| megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png | 94.242.53.111 | 200 OK | 7.1 kB |
URL GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typePNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced Hash5d15526be10b904a6b48d1af04a10cc3 c09b6874359ac6d71db95593618a9acb55baa984 894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: image/png
content-length: 7137
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js | 94.242.53.111 | 200 OK | 6.0 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators Hashc9e3a210d83398f301b3a7049c259676 8e227bb40fe120841829a7fef0ffeb091d179a91 aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-178c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| undefined/Q0htZmIiKg4LXSJ1D0AXMSRQQ1AFbV8gBnAnCl4WcnBeD1M1KgpIAS8nGAIEMScDEkwtLRlDUAV5PjEWcCsBIxMBCgYzACl4LiNSejgLClMGGV8KFAQ/OD4scBkqIwoWPz0kFhkAKTdbFxpdJDIqKw81CCQmPQ8aBgo5LxcHGw4cO3FwCyIwGTsIM1IhDRdeFxUkKD4yOjg6NA4SPyE3DggaAwVbBDAKPAAAHT4uIxZ4PQEjIgkUKBQLIDc2MgARPy4Kd3EmI1cFBio0DBR5Jyc7FA0OLgo0eScOFQYeXyhXARkjPjtwJAw0UzsgDyAFch5fKFcLCkBSARl7XCkwBwpdA1MwGD8hNDAfKTA6GnsGPCMVLAQlJDMNPwhbdhkBLCMaG1kpJAEjSFQgIQ4GHjMEDlkxUicMND4KDBo4L1EKCgY1JAd8FTIJFng0LhIlHzgsURMONyFEKTsCCBJ+AhsRJXA/DgEEEwlf | 0.0.0.0 | | 0 B |
URL GET undefined/Q0htZmIiKg4LXSJ1D0AXMSRQQ1AFbV8gBnAnCl4WcnBeD1M1KgpIAS8nGAIEMScDEkwtLRlDUAV5PjEWcCsBIxMBCgYzACl4LiNSejgLClMGGV8KFAQ/OD4scBkqIwoWPz0kFhkAKTdbFxpdJDIqKw81CCQmPQ8aBgo5LxcHGw4cO3FwCyIwGTsIM1IhDRdeFxUkKD4yOjg6NA4SPyE3DggaAwVbBDAKPAAAHT4uIxZ4PQEjIgkUKBQLIDc2MgARPy4Kd3EmI1cFBio0DBR5Jyc7FA0OLgo0eScOFQYeXyhXARkjPjtwJAw0UzsgDyAFch5fKFcLCkBSARl7XCkwBwpdA1MwGD8hNDAfKTA6GnsGPCMVLAQlJDMNPwhbdhkBLCMaG1kpJAEjSFQgIQ4GHjMEDlkxUicMND4KDBo4L1EKCgY1JAd8FTIJFng0LhIlHzgsURMONyFEKTsCCBJ+AhsRJXA/DgEEEwlf IP 0.0.0.0:0
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /Q0htZmIiKg4LXSJ1D0AXMSRQQ1AFbV8gBnAnCl4WcnBeD1M1KgpIAS8nGAIEMScDEkwtLRlDUAV5PjEWcCsBIxMBCgYzACl4LiNSejgLClMGGV8KFAQ/OD4scBkqIwoWPz0kFhkAKTdbFxpdJDIqKw81CCQmPQ8aBgo5LxcHGw4cO3FwCyIwGTsIM1IhDRdeFxUkKD4yOjg6NA4SPyE3DggaAwVbBDAKPAAAHT4uIxZ4PQEjIgkUKBQLIDc2MgARPy4Kd3EmI1cFBio0DBR5Jyc7FA0OLgo0eScOFQYeXyhXARkjPjtwJAw0UzsgDyAFch5fKFcLCkBSARl7XCkwBwpdA1MwGD8hNDAfKTA6GnsGPCMVLAQlJDMNPwhbdhkBLCMaG1kpJAEjSFQgIQ4GHjMEDlkxUicMND4KDBo4L1EKCgY1JAd8FTIJFng0LhIlHzgsURMONyFEKTsCCBJ+AhsRJXA/DgEEEwlf HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| d3og8t183i1vbg.cloudfront.net/?itgod=761186 | 108.157.217.147 | 200 OK | 490 kB |
URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186 IP 108.157.217.147:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size490 kB (489706 bytes) Hash61351cc583dca7a2dded3e5137538a64 a6b3ec5778dc155efaab07711da1bcdb4ead1afc 97adabc32931bdf5d6ba90778ee3e63cf46e8e1c850d0f1db69da814e01391b1
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 152023
date: Sat, 19 Apr 2025 20:46:19 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 47df1466fb55fd6ccae35d2a1425deaa.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: VVGbjbN4aahwI1eAusBQnHkQUG7sf5oAMOcIs1jRHW1rXLjEAt6_bQ==
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.112.1 | 500 Internal Server Error | 183 B |
IP 104.21.112.1:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash607f8a53dbf072834a28425fae6b0084 a64f05fe0b51691778ebf447e3664bfbd78cbe42 30032743c9cc551853d7e87cd9335dd20bb136932179fcb7f8136b2f5e9033ba
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
date: Sat, 19 Apr 2025 20:46:20 GMT
content-type: text/html
server: cloudflare
cf-cache-status: DYNAMIC
cf-ray: 932f402f2838712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| xml.ksbeforebu-serving.com/thumbnail?i=38IDRaYIP2M_0&p=1745095580.220815&imgt=icon | 198.134.116.29 | 302 Found | 30 kB |
URL GET xml.ksbeforebu-serving.com/thumbnail?i=38IDRaYIP2M_0&p=1745095580.220815&imgt=icon IP 198.134.116.29:443
ASN#27257 WEBAIR-INTERNET
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerLet's Encrypt Subjectksbeforebu-serving.com Fingerprint48:1C:C0:2C:DA:F7:D0:23:FF:C1:21:2F:CE:5B:35:D0:1E:F4:CF:3A ValidityTue, 18 Mar 2025 06:44:08 GMT - Mon, 16 Jun 2025 06:44:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=38IDRaYIP2M_0&p=1745095580.220815&imgt=icon HTTP/1.1
Host: xml.ksbeforebu-serving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 19 Apr 2025 20:46:24 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.ksbeforebu-serving.com/n337/ad/250x250_Q9KZuyHG.png
|
|
| megaup.net/themes/spirit/assets/frontend/css/socicon.css | 94.242.53.111 | 200 OK | 9.8 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/socicon.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash910a42ce112991b31b30a735f1006a5f 6c8b4769270f1c86bb1c7a6b54325465395ba614 010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-266e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css | 94.242.53.111 | 200 OK | 739 B |
URL GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hasha19cdfde4cca33ccafc0b8bfd518bebb df1830e07033d0ae31288f62892121778fc7c765 a347474d3c97d5440c2f06c86c314eb1e9c2a20e2b84e8367d57743fe77a8115
GET /themes/spirit/assets/frontend/css/mu-waiting-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Mon, 17 Feb 2025 00:39:28 GMT
vary: Accept-Encoding
etag: W/"67b28540-2e3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/images/logo/logo.png | 94.242.53.111 | 200 OK | 5.9 kB |
URL GET megaup.net/themes/spirit/assets/images/logo/logo.png IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typePNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced Hashfa360a47a62ae74a0a3d8c0f3e6f7f12 168c72a918b04b735f8e0f8a72223a16f0eda358 1d3a3c84dd36871d1009693761f441537117d5ee62c8e775d7d52c77d4c46de4
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: image/png
content-length: 5900
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-170c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/img/background.jpg | 94.242.53.111 | 200 OK | 86 kB |
URL GET megaup.net/themes/spirit/assets/frontend/img/background.jpg IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3 Hash1b0874b56457a14258e3bd22805266c6 26ff3d095376d43cb78388e700707cdaf6ac75eb 5c5e0d52eb281e1ceae07f53c931982e8e014b9a535df9c98246157167e29285
GET /themes/spirit/assets/frontend/img/background.jpg HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:17 GMT
content-type: image/jpeg
content-length: 86513
last-modified: Tue, 11 Feb 2025 07:35:38 GMT
vary: Accept-Encoding
etag: "67aafdca-151f1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 142.250.74.35:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Apr 2025 10:12:20 GMT
expires: Fri, 17 Apr 2026 10:12:20 GMT
cache-control: public, max-age=31536000
age: 210837
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 | 142.250.74.35 | 200 OK | 25 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 IP 142.250.74.35:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24984, version 1.0 Hash303a79d404d97ccbb3d803088fc387d8 66e3525b79a1a58a63fe0934f31676dd40c7f033 7e510e61c497d334da21eccda06df5d3a428c9ea94d6903b6138e7c7255aba0f
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24984
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Apr 2025 09:31:51 GMT
expires: Fri, 17 Apr 2026 09:31:51 GMT
cache-control: public, max-age=31536000
age: 213266
last-modified: Thu, 14 Dec 2023 02:04:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/theme.css | 94.242.53.111 | 200 OK | 207 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/theme.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeassembler source, ASCII text, with CRLF line terminators Size207 kB (206626 bytes) Hash06cc8983a538a05dddf526b3b7e732aa 2414173a1660589ebbba8bdc6e3d1237df6063db 27e49bfa89404d352fa4627719f2a9a3ea5c2759c2bc74e7567ff98b5a996758
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 18:30:52 GMT
vary: Accept-Encoding
etag: W/"67ab975c-32722"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/granim.min.js | 94.242.53.111 | 200 OK | 11 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators Hash714368d20c70f8c91b0a596e128dac07 563954ec3a896fc129d014f01836245829f6d01d e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-298b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| atsidhelookin.org/S2hKdk5kVykFcy8DBBsbISoNFQgZGggzDDE+eDsEGjAEIy8sD2wCJy9VfUB/elB8UD4iDHdHaDgcKwI7OFV7UCclDiVLaD1Ve1h9f0Z5QGB/Tj9Lf20cOhcpdllsBjo/BHdHeX9dek97fl99RHt8 | 172.67.146.156 | 204 No Content | 0 B |
URL GET atsidhelookin.org/S2hKdk5kVykFcy8DBBsbISoNFQgZGggzDDE+eDsEGjAEIy8sD2wCJy9VfUB/elB8UD4iDHdHaDgcKwI7OFV7UCclDiVLaD1Ve1h9f0Z5QGB/Tj9Lf20cOhcpdllsBjo/BHdHeX9dek97fl99RHt8 IP 172.67.146.156:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectatsidhelookin.org Fingerprint56:3D:9F:A6:68:D7:0A:0A:9D:B3:DC:98:59:23:E5:42:EC:9E:0C:56 ValidityFri, 04 Apr 2025 05:20:41 GMT - Thu, 03 Jul 2025 06:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /S2hKdk5kVykFcy8DBBsbISoNFQgZGggzDDE+eDsEGjAEIy8sD2wCJy9VfUB/elB8UD4iDHdHaDgcKwI7OFV7UCclDiVLaD1Ve1h9f0Z5QGB/Tj9Lf20cOhcpdllsBjo/BHdHeX9dek97fl99RHt8 HTTP/1.1
Host: atsidhelookin.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Apr 2025 20:46:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 932f40235f6356bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png | 94.242.53.111 | 200 OK | 536 B |
URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typePNG image data, 57 x 57, 8-bit colormap, non-interlaced Hash0019444f6b6df5b4b5ed32b6b469caab 4232370d10ab54ef9bda57aa9dcb813036047b35 0509f6df067face535f028cd86200748952227161f8f244aa7864e7848553562
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:19 GMT
content-type: image/png
content-length: 536
last-modified: Thu, 13 Feb 2025 17:40:08 GMT
vary: Accept-Encoding
etag: "67ae2e78-218"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.112.1 | 500 Internal Server Error | 183 B |
IP 104.21.112.1:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash607f8a53dbf072834a28425fae6b0084 a64f05fe0b51691778ebf447e3664bfbd78cbe42 30032743c9cc551853d7e87cd9335dd20bb136932179fcb7f8136b2f5e9033ba
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
date: Sat, 19 Apr 2025 20:46:20 GMT
content-type: text/html
server: cloudflare
cf-cache-status: DYNAMIC
cf-ray: 932f402f282d712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tomlldahehun.org/multi?cs=YUo3MUpQegIIeVF9BQFyWXoEBXg&abt=0&red=1&sm=76&k=schedule&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fde8ce9f9784211dbf7a921a5cf36635b%2FSchedule_I_v0.3.4f8.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_SF4o=1745095579215&crc=1 | 143.204.55.85 | 200 OK | 15 B |
URL GET tomlldahehun.org/multi?cs=YUo3MUpQegIIeVF9BQFyWXoEBXg&abt=0&red=1&sm=76&k=schedule&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fde8ce9f9784211dbf7a921a5cf36635b%2FSchedule_I_v0.3.4f8.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_SF4o=1745095579215&crc=1 IP 143.204.55.85:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerAmazon Subjecttomlldahehun.org Fingerprint6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File typeASCII text, with no line terminators Hashd39207bea620cffa8e65d3b12e8f1547 220ebce5a61ee5d771133e1cd20c469443ccfd76 f058a19c34ccdfbb47e68ba58b254ffa5d774fdaeeaa0b1fb9f19d3c055c0a21
GET /multi?cs=YUo3MUpQegIIeVF9BQFyWXoEBXg&abt=0&red=1&sm=76&k=schedule&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2Fde8ce9f9784211dbf7a921a5cf36635b%2FSchedule_I_v0.3.4f8.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_SF4o=1745095579215&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 41
date: Sat, 19 Apr 2025 20:46:20 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=eYYUP9UskWWp9VwqC9ArbU9vZmDDCFCwNbHUQVcLwgaQ6TrLbX7ZVnnNPSQiRWb64WMJGMyE9kTlBhsqMevHJEqfEdV5NOulvzSH8Bb2yB1zetyH6ydyJAp13cm3; Expires=Sat, 26 Apr 2025 20:46:20 GMT; Path=/
AWSALBCORS=eYYUP9UskWWp9VwqC9ArbU9vZmDDCFCwNbHUQVcLwgaQ6TrLbX7ZVnnNPSQiRWb64WMJGMyE9kTlBhsqMevHJEqfEdV5NOulvzSH8Bb2yB1zetyH6ydyJAp13cm3; Expires=Sat, 26 Apr 2025 20:46:20 GMT; Path=/; SameSite=None
csu=980af75e-1545-45cf-9d04-686134042282
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uiIqKu8AabnlSev3Iirkatn4AZLcA8UjIKfezeqU_BgP9oeTpS2XiA==
X-Firefox-Spdy: h2
|
|
| atsidhelookin.org/WXpsU3d2RQ8gSjtIFBgWETw1Cy8XGT0VDzgcKmI2AUsUZSAcI0onHj1HVGFCYEtddQcwHlFgRX8JGDIDLAlRYUdpT0o6GT8VUWFHaUxcYEJuQ0lkNDEOGCMEfEktdkUfX14VEikTDzcZdxQJJ1JrPA83GXxIKnZEHxMIdkQdCQsfRxQrKQIRGxBfPxAQEy05MiAxJTAzFDFcFDg+PxsCEBMWDjgHCC47akE4LRQgLgpCXR8dGB0nFRMpGAEBAT1JITQjNSsLHiMYDyEXBD4sXj8CFxA9ZD4RHV4dMyodDz0ubzc4HkcVEC0jPhweAApFLQwgKT4uNzgSABQuLSs+HCAcMBoPFw5gEC83OB5HFRAuADVpKAAwRS1KDmA1ODhdNwc7Fz4lE2o0BRFHAwoPPiE0GF87GDEdKmUzHREUHx0yDSA5JiA2BhZGFzMlETUfHhwBGjQxLQJCGhgrP0MQPCIlFREsXDIgYA8PZj4bOwdmJzQ7JB5AFUIuICYcDj0rDStOBgoWCUMlETZpND0CTjY4LjgbLC8rFRkDHyURNmkoOAY4NjgvFzJqNwYeRBQAC2YcPjMnHiM6SiIHNmw0OAZDFDYlECcOPxoyIGgUICkULjYWFg4XOVQpOA0/GjAxFygPPgBoIAEkDxYtFAA6HDAuNxkfEgg/IR8tKxlBF0kiJRIeKAUwMhxKDxQbDzc6IwANKVkkFTQcJRINFF9fF1JuOQImGzVfWxBAbEpVZ0BqT1xgQmFOXGVOakNedQFkSkJqWWtUWnUCZFdedQMpGwtuRn8KGCcbZEtbZ0JpQ1lmT29NWmA | 172.67.146.156 | 204 No Content | 0 B |
URL POST atsidhelookin.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 IP 172.67.146.156:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectatsidhelookin.org Fingerprint56:3D:9F:A6:68:D7:0A:0A:9D:B3:DC:98:59:23:E5:42:EC:9E:0C:56 ValidityFri, 04 Apr 2025 05:20:41 GMT - Thu, 03 Jul 2025 06:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST 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 HTTP/1.1
Host: atsidhelookin.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 19 Apr 2025 20:46:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dwJ3SReCGGffWnwGOrI59dslWGsLnmdvG7zevaU5%2FAUspYGBqJ4snUQBQN26D8nIRTNYLB5bi8X23gvQxyMamFBHaFXe%2FAQk%2FMEZZF7QPodobFSHWWDtVmnxrPj48PoBCAEZvg%3D%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 932f40595bba7129-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13618&min_rtt=3446&rtt_var=9995&sent=42&recv=54&lost=0&retrans=0&sent_bytes=6999&recv_bytes=5267&delivery_rate=3489&cwnd=12000&unsent_bytes=0&cid=dacab073d79353b7&ts=8149&x=16"
|
|
| megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar | 94.242.53.111 | 200 OK | 79 kB |
URL User Request GET megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar IP 94.242.53.111:443
CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (52057) Hashcb88d2f55ce7c5846bc661dd0441ee34 a9544e546ff30523ff06d787c978dcab40894311 4021b5bc53cf8dbe65754a12b6f969ed6b3e0a5dfb7603c88c86a9f5bb847d49
GET /de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=9t1g639vna1f7em0rffcqup91v; expires=Sun, 20 Apr 2025 20:46:14 GMT; Max-Age=86400; path=/; domain=megaup.net; secure; HttpOnly; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
access-control-allow-origin: https://megaup.net
access-control-allow-headers: Content-Type, Content-Range, Content-Disposition, Content-Description
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, no-cache, private
date: Sat, 19 Apr 2025 20:46:14 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js | 94.242.53.111 | 200 OK | 87 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators Hash5b5a269bd363e0886c17d855c2aab241 042dd055cd289215835a58507c9531f808e1648a 1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-152b9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| theharityhild.buzz/QlFqTWQ5cxk6OzcjBm9eYDkeORQxa0ViCSc2CzgUbD8POUsxJkQnF2B9SD4JJHNQfEhgIgc7RnhzXmNXYH1IOQUlDgMpRnhzUn5WdGJZb0hgIh8vOys1WG9eYDdSflchYV4vSXQ0Wi9JdjUIfUl7ZVJ6SSRnDygBITQJLgchNEgw | 0.0.0.0 | | 0 B |
URL GET theharityhild.buzz/QlFqTWQ5cxk6OzcjBm9eYDkeORQxa0ViCSc2CzgUbD8POUsxJkQnF2B9SD4JJHNQfEhgIgc7RnhzXmNXYH1IOQUlDgMpRnhzUn5WdGJZb0hgIh8vOys1WG9eYDdSflchYV4vSXQ0Wi9JdjUIfUl7ZVJ6SSRnDygBITQJLgchNEgw IP 0.0.0.0:0
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /QlFqTWQ5cxk6OzcjBm9eYDkeORQxa0ViCSc2CzgUbD8POUsxJkQnF2B9SD4JJHNQfEhgIgc7RnhzXmNXYH1IOQUlDgMpRnhzUn5WdGJZb0hgIh8vOys1WG9eYDdSflchYV4vSXQ0Wi9JdjUIfUl7ZVJ6SSRnDygBITQJLgchNEgw HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP 64.233.164.84:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint52:D3:F7:7E:94:6F:70:55:50:A6:EA:38:4B:15:DF:91:54:96:59:82 ValidityMon, 31 Mar 2025 08:56:30 GMT - Mon, 23 Jun 2025 08:56:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:9SbBZrFY2DltdS1Y6kNtbhepkGLfnw:AoeWOrSuzAEZ_6ar; Expires=Mon, 19-Apr-2027 20:46:19 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Apr 2025 20:46:19 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVstMXwj6gA5PmsxKycINLhktG3_n8G0NC65vrmcQR6LFa484-lhhJn2ZD6fUfYsGSRLOW-hLw
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-6R4SLgODiCe7mnNvYN53Qg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.112.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP 104.21.112.1:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Apr 2025 20:46:20 GMT
content-type: binary/octet-stream
server: cloudflare
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: STALE
age: 1961754
last-modified: Fri, 28 Mar 2025 03:50:26 GMT
cf-ray: 932f402f080b712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css | 94.242.53.111 | 200 OK | 59 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (58929), with CRLF line terminators Hash879812fc22af75aa3ae7b5666ca4f4b8 df27469a952b7ee36cc03db471c6198f577186a8 c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-e6ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| static.ksbeforebu-serving.com/n337/ad/250x250_Q9KZuyHG.png | 23.36.77.113 | 200 OK | 30 kB |
URL GET static.ksbeforebu-serving.com/n337/ad/250x250_Q9KZuyHG.png IP 23.36.77.113:443
ASN#20940 Akamai International B.V.
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerLet's Encrypt Subjectstatic.ksbeforebu-serving.com Fingerprint71:CD:3F:E6:B2:9F:73:58:6A:E8:FA:AA:5D:B4:F0:86:02:65:0B:91 ValidityWed, 09 Apr 2025 10:47:19 GMT - Tue, 08 Jul 2025 10:47:18 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hash1133d3aaa0866ea57a5b44ecccd3283b 96417ace0d02687e054a2fba6c9cb197162eb0ea 62aee0fd8036247bfc2fca571d6e6328621f8639e4d939807cb555111f6bd039
GET /n337/ad/250x250_Q9KZuyHG.png HTTP/1.1
Host: static.ksbeforebu-serving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 29780
Last-Modified: Tue, 11 Apr 2023 12:57:12 GMT
ETag: "64355928-7454"
Accept-Ranges: bytes
Cache-Control: max-age=14747
Expires: Sun, 20 Apr 2025 00:52:11 GMT
Date: Sat, 19 Apr 2025 20:46:24 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
|
|
| megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css | 94.242.53.111 | 200 OK | 6.0 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash25cfe48e07622a00154b677afcbaeb47 23e3ae1bd04ad1d00d25d30e39815104ceeae52f 709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1783"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| undefined/TEFlU3QtIwY+Sy18B3UBPi1YdkYKZFcVEH8uAmsAfXlWOkU6IwJ9FyAuEDcSPi4LJ1oiJBF2RgoJKhcmNCQgFRYbOV02Eic5ARUhGnUhEkUGFQsGER4AKDc+Oxc/FTZ0JjEGJioHDAE5CSkWHzggGyAHNyM2AGA1IAgtBSYNEzwQNn90HwUDO3Y9EhgOGQxiLhspPxUufXAEFh8aNi0/IRoGCyQ5CSY0CRIKFwcQDAk1MxUiGRICMDoLKiM3FzsmBhEcCTc9FQcLAlcCPw4DXR4uDS4gAjEkNyYRMg8OCAI/DgA8ATg7dSQFMT8FLQIuDgAtMDkJFEgaQhYAChY1O3QOEEcaADZgIRsDIzsQLzYNBzIOMhQFDAoFNT05BQMwFT0vAAIVIgkxHQsYfAUtABAUFSMBPw42DhsmGhsdGx8KDDYCUiYyCj0EcRMUEDAYGVE6QSs7IxUz | 0.0.0.0 | | 0 B |
URL GET undefined/TEFlU3QtIwY+Sy18B3UBPi1YdkYKZFcVEH8uAmsAfXlWOkU6IwJ9FyAuEDcSPi4LJ1oiJBF2RgoJKhcmNCQgFRYbOV02Eic5ARUhGnUhEkUGFQsGER4AKDc+Oxc/FTZ0JjEGJioHDAE5CSkWHzggGyAHNyM2AGA1IAgtBSYNEzwQNn90HwUDO3Y9EhgOGQxiLhspPxUufXAEFh8aNi0/IRoGCyQ5CSY0CRIKFwcQDAk1MxUiGRICMDoLKiM3FzsmBhEcCTc9FQcLAlcCPw4DXR4uDS4gAjEkNyYRMg8OCAI/DgA8ATg7dSQFMT8FLQIuDgAtMDkJFEgaQhYAChY1O3QOEEcaADZgIRsDIzsQLzYNBzIOMhQFDAoFNT05BQMwFT0vAAIVIgkxHQsYfAUtABAUFSMBPw42DhsmGhsdGx8KDDYCUiYyCj0EcRMUEDAYGVE6QSs7IxUz IP 0.0.0.0:0
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /TEFlU3QtIwY+Sy18B3UBPi1YdkYKZFcVEH8uAmsAfXlWOkU6IwJ9FyAuEDcSPi4LJ1oiJBF2RgoJKhcmNCQgFRYbOV02Eic5ARUhGnUhEkUGFQsGER4AKDc+Oxc/FTZ0JjEGJioHDAE5CSkWHzggGyAHNyM2AGA1IAgtBSYNEzwQNn90HwUDO3Y9EhgOGQxiLhspPxUufXAEFh8aNi0/IRoGCyQ5CSY0CRIKFwcQDAk1MxUiGRICMDoLKiM3FzsmBhEcCTc9FQcLAlcCPw4DXR4uDS4gAjEkNyYRMg8OCAI/DgA8ATg7dSQFMT8FLQIuDgAtMDkJFEgaQhYAChY1O3QOEEcaADZgIRsDIzsQLzYNBzIOMhQFDAoFNT05BQMwFT0vAAIVIgkxHQsYfAUtABAUFSMBPw42DhsmGhsdGx8KDDYCUiYyCj0EcRMUEDAYGVE6QSs7IxUz HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png | 94.242.53.111 | 200 OK | 590 B |
URL GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hashed3d11830b3e136b384f2a0b8082f235 3b75f2a64d528165f108d62e8c30d464b76945d7 1aef6752088fe69a166d3a84375431e1041dde8fa3f9ccbde26accb220feb4a5
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:19 GMT
content-type: image/png
content-length: 590
last-modified: Thu, 13 Feb 2025 17:42:00 GMT
vary: Accept-Encoding
etag: "67ae2ee8-24e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| epics3.net/epic/a/img/70/124/391/pSQrl5fl19lR0BAvqavUEXbz7soxdbpA4piU1ZpM.png | 193.108.118.133 | 200 OK | 76 kB |
URL GET epics3.net/epic/a/img/70/124/391/pSQrl5fl19lR0BAvqavUEXbz7soxdbpA4piU1ZpM.png IP 193.108.118.133:443
ASN#63023 AS-GLOBALTELEHOST
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerLet's Encrypt Subjectepics3.net Fingerprint55:A8:15:7C:87:BB:82:13:31:02:85:AC:99:DE:AE:E7:62:8C:1A:30 ValidityMon, 17 Mar 2025 19:58:02 GMT - Sun, 15 Jun 2025 19:58:01 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash5700d0b8a43d33538c3714b2d723c7cf 135461cd9c6a56030a4660908153ed1f9b5ef7cc 2f4619c6786796e83b7e6755acdf2d3739b8751c7bf8335f1f75e487046881bf
GET /epic/a/img/70/124/391/pSQrl5fl19lR0BAvqavUEXbz7soxdbpA4piU1ZpM.png HTTP/1.1
Host: epics3.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-length: 76175
content-type: image/png
etag: "5700d0b8a43d33538c3714b2d723c7cf"
last-modified: Tue, 25 Jun 2024 19:56:42 GMT
server: MinIO
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-bucket-region: eu-west-1
x-amz-id-2: 93ade867426f22c9af24553fc581cd6e641795b673c146950d7049946d0205dd
x-amz-request-id: 1837D330D1C59740
x-content-type-options: nosniff
x-ratelimit-limit: 18413
x-ratelimit-remaining: 18409
x-xss-protection: 1; mode=block
x-amz-meta-mm-source-mtime: 2024-06-25T19:56:41.809Z
date: Sat, 19 Apr 2025 20:46:27 GMT
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/flickity.css | 94.242.53.111 | 200 OK | 2.5 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/flickity.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash244d315064064270eabbbb7ac9f6c700 21ad53d3efbb40154293190173ee0c497ed7651c ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-9d9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| d3og8t183i1vbg.cloudfront.net/?itgod=761186 | 108.157.217.147 | 200 OK | 490 kB |
URL GET d3og8t183i1vbg.cloudfront.net/?itgod=761186 IP 108.157.217.147:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (38488) Size490 kB (489706 bytes) Hashcfb1a95725e36bff2366aefaa17a7d8b cc743d1fafd50dbba8d9a276c06407de89648383 c02d231916ac80c7913c361743e83d6ca4b1f7c06d51636a495ee17fdab21bc8
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 152020
date: Sat, 19 Apr 2025 20:46:16 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: SXC8onIzq0qLwcMrKrWPHFFfyracq_xfXvFkxA5LW8ac9laki-nD0A==
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 142.250.74.35:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Apr 2025 10:12:20 GMT
expires: Fri, 17 Apr 2026 10:12:20 GMT
cache-control: public, max-age=31536000
age: 210837
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| atsidhelookin.org/ZlpzN2ZJZRBEWzE3PQU/C28BYlYoOCtgFjMINX0xPzY9cTAKLVVDDwJnSwBQVWtLERYPPk4FX0ApB1YSEylOBkAPNBVYW0AsTgZIVnRFB0hSfAYKV0AuA1YBW2tVRxISNk4GUVJvQw5TU21EBFRR | 172.67.146.156 | 204 No Content | 0 B |
URL GET atsidhelookin.org/ZlpzN2ZJZRBEWzE3PQU/C28BYlYoOCtgFjMINX0xPzY9cTAKLVVDDwJnSwBQVWtLERYPPk4FX0ApB1YSEylOBkAPNBVYW0AsTgZIVnRFB0hSfAYKV0AuA1YBW2tVRxISNk4GUVJvQw5TU21EBFRR IP 172.67.146.156:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectatsidhelookin.org Fingerprint56:3D:9F:A6:68:D7:0A:0A:9D:B3:DC:98:59:23:E5:42:EC:9E:0C:56 ValidityFri, 04 Apr 2025 05:20:41 GMT - Thu, 03 Jul 2025 06:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ZlpzN2ZJZRBEWzE3PQU/C28BYlYoOCtgFjMINX0xPzY9cTAKLVVDDwJnSwBQVWtLERYPPk4FX0ApB1YSEylOBkAPNBVYW0AsTgZIVnRFB0hSfAYKV0AuA1YBW2tVRxISNk4GUVJvQw5TU21EBFRR HTTP/1.1
Host: atsidhelookin.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Apr 2025 20:46:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 932f40237f7e56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| atsidhelookin.org/UWE4WEZ+XlsrexwnfmkcYAJwAQMpNWI/CD8wCRIrECZ+HhBjIB4sLzVcAGpzaFAJfjY4BQVrdHcSTDkyJBIFanZhVh4xKDcOBWpgJ1wIdn9/UxZuYCRcCX4yIQBfZXd3EUwsKmxQD2xzYVgNbXFmUght | 172.67.146.156 | 204 No Content | 0 B |
URL GET atsidhelookin.org/UWE4WEZ+XlsrexwnfmkcYAJwAQMpNWI/CD8wCRIrECZ+HhBjIB4sLzVcAGpzaFAJfjY4BQVrdHcSTDkyJBIFanZhVh4xKDcOBWpgJ1wIdn9/UxZuYCRcCX4yIQBfZXd3EUwsKmxQD2xzYVgNbXFmUght IP 172.67.146.156:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectatsidhelookin.org Fingerprint56:3D:9F:A6:68:D7:0A:0A:9D:B3:DC:98:59:23:E5:42:EC:9E:0C:56 ValidityFri, 04 Apr 2025 05:20:41 GMT - Thu, 03 Jul 2025 06:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UWE4WEZ+XlsrexwnfmkcYAJwAQMpNWI/CD8wCRIrECZ+HhBjIB4sLzVcAGpzaFAJfjY4BQVrdHcSTDkyJBIFanZhVh4xKDcOBWpgJ1wIdn9/UxZuYCRcCX4yIQBfZXd3EUwsKmxQD2xzYVgNbXFmUght HTTP/1.1
Host: atsidhelookin.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Apr 2025 20:46:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 932f40235f6756bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| atsidhelookin.org/MG5HZDcfUSQXCmQ4ERdUZgpxPnFmKB0KAlo5LDZaVjkRB2ZnL2EQXlRTf1YCCV92QkdZCnpXBRYdMwVDRR16VgcAWWENWVYBelYRRlN3Sg4eXGlSEUVTdkJDQA8gWQYWHjMQWw1fcFACAFdyUQAJXHZU | 172.67.146.156 | 204 No Content | 0 B |
URL POST atsidhelookin.org/MG5HZDcfUSQXCmQ4ERdUZgpxPnFmKB0KAlo5LDZaVjkRB2ZnL2EQXlRTf1YCCV92QkdZCnpXBRYdMwVDRR16VgcAWWENWVYBelYRRlN3Sg4eXGlSEUVTdkJDQA8gWQYWHjMQWw1fcFACAFdyUQAJXHZU IP 172.67.146.156:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectatsidhelookin.org Fingerprint56:3D:9F:A6:68:D7:0A:0A:9D:B3:DC:98:59:23:E5:42:EC:9E:0C:56 ValidityFri, 04 Apr 2025 05:20:41 GMT - Thu, 03 Jul 2025 06:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /MG5HZDcfUSQXCmQ4ERdUZgpxPnFmKB0KAlo5LDZaVjkRB2ZnL2EQXlRTf1YCCV92QkdZCnpXBRYdMwVDRR16VgcAWWENWVYBelYRRlN3Sg4eXGlSEUVTdkJDQA8gWQYWHjMQWw1fcFACAFdyUQAJXHZU HTTP/1.1
Host: atsidhelookin.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 19 Apr 2025 20:46:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9VaCUm37kj1%2Bnx26tGSD9LITK2atBXhGdAcnmqIESSfoOik1TwbLtmtyBIFsUPF5VKVCT0FpfyfruySkTbxx1Npd%2FfMff%2FPP7osIZ9QNTNQnDg2K7pBNlzilUu5w1mwTJ5tQew%3D%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 932f402a390c7129-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9607&min_rtt=3446&rtt_var=5506&sent=38&recv=50&lost=0&retrans=0&sent_bytes=5802&recv_bytes=3703&delivery_rate=11308&cwnd=12000&unsent_bytes=0&cid=dacab073d79353b7&ts=594&x=16"
|
|
| megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css | 94.242.53.111 | 200 OK | 77 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (65319), with CRLF line terminators Hash9b67b9ffbfcbe226a8c413fa740fd91c 7837bd0c312897e46311aaf472947f3e23d75df2 2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-12c7a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/custom.css | 94.242.53.111 | 200 OK | 8.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/custom.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeassembler source, ASCII text, with CRLF line terminators Hash68443327ebd1d8f35857bbb29d3ce6df d34e37d8cebc246854f05dde78abc32b5ad5d9fe 98cf7514d65d87963ee938b6f83493b4429f8005a5f6814ba226a7b89c80aa45
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 19:56:14 GMT
vary: Accept-Encoding
etag: W/"67abab5e-22e8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 142.250.74.35:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Apr 2025 10:12:20 GMT
expires: Fri, 17 Apr 2026 10:12:20 GMT
cache-control: public, max-age=31536000
age: 210837
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| undefined/TzBGRnYuUiUrSS4NJGADPVx7Y0QJFXQAEnxfIX4Cfgh1L0c5UiFoFSNfMyIQPV8oMlghVTJjRAlHEgEsOGQDFwAMYnI3EzVXFgA+CQggKjgFVh4QBwlXDzY/IXUKACU8XAkULCp5LwNCHnIpY0QJez8PIRthBzUxGVN0ATQWchYuTz59Ah81G2g+Lz8OUyMNRSNBBz5COVUedzcKYyErFRl6EQkyHloCE0Z6ey8hMglZEzc9HnoRCSUZSAU+Tn18FQc9CmcqdDUjfiMgMQkVdAQgI1dxCiUGcw48BXxREBQ3BloENiAKcn8iMQVnEB5OCFEQFDcASXYvIwodFDYSOAUCFxg4CCMqPBlWMRwGGXUHY0QNfSsqIAJod3UTClgHHCEJFXQEICdTNgwPLHoQHkIMViocNCl4FH8gJHY2Ihg4cQESQid7IS0/LmgfDSB/fnInGDdxBB4wfhYsNRkhQHsKHhoBABIkAmgp | 0.0.0.0 | | 0 B |
URL GET undefined/TzBGRnYuUiUrSS4NJGADPVx7Y0QJFXQAEnxfIX4Cfgh1L0c5UiFoFSNfMyIQPV8oMlghVTJjRAlHEgEsOGQDFwAMYnI3EzVXFgA+CQggKjgFVh4QBwlXDzY/IXUKACU8XAkULCp5LwNCHnIpY0QJez8PIRthBzUxGVN0ATQWchYuTz59Ah81G2g+Lz8OUyMNRSNBBz5COVUedzcKYyErFRl6EQkyHloCE0Z6ey8hMglZEzc9HnoRCSUZSAU+Tn18FQc9CmcqdDUjfiMgMQkVdAQgI1dxCiUGcw48BXxREBQ3BloENiAKcn8iMQVnEB5OCFEQFDcASXYvIwodFDYSOAUCFxg4CCMqPBlWMRwGGXUHY0QNfSsqIAJod3UTClgHHCEJFXQEICdTNgwPLHoQHkIMViocNCl4FH8gJHY2Ihg4cQESQid7IS0/LmgfDSB/fnInGDdxBB4wfhYsNRkhQHsKHhoBABIkAmgp IP 0.0.0.0:0
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /TzBGRnYuUiUrSS4NJGADPVx7Y0QJFXQAEnxfIX4Cfgh1L0c5UiFoFSNfMyIQPV8oMlghVTJjRAlHEgEsOGQDFwAMYnI3EzVXFgA+CQggKjgFVh4QBwlXDzY/IXUKACU8XAkULCp5LwNCHnIpY0QJez8PIRthBzUxGVN0ATQWchYuTz59Ah81G2g+Lz8OUyMNRSNBBz5COVUedzcKYyErFRl6EQkyHloCE0Z6ey8hMglZEzc9HnoRCSUZSAU+Tn18FQc9CmcqdDUjfiMgMQkVdAQgI1dxCiUGcw48BXxREBQ3BloENiAKcn8iMQVnEB5OCFEQFDcASXYvIwodFDYSOAUCFxg4CCMqPBlWMRwGGXUHY0QNfSsqIAJod3UTClgHHCEJFXQEICdTNgwPLHoQHkIMViocNCl4FH8gJHY2Ihg4cQESQid7IS0/LmgfDSB/fnInGDdxBB4wfhYsNRkhQHsKHhoBABIkAmgp HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVsyUO4hnfeB0TbRLqXBUTBOvV6cti6xp1qQ6be5hmDhdLzkiIuThcnvvsgAV95OqARsgYnejg | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVsyUO4hnfeB0TbRLqXBUTBOvV6cti6xp1qQ6be5hmDhdLzkiIuThcnvvsgAV95OqARsgYnejg IP 64.233.164.84:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint52:D3:F7:7E:94:6F:70:55:50:A6:EA:38:4B:15:DF:91:54:96:59:82 ValidityMon, 31 Mar 2025 08:56:30 GMT - Mon, 23 Jun 2025 08:56:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVsyUO4hnfeB0TbRLqXBUTBOvV6cti6xp1qQ6be5hmDhdLzkiIuThcnvvsgAV95OqARsgYnejg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:zc5AHAGtoIcofCgoiB5nr-gW9jBOpA:wApqGMv0PkA7iXsf;Path=/;Expires=Mon, 19-Apr-2027 20:46:23 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Apr 2025 20:46:23 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVsk6dWSa10nFMeSBkT-NpM2hdnrneb-BbnSptCwWR8Gj9g4Ng3Z5CDbLbWq3aqDVd7DqoRCdQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1573322635%3A1745095583486082
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-Kti1MmEJ7yQFv_CHsc-QGg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 415
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVu2m-NcjDjNW_38bM3UNsPY3SP9UL8OvBlwnTk9nGgZbmaA0qcPBLE_o5DSoa0-CjHEmsue&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-432414271%3A1745095580040399 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVu2m-NcjDjNW_38bM3UNsPY3SP9UL8OvBlwnTk9nGgZbmaA0qcPBLE_o5DSoa0-CjHEmsue&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-432414271%3A1745095580040399 IP 64.233.164.84:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint67:52:2F:AB:93:DE:39:DA:94:50:11:AE:8B:37:CB:88:8F:DC:56:7D ValidityMon, 31 Mar 2025 08:54:37 GMT - Mon, 23 Jun 2025 08:54:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVu2m-NcjDjNW_38bM3UNsPY3SP9UL8OvBlwnTk9nGgZbmaA0qcPBLE_o5DSoa0-CjHEmsue&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-432414271%3A1745095580040399 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Apr 2025 20:46:20 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-f9E3unSowkSU_mCHcrS-GQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.SSoDLz2c_r4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/spirit/assets/frontend/js/datepicker.js | 94.242.53.111 | 200 OK | 21 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators Hash8cfe207a6a21c7495cfb751c761217a6 35d686a6c4ecc9946c35444ce93e110cb0e1611c 804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-51ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 | 142.250.74.35 | 200 OK | 19 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 IP 142.250.74.35:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19280, version 1.0 Hash386fb59be54b2d819064af98e57cc226 9e2d14d736be97ec84bfca3513558450cd6e3249 b4855cc8ec721cbaf27f3c907345e101b1524858221c14faa79df34cb2f84991
GET /s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Apr 2025 09:21:29 GMT
expires: Fri, 17 Apr 2026 09:21:29 GMT
cache-control: public, max-age=31536000
age: 213888
last-modified: Thu, 14 Dec 2023 02:02:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.112.1 | 500 Internal Server Error | 183 B |
IP 104.21.112.1:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash607f8a53dbf072834a28425fae6b0084 a64f05fe0b51691778ebf447e3664bfbd78cbe42 30032743c9cc551853d7e87cd9335dd20bb136932179fcb7f8136b2f5e9033ba
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
date: Sat, 19 Apr 2025 20:46:20 GMT
content-type: text/html
server: cloudflare
cf-cache-status: DYNAMIC
cf-ray: 932f402efff2712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.112.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP 104.21.112.1:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Apr 2025 20:46:20 GMT
content-type: binary/octet-stream
server: cloudflare
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: STALE
age: 1961754
last-modified: Fri, 28 Mar 2025 03:50:26 GMT
cf-ray: 932f402eefec712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVsk6dWSa10nFMeSBkT-NpM2hdnrneb-BbnSptCwWR8Gj9g4Ng3Z5CDbLbWq3aqDVd7DqoRCdQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1573322635%3A1745095583486082 | 64.233.164.84 | 403 Forbidden | 0 B |
URL GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVsk6dWSa10nFMeSBkT-NpM2hdnrneb-BbnSptCwWR8Gj9g4Ng3Z5CDbLbWq3aqDVd7DqoRCdQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1573322635%3A1745095583486082 IP 64.233.164.84:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint67:52:2F:AB:93:DE:39:DA:94:50:11:AE:8B:37:CB:88:8F:DC:56:7D ValidityMon, 31 Mar 2025 08:54:37 GMT - Mon, 23 Jun 2025 08:54:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVsk6dWSa10nFMeSBkT-NpM2hdnrneb-BbnSptCwWR8Gj9g4Ng3Z5CDbLbWq3aqDVd7DqoRCdQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1573322635%3A1745095583486082 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Apr 2025 20:46:23 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: script-src 'nonce-_BuiCuKPG7P2Gz7fdKduqQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.SSoDLz2c_r4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/spirit/assets/frontend/js/flickity.min.js | 94.242.53.111 | 200 OK | 54 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators Hash8c1e666176ac7bdce67d58b45823ffac 75947e4316427ce0c5e33300aeb4dc4d7d54dd09 c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-d271"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js | 94.242.53.111 | 200 OK | 14 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators Hash0eef6fe46d14f860d5666d2c7b13a564 7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe 95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-3626"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/scripts.js | 94.242.53.111 | 200 OK | 115 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/scripts.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (914), with CRLF line terminators Size115 kB (114862 bytes) Hashce260d2170faf98639ab8e0e3758f1e2 32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1c0ae"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/sw.js | 94.242.53.111 | 200 OK | 103 kB |
IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size103 kB (103036 bytes) Hash9ee51131e416458b88d6da4e6e6959ca a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4 db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 22:15:30 GMT
vary: Accept-Encoding
etag: W/"63a23402-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 142.250.74.35:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Apr 2025 10:12:20 GMT
expires: Fri, 17 Apr 2026 10:12:20 GMT
cache-control: public, max-age=31536000
age: 210838
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| atsidhelookin.org/ZTZuTzRKCQ08CTEEHh1gIHBbF1kBBgoXbjFXJhkEA2AeJVEtVUg7XQELV3sNXQBaaUQMUlN+DENFGi5AEEVTfhIMWAggCUNAU34aVRhcYQFDQ1N+EhFGDygJVBAeO0AJC194AFAGV3oBUgFdeww | 172.67.146.156 | 204 No Content | 0 B |
URL GET atsidhelookin.org/ZTZuTzRKCQ08CTEEHh1gIHBbF1kBBgoXbjFXJhkEA2AeJVEtVUg7XQELV3sNXQBaaUQMUlN+DENFGi5AEEVTfhIMWAggCUNAU34aVRhcYQFDQ1N+EhFGDygJVBAeO0AJC194AFAGV3oBUgFdeww IP 172.67.146.156:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectatsidhelookin.org Fingerprint56:3D:9F:A6:68:D7:0A:0A:9D:B3:DC:98:59:23:E5:42:EC:9E:0C:56 ValidityFri, 04 Apr 2025 05:20:41 GMT - Thu, 03 Jul 2025 06:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ZTZuTzRKCQ08CTEEHh1gIHBbF1kBBgoXbjFXJhkEA2AeJVEtVUg7XQELV3sNXQBaaUQMUlN+DENFGi5AEEVTfhIMWAggCUNAU34aVRhcYQFDQ1N+EhFGDygJVBAeO0AJC194AFAGV3oBUgFdeww HTTP/1.1
Host: atsidhelookin.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Apr 2025 20:46:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 932f40234f5156bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css | 94.242.53.111 | 200 OK | 3.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash30265c8089a8f3e871d0873ef6a5b944 2804a2fe5a6a956626ce6a46adf6b1a0676ee13d f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f31"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 | 94.242.53.111 | 200 OK | 4.3 kB |
URL GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 4292, version 1.0 Hashae072782b361d2afdbf43db08d3cfb73 f3db2e65b53d97491672f8631e21d6d05905cc88 31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:17 GMT
content-type: font/woff2
content-length: 4292
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-10c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| atsidhelookin.org/YVpFM0JOZSZAfzAPLkQmUTJ3VgMNHiBrCERoA3EpK28maykgCHYLZBUzIQ56U298AnNHKixXf1JoY0A2AC4wQH9TanUGZAg0I1x/U2p1BXJRa3YBZ1YZLUc2ESlgAANEaAMWcCciKF9sCiknViQOKCBRN0wpIEE0CDQiHSEON2ABBBUyMF4gDzssX2dSHCwWcSVpfXoGMzscehJTFxoDZ1NsNRZxJWtyB3dRY3AGelF0dwFyWWtwFnBXMyhUNkRpAVohDjRgBAFXbnwEcFAFcANyWWtxBWdWGXIGclhucgB3UWlwC3ZRbHwAe1N8Mw5yT2NrAWxXfDAOb1N8MUMjBmd0FTIVLikOc1ZucAN7VG99AXpWag | 172.67.146.156 | 204 No Content | 0 B |
URL POST atsidhelookin.org/YVpFM0JOZSZAfzAPLkQmUTJ3VgMNHiBrCERoA3EpK28maykgCHYLZBUzIQ56U298AnNHKixXf1JoY0A2AC4wQH9TanUGZAg0I1x/U2p1BXJRa3YBZ1YZLUc2ESlgAANEaAMWcCciKF9sCiknViQOKCBRN0wpIEE0CDQiHSEON2ABBBUyMF4gDzssX2dSHCwWcSVpfXoGMzscehJTFxoDZ1NsNRZxJWtyB3dRY3AGelF0dwFyWWtwFnBXMyhUNkRpAVohDjRgBAFXbnwEcFAFcANyWWtxBWdWGXIGclhucgB3UWlwC3ZRbHwAe1N8Mw5yT2NrAWxXfDAOb1N8MUMjBmd0FTIVLikOc1ZucAN7VG99AXpWag IP 172.67.146.156:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectatsidhelookin.org Fingerprint56:3D:9F:A6:68:D7:0A:0A:9D:B3:DC:98:59:23:E5:42:EC:9E:0C:56 ValidityFri, 04 Apr 2025 05:20:41 GMT - Thu, 03 Jul 2025 06:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /YVpFM0JOZSZAfzAPLkQmUTJ3VgMNHiBrCERoA3EpK28maykgCHYLZBUzIQ56U298AnNHKixXf1JoY0A2AC4wQH9TanUGZAg0I1x/U2p1BXJRa3YBZ1YZLUc2ESlgAANEaAMWcCciKF9sCiknViQOKCBRN0wpIEE0CDQiHSEON2ABBBUyMF4gDzssX2dSHCwWcSVpfXoGMzscehJTFxoDZ1NsNRZxJWtyB3dRY3AGelF0dwFyWWtwFnBXMyhUNkRpAVohDjRgBAFXbnwEcFAFcANyWWtxBWdWGXIGclhucgB3UWlwC3ZRbHwAe1N8Mw5yT2NrAWxXfDAOb1N8MUMjBmd0FTIVLikOc1ZucAN7VG99AXpWag HTTP/1.1
Host: atsidhelookin.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 19 Apr 2025 20:46:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zILiBUePiCdvejlTiRi6EzFGXjGzJJr%2BXLDH30BND%2BgLCnAbDF8kY3lKYSyP%2BUEN7mns11RU7EO6hs7AMSxPhGPP2UTse6dWE8I3vgQv01fwVrMaHIwQZY4RgTWwjXvWahUkAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 932f4041a9e57129-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11853&min_rtt=3446&rtt_var=8620&sent=40&recv=52&lost=0&retrans=0&sent_bytes=6399&recv_bytes=4298&delivery_rate=3378&cwnd=12000&unsent_bytes=0&cid=dacab073d79353b7&ts=4336&x=16"
|
|
| megaup.net/themes/spirit/assets/frontend/css/stack-interface.css | 94.242.53.111 | 200 OK | 3.2 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash4541b29b6040bc31b760f98e914fd1d7 0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba 6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-c58"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/typed.min.js | 94.242.53.111 | 200 OK | 3.9 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3949), with no line terminators Hash2f6185a8a32a50b2b3e04849f44359d4 0e5501588c5c0d1c9462f34b0d56c21abff5bfef 914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f6d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-108868042-1 | 142.250.74.136 | 200 OK | 274 kB |
URL GET www.googletagmanager.com/gtag/js?id=UA-108868042-1 IP 142.250.74.136:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
File typeJavaScript source, ASCII text, with very long lines (5436) Size274 kB (273978 bytes) Hashda5e08c275e943f9b598a87de53afde8 00a8ba5a8818ae2f78953b886efa0bcb023c9cc3 4af67766ec384d11cba2fd97580447e710a04f714e7525c77683823d6f381827
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Apr 2025 20:46:16 GMT
expires: Sat, 19 Apr 2025 20:46:16 GMT
cache-control: private, max-age=900
last-modified: Sat, 19 Apr 2025 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1055:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1055:0
report-to: {"group":"ascgcycc:1055:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1055:0"}],}
server: Google Tag Manager
content-length: 95591
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tomlldahehun.org/floater?cs=TEJIWHF7c3FsQH90fm1AfHJ4aEY&abt=0&red=1&sm=83&k=schedule&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fde8ce9f9784211dbf7a921a5cf36635b%2FSchedule_I_v0.3.4f8.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_ZRXN=1745095579212&crc=1 | 143.204.55.85 | 200 OK | 5.6 kB |
URL GET tomlldahehun.org/floater?cs=TEJIWHF7c3FsQH90fm1AfHJ4aEY&abt=0&red=1&sm=83&k=schedule&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fde8ce9f9784211dbf7a921a5cf36635b%2FSchedule_I_v0.3.4f8.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_ZRXN=1745095579212&crc=1 IP 143.204.55.85:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerAmazon Subjecttomlldahehun.org Fingerprint6B:F0:7B:63:2B:19:E1:74:83:15:1A:BF:1B:B4:E6:71:68:14:57:3D ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File typeASCII text, with very long lines (5598), with no line terminators Hashfbab5bdf373b4d80c9f7f388027f7e8b 7e9d23cae111ff7e1656c22457a1e08160f54c7f 08dac2ee8658dca7e5b1855ac42cf0c9e535ac6738f368663c555cdfedcf109f
GET /floater?cs=TEJIWHF7c3FsQH90fm1AfHJ4aEY&abt=0&red=1&sm=83&k=schedule&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2Fde8ce9f9784211dbf7a921a5cf36635b%2FSchedule_I_v0.3.4f8.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_ZRXN=1745095579212&crc=1 HTTP/1.1
Host: tomlldahehun.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 3638
date: Sat, 19 Apr 2025 20:46:20 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=K08RlRaXHipuxH5ZUdUOwY2g5N4dvrHYA1ddcp3UjAUTU2/aVnvZPRVyGCUNyS3I3Im01rf+gmJeBGQduZ+/yifBd5kWMoC608Khm9pCrVGB9qMMvbRGW6/C4Z5M; Expires=Sat, 26 Apr 2025 20:46:20 GMT; Path=/
AWSALBCORS=K08RlRaXHipuxH5ZUdUOwY2g5N4dvrHYA1ddcp3UjAUTU2/aVnvZPRVyGCUNyS3I3Im01rf+gmJeBGQduZ+/yifBd5kWMoC608Khm9pCrVGB9qMMvbRGW6/C4Z5M; Expires=Sat, 26 Apr 2025 20:46:20 GMT; Path=/; SameSite=None
csu=b89d9d55-d9ba-4f64-adca-41172045a39b
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7fTRajvXSn4VHTKU7-MRnW9SPynf9PNm5zqBcZTJPHqoZADPh8TFIQ==
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i | 142.250.74.10 | 200 OK | 39 kB |
URL GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i IP 142.250.74.10:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeASCII text, with very long lines (1572) Hash1570f79838476e473326cd7a3fb1d06b 81ce3aa01918d85e18534934cd967f35a7558f1a f0a8682f65670a4a8fd9a982d1b3a36521a2e74d47cece7d3b1f84f262c8b51c
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Apr 2025 20:46:16 GMT
date: Sat, 19 Apr 2025 20:46:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js | 94.242.53.111 | 200 OK | 70 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (768), with CRLF line terminators Hash6fda19caa29287e6f584f0557fdeb6d4 40f58160090cd1f022704ee1352b343adb9e73b9 8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1107a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| kentoonlyloo.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 | 143.204.55.127 | 200 OK | 3.1 kB |
URL GET kentoonlyloo.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 IP 143.204.55.127:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerAmazon Subjectkentoonlyloo.org Fingerprint05:67:A4:3A:98:A9:30:94:7B:40:5B:0F:13:F4:BC:F0:74:D1:99:A4 ValiditySun, 06 Apr 2025 00:00:00 GMT - Tue, 05 May 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3070), with no line terminators Hash9f9d8506f6fcf609a175db05f5c66533 d2a3e346c463ea495d73394365e53b9139bc79f4 6a843935e7d1f6c07c1bf9f2c03a2ab61f6d164470e8dc78375a26142b836e0b
GET /eUNKdUIYISkYfRh+KFM3Cy93UHA/ZngzJkosLU02SHt5HHMPIS1bIRUsPxEkCywkAWwXJj5QcD8IByB3TCYkJxEwESkWEUkWJD0XHQcIRnswEiE8GikkORMHHjQgPQBJFRgxdyEFCDMEGAEHPwVIe29HACsHPTAAOhYbIQY4AAEnEzYHEjxxKhU9NBEAMw8mLjMnBg0hHRAYFjA/OyY/Az4kEz0qIA4vGXo2AQxBLisBEzsVEygpMRBAIBoCNhoCHDc4PwEfOhU6ChwyczwHCTA6LBEIJ3oqFQMxFToCLjMTNwArRTYyBCEjMCpzOjMDLgEALXIdOStFbw0IC0QlHhd6QBA4JDIWETwRABAHSCUYRgwLEHoaBStxPj4NSRYJEC4dCBInEEEQGEUQLCofIhpJGXkTBxUPGDQEXHEMJhcNEQtGdh8GPS8XMgETNhcoDgMmBxUCAkZ3Hwd6HgNfKTkaLAl+DAV3Eip8MXEeLj4MAQBz HTTP/1.1
Host: kentoonlyloo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1215
date: Sat, 19 Apr 2025 20:46:17 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=CYS/FrQsxr3G5Qhkh//3aoSQwDfGfe+8B4jSg6cn25tbvNcEdV5ulK4pE0/Cd2orQw4FIqM50Ws9fIUjAt/EIe8md9CD+EAUrGQjSkEx5G/hlPUNX7RXCcZuaox5; Expires=Sat, 26 Apr 2025 20:46:17 GMT; Path=/
AWSALBCORS=CYS/FrQsxr3G5Qhkh//3aoSQwDfGfe+8B4jSg6cn25tbvNcEdV5ulK4pE0/Cd2orQw4FIqM50Ws9fIUjAt/EIe8md9CD+EAUrGQjSkEx5G/hlPUNX7RXCcZuaox5; Expires=Sat, 26 Apr 2025 20:46:17 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aLqy3rPhaQMK8tzbf1fzNKQno3B8MTZrioZJ-CkmI5-FznIe6LFxxA==
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP 64.233.164.84:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint52:D3:F7:7E:94:6F:70:55:50:A6:EA:38:4B:15:DF:91:54:96:59:82 ValidityMon, 31 Mar 2025 08:56:30 GMT - Mon, 23 Jun 2025 08:56:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
content-security-policy-report-only: frame-ancestors 'self';report-uri https://csp.withgoogle.com/csp/frame-ancestors/a00d54fdef4a77536baac3725d1409f8
set-cookie: __Host-GAPS=1:_v6kX4FePrM45VhFewGYpWKXiUyWgw:j82ZpAoH_yVrqjEh; Expires=Mon, 19-Apr-2027 20:46:19 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Apr 2025 20:46:19 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AXH0vVsyUO4hnfeB0TbRLqXBUTBOvV6cti6xp1qQ6be5hmDhdLzkiIuThcnvvsgAV95OqARsgYnejg
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-8BEJGlJ0ywobia2CAViTjg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.112.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP 104.21.112.1:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Apr 2025 20:46:20 GMT
content-type: binary/octet-stream
server: cloudflare
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: STALE
age: 1961754
last-modified: Fri, 28 Mar 2025 03:50:26 GMT
cf-ray: 932f402edfda712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVstMXwj6gA5PmsxKycINLhktG3_n8G0NC65vrmcQR6LFa484-lhhJn2ZD6fUfYsGSRLOW-hLw | 64.233.164.84 | 302 Found | 0 B |
URL GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVstMXwj6gA5PmsxKycINLhktG3_n8G0NC65vrmcQR6LFa484-lhhJn2ZD6fUfYsGSRLOW-hLw IP 64.233.164.84:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectaccounts.google.com Fingerprint52:D3:F7:7E:94:6F:70:55:50:A6:EA:38:4B:15:DF:91:54:96:59:82 ValidityMon, 31 Mar 2025 08:56:30 GMT - Mon, 23 Jun 2025 08:56:29 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AXH0vVstMXwj6gA5PmsxKycINLhktG3_n8G0NC65vrmcQR6LFa484-lhhJn2ZD6fUfYsGSRLOW-hLw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:9fddKNu9Ld5gcBPJAuhN-4uQseszAA:gpgdBSfIQqzAsPQj;Path=/;Expires=Mon, 19-Apr-2027 20:46:20 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Apr 2025 20:46:20 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AXH0vVu2m-NcjDjNW_38bM3UNsPY3SP9UL8OvBlwnTk9nGgZbmaA0qcPBLE_o5DSoa0-CjHEmsue&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-432414271%3A1745095580040399
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-zdUyaQdcuzEDPh2jUK_zbA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 416
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e54g3za200&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316 | 142.250.74.136 | 200 OK | 336 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e54g3za200&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316 IP 142.250.74.136:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintB7:82:F3:C7:93:B0:60:B0:83:49:F8:74:0D:49:78:23:65:0B:37:01 ValidityMon, 31 Mar 2025 08:54:29 GMT - Mon, 23 Jun 2025 08:54:28 GMT
File typeJavaScript source, ASCII text, with very long lines (6129) Size336 kB (336429 bytes) Hashea5d27dfbee00c2ecfd112e5d45c5fb9 4f5c100bda9b994d93e2687b3d56b77295c06349 8e2fcd482c813c12f4c06d71d1770bd527ff14eec1b72419c1bef814e40db950
GET /gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c>m=457e54g3za200&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Apr 2025 20:46:19 GMT
expires: Sat, 19 Apr 2025 20:46:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1055:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1055:0
report-to: {"group":"ascgcycc:1055:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1055:0"}],}
server: Google Tag Manager
content-length: 115712
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/spirit/assets/frontend/css/iconsmind.css | 94.242.53.111 | 200 OK | 103 kB |
URL GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeASCII text, with CRLF line terminators Size103 kB (102727 bytes) Hashc9b1c618a7b12bd7ecf6034164b29164 f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99 fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-19147"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.10 | 200 OK | 565 B |
URL GET fonts.googleapis.com/icon?family=Material+Icons IP 142.250.74.10:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
Hash736c83e15fc300de505f6ce9762a9396 31c0f11ada78e92970ff42d990116d77c169c6d7 c31266310101d0b1607937a7baf07f1601b7637bd2373176696488a07d7b4302
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Apr 2025 20:46:16 GMT
date: Sat, 19 Apr 2025 20:46:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/js/countdown.min.js | 94.242.53.111 | 200 OK | 5.4 kB |
URL GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators Hash76a923d3d69255c45cd24bf9b100244f eb3c96f9901692f1a03500ea632963a16afdb985 8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:15 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-14f0"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.35 | 200 OK | 48 kB |
URL GET fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 142.250.74.35:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Apr 2025 10:12:20 GMT
expires: Fri, 17 Apr 2026 10:12:20 GMT
cache-control: public, max-age=31536000
age: 210837
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| atsidhelookin.org/NTRRNk0aCzJFcFRZOkEcWWY1YQxZBgtgIVN2P1IhYlg6dy5YeXdCJFEJaQR4DAVgED1cUGwFfxNHJVc5QEdsB2tcWjdZcBNCbAZjDBpjGHsTQWwHa0FEMFFwBBIhQjlZCWABeQAEaAN4AgNiBnw | 172.67.146.156 | 204 No Content | 0 B |
URL GET atsidhelookin.org/NTRRNk0aCzJFcFRZOkEcWWY1YQxZBgtgIVN2P1IhYlg6dy5YeXdCJFEJaQR4DAVgED1cUGwFfxNHJVc5QEdsB2tcWjdZcBNCbAZjDBpjGHsTQWwHa0FEMFFwBBIhQjlZCWABeQAEaAN4AgNiBnw IP 172.67.146.156:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectatsidhelookin.org Fingerprint56:3D:9F:A6:68:D7:0A:0A:9D:B3:DC:98:59:23:E5:42:EC:9E:0C:56 ValidityFri, 04 Apr 2025 05:20:41 GMT - Thu, 03 Jul 2025 06:18:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /NTRRNk0aCzJFcFRZOkEcWWY1YQxZBgtgIVN2P1IhYlg6dy5YeXdCJFEJaQR4DAVgED1cUGwFfxNHJVc5QEdsB2tcWjdZcBNCbAZjDBpjGHsTQWwHa0FEMFFwBBIhQjlZCWABeQAEaAN4AgNiBnw HTTP/1.1
Host: atsidhelookin.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Apr 2025 20:46:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 932f40234f4c56bd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 | 94.242.53.111 | 200 OK | 80 kB |
URL GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 IP 94.242.53.111:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint9F:EA:CB:17:3E:61:7E:D0:A0:8D:E9:C3:CB:DD:EE:6D:C5:EC:80:3E ValidityTue, 22 Oct 2024 00:00:00 GMT - Thu, 31 Jul 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80148, version 331.17301 Hashc500da19d776384ba69573ae6fe274e7 6290834672aba86d5b6c1c73b30b57c9c53996f7 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=9t1g639vna1f7em0rffcqup91v
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Apr 2025 20:46:18 GMT
content-type: font/woff2
content-length: 80148
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-13914"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| epicdn.net/cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0NTA5NTU4MLICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= | 104.21.112.1 | 301 Moved Permanently | 76 kB |
URL GET epicdn.net/cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0NTA5NTU4MLICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= IP 104.21.112.1:443
Requested byhttps://megaup.net/de8ce9f9784211dbf7a921a5cf36635b/Schedule_I_v0.3.4f8.rar CertificateIssuerGoogle Trust Services Subjectepicdn.net FingerprintD5:18:DA:CE:CC:93:2A:97:C6:98:25:AA:6F:2B:37:31:43:40:CB:B7 ValidityFri, 28 Feb 2025 10:21:22 GMT - Thu, 29 May 2025 11:19:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/?id=sgL0MQEQfBj3lgIiAjEyKIcDMK0GOgEwQgJlbkpQTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjBSB0Rlc2t0b3BaB1dpbmRvd3NiB0ZpcmVmb3hohgF6DDkxLjkwLjQyLjE1NIIBBFdpRmmKAQ5CbGl4IFNvbHV0aW9uc5IBAk5PmAHM7L8BsQEtQxzr4jYaP9IBA0NQQ9oBBkluUGFnZeIBA0RTUOoBCDE3MjM3Mzg5kgIKMTc0NTA5NTU4MLICPWEvaW1nLzcwLzEyNC8zOTEvcFNRcmw1ZmwxOWxSMEJBdnFhdlVFWGJ6N3NveGRicEE0cGlVMVpwTS5wbmfIAzM= HTTP/1.1
Host: epicdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 19 Apr 2025 20:46:26 GMT
content-length: 0
location: https://epics3.net/epic/a/img/70/124/391/pSQrl5fl19lR0BAvqavUEXbz7soxdbpA4piU1ZpM.png
server: cloudflare
cf-cache-status: DYNAMIC
cf-ray: 932f405a6ecbb4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|