9ecc2b62e434d3a26dd
f5e4d70dc10186083efd82598faa7bcb3399379ae0788e68d765468efc14d5ad
GET /floater?cs=WERqM1hrfVsBb299Wwdhb3FeBGs&abt=0&red=1&sm=83&k=farming%20simulator&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1482499289366143&agec=1751498511&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fd7a4972495e192195fd9201841c18881%2FFarming.Simulator.25.v1.9.0.1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_gCFq=1751498512022&crc=1 HTTP/1.1
Host: nriceukwater.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 7368
date: Wed, 02 Jul 2025 23:21:52 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=SQ5adWSzE3RjShrLTenikxTqKszwFHK6JJLjqxSt5pl4f0H9G9plGz9nY3wr0osRyCqmOJXYFzcCGMrM8wJzJb4fsbNonLYFYchi4HkCdd4AxAU5Ci3+m5m5biCM; Expires=Wed, 09 Jul 2025 23:21:52 GMT; Path=/
AWSALBCORS=SQ5adWSzE3RjShrLTenikxTqKszwFHK6JJLjqxSt5pl4f0H9G9plGz9nY3wr0osRyCqmOJXYFzcCGMrM8wJzJb4fsbNonLYFYchi4HkCdd4AxAU5Ci3+m5m5biCM; Expires=Wed, 09 Jul 2025 23:21:52 GMT; Path=/; SameSite=None
csu=cb16a7fa-866b-40f1-8d09-a41aec382574
csu=1482499289366143
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 953ec33235d719831a6e6956b5e5bb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: WdGtxW-mhKD2BBAWnD2pdNAQ84ucVGGeMe1lvpC_5X-kjW0v3iUGEw==
X-Firefox-Spdy: h2
POST riraconianstar.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
204 No Content 0 B URL POST riraconianstar.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
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectriraconianstar.com
FingerprintDB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
ValidityWed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Wed, 02 Jul 2025 23:21:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHVHWjgMUZ6njPYIz6Sc8LEgCvLbpJ%2BZLLDQnMgmUiAt1O9QfszsHPoTKinCKQfz1vv8ttG3K3PZKhH3r5kbGZacg8x%2FKE9Kymc%2FmmwPtdrHmmmghggLNb8FsBnS1b4wf5%2BKeyU%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 9591e1ed2a4c569b-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3498&min_rtt=596&rtt_var=2361&sent=88&recv=119&lost=0&retrans=0&sent_bytes=10973&recv_bytes=9763&delivery_rate=482473&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=20085&unsent_bytes=0&cid=440bbdb9f6edf850&ts=7743&inflight_dur=99&x=40"
GET fonts.googleapis.com/icon?family=Material+Icons
200 OK 565 B URL GET fonts.googleapis.com/icon?family=Material+Icons
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
Hash 736c83e15fc300de505f6ce9762a9396
31c0f11ada78e92970ff42d990116d77c169c6d7
c31266310101d0b1607937a7baf07f1601b7637bd2373176696488a07d7b4302
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 02 Jul 2025 23:21:50 GMT
date: Wed, 02 Jul 2025 23:21:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK 286 kB URL GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (5913)
Size 286 kB (285736 bytes)
Hash 4d1794ed866d23bae6c5ff20644d07ea
d0d7794fb328aefb79c515d99e2ba8c5adcf8eb8
6da66101cb0cf7599d33b9322471645c73237d197fb6b9046f9f22f4f8df5835
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 02 Jul 2025 23:21:50 GMT
expires: Wed, 02 Jul 2025 23:21:50 GMT
cache-control: private, max-age=900
last-modified: Wed, 02 Jul 2025 22:08:25 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 100616
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET undefined/YkNwOWkDIRNUVgN+Eh8cEC9NHFskZkJ/DVEsFwEdU3tDUFgUIRcXCg4sBV0PECweTUcMJgQcWyQaE1QzMg4dATshEDZsPCMaIHIeWxQiVVBRATZNPCQpQWEqN3s8cgU3DDJBMwobMVYuMwAmeyggNCdaByMlOlAKJRYyTlojAhhVIAsONnY+EgkyUR4QB0EAPCEqRVoqJ3oxcgUVDiQIDRIWB0o4NXADbC4KDRJwBVIVN04GCBZASSgrCx9aMVMnJV8RDRo3Tg4QGyJeKzNwQHooMxk0XzgoJiFSAUdxNn9YFTQhClkhBDJKIAcSKnI4MREBeC9aCCVxRBEbKH0rJiUhcA0gBj4BClN2MmwEJwAiVQ03JUFsIicSQF4vU3NAbyFaBygJIzolB3ciMwUpST4acyh4KiAII1IoBSUXfws6BSpJO1MJNB8DESweSVQgMyR4IAAwNV8uNQ4hWh86
0 B URL GET undefined/YkNwOWkDIRNUVgN+Eh8cEC9NHFskZkJ/DVEsFwEdU3tDUFgUIRcXCg4sBV0PECweTUcMJgQcWyQaE1QzMg4dATshEDZsPCMaIHIeWxQiVVBRATZNPCQpQWEqN3s8cgU3DDJBMwobMVYuMwAmeyggNCdaByMlOlAKJRYyTlojAhhVIAsONnY+EgkyUR4QB0EAPCEqRVoqJ3oxcgUVDiQIDRIWB0o4NXADbC4KDRJwBVIVN04GCBZASSgrCx9aMVMnJV8RDRo3Tg4QGyJeKzNwQHooMxk0XzgoJiFSAUdxNn9YFTQhClkhBDJKIAcSKnI4MREBeC9aCCVxRBEbKH0rJiUhcA0gBj4BClN2MmwEJwAiVQ03JUFsIicSQF4vU3NAbyFaBygJIzolB3ciMwUpST4acyh4KiAII1IoBSUXfws6BSpJO1MJNB8DESweSVQgMyR4IAAwNV8uNQ4hWh86
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /YkNwOWkDIRNUVgN+Eh8cEC9NHFskZkJ/DVEsFwEdU3tDUFgUIRcXCg4sBV0PECweTUcMJgQcWyQaE1QzMg4dATshEDZsPCMaIHIeWxQiVVBRATZNPCQpQWEqN3s8cgU3DDJBMwobMVYuMwAmeyggNCdaByMlOlAKJRYyTlojAhhVIAsONnY+EgkyUR4QB0EAPCEqRVoqJ3oxcgUVDiQIDRIWB0o4NXADbC4KDRJwBVIVN04GCBZASSgrCx9aMVMnJV8RDRo3Tg4QGyJeKzNwQHooMxk0XzgoJiFSAUdxNn9YFTQhClkhBDJKIAcSKnI4MREBeC9aCCVxRBEbKH0rJiUhcA0gBj4BClN2MmwEJwAiVQ03JUFsIicSQF4vU3NAbyFaBygJIzolB3ciMwUpST4acyh4KiAII1IoBSUXfws6BSpJO1MJNB8DESweSVQgMyR4IAAwNV8uNQ4hWh86 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET rnmop.com/ie?v=4&c=Zt_lbdk4eNPOOzaH-ljwd3qRtP8MpXZi93ZM7xvhkzsc5TrmPfCOxNmZKFZa5tMx-9_cpcTSj6yGWW33nwQ6v2dzujyOxMbzRBEjdbiMEfKd1HeBLp81M7yVMjmydxSAAUBXBTbMSmsHotRF9FEmhheZjspJf7zvc3cJaamPgYJ1JCMuDrrgu3kPqYDNKtHr1b4dPbOy4FLpqdEHeuJNu_4rShxr8TGF0mOG-6E2kexiYNrIE-ZrMzLTYIYzeFAeyA6K-EXzII_zhrzkWQ9ki9TJ8zoEOCzF6u7K-2fwbecjQP-hPuvhNBzTpR-nV5Jfu6BQukM1h1SHFq_CA2aC_INJRRLrH9K2NkMo__8fc07uw6q-Dq81ujShaEWSwvUxSzBH26vx28LI6Lc8kGiAmm_JkuQ0A_ijz01gvUB8tJurtUPhJ_bP2jLuWOKUyYU6BhMXduV0IRu55CQojeZiyVfN7WGYlexH&v1=79&v2=71516
301 Moved Permanently 59 kB URL GET rnmop.com/ie?v=4&c=Zt_lbdk4eNPOOzaH-ljwd3qRtP8MpXZi93ZM7xvhkzsc5TrmPfCOxNmZKFZa5tMx-9_cpcTSj6yGWW33nwQ6v2dzujyOxMbzRBEjdbiMEfKd1HeBLp81M7yVMjmydxSAAUBXBTbMSmsHotRF9FEmhheZjspJf7zvc3cJaamPgYJ1JCMuDrrgu3kPqYDNKtHr1b4dPbOy4FLpqdEHeuJNu_4rShxr8TGF0mOG-6E2kexiYNrIE-ZrMzLTYIYzeFAeyA6K-EXzII_zhrzkWQ9ki9TJ8zoEOCzF6u7K-2fwbecjQP-hPuvhNBzTpR-nV5Jfu6BQukM1h1SHFq_CA2aC_INJRRLrH9K2NkMo__8fc07uw6q-Dq81ujShaEWSwvUxSzBH26vx28LI6Lc8kGiAmm_JkuQ0A_ijz01gvUB8tJurtUPhJ_bP2jLuWOKUyYU6BhMXduV0IRu55CQojeZiyVfN7WGYlexH&v1=79&v2=71516
IP
ASN #24940 Hetzner Online GmbH
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerLet's Encrypt
Subjectnimrute.com
FingerprintE2:D9:3C:CF:D5:57:A7:A2:2A:60:4E:99:80:79:B1:7A:F2:04:4F:7D
ValidityMon, 05 May 2025 05:34:31 GMT - Sun, 03 Aug 2025 05:34:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=Zt_lbdk4eNPOOzaH-ljwd3qRtP8MpXZi93ZM7xvhkzsc5TrmPfCOxNmZKFZa5tMx-9_cpcTSj6yGWW33nwQ6v2dzujyOxMbzRBEjdbiMEfKd1HeBLp81M7yVMjmydxSAAUBXBTbMSmsHotRF9FEmhheZjspJf7zvc3cJaamPgYJ1JCMuDrrgu3kPqYDNKtHr1b4dPbOy4FLpqdEHeuJNu_4rShxr8TGF0mOG-6E2kexiYNrIE-ZrMzLTYIYzeFAeyA6K-EXzII_zhrzkWQ9ki9TJ8zoEOCzF6u7K-2fwbecjQP-hPuvhNBzTpR-nV5Jfu6BQukM1h1SHFq_CA2aC_INJRRLrH9K2NkMo__8fc07uw6q-Dq81ujShaEWSwvUxSzBH26vx28LI6Lc8kGiAmm_JkuQ0A_ijz01gvUB8tJurtUPhJ_bP2jLuWOKUyYU6BhMXduV0IRu55CQojeZiyVfN7WGYlexH&v1=79&v2=71516 HTTP/1.1
Host: rnmop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Wed, 02 Jul 2025 23:21:58 GMT
content-length: 0
location: https://img.vmmcdn.com/get/1684855/238426_icon.png
x-app-id: 14
GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js
200 OK 21 kB URL GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators
Hash 8cfe207a6a21c7495cfb751c761217a6
35d686a6c4ecc9946c35444ce93e110cb0e1611c
804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-51ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js
200 OK 11 kB URL GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators
Hash 714368d20c70f8c91b0a596e128dac07
563954ec3a896fc129d014f01836245829f6d01d
e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-298b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:06:40 GMT
expires: Fri, 26 Jun 2026 10:06:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 566110
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/theme.css
200 OK 207 kB URL GET megaup.net/themes/spirit/assets/frontend/css/theme.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Size 207 kB (206626 bytes)
Hash 06cc8983a538a05dddf526b3b7e732aa
2414173a1660589ebbba8bdc6e3d1237df6063db
27e49bfa89404d352fa4627719f2a9a3ea5c2759c2bc74e7567ff98b5a996758
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 18:30:52 GMT
vary: Accept-Encoding
etag: W/"67ab975c-32722"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js
200 OK 3.9 kB URL GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3949), with no line terminators
Hash 2f6185a8a32a50b2b3e04849f44359d4
0e5501588c5c0d1c9462f34b0d56c21abff5bfef
914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f6d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET theharityhild.buzz/blJTaTUVcCAeahsgP0sPTDonHUUdaHxGWAs1MhxFQDw2HRodJX0DRkx%2BcRpYCHBpWBlMIT4fF1RwZ0cGTH5xHVQJDToNF1Rwa1oHWGFgSxlMISYLagc2YUsPTDRrWgYNYmcLGFg3YwsYWjYxWRhXZmteGAhkNgxQDTcwClYNN3EU
0 B URL GET theharityhild.buzz/blJTaTUVcCAeahsgP0sPTDonHUUdaHxGWAs1MhxFQDw2HRodJX0DRkx%2BcRpYCHBpWBlMIT4fF1RwZ0cGTH5xHVQJDToNF1Rwa1oHWGFgSxlMISYLagc2YUsPTDRrWgYNYmcLGFg3YwsYWjYxWRhXZmteGAhkNgxQDTcwClYNN3EU
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /blJTaTUVcCAeahsgP0sPTDonHUUdaHxGWAs1MhxFQDw2HRodJX0DRkx%2BcRpYCHBpWBlMIT4fF1RwZ0cGTH5xHVQJDToNF1Rwa1oHWGFgSxlMISYLagc2YUsPTDRrWgYNYmcLGFg3YwsYWjYxWRhXZmteGAhkNgxQDTcwClYNN3EU HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET riraconianstar.com/SXBvZXZmTwwWSwcoJQQje0goNhsxATg0IAwSAj8hCzULDywlKUkRHy1NV1JAekFXQwYgFFJXT28DGwQCPANSVFAgHgkKS28GUlRYeV5ZVVh9VhpYR28EHwQRdEFJFQI9HFJUQXxBW1xOfEFfUk5w
204 No Content 0 B URL GET riraconianstar.com/SXBvZXZmTwwWSwcoJQQje0goNhsxATg0IAwSAj8hCzULDywlKUkRHy1NV1JAekFXQwYgFFJXT28DGwQCPANSVFAgHgkKS28GUlRYeV5ZVVh9VhpYR28EHwQRdEFJFQI9HFJUQXxBW1xOfEFfUk5w
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectriraconianstar.com
FingerprintDB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
ValidityWed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SXBvZXZmTwwWSwcoJQQje0goNhsxATg0IAwSAj8hCzULDywlKUkRHy1NV1JAekFXQwYgFFJXT28DGwQCPANSVFAgHgkKS28GUlRYeV5ZVVh9VhpYR28EHwQRdEFJFQI9HFJUQXxBW1xOfEFfUk5w HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 23:21:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PBSeMgm2SXG15aqYZjdyOSutW6nBopuODetZq46nqRskq5WWumM%2BOmnBIPLDWgh20%2F09EXdWggN7%2FdmoD1qkX7yXDunVAAfLuhSGwBJf1pM%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9591e1bcec56568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/
200 OK 27 B IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintBC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
ValidityFri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
File type ASCII text, with no line terminators
Hash 04d4947a71fc1ee4c75af400a733aca9
4853f93d41dd3a8678e1dd157eb8d6df09e414b6
4af78d36b1e4bb76257a9ae34a80e9a7a7765f88b8497f4fcfd933c0139823ce
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GeAWvfgXky0kWGyaMAmV%2FafWwVtdzI8L5o4E3jWm5bhvJKFnR8rFP3q45nQy4tv7QWcvw2PHTl5zXyl8MsBhLTqIaSOfbQyZWmbzc%2BvLHIw%3D"}]}
content-encoding: br
set-cookie: csu=1482499289366143@1@1751498511; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9591e1bfd825b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/custom.css
200 OK 8.9 kB URL GET megaup.net/themes/spirit/assets/frontend/css/custom.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Hash 68443327ebd1d8f35857bbb29d3ce6df
d34e37d8cebc246854f05dde78abc32b5ad5d9fe
98cf7514d65d87963ee938b6f83493b4429f8005a5f6814ba226a7b89c80aa45
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 19:56:14 GMT
vary: Accept-Encoding
etag: W/"67abab5e-22e8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:06:40 GMT
expires: Fri, 26 Jun 2026 10:06:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 566110
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
200 OK 19 kB URL GET fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 19276, version 1.0
Hash 266d9ceb5c3c51971e2a9e13b7ec5883
091a3b35321cb3e7b11034a091964e795c4b74ac
f93e2585efd0318f328e3431482382c66dfe89ac387060e88116cdd18a18b933
GET /s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:11:47 GMT
expires: Fri, 26 Jun 2026 10:11:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 17:52:30 GMT
content-type: font/woff2
age: 565803
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e5710za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891
200 OK 343 kB URL GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e5710za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (6004)
Size 343 kB (342748 bytes)
Hash 6205d570f3c6325c5ea10047e8bdf7cc
21f10813b8db47c3a89bd8d792906fc1e197437c
38ebb9515abf5012a075b2c6dd7f544d14636b14ed84b7b3b3b026cf2c5f04b3
GET /gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e5710za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 02 Jul 2025 23:21:51 GMT
expires: Wed, 02 Jul 2025 23:21:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 119769
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET ukankingwithea.com/
200 OK 27 B IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintBC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
ValidityFri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
File type ASCII text, with no line terminators
Hash 20e603d84b9446066aa59cb48b670969
d99317e756b167902a20c0818e4ca55d0d83e0e1
d6a97572df448098e1be76f31e8bd81f0c4f70d1fde163bfe13bf0da8bab492d
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2yxwOE6ebcbeVXmt9l6%2FxtVDEMsoRm%2FRqbJZSoOXkQSEgRzdKT4%2B8BXZq8uGcedTeHLyXwZREbayyzSXGJJhHg5faPwJYIp27RDbKwSyu54%3D"}]}
content-encoding: br
set-cookie: csu=1727438419373602@1@1751498511; SameSite=None; Secure; Max-Age=31104000
cf-ray: 9591e1bfd81fb503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOSRKk69LmnZvv08r6_1-dyEPjEZ959duB3Bcn_fePn39E1ZTvfaAutZBs_vtlEndN4CuSPqA
302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOSRKk69LmnZvv08r6_1-dyEPjEZ959duB3Bcn_fePn39E1ZTvfaAutZBs_vtlEndN4CuSPqA
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
ValidityTue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOSRKk69LmnZvv08r6_1-dyEPjEZ959duB3Bcn_fePn39E1ZTvfaAutZBs_vtlEndN4CuSPqA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:faIFYcHx8GjIOIatcS8f9POBtokDnA:dK3xL9QJOePcDsbt;Path=/;Expires=Fri, 02-Jul-2027 23:21:51 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 23:21:51 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNZdbsnEK8Z_qtABGy-Wnt0qNpvfsC0c_XiQFhaR9BiqCHqpqWsBBYbAtGuEIFHi1d54AcGbw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-298030238%3A1751498511457849
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-bQ52B1HZcMmueicHr_0kDg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 417
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
200 OK 7.1 kB URL GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: image/png
content-length: 7137
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
200 OK 4.3 kB URL GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 4292, version 1.0
Hash ae072782b361d2afdbf43db08d3cfb73
f3db2e65b53d97491672f8631e21d6d05905cc88
31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:50 GMT
content-type: font/woff2
content-length: 4292
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-10c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 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
0 B URL GET undefined/M2poaWpSCAsEVVJXCk8fQQZVTFh1T1ovDgAFD1EeAlJbAFtFCA9HCV8FHQ0MQQUGHURdDxxMWHU5DDEGegguOD11AzEiC0QvOSUsdRk6WRJLMj8/PnA+ByMnWA09JTtAWykoBl4rAiwoaxMhDyVLGSINPlQBIA5TByERKAh/MlAAJ2YJWwsCVB8tPDgHOQIOP3UTUTsJWyswIlt1Bj0RDUAuBQUoaxAfCiVLXy05O3odLStSWysCLDhrEFgnC2ENPyQNZl4vOwJHMgAjK2VZACMwWDw6OR1mXC07MxZYLiFZdSI7OjNqCT0NIFY8EF84ZRJfJQR1Ijs9RwssJwIkfQg+UT1mLxxdLHQgKjEiQB8LPA55JQAZEmEAAFwyASgKOj11IDICP1YmOVFPASwvBRIFIQUzLGAiAAowZjwhCzwGAS0RKwUpPCALcj1ZDC9YOCMPL3kBPR4SAjI5TwBABQYZV2caAx9adB4GPV19D1on
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /M2poaWpSCAsEVVJXCk8fQQZVTFh1T1ovDgAFD1EeAlJbAFtFCA9HCV8FHQ0MQQUGHURdDxxMWHU5DDEGegguOD11AzEiC0QvOSUsdRk6WRJLMj8/PnA+ByMnWA09JTtAWykoBl4rAiwoaxMhDyVLGSINPlQBIA5TByERKAh/MlAAJ2YJWwsCVB8tPDgHOQIOP3UTUTsJWyswIlt1Bj0RDUAuBQUoaxAfCiVLXy05O3odLStSWysCLDhrEFgnC2ENPyQNZl4vOwJHMgAjK2VZACMwWDw6OR1mXC07MxZYLiFZdSI7OjNqCT0NIFY8EF84ZRJfJQR1Ijs9RwssJwIkfQg+UT1mLxxdLHQgKjEiQB8LPA55JQAZEmEAAFwyASgKOj11IDICP1YmOVFPASwvBRIFIQUzLGAiAAowZjwhCzwGAS0RKwUpPCALcj1ZDC9YOCMPL3kBPR4SAjI5TwBABQYZV2caAx9adB4GPV19D1on HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET s.viinjjlt.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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6634%2F634%2F68557bdb1745et1750432731r3138.jpg
0 B URL GET s.viinjjlt.com/n/2852/ovihu7suizmxg4ddpfyee2ygpvqxeytvifcfwb2einezykfkqjgeymtyp5jbgwjmfqzx462enjkxi2lvmuqrkfsvkrbeihbwif5fujiiijgh4vcbln6hwysq6huukfv6sofjrp4orko42422vt237bdjozugqwyzyvqtkiri5ck5jw4otdc754cwfpqyx5hroqbprbeysbvt5l23yfeam76huccvkubgijjtmtiyuuwtotr5d5fxe4tykbyevhtz5riuvqlapx6uxbwcj7zhf6m5ptqelbsiwf2mrwf7og2vcz75x57lsujflnre3ccliga6w6m3kjjlawkt4cjetldagjzheofrbi7fdptoi7beuylxnvvijjcppxnvecp5lfd66qxxoszdg6fkphrk3yggiwgfd6muzppw5isjk65eg4agmue5crrgpz52fqkcs5g6qutr4bwekoidb74wh5wq2kdktn55rswdpd22bzpeg4lveljqqbshifheboofdeqsa5raxoiuemkrfbceyarwjvmeiv2dqffawmtsoi4lccr6ke3vewu4zikambtvyfls6javguys2xt3yzbg74ejmpfgzllpxbeomr56kjfzcy3vrvemzxmhyn2nsnlnnnydk6yvivlagqkddjtbk6yievkws43qkravqkdzmzyxmrlga574qr2u4nzarsrropbhwwoijgrkvu2rrnfkxg6sjo4flfom2t2tjt24idbq3yr36i3og4hakry6u2wwsldiqt6jonwputffqoglz34qvznpyu6cztw2ztmnrwd264mqnjlf2zdtpnku4vdyobxxw5cfmibh56cbk3vxi5gqg5ysokyuzbhxfjtjvse5zepj5cbnihy=?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6634%2F634%2F68557bdb1745et1750432731r3138.jpg
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectviinjjlt.com
FingerprintC6:75:0A:57:57:BF:D5:FA:91:4E:E1:AE:FB:AC:BF:41:AD:99:1C:EC
ValidityWed, 07 May 2025 18:56:43 GMT - Tue, 05 Aug 2025 19:55:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6634%2F634%2F68557bdb1745et1750432731r3138.jpg HTTP/1.1
Host: s.viinjjlt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET img.vmmcdn.com/get/1684855/238426_icon.png
200 OK 59 kB URL GET img.vmmcdn.com/get/1684855/238426_icon.png
IP
ASN #24940 Hetzner Online GmbH
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerLet's Encrypt
Subjectimg.vmmcdn.com
FingerprintA5:93:A3:DE:08:63:1F:B4:4D:A1:CD:73:92:D8:65:94:B0:AD:B7:56
ValidityMon, 16 Jun 2025 17:46:09 GMT - Sun, 14 Sep 2025 17:46:08 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash 669eb036e71ef2df4b1a7d3fa9e5ebb7
6a8686b1ce7276b8c6732245e340dbe38b30eb04
89edf6961767b760b3ff755a803457eee41b5f2df863cdeca95165bf4a126732
GET /get/1684855/238426_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 02 Jul 2025 23:21:58 GMT
Content-Type: image/png
Content-Length: 59035
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 10:47:54 GMT
Cache-Control: public, max-age=604800
ETag: "639eefda-e69b"
X-Proxy-Cache: HIT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Request-Headers: x-requested-with
Access-Control-Allow-Headers: x-requested-with
Accept-Ranges: bytes
GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
200 OK 59 kB URL GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (58929), with CRLF line terminators
Hash 879812fc22af75aa3ae7b5666ca4f4b8
df27469a952b7ee36cc03db471c6198f577186a8
c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-e6ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
ValidityTue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:O1A79_2bOOm-0ROJyo2fedQQdUf2aQ:KKbUCbqVSbgvFIQI; Expires=Fri, 02-Jul-2027 23:21:51 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 23:21:51 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiPVn1zV7YARkJu1AvN_pqQ0LOl-Wrpks-UtUzVKIxUitBJcXzWEeeW96jSCjnxwcqvaEA9uew
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-m_nP1tLicxx98ah4vPUAHw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
200 OK 3.9 kB URL GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 30265c8089a8f3e871d0873ef6a5b944
2804a2fe5a6a956626ce6a46adf6b1a0676ee13d
f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f31"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
200 OK 39 kB URL GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type ASCII text, with very long lines (1572)
Hash 0812d3cfd3d7800435f05536b513ecfd
e70839be86f9de0d31aa6b5f0903da7c1fc7c286
00e20cfbdec23113781e1620e51b3e336b15acd9a3c026a184390736b26dab70
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 02 Jul 2025 23:21:50 GMT
date: Wed, 02 Jul 2025 23:21:50 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
200 OK 6.0 kB URL GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators
Hash c9e3a210d83398f301b3a7049c259676
8e227bb40fe120841829a7fef0ffeb091d179a91
aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-178c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/scripts.js
200 OK 115 kB URL GET megaup.net/themes/spirit/assets/frontend/js/scripts.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (914), with CRLF line terminators
Size 115 kB (114862 bytes)
Hash ce260d2170faf98639ab8e0e3758f1e2
32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f
ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1c0ae"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/sw.js
200 OK 103 kB IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103036 bytes)
Hash 9ee51131e416458b88d6da4e6e6959ca
a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4
db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 22:15:30 GMT
vary: Accept-Encoding
etag: W/"63a23402-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
200 OK 27 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 26596, version 1.0
Hash dae1850484b86d299c31bc08aaa563cf
dca808d6d16965c40bfba4e4b3c8a819f843890d
8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Jul 2025 22:51:35 GMT
expires: Thu, 02 Jul 2026 22:51:35 GMT
cache-control: public, max-age=31536000
age: 1815
last-modified: Wed, 28 May 2025 17:52:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
200 OK 54 kB URL GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators
Hash 8c1e666176ac7bdce67d58b45823ffac
75947e4316427ce0c5e33300aeb4dc4d7d54dd09
c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-d271"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
200 OK 5.4 kB URL GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators
Hash 76a923d3d69255c45cd24bf9b100244f
eb3c96f9901692f1a03500ea632963a16afdb985
8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-14f0"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:06:40 GMT
expires: Fri, 26 Jun 2026 10:06:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 566110
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:06:40 GMT
expires: Fri, 26 Jun 2026 10:06:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 566110
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
200 OK 536 B URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 57 x 57, 8-bit colormap, non-interlaced
Hash 0019444f6b6df5b4b5ed32b6b469caab
4232370d10ab54ef9bda57aa9dcb813036047b35
0509f6df067face535f028cd86200748952227161f8f244aa7864e7848553562
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: image/png
content-length: 536
last-modified: Thu, 13 Feb 2025 17:40:08 GMT
vary: Accept-Encoding
etag: "67ae2e78-218"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
404 Not Found 159 B URL GET ukankingwithea.com/asd100.bin
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintBC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
ValidityFri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash fb9666f93e418b95fea8fdbc20e80af9
d4eefca1b299cc266a80e83c9e39c4261cb87583
c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JgrHZtZf3MYffJcRo8OAEyk6PjW4xmdZ0ewIcfsfhZvDAXZ5TqRbXEbVIuhSPdYqaPi6bucUchPU09vh6Zo0xoyNKyO4a3HK4v%2B7ToBzrIg%3D"}]}
content-encoding: br
cf-ray: 9591e1bfc813b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
404 Not Found 159 B URL GET ukankingwithea.com/asd100.bin
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintBC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
ValidityFri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash fb9666f93e418b95fea8fdbc20e80af9
d4eefca1b299cc266a80e83c9e39c4261cb87583
c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5vNYKMsHgQBKwzVUbpCeXEL9h3rYE167K%2B2aGUyRxYSui3%2Fq6rSyMc5ZBdoSNzUvRkONpXSB8CaaVxhsj34iJGqn3y5U8fbxlvGU7GDO6nU%3D"}]}
content-encoding: br
cf-ray: 9591e1bfd829b503-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
200 OK 77 kB URL GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with very long lines (65319), with CRLF line terminators
Hash 9b67b9ffbfcbe226a8c413fa740fd91c
7837bd0c312897e46311aaf472947f3e23d75df2
2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-12c7a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
200 OK 103 kB URL GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Size 103 kB (102727 bytes)
Hash c9b1c618a7b12bd7ecf6034164b29164
f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99
fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-19147"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo.png
200 OK 5.9 kB URL GET megaup.net/themes/spirit/assets/images/logo/logo.png
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
Hash fa360a47a62ae74a0a3d8c0f3e6f7f12
168c72a918b04b735f8e0f8a72223a16f0eda358
1d3a3c84dd36871d1009693761f441537117d5ee62c8e775d7d52c77d4c46de4
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: image/png
content-length: 5900
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-170c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET riraconianstar.com/UTNrTkF+DAg9fAhnPjQgK2U4CgAbaSoiGBxyB3YMB1QqBhkQak06KDUOU3x0aAJaaDE4V1Z9c3dAHy81JEBWfHFhBE0nLzdcVnxnJw5bYHh/AUV4ZyQOWmg1IVIMc3B3Qx86LWwCXHtwZQpTe3BhBFx3
204 No Content 0 B URL GET riraconianstar.com/UTNrTkF+DAg9fAhnPjQgK2U4CgAbaSoiGBxyB3YMB1QqBhkQak06KDUOU3x0aAJaaDE4V1Z9c3dAHy81JEBWfHFhBE0nLzdcVnxnJw5bYHh/AUV4ZyQOWmg1IVIMc3B3Qx86LWwCXHtwZQpTe3BhBFx3
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectriraconianstar.com
FingerprintDB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
ValidityWed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UTNrTkF+DAg9fAhnPjQgK2U4CgAbaSoiGBxyB3YMB1QqBhkQak06KDUOU3x0aAJaaDE4V1Z9c3dAHy81JEBWfHFhBE0nLzdcVnxnJw5bYHh/AUV4ZyQOWmg1IVIMc3B3Qx86LWwCXHtwZQpTe3BhBFx3 HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 23:21:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Dcueui5N1h11%2FxCi16yeQTRANyLdHUzH2oxxJuZbn4fyhvg7B%2BjGh5S3NX9aNh2fCNCqrxrRABaOjSHpcI8S%2BNpMul55t9P7xaw8PNGbg5Q%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9591e1bcdc3f568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET s.viinjjlt.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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6634%2F634%2F68557bdb1745et1750432731r3138.jpg
302 Found 191 kB URL GET s.viinjjlt.com/n/2852/ovihu7suizmxg4ddpfyee2ygpvqxeytvifcfwb2einezykfkqjgeymtyp5jbgwjmfqzx462enjkxi2lvmuqrkfsvkrbeihbwif5fujiiijgh4vcbln6hwysq6huukfv6sofjrp4orko42422vt237bdjozugqwyzyvqtkiri5ck5jw4otdc754cwfpqyx5hroqbprbeysbvt5l23yfeam76huccvkubgijjtmtiyuuwtotr5d5fxe4tykbyevhtz5riuvqlapx6uxbwcj7zhf6m5ptqelbsiwf2mrwf7og2vcz75x57lsujflnre3ccliga6w6m3kjjlawkt4cjetldagjzheofrbi7fdptoi7beuylxnvvijjcppxnvecp5lfd66qxxoszdg6fkphrk3yggiwgfd6muzppw5isjk65eg4agmue5crrgpz52fqkcs5g6qutr4bwekoidb74wh5wq2kdktn55rswdpd22bzpeg4lveljqqbshifheboofdeqsa5raxoiuemkrfbceyarwjvmeiv2dqffawmtsoi4lccr6ke3vewu4zikambtvyfls6javguys2xt3yzbg74ejmpfgzllpxbeomr56kjfzcy3vrvemzxmhyn2nsnlnnnydk6yvivlagqkddjtbk6yievkws43qkravqkdzmzyxmrlga574qr2u4nzarsrropbhwwoijgrkvu2rrnfkxg6sjo4flfom2t2tjt24idbq3yr36i3og4hakry6u2wwsldiqt6jonwputffqoglz34qvznpyu6cztw2ztmnrwd264mqnjlf2zdtpnku4vdyobxxw5cfmibh56cbk3vxi5gqg5ysokyuzbhxfjtjvse5zepj5cbnihy=?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6634%2F634%2F68557bdb1745et1750432731r3138.jpg
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectviinjjlt.com
FingerprintC6:75:0A:57:57:BF:D5:FA:91:4E:E1:AE:FB:AC:BF:41:AD:99:1C:EC
ValidityWed, 07 May 2025 18:56:43 GMT - Tue, 05 Aug 2025 19:55:27 GMT
Size 191 kB (191377 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET 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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6634%2F634%2F68557bdb1745et1750432731r3138.jpg HTTP/1.1
Host: s.viinjjlt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 02 Jul 2025 23:21:54 GMT
content-length: 0
location: https://i.cdnfimgs.com/image/osp/6634/634/68557bdb1745et1750432731r3138.jpg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=F9RdbeSE8Q6tFMWJHN1RRhShYf0VvzZ7%2BSdExNGYqz5BTEk1R9D9807yW74TCy9fTYCB0YmYMqtIMi%2F2gF7Zn3s27MqVroU4uO%2BH1g%3D%3D"}]}
cf-ray: 9591e1d4e93b56bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET i.cdnfimgs.com/image/osp/6634/634/68557bdb1745et1750432731r3138.jpg
200 OK 191 kB URL GET i.cdnfimgs.com/image/osp/6634/634/68557bdb1745et1750432731r3138.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerLet's Encrypt
Subjecti.cdnfimgs.com
Fingerprint7B:6C:EB:88:EC:1C:AD:34:45:70:6F:AC:DC:02:61:C3:4E:42:33:9C
ValidityMon, 19 May 2025 06:33:15 GMT - Sun, 17 Aug 2025 06:33:14 GMT
File type JPEG image data, baseline, precision 8, 809x809, components 3
Size 191 kB (191377 bytes)
Hash 8d87b7b264a0d89bb93d745d9b6014d8
8d61d756b9cc88cd6cd68c42d2056a4005ec8c85
23e60205b07694073e1a0b0ade329a46dee5e629233b4bb9b8843945438c2709
GET /image/osp/6634/634/68557bdb1745et1750432731r3138.jpg HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 23:21:54 GMT
content-type: image/jpeg
content-length: 191377
server: nginx
last-modified: Fri, 20 Jun 2025 15:18:51 GMT
etag: "68557bdb-2eb91"
cache-control: max-age=1209600
expires: Wed, 16 Jul 2025 23:21:54 GMT
x-cdn-host-id: ds5059
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
200 OK 739 B URL GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash a19cdfde4cca33ccafc0b8bfd518bebb
df1830e07033d0ae31288f62892121778fc7c765
a347474d3c97d5440c2f06c86c314eb1e9c2a20e2b84e8367d57743fe77a8115
GET /themes/spirit/assets/frontend/css/mu-waiting-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Mon, 17 Feb 2025 00:39:28 GMT
vary: Accept-Encoding
etag: W/"67b28540-2e3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET deukmyunderth.org/eDlIMjcZWytfCBkEKhRCClV1FwU+HHp0U0tWLwpDSQF7WwYOWy8cVBRWPVZRClYmRhkWXDwXBT5SLXdDTm96e1UyexlKbylOIXpaCG8cXEc0W3lgUjdOL0t1PWwlek05fQxmQy12GVF6GmsJWXMqYH9gTht+GWYHEX0ha0cdewV3ZTlOMHpaCGoQW1QadhlkcRprcAd2LW9+anMhfg9cbTdaGmt+MnsOQ3QpAXxxTj12AEhYIXV4Y3kzUisEcylwIXRdC30QalxAYCNKfhpSIFxkHwEhdHM1dwxIXx5jHntgKAhxXmITVX9kcBxxG0VbHmMee2cxUWVgXy5VeQZ4MHMZYXM2dBECUzR6HgtbLV4nC29KaCJhbxB2LWR9KlsjWlk6a3hdcixRAGFQSXASA3kxXHhGWS0IeQdkEnwEcV5MWgdwRxxcHEpaLWwwXmQWfBBgbxcfIkFYFkl1QlNBTxBrcykKIWE
200 OK 3.1 kB URL GET deukmyunderth.org/eDlIMjcZWytfCBkEKhRCClV1FwU+HHp0U0tWLwpDSQF7WwYOWy8cVBRWPVZRClYmRhkWXDwXBT5SLXdDTm96e1UyexlKbylOIXpaCG8cXEc0W3lgUjdOL0t1PWwlek05fQxmQy12GVF6GmsJWXMqYH9gTht+GWYHEX0ha0cdewV3ZTlOMHpaCGoQW1QadhlkcRprcAd2LW9+anMhfg9cbTdaGmt+MnsOQ3QpAXxxTj12AEhYIXV4Y3kzUisEcylwIXRdC30QalxAYCNKfhpSIFxkHwEhdHM1dwxIXx5jHntgKAhxXmITVX9kcBxxG0VbHmMee2cxUWVgXy5VeQZ4MHMZYXM2dBECUzR6HgtbLV4nC29KaCJhbxB2LWR9KlsjWlk6a3hdcixRAGFQSXASA3kxXHhGWS0IeQdkEnwEcV5MWgdwRxxcHEpaLWwwXmQWfBBgbxcfIkFYFkl1QlNBTxBrcykKIWE
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerAmazon
Subjectdeukmyunderth.org
FingerprintC5:2E:FA:87:DF:BC:62:B7:3E:9D:DB:72:89:56:64:2E:98:44:65:7D
ValidityWed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3061), with no line terminators
Hash c9a79456bf316c38f5e9f0d29f38ce8f
b221375e695778e8c1368b4afe6dff84f3c668ef
d269dfaa7cbf58102fc7172d4494f4ff7ccf7fbf1acf57b9a03d6af9c05cc725
GET /eDlIMjcZWytfCBkEKhRCClV1FwU+HHp0U0tWLwpDSQF7WwYOWy8cVBRWPVZRClYmRhkWXDwXBT5SLXdDTm96e1UyexlKbylOIXpaCG8cXEc0W3lgUjdOL0t1PWwlek05fQxmQy12GVF6GmsJWXMqYH9gTht+GWYHEX0ha0cdewV3ZTlOMHpaCGoQW1QadhlkcRprcAd2LW9+anMhfg9cbTdaGmt+MnsOQ3QpAXxxTj12AEhYIXV4Y3kzUisEcylwIXRdC30QalxAYCNKfhpSIFxkHwEhdHM1dwxIXx5jHntgKAhxXmITVX9kcBxxG0VbHmMee2cxUWVgXy5VeQZ4MHMZYXM2dBECUzR6HgtbLV4nC29KaCJhbxB2LWR9KlsjWlk6a3hdcixRAGFQSXASA3kxXHhGWS0IeQdkEnwEcV5MWgdwRxxcHEpaLWwwXmQWfBBgbxcfIkFYFkl1QlNBTxBrcykKIWE HTTP/1.1
Host: deukmyunderth.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1208
date: Wed, 02 Jul 2025 23:21:50 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=tI4ZloL0Z5eVC27j0BFIypIwEOQ0c85yMKWFTJc1Yt6FOupiRaqIOzJmsQvX2sZSAsAoq29qULCUgcSR/NSTOXsTp+G8aZ9p06VwLFP133Vaq9m5b/B6LLJe9r1t; Expires=Wed, 09 Jul 2025 23:21:50 GMT; Path=/
AWSALBCORS=tI4ZloL0Z5eVC27j0BFIypIwEOQ0c85yMKWFTJc1Yt6FOupiRaqIOzJmsQvX2sZSAsAoq29qULCUgcSR/NSTOXsTp+G8aZ9p06VwLFP133Vaq9m5b/B6LLJe9r1t; Expires=Wed, 09 Jul 2025 23:21:50 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: iRhUYAe1AWPV6KKhNeSi2xJgkEUD3yOsQTbi7Q5ICZ_BBKd5vj7nZw==
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiP9J4DWeK_6l56beVC_-5d49liTYGDne5AC3d2_cJShX_jU1NmIEAhqpypmF8yEicZ70bQIJQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-954444192%3A1751498511450612
403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiP9J4DWeK_6l56beVC_-5d49liTYGDne5AC3d2_cJShX_jU1NmIEAhqpypmF8yEicZ70bQIJQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-954444192%3A1751498511450612
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint42:6B:40:5C:3D:9A:84:17:1F:6E:69:4F:66:1C:88:49:15:40:EB:36
ValidityTue, 17 Jun 2025 20:01:52 GMT - Tue, 09 Sep 2025 20:01:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiP9J4DWeK_6l56beVC_-5d49liTYGDne5AC3d2_cJShX_jU1NmIEAhqpypmF8yEicZ70bQIJQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-954444192%3A1751498511450612 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 23:21:51 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-o3ErPMjBhQRUy3C5b2_CyA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.d0E18SHIxFg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNZdbsnEK8Z_qtABGy-Wnt0qNpvfsC0c_XiQFhaR9BiqCHqpqWsBBYbAtGuEIFHi1d54AcGbw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-298030238%3A1751498511457849
403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNZdbsnEK8Z_qtABGy-Wnt0qNpvfsC0c_XiQFhaR9BiqCHqpqWsBBYbAtGuEIFHi1d54AcGbw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-298030238%3A1751498511457849
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint42:6B:40:5C:3D:9A:84:17:1F:6E:69:4F:66:1C:88:49:15:40:EB:36
ValidityTue, 17 Jun 2025 20:01:52 GMT - Tue, 09 Sep 2025 20:01:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNZdbsnEK8Z_qtABGy-Wnt0qNpvfsC0c_XiQFhaR9BiqCHqpqWsBBYbAtGuEIFHi1d54AcGbw&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-298030238%3A1751498511457849 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 23:21:51 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-_rSTIk5g1gjzJID-u_44Rg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.d0E18SHIxFg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
200 OK 80 kB URL User Request GET megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
IP
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (51710)
Hash e42ae244ab04bda4929d93dd0d1ab481
f372cc8904c29f4209247e111607a574404c0c49
08eaf2b8950f5c26507325cc702c33f10c4e120a8e632a8545986c68b8b2ed98
GET /d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=md376k5uq31lhei4hp479l1t98; expires=Thu, 03 Jul 2025 23:21:49 GMT; Max-Age=86400; path=/; domain=megaup.net; secure; HttpOnly; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
access-control-allow-origin: https://megaup.net
access-control-allow-headers: Content-Type, Content-Range, Content-Disposition, Content-Description
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
200 OK 14 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators
Hash 0eef6fe46d14f860d5666d2c7b13a564
7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe
95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-3626"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
ValidityMon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
Hash 5734e133a619a6ae6ee21a6c00a95eba
57c0ac17302d07bd4f968240098afe5ed53d4ad2
d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:06:40 GMT
expires: Fri, 26 Jun 2026 10:06:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
age: 566110
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET undefined/VnNVU3c3ETY+SDdON3UCJB9odkUQVmcVE2UcMmsDZ0tmOkYgETJ9FDocIDcRJBw7J1k4FiF2RRAJGBYhLxc/HSMdGyICMxMiJhUcJT8XYDkUISIgIBgiFAchB0M6FQ8QIAcHITU0EwkyDwsyFS8QR2QHDT5DBCkmbjoiNzIXMjolMQMicGExEBgmFzE/GAEUMQc9DCsUDyYUYkcAMTELIjgbEgYyMjIeOxsaJBAwRRcEFzUhLCIEFx8ANR8WTzQrEDwEHhslADEOEGUCD2YyDBY1ETRlMAQeMR8wJSwpDQE2GBYYBRMTMiIVRg42DAQ2IRcNATYYOxkRWi4yFyshZD4THjUXN2QWJj4qERFGMjYUYz4sJWUFDhcrDxQgFz4PCjIUNAMVIjs0BzggFxQbEiUxOhQ3Ihg0FDshZSI9ERYHGhQGMAMAAzcNBDsUEiUkIjkRMBIrBHUdJRw7I0oYNCYiOQNHIRYPDw
0 B URL GET undefined/VnNVU3c3ETY+SDdON3UCJB9odkUQVmcVE2UcMmsDZ0tmOkYgETJ9FDocIDcRJBw7J1k4FiF2RRAJGBYhLxc/HSMdGyICMxMiJhUcJT8XYDkUISIgIBgiFAchB0M6FQ8QIAcHITU0EwkyDwsyFS8QR2QHDT5DBCkmbjoiNzIXMjolMQMicGExEBgmFzE/GAEUMQc9DCsUDyYUYkcAMTELIjgbEgYyMjIeOxsaJBAwRRcEFzUhLCIEFx8ANR8WTzQrEDwEHhslADEOEGUCD2YyDBY1ETRlMAQeMR8wJSwpDQE2GBYYBRMTMiIVRg42DAQ2IRcNATYYOxkRWi4yFyshZD4THjUXN2QWJj4qERFGMjYUYz4sJWUFDhcrDxQgFz4PCjIUNAMVIjs0BzggFxQbEiUxOhQ3Ihg0FDshZSI9ERYHGhQGMAMAAzcNBDsUEiUkIjkRMBIrBHUdJRw7I0oYNCYiOQNHIRYPDw
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /VnNVU3c3ETY+SDdON3UCJB9odkUQVmcVE2UcMmsDZ0tmOkYgETJ9FDocIDcRJBw7J1k4FiF2RRAJGBYhLxc/HSMdGyICMxMiJhUcJT8XYDkUISIgIBgiFAchB0M6FQ8QIAcHITU0EwkyDwsyFS8QR2QHDT5DBCkmbjoiNzIXMjolMQMicGExEBgmFzE/GAEUMQc9DCsUDyYUYkcAMTELIjgbEgYyMjIeOxsaJBAwRRcEFzUhLCIEFx8ANR8WTzQrEDwEHhslADEOEGUCD2YyDBY1ETRlMAQeMR8wJSwpDQE2GBYYBRMTMiIVRg42DAQ2IRcNATYYOxkRWi4yFyshZD4THjUXN2QWJj4qERFGMjYUYz4sJWUFDhcrDxQgFz4PCjIUNAMVIjs0BzggFxQbEiUxOhQ3Ihg0FDshZSI9ERYHGhQGMAMAAzcNBDsUEiUkIjkRMBIrBHUdJRw7I0oYNCYiOQNHIRYPDw HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
200 OK 80 kB URL GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 80148, version 331.17301
Hash c500da19d776384ba69573ae6fe274e7
6290834672aba86d5b6c1c73b30b57c9c53996f7
cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: font/woff2
content-length: 80148
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-13914"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
ValidityTue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:7wvTrgyvB99K7e3-RQyc-BJT5xxevA:C7fJH9sV1WfxXzfA; Expires=Fri, 02-Jul-2027 23:21:51 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 23:21:51 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOSRKk69LmnZvv08r6_1-dyEPjEZ959duB3Bcn_fePn39E1ZTvfaAutZBs_vtlEndN4CuSPqA
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-OTTuvgSye8CyfD-8X7kHcQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/socicon.css
200 OK 9.8 kB URL GET megaup.net/themes/spirit/assets/frontend/css/socicon.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 910a42ce112991b31b30a735f1006a5f
6c8b4769270f1c86bb1c7a6b54325465395ba614
010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-266e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/flickity.css
200 OK 2.5 kB URL GET megaup.net/themes/spirit/assets/frontend/css/flickity.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 244d315064064270eabbbb7ac9f6c700
21ad53d3efbb40154293190173ee0c497ed7651c
ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-9d9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
200 OK 6.0 kB URL GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 25cfe48e07622a00154b677afcbaeb47
23e3ae1bd04ad1d00d25d30e39815104ceeae52f
709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1783"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
200 OK 70 kB URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (768), with CRLF line terminators
Hash 6fda19caa29287e6f584f0557fdeb6d4
40f58160090cd1f022704ee1352b343adb9e73b9
8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:49 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1107a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET riraconianstar.com/Q1pMTG1sZS8/UBoNJBY/LRwUGSorf34OPBU2HhU1BRAZIC8zOXwZSzczKHFadWt9dFtlKiUoUHJ8PzgMNy8/cVxlMyIqAn58OnFcbWl4Yl51dHlqGH5rajgdIj1xfUszLjggUHJteX1ZemJ5fV10bH0
204 No Content 0 B URL GET riraconianstar.com/Q1pMTG1sZS8/UBoNJBY/LRwUGSorf34OPBU2HhU1BRAZIC8zOXwZSzczKHFadWt9dFtlKiUoUHJ8PzgMNy8/cVxlMyIqAn58OnFcbWl4Yl51dHlqGH5rajgdIj1xfUszLjggUHJteX1ZemJ5fV10bH0
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectriraconianstar.com
FingerprintDB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
ValidityWed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Q1pMTG1sZS8/UBoNJBY/LRwUGSorf34OPBU2HhU1BRAZIC8zOXwZSzczKHFadWt9dFtlKiUoUHJ8PzgMNy8/cVxlMyIqAn58OnFcbWl4Yl51dHlqGH5rajgdIj1xfUszLjggUHJteX1ZemJ5fV10bH0 HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 23:21:50 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RhyFh7c8dx3z6noIVWslswLbmMOM1MMnFELQWLVvejgnok2xzKa%2FPpy7shkEcwW55VWDnLuUInG8rk9KbuBaW4YqXcqXM4S1g96Ya6qUECA%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9591e1bc9bc5568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET riraconianstar.com/N09Pb3AYcCwcTWF8HRwncxkkOyYGPg4CMnkXGBg9bgoJNhJAFmkbGVNyd11FDn5+SQBeK3JcQhE8Ow4EQjxyXlZeISkATRE5cl9eDmF9QUYROnJeVkM/LghNBmk/GwRbcn5YRQZ7dldFBn94WEY
204 No Content 0 B URL GET riraconianstar.com/N09Pb3AYcCwcTWF8HRwncxkkOyYGPg4CMnkXGBg9bgoJNhJAFmkbGVNyd11FDn5+SQBeK3JcQhE8Ow4EQjxyXlZeISkATRE5cl9eDmF9QUYROnJeVkM/LghNBmk/GwRbcn5YRQZ7dldFBn94WEY
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectriraconianstar.com
FingerprintDB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
ValidityWed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /N09Pb3AYcCwcTWF8HRwncxkkOyYGPg4CMnkXGBg9bgoJNhJAFmkbGVNyd11FDn5+SQBeK3JcQhE8Ow4EQjxyXlZeISkATRE5cl9eDmF9QUYROnJeVkM/LghNBmk/GwRbcn5YRQZ7dldFBn94WEY HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 23:21:50 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=5wBGClbAZ4i3%2FJH%2BmGgZLC%2FECZ66RXulrojchRfsnXy0%2FU2rMOXDgJi8rzAY3OQJ%2BpzsgyNLFe0VppvPt1XN5XuqLLCTbPmm6nzp9mNiP4E%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9591e1bccc35568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nriceukwater.org/multi?cs=S0ZDSFN4fnVxZXtwd31qenN6fWo&abt=0&red=1&sm=76&k=farming%20simulator&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1482499289366143&agec=1751498511&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd7a4972495e192195fd9201841c18881%2FFarming.Simulator.25.v1.9.0.1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_lUjJ=1751498512019&crc=1
200 OK 3.8 kB URL GET nriceukwater.org/multi?cs=S0ZDSFN4fnVxZXtwd31qenN6fWo&abt=0&red=1&sm=76&k=farming%20simulator&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1482499289366143&agec=1751498511&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd7a4972495e192195fd9201841c18881%2FFarming.Simulator.25.v1.9.0.1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_lUjJ=1751498512019&crc=1
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerAmazon
Subjectnriceukwater.org
FingerprintD4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3
ValidityWed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
File type ASCII text, with very long lines (3847), with no line terminators
Hash c5392c727c7038c5499b5777cee894f9
4c10930cd74a16088c691c77f531fdce9315d06c
83dde259e48ca8050c4c3c9f2906000a6766c3ad1be0976965666802aad45ebc
GET /multi?cs=S0ZDSFN4fnVxZXtwd31qenN6fWo&abt=0&red=1&sm=76&k=farming%20simulator&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1482499289366143&agec=1751498511&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fd7a4972495e192195fd9201841c18881%2FFarming.Simulator.25.v1.9.0.1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_lUjJ=1751498512019&crc=1 HTTP/1.1
Host: nriceukwater.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1924
date: Wed, 02 Jul 2025 23:21:52 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=Ci5BKSqSNOJKSeIWUWf8L+0rgW7K+1Le6HP9Hdl8WIa7RRweHp1jFKuYlQYpUhzNSLgUo3R7D3OXnb9ANgHPeDyQZm5ymhmS9quhtsD1YLnlL57wYIXqRNtrg1f2; Expires=Wed, 09 Jul 2025 23:21:52 GMT; Path=/
AWSALBCORS=Ci5BKSqSNOJKSeIWUWf8L+0rgW7K+1Le6HP9Hdl8WIa7RRweHp1jFKuYlQYpUhzNSLgUo3R7D3OXnb9ANgHPeDyQZm5ymhmS9quhtsD1YLnlL57wYIXqRNtrg1f2; Expires=Wed, 09 Jul 2025 23:21:52 GMT; Path=/; SameSite=None
csu=52c53f30-cd1c-4106-b5cc-8a51b237c760
csu=1482499289366143
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 953ec33235d719831a6e6956b5e5bb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: vqDaG-1SGHqsQKCnwEdM7OwFeq3WccoL12u6BDNKt4f57-RZW1rCWg==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/background.jpg
200 OK 86 kB URL GET megaup.net/themes/spirit/assets/frontend/img/background.jpg
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3
Hash 1b0874b56457a14258e3bd22805266c6
26ff3d095376d43cb78388e700707cdaf6ac75eb
5c5e0d52eb281e1ceae07f53c931982e8e014b9a535df9c98246157167e29285
GET /themes/spirit/assets/frontend/img/background.jpg HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:50 GMT
content-type: image/jpeg
content-length: 86513
last-modified: Tue, 11 Feb 2025 07:35:38 GMT
vary: Accept-Encoding
etag: "67aafdca-151f1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
200 OK 590 B URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E
ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Hash ed3d11830b3e136b384f2a0b8082f235
3b75f2a64d528165f108d62e8c30d464b76945d7
1aef6752088fe69a166d3a84375431e1041dde8fa3f9ccbde26accb220feb4a5
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=md376k5uq31lhei4hp479l1t98
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 02 Jul 2025 23:21:51 GMT
content-type: image/png
content-length: 590
last-modified: Thu, 13 Feb 2025 17:42:00 GMT
vary: Accept-Encoding
etag: "67ae2ee8-24e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiPVn1zV7YARkJu1AvN_pqQ0LOl-Wrpks-UtUzVKIxUitBJcXzWEeeW96jSCjnxwcqvaEA9uew
302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiPVn1zV7YARkJu1AvN_pqQ0LOl-Wrpks-UtUzVKIxUitBJcXzWEeeW96jSCjnxwcqvaEA9uew
IP
Requested by https://megaup.net/d7a4972495e192195fd9201841c18881/Farming.Simulator.25.v1.9.0.1.rar
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
ValidityTue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiPVn1zV7YARkJu1AvN_pqQ0LOl-Wrpks-UtUzVKIxUitBJcXzWEeeW96jSCjnxwcqvaEA9uew HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:8-QlyaoZ95czxvsBG03i8BjDiMBvzg:KjnEmoKHCe_K6-NY;Path=/;Expires=Fri, 02-Jul-2027 23:21:51 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 23:21:51 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiP9J4DWeK_6l56beVC_-5d49liTYGDne5AC3d2_cJShX_jU1NmIEAhqpypmF8yEicZ70bQIJQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-954444192%3A1751498511450612
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-A0KkuN8yq1HlXVu9z79fTw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 416
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
5.34.214.148
173.194.221.84
104.21.80.1
138.201.194.90
0.0.0.0