GET multiup.io/build/610.15f042f0.js
104.21.48.1200 OK 1.1 MB URL GET multiup.io/build/610.15f042f0.js
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)
Size 1.1 MB (1101152 bytes)
Hash 60e18a7e89de25839177cb5a9ae278bf
9c5f99b1e40d68cedbe86de35e47030969e03dc5
84a906b987672fc42b8a19812141bb6a05ded7f3699c936f40383b22f702819b
GET /build/610.15f042f0.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PJJHQno3kgFjck5BZ5ff3Upa%2B0QE1xI6GUlGLv3xECc3s7way8yp72vl0y3HrnK%2Ff82s%2B69R6%2B2GaXN%2FNpj8b9nAJrKjQ5lO0gax2O8AhVNh4xYrmNK0xlFdOCoF"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
etag: W/"6481d6c5-10cd60"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 7187
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 966e9597cfac56ba-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2734&min_rtt=637&rtt_var=2074&sent=58&recv=65&lost=0&retrans=0&sent_bytes=14985&recv_bytes=6352&delivery_rate=721958&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18057&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=239&inflight_dur=38&x=40"
GET multiup.io/assets/javascripts/theme.custom.js
104.21.48.1200 OK 5.5 kB URL GET multiup.io/assets/javascripts/theme.custom.js
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type JavaScript source, ASCII text
Hash 1dcaf4e6787e765638bc4efbe93d4d20
61c72e21b6cb876b88796a8171888a22c98145fc
bafb4c01920ef2f70e7576877c4ae8337430bab45d9989bccdb5aa8ceac1c3b6
GET /assets/javascripts/theme.custom.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=goXjLte1AgAQsXbqdFVAECaU8C%2FQO0hJcl5SzG8Q2IqQxE9OV4T0Ou1u6fG5lIOUlZzCJ4wDIT2CdAZyAj9iuv5cr9oVMeEK%2Ftirsl%2Bj100ycssFZolEKiELNGne"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 13 Jun 2020 12:23:25 GMT
vary: Accept-Encoding
etag: W/"5ee4c53d-1563"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 7187
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 966e9597cfb156ba-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2734&min_rtt=637&rtt_var=2074&sent=52&recv=65&lost=0&retrans=0&sent_bytes=8243&recv_bytes=6352&delivery_rate=721958&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18057&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=238&inflight_dur=27&x=40"
GET multiup.io/build/fonts/fontawesome-webfont.20fd1704.woff2
104.21.48.1200 OK 77 kB URL GET multiup.io/build/fonts/fontawesome-webfont.20fd1704.woff2
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /build/fonts/fontawesome-webfont.20fd1704.woff2 HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/build/app.3a8e05b1.css
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:25 GMT
content-type: application/font-woff2
content-length: 77160
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2FH2epDVz2G4Hq9C%2BuJzHov4sq4vZ%2BZd5y%2FltCPOirR5wWgcgQKwBXkfrDFoghXmGMWQmPtyIXZppxSFWlKQCRM2dUwWTWYqkDajJePoBr2%2F%2Bu42CYP3TsiyS1GB"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
etag: "6481d6c5-12d68"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
age: 14
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 966e959b5fcb56ba-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2032&min_rtt=0&rtt_var=1198&sent=378&recv=89&lost=0&retrans=0&sent_bytes=446722&recv_bytes=8115&delivery_rate=21895013&ss_exit_cwnd=34359&ss_exit_reason=2&cwnd=29079&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=791&inflight_dur=104&x=40"
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiOI_JLjLPTVy1J4FLWOCtkW9uUaxbZ98wt3lzw4yxOH0ftiKmd6eD6z781LXhN4yd8aTv0e
64.233.161.84302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiOI_JLjLPTVy1J4FLWOCtkW9uUaxbZ98wt3lzw4yxOH0ftiKmd6eD6z781LXhN4yd8aTv0e
IP 64.233.161.84:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint9B:4C:3E:7D:75:3A:C6:33:33:2F:71:BC:DD:98:50:A8:D7:93:6D:D2
ValidityMon, 07 Jul 2025 08:36:02 GMT - Mon, 29 Sep 2025 08:36:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiOI_JLjLPTVy1J4FLWOCtkW9uUaxbZ98wt3lzw4yxOH0ftiKmd6eD6z781LXhN4yd8aTv0e HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:yNS6aPMAvnZECha-ZgRTNZoFZ5JcNw:6vrriT3FeTz6NRxL;Path=/;Expires=Thu, 29-Jul-2027 18:12:26 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 29 Jul 2025 18:12:26 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiP7Lv_oErtHnCPA1LcrAUt8TCmnTZ7EXZ8T7Ym9V8PrtaQliR31uk95CslsIkoUTCXz_3F64Q&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1998298398%3A1753812746311022
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-WvmXqo_ZUFsNw-Ok1KoFoQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 415
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
OPTIONS cloudflareinsights.com/cdn-cgi/rum
104.16.80.73200 OK 0 B URL OPTIONS cloudflareinsights.com/cdn-cgi/rum
IP 104.16.80.73:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
Fingerprint9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
ValidityWed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://multiup.io/
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Jul 2025 18:12:27 GMT
content-type: text/plain
access-control-allow-origin: https://multiup.io
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 966e95a4c9275691-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
GET multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
104.21.48.1200 OK 53 kB URL User Request GET multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
IP 104.21.48.1:443
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (2342)
Hash a22a988f8c6d1480b1b778a7bfeab8c6
2740c3d15653c2a5fffe32784e0acc8dc23de404
851e1ce01d70100dc9468d368ac572b3d27a419d12413e2f253af18c0a90ffcf
GET /download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=0, must-revalidate, private
pragma: no-cache
expires: Tue, 29 Jul 2025 18:12:24 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wmv0q6T3YfqRmygUtJNKuPLYhxPPKuyC4RLReHbW5A3G6NcpvWNUOMA%2FGsbgnP5tJ1Jz3%2B3CimSALQrd7SbhWV4hGm3oaN0M"}]}
cf-cache-status: BYPASS
content-encoding: br
set-cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2; HttpOnly; SameSite=Lax; Secure; Path=/
cf-ray: 966e95956db856cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
142.250.178.99200 OK 28 kB URL GET fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP 142.250.178.99:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
ValidityMon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-BoldOpe
Hash 7e08cc656863d52bcb5cd34805ac605b
f6e1c78441d4ca2ef589ce79e48d3dbf9dca9a0d
0782a52179d0e25f19c39b43253795b25787d65abdbd8bfa38be0f21a4512748
GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Jul 2025 14:27:10 GMT
expires: Sat, 25 Jul 2026 14:27:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:43 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 359115
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET multiup.io/assets/javascripts/theme.js
104.21.48.1200 OK 113 kB URL GET multiup.io/assets/javascripts/theme.js
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type JavaScript source, ASCII text, with very long lines (2076), with CRLF line terminators
Size 113 kB (112659 bytes)
Hash 960ba50181ebb13aa94e4ce229800a3e
480e746ad1870f9d026e141a736e5b3092a641ef
5b997a5c4edb2871e7a5fcd1da037ef83063fd7707dec8cb1f5ef72b9cbb10c5
GET /assets/javascripts/theme.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EXOcOkTkbjsLx0q7dr9zxtNIE9ymeU3KqNHQ4tYZNjmeuW0zDreoORyQZmvZhs30wUtK%2B30dx81bl4aKF3fMqR%2BpqC%2Bwv8eBzuCCSJc%2FWo9jc3e5XPAmA0tNlnCV"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 30 Dec 2017 09:43:01 GMT
vary: Accept-Encoding
etag: W/"5a475fa5-1b813"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 7187
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 966e9597cfb056ba-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2734&min_rtt=637&rtt_var=2074&sent=60&recv=65&lost=0&retrans=0&sent_bytes=17785&recv_bytes=6352&delivery_rate=721958&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18057&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=240&inflight_dur=39&x=40"
GET multiup.io/assets/javascripts/theme.init.js
104.21.48.1200 OK 12 kB URL GET multiup.io/assets/javascripts/theme.init.js
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type JavaScript source, ASCII text, with CRLF line terminators
Hash 12b8112503f03174141accfaddfea377
32cd1f053775dd6e57d59b62891c42a8e15337a0
cd154ef50731da006417c6efeb24ed614d9d6a16533768009b3f4bc1023c7fdc
GET /assets/javascripts/theme.init.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SUCR0xoRx%2BVkpdRPxrIDCB7MOyPQ%2Fk0pDF4%2BHUNhyD4H8FOlUN0i2saLAaA8NywT1S0QrxkfThjjZS56Sb8iJt%2F%2BmSCKDek%2FP6N9AfxySJTMgsdOReVcnuONGJdP"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 29 May 2017 18:26:32 GMT
vary: Accept-Encoding
etag: W/"592c67d8-3083"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 7187
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 966e9597dfb256ba-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2315&min_rtt=79&rtt_var=1954&sent=66&recv=67&lost=0&retrans=0&sent_bytes=26185&recv_bytes=6439&delivery_rate=1060402&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=34359&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=242&inflight_dur=42&x=40"
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
64.233.161.84302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 64.233.161.84:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint9B:4C:3E:7D:75:3A:C6:33:33:2F:71:BC:DD:98:50:A8:D7:93:6D:D2
ValidityMon, 07 Jul 2025 08:36:02 GMT - Mon, 29 Sep 2025 08:36:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:-fUNfHc98e0D947iDg-ZzmWM-bGZjQ:z1KfF9hio9bJYHKm; Expires=Thu, 29-Jul-2027 18:12:26 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 29 Jul 2025 18:12:26 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOMR6u_O56RS4Oa2FD3IxD3jpfjve4HFkGMxVbo-AfrOVaANQHm5dl7qExL-2ZlfG3o-RKf
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-D11oHHPq9JeycI4iHyO_7A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET sswalesmentb.com/RTdKb1RqCCkcaQpwBxU3E1QLOjMLdBM+FhZ1egs5AXEfKQYSdmwbPSEKe15tcA98V3I1Xi5SZWNEPg4gMER3XnIsWSwAaWNBd156dgNkXGJrAWwaaXQRPh81Igp7SSQxQyZSZXICeVdldwB+WmdxAQ
104.21.89.126204 No Content 0 B URL GET sswalesmentb.com/RTdKb1RqCCkcaQpwBxU3E1QLOjMLdBM+FhZ1egs5AXEfKQYSdmwbPSEKe15tcA98V3I1Xi5SZWNEPg4gMER3XnIsWSwAaWNBd156dgNkXGJrAWwaaXQRPh81Igp7SSQxQyZSZXICeVdldwB+WmdxAQ
IP 104.21.89.126:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectsswalesmentb.com
FingerprintA3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
ValidityWed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /RTdKb1RqCCkcaQpwBxU3E1QLOjMLdBM+FhZ1egs5AXEfKQYSdmwbPSEKe15tcA98V3I1Xi5SZWNEPg4gMER3XnIsWSwAaWNBd156dgNkXGJrAWwaaXQRPh81Igp7SSQxQyZSZXICeVdldwB+WmdxAQ HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 29 Jul 2025 18:12:25 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=toaSBEdlf7rWipSElq3Xpct%2B%2BC3S0FX8cz6QKTQ1KBe%2B911rwVrCQStt1V2lY1%2FDNXVuGsju8nBFtFIzoZU4eClC4PBkkhcsSCQAjIiU"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 966e959aab290b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
64.233.161.84302 Found 0 B URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 64.233.161.84:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint9B:4C:3E:7D:75:3A:C6:33:33:2F:71:BC:DD:98:50:A8:D7:93:6D:D2
ValidityMon, 07 Jul 2025 08:36:02 GMT - Mon, 29 Sep 2025 08:36:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:HdoK7BNBMR7kijXaCahtAL8TZZWb5Q:iqiNQOW_X18jKYuO; Expires=Thu, 29-Jul-2027 18:12:26 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 29 Jul 2025 18:12:26 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiOI_JLjLPTVy1J4FLWOCtkW9uUaxbZ98wt3lzw4yxOH0ftiKmd6eD6z781LXhN4yd8aTv0e
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-W5wJ6w1yOuAuhIMwOnWLew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
142.250.178.99200 OK 26 kB URL GET fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP 142.250.178.99:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
ValidityMon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu
Hash c045b73d86803686f4cd1cc3f9ceba59
92d652578c531e2c3d9db4622584f6a1ab2c225a
927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc
GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17857
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Jul 2025 15:30:32 GMT
expires: Tue, 28 Jul 2026 15:30:32 GMT
cache-control: public, max-age=31536000
age: 96115
last-modified: Wed, 11 Oct 2017 21:49:44 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET multiup.io/favicon.ico
104.21.48.1200 OK 854 B IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash 53bfb4a8399c379e6857b5e848d3a408
6c59da45ce3e443722a71c4cfaaa92a990e17610
9f55eab5447f560225a66911fcbe9edca0c35c7da9ca994bf6f7e5af6881b11e
GET /favicon.ico HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:25 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6x4788H6pNRm5G1K68VXFCAB%2BIVNE7w7HZF4GA72TAndHZayYJ%2BmOnOvGapchpmPrbrxJHSNXZPiMVNS5%2Bxw0avSm5NBlDci%2F1kwiWXfrlVl6gLGRTqk41nqJz0I"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 07 Aug 2020 09:03:58 GMT
etag: W/"5f2d18fe-356"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 6111
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 966e959e3fde56ba-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2130&min_rtt=0&rtt_var=1813&sent=438&recv=93&lost=0&retrans=0&sent_bytes=526292&recv_bytes=8621&delivery_rate=21895013&ss_exit_cwnd=34359&ss_exit_reason=2&cwnd=29079&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=1250&inflight_dur=117&x=40"
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOCIb-VZaGbEYvVTrSGLts3cjE9sONj41cTHA0MoPh1RoWM7sGPto95NIQMtpwH6RIhaDhVPQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S555059300%3A1753812746308400
64.233.161.84403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOCIb-VZaGbEYvVTrSGLts3cjE9sONj41cTHA0MoPh1RoWM7sGPto95NIQMtpwH6RIhaDhVPQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S555059300%3A1753812746308400
IP 64.233.161.84:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint60:9F:41:D7:83:68:5E:64:22:9D:7C:5E:2D:7B:C9:C5:07:DA:C6:D8
ValidityMon, 07 Jul 2025 08:34:14 GMT - Mon, 29 Sep 2025 08:34:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOCIb-VZaGbEYvVTrSGLts3cjE9sONj41cTHA0MoPh1RoWM7sGPto95NIQMtpwH6RIhaDhVPQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S555059300%3A1753812746308400 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 29 Jul 2025 18:12:26 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-9jFonldQ9lHRh2VhzQHJ9w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4ikenfs4_uY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET multiup.io/build/runtime.0b137493.js
104.21.48.1200 OK 1.4 kB URL GET multiup.io/build/runtime.0b137493.js
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type JavaScript source, ASCII text, with very long lines (1399), with no line terminators
Hash 0b4fc9b3ef5d80f5ed570385eee3fa4c
397c84c672e54103fa082f592f83e8afb6961af5
582c9d450dcfaf9d550547fc8e22f5da17262c8f4ce6d283c0357e94e4803937
GET /build/runtime.0b137493.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=omieVSYI1j2JNxFhDBoskI%2F4yIAWApG2YCy1F01uPx9USheF%2FxWIok00oYVdXT%2B6xyKkn5Ky7o2RX%2FsvvPX8edp1LjfxwRQwUhMoE4AW%2FjOuxgyPIO5SihCqIBjw"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
etag: W/"6481d6c5-577"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 14
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 966e9597cfaf56ba-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2734&min_rtt=637&rtt_var=2074&sent=60&recv=65&lost=0&retrans=0&sent_bytes=17785&recv_bytes=6352&delivery_rate=721958&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18057&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=240&inflight_dur=39&x=40"
GET multiup.io/build/app.6b0cbd46.js
104.21.48.1200 OK 188 kB URL GET multiup.io/build/app.6b0cbd46.js
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type JavaScript source, ASCII text, with very long lines (65466)
Size 188 kB (188405 bytes)
Hash 6f77d251bacf7b2935dbe06ebbee0cf7
c99c89d26212e7283c0b164c00e6d99fbac59b61
e90703f0dcd04fd8f404c7409417a27f910bfb70e3aab6a6960aa0d3bc329793
GET /build/app.6b0cbd46.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TlrK1pvJV8dHVse9f8EBK9Qb8QhXDZ8shHBvbvfSCDzuBTfzA%2Fd07emkPSqfnHGiVrY%2BzcRBDkTkkee26EtWMpAp2wguLrWVeMdqiTDsluOAXL3xqFpaFL4c2Eh%2F"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
etag: W/"6481d6c5-2dff5"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 7187
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 966e9597cfad56ba-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2734&min_rtt=637&rtt_var=2074&sent=62&recv=65&lost=0&retrans=0&sent_bytes=20585&recv_bytes=6352&delivery_rate=721958&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18057&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=241&inflight_dur=40&x=40"
GET multiup.io/build/images/gray_jean.ced81a01.png
104.21.48.1200 OK 14 kB URL GET multiup.io/build/images/gray_jean.ced81a01.png
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type PNG image data, 150 x 150, 8-bit grayscale, non-interlaced
Hash e3d55104d9a9f186da3df4f730b77f4d
7e5e6e302e5ac36d5d45ed171cda5c3ccb182d13
7037cba1540dc0d8eaec93c3d6f978f6757b72ed63177e6c458f738872fa3224
GET /build/images/gray_jean.ced81a01.png HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/build/app.3a8e05b1.css
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:25 GMT
content-type: image/png
content-length: 13475
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AGUcSisDEEsHl7SiexZVqRrnZxwnEF4xTiSwvy3ertbPfYWb7qbzF7KkDx1oHZfdmK0IoHWcspzsGYJZ%2Bx0YvFKpwnA1jOjiVwu%2FB5iLKFj0HJYqKDHnulCIBJ3r"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
etag: "6481d6c5-34a3"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
age: 7187
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 966e959aefc956ba-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2112&min_rtt=0&rtt_var=1385&sent=366&recv=87&lost=0&retrans=0&sent_bytes=432271&recv_bytes=7687&delivery_rate=21895013&ss_exit_cwnd=34359&ss_exit_reason=2&cwnd=29079&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=739&inflight_dur=99&x=40"
GET fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
142.250.178.99200 OK 28 kB URL GET fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP 142.250.178.99:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
ValidityMon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open Sans LightRegular1.10;1ASC;OpenSan
Hash 177cc92d2e8027712a8c1724abd272cd
861b3593521709d9fa8a8efb6f40817dd7fa9337
2289b94b0f245d3078128fbdd2a5c59648ddd94ac1a7dd749b2375596ac8d562
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Jul 2025 20:48:09 GMT
expires: Thu, 23 Jul 2026 20:48:09 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:35 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 509056
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET omoneyandfarto.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
54.240.174.58200 OK 3.1 kB URL GET omoneyandfarto.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
IP 54.240.174.58:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerAmazon
Subjectomoneyandfarto.com
FingerprintC4:12:33:68:71:50:37:16:72:5E:2D:C5:CB:A1:6E:A7:66:78:86:D4
ValidityFri, 27 Jun 2025 00:00:00 GMT - Sun, 26 Jul 2026 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (3088), with no line terminators
Hash b969a38019bd597989b7cc42828738bc
324715c4f1eae327c6632f0c38ca2f6c2f54888c
4873541df7ab9a7645c2ac7c979d5cd3e5928975c96c143f0d61821da524e8c1
GET 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 HTTP/1.1
Host: omoneyandfarto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1228
date: Tue, 29 Jul 2025 18:12:25 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=OgGCq6sjYZC56Epfu8QhutZj1bw+IuMq67lSYVYTAXNc6w+XtLmsn9Iz7kTGvTfyGkEJJ4c6GZD6s1qYGf+/VDsICwALyHbXE4PjMIAVezDwDV2M3hJ3rf9BuMCm; Expires=Tue, 05 Aug 2025 18:12:25 GMT; Path=/
AWSALBCORS=OgGCq6sjYZC56Epfu8QhutZj1bw+IuMq67lSYVYTAXNc6w+XtLmsn9Iz7kTGvTfyGkEJJ4c6GZD6s1qYGf+/VDsICwALyHbXE4PjMIAVezDwDV2M3hJ3rf9BuMCm; Expires=Tue, 05 Aug 2025 18:12:25 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oELyohQRynTnykJySP9tL8syZb4T2u6dIK9BUE0CWPznt28JB8YVJA==
X-Firefox-Spdy: h2
GET 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
0.0.0.0 0 B URL GET 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
IP 0.0.0.0:0
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /WjFSd0M7UzEafDsMMFE2KF1vUnEcFGAxJ2lcZBQxMEQ3EyVsXnwULzVENhExNV8mWS0/RXdFBTJiBx8AD101BgkjRmItOWpZGBp6KlQaMXMAXBBOITB4NScQYwAeDiBqYQEycBNfCxAJaGBmPDoDXB8aey1UAAAKEVs9FSYJSTwnOilQHg4kE1MoAHcUXARCITMFKDkqbwAIMyBoejwhOT51OQMINAg/ESktQTQNe2l8KzI2Cls+BCY9YzwTLTZFMTAJLWE7MjAUWzFScRh+YBMkO3IxTxlocz0SCzJCCxlybHI/EyQ7dWYfDx1jIRULKXA2RTNvfBpaETdXChgIAAMQGAgZaD8+BzlWHjAnMnY/D3U5WBMCIRJCFi5xLggIGQltVwoDdxBlMUAKM1U8LgFvBjc/DTNQGh93OQI2BiYJBSA+B2pHGA0zaVA1TnY5ZghFJg0FYRVxMRc4BCw0QW8fcw57KhURa19nECEIXCgn HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
142.250.178.99200 OK 28 kB URL GET fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP 142.250.178.99:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
ValidityMon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-BoldOpe
Hash 7e08cc656863d52bcb5cd34805ac605b
f6e1c78441d4ca2ef589ce79e48d3dbf9dca9a0d
0782a52179d0e25f19c39b43253795b25787d65abdbd8bfa38be0f21a4512748
GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Jul 2025 14:27:10 GMT
expires: Sat, 25 Jul 2026 14:27:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:43 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 359117
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET xz.pipidroods.com/sPxGIrHdA0S/125824
23.109.170.222200 OK 5 B URL GET xz.pipidroods.com/sPxGIrHdA0S/125824
IP 23.109.170.222:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerLet's Encrypt
Subjectxz.pipidroods.com
FingerprintD3:6F:30:24:1A:FA:8F:7D:31:D0:70:C1:D0:FE:6F:0F:FC:A1:9D:81
ValiditySun, 15 Jun 2025 22:00:36 GMT - Sat, 13 Sep 2025 22:00:35 GMT
File type ASCII text, with no line terminators
Hash f7a2939527fd9e68723da600e96d76bd
a9e717b6364d2895ee0a716050db32ca0ef1bb42
d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sPxGIrHdA0S/125824 HTTP/1.1
Host: xz.pipidroods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Jul 2025 18:12:25 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 5
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Origin
Access-Control-Expose-Headers: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Megageocheckolololo, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires, Credentials
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, OPTIONS
Accept-Ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GGI10=G/IAAASeD7dNK/dmKv8IjKne3vVF23LHD4p/239bRbcCCoMg63NMJOcmHtdgLENcdVb9C/8fcU22F4TMszPXDn3bi0JM1sszQtMiPRle3iuF+nW+PadvTJQWghuEE2erh7OxP8CGug0ouFXNMz9sX8bofOhPVVBMTsv72LAiF5aGU46qKWF8uZ1fb+RKCE0MoKV13JEH4pvoZXocf6ywyRddqbWmm1R6/v8=; max-age=3600000; path=/; secure; SameSite=None
GUI4=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; max-age=3600000; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET static.cloudflareinsights.com/beacon.min.js
104.16.79.73200 OK 20 kB URL GET static.cloudflareinsights.com/beacon.min.js
IP 104.16.79.73:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
Fingerprint9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
ValidityWed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Jul 2025 18:12:25 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 966e95985b0e56be-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET multiup.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
104.21.48.1200 OK 1.2 kB URL GET multiup.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type JavaScript source, ASCII text, with very long lines (1238)
Hash 9e8f56e8e1806253ba01a95cfc3d392c
a8af90d7482e1e99d03de6bf88fed2315c5dd728
2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: application/javascript
last-modified: Fri, 25 Jul 2025 15:47:16 GMT
cache-control: max-age=172800, public
content-encoding: gzip
etag: W/"6883a704-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XelNa84iTBIj2r67KMCHYyQUvLu6zSpC4WRTeSFEEn7wmCBfkv4jLqM6hHziDXRgjOeN4Z9NUOV8YZJZSmyu3hjQPeAQ3zcAQ1IIXhCrrDkpqUNLYpK6wT7SJk5c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 966e9597cfae56ba-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 31 Jul 2025 18:12:24 GMT
GET sswalesmentb.com/cUJOQW1efS0yUBQpezg+KS4HJDg3dxoqI1RwDBA1SA0dL1wyJxsuSwUrKnxcQHt4dVVFZD4oCUxzdmceBSM6NB5Mc2goAxctc2cbTHNgcUNDbHtnGExzaDUdECVzcEsBNjotUEB1e3JVQHB5dVhCdHw
104.21.89.126204 No Content 0 B URL GET sswalesmentb.com/cUJOQW1efS0yUBQpezg+KS4HJDg3dxoqI1RwDBA1SA0dL1wyJxsuSwUrKnxcQHt4dVVFZD4oCUxzdmceBSM6NB5Mc2goAxctc2cbTHNgcUNDbHtnGExzaDUdECVzcEsBNjotUEB1e3JVQHB5dVhCdHw
IP 104.21.89.126:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectsswalesmentb.com
FingerprintA3:10:8A:AE:11:0E:C7:FF:9F:73:4E:8B:C8:BE:AD:10:F1:AA:13:61
ValidityWed, 11 Jun 2025 06:25:26 GMT - Tue, 09 Sep 2025 07:23:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cUJOQW1efS0yUBQpezg+KS4HJDg3dxoqI1RwDBA1SA0dL1wyJxsuSwUrKnxcQHt4dVVFZD4oCUxzdmceBSM6NB5Mc2goAxctc2cbTHNgcUNDbHtnGExzaDUdECVzcEsBNjotUEB1e3JVQHB5dVhCdHw HTTP/1.1
Host: sswalesmentb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 29 Jul 2025 18:12:25 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6aLt8%2FtKAYFdE8hlVjAZqADjkgiKwrQGxsrOCc0tkQEOc%2B9h4%2FU48lJwbfeCji579zkNdt4hlESQvtEG0wxpCSl%2BKsdYMTVCxrxSLk58"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 966e959adb670b61-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET d3m6crjuedf6o.cloudfront.net/?jrcmd=1195868
3.167.7.46200 OK 232 kB URL GET d3m6crjuedf6o.cloudfront.net/?jrcmd=1195868
IP 3.167.7.46:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
Size 232 kB (232525 bytes)
Hash 359a6e419353aba027ffd82f09115e1e
5e76d665e4d3497bc893fb908c2f6f495f144b21
568e6f61669f271862d954871d0332ef5874af37522445fc7435f462e4374721
GET /?jrcmd=1195868 HTTP/1.1
Host: d3m6crjuedf6o.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 79263
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
date: Tue, 29 Jul 2025 18:12:10 GMT
x-cache: Hit from cloudfront
via: 1.1 1b7f8001b2b06f9624559a35b6822156.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: pFYoZpoemHQaNzjVpyoeTStpHN5J4PikLfW5-W3Rhmnp0B3Amwae7Q==
age: 15
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
142.250.178.99200 OK 26 kB URL GET fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP 142.250.178.99:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
ValidityMon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu
Hash c045b73d86803686f4cd1cc3f9ceba59
92d652578c531e2c3d9db4622584f6a1ab2c225a
927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc
GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17857
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Jul 2025 15:30:32 GMT
expires: Tue, 28 Jul 2026 15:30:32 GMT
cache-control: public, max-age=31536000
age: 96113
last-modified: Wed, 11 Oct 2017 21:49:44 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.48.1200 OK 26 B IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectukankingwithea.com
FingerprintBC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
ValidityFri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
File type ASCII text, with no line terminators
Hash 3ddf8c2220bdc516d28ebb73c11c68a4
db855e4d3eeb0996caf6c1d3c085e2e9fb5c20c7
2c7ae53fe3441967b93424531568a8b6b6349e349ed09d85079533d104312263
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Jul 2025 18:12:26 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://multiup.io
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8MmUcNhjNbbdldsOEZo45NGppc%2FF25VIuLq1qO2mO62yPeU1Rlx2ClSKjEDK6kwvWCe0KsjG9nydBfyXmVxlNoh6MjRAUTLufjcbjceLl%2B0%3D"}]}
content-encoding: br
set-cookie: csu=314034030781511@1@1753812746; SameSite=None; Secure; Max-Age=31104000
cf-ray: 966e959e987f56b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
142.250.178.99200 OK 28 kB URL GET fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP 142.250.178.99:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD
ValidityMon, 07 Jul 2025 08:35:11 GMT - Mon, 29 Sep 2025 08:35:10 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open Sans LightRegular1.10;1ASC;OpenSan
Hash 177cc92d2e8027712a8c1724abd272cd
861b3593521709d9fa8a8efb6f40817dd7fa9337
2289b94b0f245d3078128fbdd2a5c59648ddd94ac1a7dd749b2375596ac8d562
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Jul 2025 20:48:09 GMT
expires: Thu, 23 Jul 2026 20:48:09 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:35 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 509058
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET multiup.io/build/app.3a8e05b1.css
104.21.48.1200 OK 622 kB URL GET multiup.io/build/app.3a8e05b1.css
IP 104.21.48.1:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectmultiup.io
FingerprintFD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
ValidityTue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
File type ASCII text, with very long lines (61854)
Size 622 kB (621844 bytes)
Hash 8cb6aed291b0b6f3837bd1593ac8db7a
2b585c217008e290a59c19840d7ca43997fc7f6e
c90d1244813a964cb1c495da3bbe5b2c21d37732f5b1c2ad3e5a2f9868339a6e
GET /build/app.3a8e05b1.css HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Cookie: PHPSESSID=2to1a1juprtm3rs2trif10pso2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Jul 2025 18:12:24 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6THN7VQ%2FdLt4RLDY1E6goDad%2FUqw%2BPJVGRChmCn8PlIqK41FsTy7TH0UkGQL6zqzP6BZrF9R6Ss04So2Fbhp%2B9kRyIxpbXGvVSnxXzZSU4383E22ZtFAI9tmEkOs"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
etag: W/"6481d6c5-97d14"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 14
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 966e9597cfab56ba-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2734&min_rtt=637&rtt_var=2074&sent=55&recv=65&lost=0&retrans=0&sent_bytes=10785&recv_bytes=6352&delivery_rate=721958&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18057&unsent_bytes=0&cid=bbc0fc63922d70d3&ts=239&inflight_dur=38&x=40"
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOMR6u_O56RS4Oa2FD3IxD3jpfjve4HFkGMxVbo-AfrOVaANQHm5dl7qExL-2ZlfG3o-RKf
64.233.161.84302 Found 0 B URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOMR6u_O56RS4Oa2FD3IxD3jpfjve4HFkGMxVbo-AfrOVaANQHm5dl7qExL-2ZlfG3o-RKf
IP 64.233.161.84:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
Fingerprint9B:4C:3E:7D:75:3A:C6:33:33:2F:71:BC:DD:98:50:A8:D7:93:6D:D2
ValidityMon, 07 Jul 2025 08:36:02 GMT - Mon, 29 Sep 2025 08:36:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiOMR6u_O56RS4Oa2FD3IxD3jpfjve4HFkGMxVbo-AfrOVaANQHm5dl7qExL-2ZlfG3o-RKf HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:LPRPeDWS5JG9oVzYWmGjQ7QFbh3dOg:Ef5WYeth1_y_9vzQ;Path=/;Expires=Thu, 29-Jul-2027 18:12:26 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 29 Jul 2025 18:12:26 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOCIb-VZaGbEYvVTrSGLts3cjE9sONj41cTHA0MoPh1RoWM7sGPto95NIQMtpwH6RIhaDhVPQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S555059300%3A1753812746308400
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-MDI26abfhYtvMwneCAiuxw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 414
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiP7Lv_oErtHnCPA1LcrAUt8TCmnTZ7EXZ8T7Ym9V8PrtaQliR31uk95CslsIkoUTCXz_3F64Q&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1998298398%3A1753812746311022
64.233.161.84403 Forbidden 0 B URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiP7Lv_oErtHnCPA1LcrAUt8TCmnTZ7EXZ8T7Ym9V8PrtaQliR31uk95CslsIkoUTCXz_3F64Q&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1998298398%3A1753812746311022
IP 64.233.161.84:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint60:9F:41:D7:83:68:5E:64:22:9D:7C:5E:2D:7B:C9:C5:07:DA:C6:D8
ValidityMon, 07 Jul 2025 08:34:14 GMT - Mon, 29 Sep 2025 08:34:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiP7Lv_oErtHnCPA1LcrAUt8TCmnTZ7EXZ8T7Ym9V8PrtaQliR31uk95CslsIkoUTCXz_3F64Q&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1998298398%3A1753812746311022 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 29 Jul 2025 18:12:26 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-yjbETlAWHFHDoJ_m0L6F7A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4ikenfs4_uY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST cloudflareinsights.com/cdn-cgi/rum
104.16.80.73204 No Content 0 B URL POST cloudflareinsights.com/cdn-cgi/rum
IP 104.16.80.73:443
Requested by https://multiup.io/download/2479baedcfeda3e4fd26d07ea1132772/Wuchang.Fallen.Feathers.v178099-P2P.zip
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
Fingerprint9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
ValidityWed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1154
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 29 Jul 2025 18:12:27 GMT
access-control-allow-origin: https://multiup.io
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 966e95a529985691-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2