GET megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
5.34.214.148200 OK 3.9 kB URL
megaup.net/themes/spirit/assets/frontend/css/lightbox.min.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-02
Times Seen 1758
Size 3.9 kB (3889 bytes)
MD5 30265c8089a8f3e871d0873ef6a5b944
SHA1 2804a2fe5a6a956626ce6a46adf6b1a0676ee13d
SHA256 f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f31"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
5.34.214.148200 OK 5.4 kB URL
megaup.net/themes/spirit/assets/frontend/js/countdown.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 2540
Size 5.4 kB (5360 bytes)
MD5 76a923d3d69255c45cd24bf9b100244f
SHA1 eb3c96f9901692f1a03500ea632963a16afdb985
SHA256 8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-14f0"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undaymidydle.com/bVpVbTVCZTYeCCNpGxRsATUQPGAJDjQaey8IOTdELDETKGBfPXMZXAlnYlsEXGJjS0UEPmhcEx4uNBlAHmdkS1wDPDpQExtnZEMGWXRmWxtbfCBQBEsuJQxSUGtzHUEZNmhcAlhobFsAW21tXgVa
104.21.16.1204 No Content 0 B URL
undaymidydle.com/bVpVbTVCZTYeCCNpGxRsATUQPGAJDjQaey8IOTdELDETKGBfPXMZXAlnYlsEXGJjS0UEPmhcEx4uNBlAHmdkS1wDPDpQExtnZEMGWXRmWxtbfCBQBEsuJQxSUGtzHUEZNmhcAlhobFsAW21tXgVa
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
GET /bVpVbTVCZTYeCCNpGxRsATUQPGAJDjQaey8IOTdELDETKGBfPXMZXAlnYlsEXGJjS0UEPmhcEx4uNBlAHmdkS1wDPDpQExtnZEMGWXRmWxtbfCBQBEsuJQxSUGtzHUEZNmhcAlhobFsAW21tXgVa HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Jul 2025 22:54:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Pn4%2BaHzmgmOfunn3S%2FrlGkrgPuae92JdaMoDZl1IG%2Ffdi0bWmz3rnmrfLzwpfarQwnrT9T6F1UbxAyn186W7rBlDGsG5Ov4rri%2BgIog5"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 961dcd41feec56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 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
0.0.0.0 0 B URL
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
IP / ASN
0.0.0.0
#0
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /S1RvSDcqNgwlCCppDW5COThSbQUNcV0OU3g7CHBDemxcIQY9NghmVCc7GixROTsBPBklMRttBQ0GOSMCAzcqfAYCBwQfVBgdAQEHemY2EF97BTcSQBs+Oh58DCcFAV8oIiYyAjscBjteKhdfDH4fM0p6dS48CAltISMuC14ZPSwJem5mLQ9vCmI/GmUxDgIvRQ4HLjBUeRE5AXMdLgskbj0ZBjABGRMIIWciMw0rTn9jIwoPJRsWIwQDPTU/eDIOIQFNIGQjIEAiGl08BgU6G3xRJh4sLll/YSMgAzobOyMHHQwXJX4PGjkucBFxXQ5TemFKenUoZ18OYRMsAgdkZmAKLXABJgsMfTkOJ3wSeRI9JkcxMj4eYS0TNj58GQVXB2QoPjkQBx41XB52GxctOlMPEkp6cREMHzhmDDAVLn8oDCQyYicfKR4PDhwXe2YTYQIuBC8WDnplbmYtAWUgbCIxUCQXKDxcCBw1DFIlPEp6dRIFOTJtPHIFO1glJFIgeXsmKDJdfxIrBmA HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET undaymidydle.com/aDBCZjRHDyEVCSdmEFRgBQQMP3EMFXAkbB92JTcHBFIGVGI4VQReEhxZJlsNXAl6UABOQCsCCVkIZBVACUQ3FQlZFisIUgcNZBAJWR5ySAZGBWQTCVkWNhZVDw1zQEQcRC5bBV8FcF8CXQZ1XgdRAg
104.21.16.1204 No Content 0 B URL
undaymidydle.com/aDBCZjRHDyEVCSdmEFRgBQQMP3EMFXAkbB92JTcHBFIGVGI4VQReEhxZJlsNXAl6UABOQCsCCVkIZBVACUQ3FQlZFisIUgcNZBAJWR5ySAZGBWQTCVkWNhZVDw1zQEQcRC5bBV8FcF8CXQZ1XgdRAg
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
GET /aDBCZjRHDyEVCSdmEFRgBQQMP3EMFXAkbB92JTcHBFIGVGI4VQReEhxZJlsNXAl6UABOQCsCCVkIZBVACUQ3FQlZFisIUgcNZBAJWR5ySAZGBWQTCVkWNhZVDw1zQEQcRC5bBV8FcF8CXQZ1XgdRAg HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Jul 2025 22:54:39 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=caAaDYCfC8ExisfklZ5c%2F7UxJqiyfFEZ6E0SD9Rtl8vyIdvrVcQS2XR5uLtZ9zzlQSFtkBhBD0horMlwRMT2t9i9TOADwtqAae5diBlC"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 961dcd45dae956c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.googleapis.com/icon?family=Material+Icons
142.250.74.10200 OK 565 B URL
fonts.googleapis.com/icon?family=Material+Icons
IP / ASN
142.250.74.10
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text
First Seen 2025-01-17
Last Seen 2025-08-02
Times Seen 10238
Size 565 B (565 bytes)
MD5 736c83e15fc300de505f6ce9762a9396
SHA1 31c0f11ada78e92970ff42d990116d77c169c6d7
SHA256 c31266310101d0b1607937a7baf07f1601b7637bd2373176696488a07d7b4302
Certificate Info
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint DC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B
Validity Mon, 23 Jun 2025 08:41:28 GMT - Mon, 15 Sep 2025 08:41:27 GMT
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Jul 2025 22:54:37 GMT
date: Sat, 19 Jul 2025 22:54:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.99200 OK 48 kB URL
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-02
Times Seen 31356
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 15:48:02 GMT
expires: Fri, 17 Jul 2026 15:48:02 GMT
cache-control: public, max-age=31536000
age: 198396
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
142.250.178.99200 OK 19 kB URL
fonts.gstatic.com/s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 19276, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-02
Times Seen 1234
Size 19 kB (19276 bytes)
MD5 266d9ceb5c3c51971e2a9e13b7ec5883
SHA1 091a3b35321cb3e7b11034a091964e795c4b74ac
SHA256 f93e2585efd0318f328e3431482382c66dfe89ac387060e88116cdd18a18b933
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 17:16:03 GMT
expires: Fri, 17 Jul 2026 17:16:03 GMT
cache-control: public, max-age=31536000
age: 193115
last-modified: Wed, 28 May 2025 17:52:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET i.cdnfimgs.com/image/osp/6529/529/6870fcfba6fc7t1752235259r3442.jpg
45.133.44.36200 OK 261 kB URL
i.cdnfimgs.com/image/osp/6529/529/6870fcfba6fc7t1752235259r3442.jpg
IP / ASN
45.133.44.36
#39572 DataWeb Global Group B.V.
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JPEG image data, baseline, precision 8, 810x810, components 3
First Seen 2025-07-11
Last Seen 2025-07-20
Times Seen 29
Size 261 kB (260716 bytes)
MD5 f525d7683efabc944b2bd36202386579
SHA1 7e54815e099628472d5cc8b5b0f5291b06067327
SHA256 83dab4316ba6fc7535c0411a271d9c5a6cb0f13a5335a879cd7c6a5b51d03560
Certificate Info
Issuer Let's Encrypt
Subject i.cdnfimgs.com
Fingerprint 17:25:E1:8B:E3:11:85:18:F6:33:E5:D3:78:0F:2A:96:8D:44:36:17
Validity Fri, 18 Jul 2025 06:32:41 GMT - Thu, 16 Oct 2025 06:32:40 GMT
GET /image/osp/6529/529/6870fcfba6fc7t1752235259r3442.jpg HTTP/1.1
Host: i.cdnfimgs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Jul 2025 22:54:46 GMT
content-type: image/jpeg
content-length: 260716
server: nginx
last-modified: Fri, 11 Jul 2025 12:00:59 GMT
etag: "6870fcfb-3fa6c"
cache-control: max-age=1209600
expires: Sat, 02 Aug 2025 22:54:46 GMT
x-cdn-host-id: ds5059
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/theme.css
5.34.214.148200 OK 207 kB URL
megaup.net/themes/spirit/assets/frontend/css/theme.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type assembler source, ASCII text, with CRLF line terminators
First Seen 2025-04-01
Last Seen 2025-08-02
Times Seen 1283
Size 207 kB (206626 bytes)
MD5 06cc8983a538a05dddf526b3b7e732aa
SHA1 2414173a1660589ebbba8bdc6e3d1237df6063db
SHA256 27e49bfa89404d352fa4627719f2a9a3ea5c2759c2bc74e7567ff98b5a996758
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 18:30:52 GMT
vary: Accept-Encoding
etag: W/"67ab975c-32722"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.99200 OK 48 kB URL
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-02
Times Seen 31356
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 15:48:02 GMT
expires: Fri, 17 Jul 2026 15:48:02 GMT
cache-control: public, max-age=31536000
age: 198396
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e57g1za200&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211
142.250.74.168200 OK 347 kB URL
www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e57g1za200&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211
IP / ASN
142.250.74.168
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (6004)
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 1
Size 347 kB (346936 bytes)
MD5 b05d3debc5f37054ae1fb59f4e48eb5b
SHA1 2887824dece06384e3b3e5c06b248a4191f3ea5d
SHA256 2dd7d95edc6f4b7c3f2173b1098d6c2472e7f548b1e2f92f73b0971980620cbb
Certificate Info
Issuer Google Trust Services
Subject *.google-analytics.com
Fingerprint 3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20
Validity Mon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
GET /gtag/js?id=G-Z9TE2LW16Q&cx=c>m=457e57g1za200&tag_exp=101509157~103116026~103200004~103233427~104684208~104684211 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Jul 2025 22:54:39 GMT
expires: Sat, 19 Jul 2025 22:54:39 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 120844
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
5.34.214.148200 OK 87 kB URL
megaup.net/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 2945
Size 87 kB (86713 bytes)
MD5 5b5a269bd363e0886c17d855c2aab241
SHA1 042dd055cd289215835a58507c9531f808e1648a
SHA256 1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-152b9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.99200 OK 48 kB URL
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-02
Times Seen 31356
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 15:48:02 GMT
expires: Fri, 17 Jul 2026 15:48:02 GMT
cache-control: public, max-age=31536000
age: 198396
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET undaymidydle.com/UTBRVUJ+DzImfwhmFyMgB1gGDAQ5UjATACFnYGA0BmcfMRUWcXchKzUNaWJ0YgFpczI4VGxne3dDJTQ2JENsZGQ4Xjc6f3dGbGRsYR5nZWxlFiRoc3dEITQlbAF3JTYlXGxkdWQCaGN3ZwdpZnRn
104.21.16.1204 No Content 0 B URL
undaymidydle.com/UTBRVUJ+DzImfwhmFyMgB1gGDAQ5UjATACFnYGA0BmcfMRUWcXchKzUNaWJ0YgFpczI4VGxne3dDJTQ2JENsZGQ4Xjc6f3dGbGRsYR5nZWxlFiRoc3dEITQlbAF3JTYlXGxkdWQCaGN3ZwdpZnRn
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
GET /UTBRVUJ+DzImfwhmFyMgB1gGDAQ5UjATACFnYGA0BmcfMRUWcXchKzUNaWJ0YgFpczI4VGxne3dDJTQ2JENsZGQ4Xjc6f3dGbGRsYR5nZWxlFiRoc3dEITQlbAF3JTYlXGxkdWQCaGN3ZwdpZnRn HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Jul 2025 22:54:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PJFS3g3ts9fnYbDPi9HcE3L5ksrmvA36Vb6fBsnv2FVtZBwKI2CnNHzNhH3%2BIcznbWg3C0CI1PZlQOd3UWV2AZ78TiQ4VA6veOLJP1jD"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 961dcd44a9c456c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.96.1200 OK 27 B IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 1
Size 27 B (27 bytes)
MD5 1341abb0b82e7c6edc84018f3f097e3b
SHA1 ae2c8dfb2f5273ee35d2d90ff974289bc5a8106b
SHA256 3bfaf1c21d520ae70d58aa58f6e0ffe34ed84c193da6fecf52744338f5d32b65
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Jul 2025 22:54:39 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1pCpc4xIFx1taWiDLrZ0tOmhjdqdb2lKiz6EZn5RyO6EOkHG%2Fp2yY3%2BkfkBykRAfJZeTqAL12LO%2Fb9Ib5HiotiTZ2jaRoYUCEL5bW7WD7Dk%3D"}]}
content-encoding: br
set-cookie: csu=2242150166960011@1@1752965679; SameSite=None; Secure; Max-Age=31104000
cf-ray: 961dcd4afe580b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
104.21.96.1404 Not Found 159 B URL
ukankingwithea.com/asd100.bin
IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2023-04-13
Last Seen 2025-08-02
Times Seen 1133
Size 159 B (159 bytes)
MD5 fb9666f93e418b95fea8fdbc20e80af9
SHA1 d4eefca1b299cc266a80e83c9e39c4261cb87583
SHA256 c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 19 Jul 2025 22:54:39 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PRtcvnluvAoqbXeIzmGkfUiDc3q%2BgLIUJMlidzz5Dbdhirbdl3g5tehY9hhvHM4zRNsQd6%2BMJjgz%2F7av1qIlb3XN3sl7GJcfyN6DR33nvvs%3D"}]}
content-encoding: br
cf-ray: 961dcd4aee510b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/background.jpg
5.34.214.148200 OK 86 kB URL
megaup.net/themes/spirit/assets/frontend/img/background.jpg
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3
First Seen 2025-04-01
Last Seen 2025-08-02
Times Seen 1310
Size 86 kB (86513 bytes)
MD5 1b0874b56457a14258e3bd22805266c6
SHA1 26ff3d095376d43cb78388e700707cdaf6ac75eb
SHA256 5c5e0d52eb281e1ceae07f53c931982e8e014b9a535df9c98246157167e29285
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/img/background.jpg HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:38 GMT
content-type: image/jpeg
content-length: 86513
last-modified: Tue, 11 Feb 2025 07:35:38 GMT
vary: Accept-Encoding
etag: "67aafdca-151f1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
5.34.214.148200 OK 536 B URL
megaup.net/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type PNG image data, 57 x 57, 8-bit colormap, non-interlaced
First Seen 2025-04-01
Last Seen 2025-08-02
Times Seen 1310
Size 536 B (536 bytes)
MD5 0019444f6b6df5b4b5ed32b6b469caab
SHA1 4232370d10ab54ef9bda57aa9dcb813036047b35
SHA256 0509f6df067face535f028cd86200748952227161f8f244aa7864e7848553562
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t; _ga_Z9TE2LW16Q=GS2.1.s1752965679$o1$g0$t1752965679$j60$l0$h0; _ga=GA1.1.1988607232.1752965680
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:39 GMT
content-type: image/png
content-length: 536
last-modified: Thu, 13 Feb 2025 17:40:08 GMT
vary: Accept-Encoding
etag: "67ae2e78-218"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET nriceukwater.org/multi?cs=RlFvODlxYFgOCXdpWwsOfmNdDQE&abt=0&red=1&sm=76&k=schedule%200xdeadcode&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F45abf1fdbd09392b2977125f91547fcf%2FSchedule.I.v0.3.6f6-0xdeadcode.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_4GfI=1752965679543&crc=1
54.240.174.40200 OK 4.0 kB URL
nriceukwater.org/multi?cs=RlFvODlxYFgOCXdpWwsOfmNdDQE&abt=0&red=1&sm=76&k=schedule%200xdeadcode&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F45abf1fdbd09392b2977125f91547fcf%2FSchedule.I.v0.3.6f6-0xdeadcode.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_4GfI=1752965679543&crc=1
IP / ASN
54.240.174.40
#16509 AMAZON-02
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with very long lines (3951), with no line terminators
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 1
Size 4.0 kB (3951 bytes)
MD5 f29affcfb7ce7895bd05b803b014b947
SHA1 0c78117e40c0061db447abf9b58c485ea9b2e329
SHA256 08cdb874902fc8df3727f4edbaf4b3930a16911cd9683c548437eebc9db95a7d
Certificate Info
Issuer Amazon
Subject nriceukwater.org
Fingerprint D4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3
Validity Wed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
GET /multi?cs=RlFvODlxYFgOCXdpWwsOfmNdDQE&abt=0&red=1&sm=76&k=schedule%200xdeadcode&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F45abf1fdbd09392b2977125f91547fcf%2FSchedule.I.v0.3.6f6-0xdeadcode.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&_4GfI=1752965679543&crc=1 HTTP/1.1
Host: nriceukwater.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1953
date: Sat, 19 Jul 2025 22:54:39 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=ZwAMwI9gO4IIhTmkjH93LN/oaZD1Ca16ZLyOCqIB4GIkYWR/ObaDynoJ3gVkZjDfGDg4/v1Op61AD+GcCp5bFiFFMLE2DpFY7VKWhtckZxNk1Hsy6BLkFRthS1xC; Expires=Sat, 26 Jul 2025 22:54:39 GMT; Path=/
AWSALBCORS=ZwAMwI9gO4IIhTmkjH93LN/oaZD1Ca16ZLyOCqIB4GIkYWR/ObaDynoJ3gVkZjDfGDg4/v1Op61AD+GcCp5bFiFFMLE2DpFY7VKWhtckZxNk1Hsy6BLkFRthS1xC; Expires=Sat, 26 Jul 2025 22:54:39 GMT; Path=/; SameSite=None
csu=6ab61e4b-7cce-497f-b8b1-9a8c1fc63d9c
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: x3EnJZykTLmj2JMNeV_GqdtNEXKaESkbssUxRWiBSDhqhmbuXgmxlA==
X-Firefox-Spdy: h2
GET static.yhisladyloveheh.org/n337/ad/250x250_Q9KZuyHG.png
23.36.77.113200 OK 30 kB URL
static.yhisladyloveheh.org/n337/ad/250x250_Q9KZuyHG.png
IP / ASN
23.36.77.113
#20940 Akamai International B.V.
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type PNG image data, 250 x 250, 8-bit colormap, non-interlaced
First Seen 2023-04-23
Last Seen 2025-08-02
Times Seen 1526
Size 30 kB (29780 bytes)
MD5 1133d3aaa0866ea57a5b44ecccd3283b
SHA1 96417ace0d02687e054a2fba6c9cb197162eb0ea
SHA256 62aee0fd8036247bfc2fca571d6e6328621f8639e4d939807cb555111f6bd039
Certificate Info
Issuer Let's Encrypt
Subject static.yhisladyloveheh.org
Fingerprint 39:A4:B6:4F:3B:C3:A8:F4:74:1F:DF:C9:E5:2C:EC:02:8A:E6:5A:1F
Validity Wed, 02 Jul 2025 13:55:31 GMT - Tue, 30 Sep 2025 13:55:30 GMT
GET /n337/ad/250x250_Q9KZuyHG.png HTTP/1.1
Host: static.yhisladyloveheh.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 29780
Last-Modified: Tue, 11 Apr 2023 12:57:12 GMT
ETag: "64355928-7454"
Accept-Ranges: bytes
Cache-Control: max-age=79860
Expires: Sun, 20 Jul 2025 21:05:42 GMT
Date: Sat, 19 Jul 2025 22:54:42 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
POST undaymidydle.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
104.21.16.1204 No Content 0 B URL
undaymidydle.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
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
POST 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 HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 19 Jul 2025 22:54:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8DCR8fUbKbAJPTBGz6PICNAQce6PdL1tjBXAoPS4VhxpLWosguelLVa3%2BidXDuHxHA6n5yKEJV8FfUOV%2FQVosJ6R7auARj34NiZ2w4FMf6WAJmniRuRwmeG7WfAyWeDydgk"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 961dcd73f8eb56b4-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6710&min_rtt=551&rtt_var=5125&sent=120&recv=154&lost=0&retrans=0&sent_bytes=12704&recv_bytes=11123&delivery_rate=249331&ss_exit_cwnd=14919&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=1a543369f33e5eff&ts=7686&inflight_dur=148&x=40"
GET megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
5.34.214.148200 OK 70 kB URL
megaup.net/themes/spirit/assets/frontend/js/jquery.dataTables.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (768), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 2162
Size 70 kB (69754 bytes)
MD5 6fda19caa29287e6f584f0557fdeb6d4
SHA1 40f58160090cd1f022704ee1352b343adb9e73b9
SHA256 8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1107a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
5.34.214.148200 OK 14 kB URL
megaup.net/themes/spirit/assets/frontend/js/jquery.steps.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 2174
Size 14 kB (13862 bytes)
MD5 0eef6fe46d14f860d5666d2c7b13a564
SHA1 7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe
SHA256 95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-3626"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.99200 OK 48 kB URL
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-02
Times Seen 31356
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 15:48:02 GMT
expires: Fri, 17 Jul 2026 15:48:02 GMT
cache-control: public, max-age=31536000
age: 198396
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET undaymidydle.com/eklYMjBVdjtBDSskNHVlShsgZ3gwIjsBZiMqH3wCHyU0RWoyGH5GWR50YAAFQ3hpFEATLWUBAlw6LFNEDzplAABKfn5bXhwmZQAWDHRoHAlUe3YEFg90aRRECig/DwFcOSxGXEd4bwcCQ39tBAdCemwD
104.21.16.1204 No Content 0 B URL
undaymidydle.com/eklYMjBVdjtBDSskNHVlShsgZ3gwIjsBZiMqH3wCHyU0RWoyGH5GWR50YAAFQ3hpFEATLWUBAlw6LFNEDzplAABKfn5bXhwmZQAWDHRoHAlUe3YEFg90aRRECig/DwFcOSxGXEd4bwcCQ39tBAdCemwD
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
GET /eklYMjBVdjtBDSskNHVlShsgZ3gwIjsBZiMqH3wCHyU0RWoyGH5GWR50YAAFQ3hpFEATLWUBAlw6LFNEDzplAABKfn5bXhwmZQAWDHRoHAlUe3YEFg90aRRECig/DwFcOSxGXEd4bwcCQ39tBAdCemwD HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Jul 2025 22:54:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ogMSHNwmqjP3KG1JqTn7D6liu0RE1UZjaAR%2BeyPnIUFtIFt01xR85EHHa%2BbCW6gj%2FUaPz9lzrOx5yumyy1GRFaNsz3vlPyAMBEYU88oF"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 961dcd42afcb56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
173.194.73.84302 Found 0 B URL
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BC:3A:20:55:47:6C:AF:90:A0:22:C3:30:DA:31:36:4A:92:62:DE:3D
Validity Mon, 23 Jun 2025 08:42:22 GMT - Mon, 15 Sep 2025 08:42:21 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:CN8i_P7Xe9YIdIyLtQa4asdL8UzzKA:I-Qv4XL73odjKftS; Expires=Mon, 19-Jul-2027 22:54:39 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Jul 2025 22:54:39 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiPI7aHa-mBxJHf1A1BWHnKB-QziMKPBlIolJMx7VU7GpE2ijxDQvXZYBZ31WeN4SMqIo9lPJw
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-Qo2nfxHCQNBAvT5j3T1d7w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST undaymidydle.com/VnZYcUh5STsCdQVGAicRZjhsF3oQIzw5MGUvaT8wNUUCGx4eO34FITJLYEN9b0dpVzg/EmVCenAFLBA8IwVlQ3hmQ34YJjAZZUN4ZkBoQXllRH1GCz4CLAE7c0UZVHoQU2o3MDsadgggPwU0ECwvGjcHLT4TMF8nJBF9Qw4iHi0cKjgXMR1tZTAxVHsSFRQkPBpPNQMEPC8HQW1kQChUexJHb0R6b0BtR39vWGpDeG5HbVR6YB81FjxzRRwYKzkYfUYLYEJhRnpnKW1BeG5HbEdtYTVvSH5jQWpIf2FAbUJwYkZhQXFvUC5MeHhPdkNmYFAtTHllQ2FCcG9CaUZ5bkJrRXlwAigQL2tHfgE8IhplQH9jRGFHfWBOakJxYg
104.21.16.1204 No Content 0 B URL
undaymidydle.com/VnZYcUh5STsCdQVGAicRZjhsF3oQIzw5MGUvaT8wNUUCGx4eO34FITJLYEN9b0dpVzg/EmVCenAFLBA8IwVlQ3hmQ34YJjAZZUN4ZkBoQXllRH1GCz4CLAE7c0UZVHoQU2o3MDsadgggPwU0ECwvGjcHLT4TMF8nJBF9Qw4iHi0cKjgXMR1tZTAxVHsSFRQkPBpPNQMEPC8HQW1kQChUexJHb0R6b0BtR39vWGpDeG5HbVR6YB81FjxzRRwYKzkYfUYLYEJhRnpnKW1BeG5HbEdtYTVvSH5jQWpIf2FAbUJwYkZhQXFvUC5MeHhPdkNmYFAtTHllQ2FCcG9CaUZ5bkJrRXlwAigQL2tHfgE8IhplQH9jRGFHfWBOakJxYg
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
POST /VnZYcUh5STsCdQVGAicRZjhsF3oQIzw5MGUvaT8wNUUCGx4eO34FITJLYEN9b0dpVzg/EmVCenAFLBA8IwVlQ3hmQ34YJjAZZUN4ZkBoQXllRH1GCz4CLAE7c0UZVHoQU2o3MDsadgggPwU0ECwvGjcHLT4TMF8nJBF9Qw4iHi0cKjgXMR1tZTAxVHsSFRQkPBpPNQMEPC8HQW1kQChUexJHb0R6b0BtR39vWGpDeG5HbVR6YB81FjxzRRwYKzkYfUYLYEJhRnpnKW1BeG5HbEdtYTVvSH5jQWpIf2FAbUJwYkZhQXFvUC5MeHhPdkNmYFAtTHllQ2FCcG9CaUZ5bkJrRXlwAigQL2tHfgE8IhplQH9jRGFHfWBOakJxYg HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 19 Jul 2025 22:54:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Er1SviZeLeBdP6a2%2F9Tp4nbINhawpbgJ4mcU8dNr7THrjV7Wp5rmqUbtG3CnWjWCmSmOoPUkUro%2BYLxH%2F6lqlRPCLoojqzmprahgX6NhjkP%2F7L0up1K4y2MOEpYnPa0Zd3I"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 961dcd5b2ff956b4-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7328&min_rtt=551&rtt_var=5186&sent=117&recv=151&lost=0&retrans=0&sent_bytes=12047&recv_bytes=9460&delivery_rate=249331&ss_exit_cwnd=14919&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=1a543369f33e5eff&ts=3712&inflight_dur=126&x=40"
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiO27Q8xwWVr_ORrhkejRmmE7KVoJnmQJd0XmeFU1nQEjNcFW_qynjVmRMdzWhtE1SQzNqVecg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1413304827%3A1752965680273937
173.194.73.84403 Forbidden 0 B URL
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiO27Q8xwWVr_ORrhkejRmmE7KVoJnmQJd0XmeFU1nQEjNcFW_qynjVmRMdzWhtE1SQzNqVecg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1413304827%3A1752965680273937
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint AB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
Validity Mon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiO27Q8xwWVr_ORrhkejRmmE7KVoJnmQJd0XmeFU1nQEjNcFW_qynjVmRMdzWhtE1SQzNqVecg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1413304827%3A1752965680273937 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Jul 2025 22:54:40 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: script-src 'nonce-3FFC4OJjwPMH41S-DjnYVg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4ikenfs4_uY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET xml.yhisladyloveheh.org/thumbnail?i=cLUtL9mrLjY_0&p=1752965679.220815&imgt=icon
0.0.0.0 0 B URL
xml.yhisladyloveheh.org/thumbnail?i=cLUtL9mrLjY_0&p=1752965679.220815&imgt=icon
IP / ASN
0.0.0.0
#0
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=cLUtL9mrLjY_0&p=1752965679.220815&imgt=icon HTTP/1.1
Host: xml.yhisladyloveheh.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
5.34.214.148200 OK 59 kB URL
megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with very long lines (58929), with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-02
Times Seen 2119
Size 59 kB (59119 bytes)
MD5 879812fc22af75aa3ae7b5666ca4f4b8
SHA1 df27469a952b7ee36cc03db471c6198f577186a8
SHA256 c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-e6ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/granim.min.js
5.34.214.148200 OK 11 kB URL
megaup.net/themes/spirit/assets/frontend/js/granim.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 2153
Size 11 kB (10635 bytes)
MD5 714368d20c70f8c91b0a596e128dac07
SHA1 563954ec3a896fc129d014f01836245829f6d01d
SHA256 e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-298b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET 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
0.0.0.0 0 B URL
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
IP / ASN
0.0.0.0
#0
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET 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 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET ukankingwithea.com/
104.21.96.1200 OK 27 B IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 1
Size 27 B (27 bytes)
MD5 cc25c8682511df17d6b39df812c0dc8f
SHA1 a35a971c9f53dabd203b573b1c8fcdad49b6789d
SHA256 9b3d33a873a915c384a58929ec2e99c9a9d70a1fd4657e6d93508eef3b3409c1
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Jul 2025 22:54:39 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ygfpNkYhXoEIhRyxH3KIiWb0U4Hd36WLK2BKF1DAFkrcQeFbH478uR%2BKlgtBzDKIdBlQEfS4DSydc5lsrvcR5ihkDCVnO%2FhdYyLuDLOnlbg%3D"}]}
content-encoding: br
set-cookie: csu=1180641479541867@1@1752965679; SameSite=None; Secure; Max-Age=31104000
cf-ray: 961dcd4afe5e0b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
5.34.214.148200 OK 103 kB URL
megaup.net/themes/spirit/assets/frontend/css/iconsmind.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-02
Times Seen 1867
Size 103 kB (102727 bytes)
MD5 c9b1c618a7b12bd7ecf6034164b29164
SHA1 f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99
SHA256 fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-19147"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
5.34.214.148200 OK 7.1 kB URL
megaup.net/themes/spirit/assets/images/logo/logo-whitebg.png
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
First Seen 2023-04-07
Last Seen 2025-08-02
Times Seen 3978
Size 7.1 kB (7137 bytes)
MD5 5d15526be10b904a6b48d1af04a10cc3
SHA1 c09b6874359ac6d71db95593618a9acb55baa984
SHA256 894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: image/png
content-length: 7137
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/datepicker.js
5.34.214.148200 OK 21 kB URL
megaup.net/themes/spirit/assets/frontend/js/datepicker.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 4244
Size 21 kB (20975 bytes)
MD5 8cfe207a6a21c7495cfb751c761217a6
SHA1 35d686a6c4ecc9946c35444ce93e110cb0e1611c
SHA256 804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-51ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
3.167.7.201200 OK 489 kB URL
d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP / ASN
3.167.7.201
#0
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 2
Size 489 kB (489387 bytes)
MD5 6c17cb806fc0a2a25f46e7efc3054c4c
SHA1 2eb72d95157e434b9d321a0c59332c97b874c19b
SHA256 be5e6229d7a54032f24452ba4b329207d3d2b4a8cc346af13db38ce455d29ed9
Certificate Info
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151960
date: Sat, 19 Jul 2025 22:23:22 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: eXchZaWzZxxnbrNFrR3RnZwyyx_-UJ9NZvLsx8zYCxHEi_T2gfmAzQ==
age: 1877
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNRBezJUamoAFwvAaarwgTMJsAvRTiZDq3L9-kGHbnYEyDOVqcbxWG6EKQLJ-Ig6TZZ3YPYDA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1623603204%3A1752965680269862
173.194.73.84403 Forbidden 0 B URL
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNRBezJUamoAFwvAaarwgTMJsAvRTiZDq3L9-kGHbnYEyDOVqcbxWG6EKQLJ-Ig6TZZ3YPYDA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1623603204%3A1752965680269862
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint AB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
Validity Mon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNRBezJUamoAFwvAaarwgTMJsAvRTiZDq3L9-kGHbnYEyDOVqcbxWG6EKQLJ-Ig6TZZ3YPYDA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1623603204%3A1752965680269862 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Jul 2025 22:54:40 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-0uOXnCHHDGjilj75BYX6Lw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.4ikenfs4_uY.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET s.viinjjlt.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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6529%2F529%2F6870fcfba6fc7t1752235259r3442.jpg
172.67.216.130302 Found 261 kB URL
s.viinjjlt.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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6529%2F529%2F6870fcfba6fc7t1752235259r3442.jpg
IP / ASN
172.67.216.130
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 261 kB (260716 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject viinjjlt.com
Fingerprint FA:83:D7:B0:90:24:CB:81:B1:3D:57:A2:15:BD:53:41:4C:50:36:C7
Validity Sat, 05 Jul 2025 19:20:00 GMT - Fri, 03 Oct 2025 20:18:15 GMT
GET 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?f=https%3A%2F%2Fi.cdnfimgs.com%2Fimage%2Fosp%2F6529%2F529%2F6870fcfba6fc7t1752235259r3442.jpg HTTP/1.1
Host: s.viinjjlt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 19 Jul 2025 22:54:46 GMT
content-length: 0
location: https://i.cdnfimgs.com/image/osp/6529/529/6870fcfba6fc7t1752235259r3442.jpg
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WYk1Liml8fvkkv4g9zYnATef3NBmgVZN%2FTxGPsLoGjCjmUmsC9JUId5IDaRBckFoJ%2B975m1fdE6%2F0zIYNQQ2qF%2F1mbTt4dbOCmphBQ%3D%3D"}]}
cf-ray: 961dcd745d20569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/flickity.css
5.34.214.148200 OK 2.5 kB URL
megaup.net/themes/spirit/assets/frontend/css/flickity.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-02
Times Seen 1712
Size 2.5 kB (2521 bytes)
MD5 244d315064064270eabbbb7ac9f6c700
SHA1 21ad53d3efbb40154293190173ee0c497ed7651c
SHA256 ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-9d9"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
5.34.214.148200 OK 6.0 kB URL
megaup.net/themes/spirit/assets/frontend/js/smooth-scroll.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 2151
Size 6.0 kB (6028 bytes)
MD5 c9e3a210d83398f301b3a7049c259676
SHA1 8e227bb40fe120841829a7fef0ffeb091d179a91
SHA256 aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-178c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMJlmZkkYoGJ62C2CdAOhviJgseqC7Ify2i8eH2VWo2O11wQYpPMDQWECPrUbOK1BdN_GuvGg
173.194.73.84302 Found 0 B URL
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMJlmZkkYoGJ62C2CdAOhviJgseqC7Ify2i8eH2VWo2O11wQYpPMDQWECPrUbOK1BdN_GuvGg
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint AB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
Validity Mon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMJlmZkkYoGJ62C2CdAOhviJgseqC7Ify2i8eH2VWo2O11wQYpPMDQWECPrUbOK1BdN_GuvGg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:67lEW8Y49ksrFHDTLoy3OBGE3FKKQA:QO5APhIL6lC0wYxh;Path=/;Expires=Mon, 19-Jul-2027 22:54:40 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Jul 2025 22:54:40 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiO27Q8xwWVr_ORrhkejRmmE7KVoJnmQJd0XmeFU1nQEjNcFW_qynjVmRMdzWhtE1SQzNqVecg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1413304827%3A1752965680273937
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-VLbJIl5S-B_5gR4ak2uy_w' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 417
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET xml.yhisladyloveheh.org/thumbnail?i=cLUtL9mrLjY_0&p=1752965679.220815&imgt=icon
198.134.116.29302 Found 30 kB URL
xml.yhisladyloveheh.org/thumbnail?i=cLUtL9mrLjY_0&p=1752965679.220815&imgt=icon
IP / ASN
198.134.116.29
#27257 WEBAIR-INTERNET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 30 kB (29780 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject yhisladyloveheh.org
Fingerprint 5E:BF:A2:98:64:CD:AA:9E:FD:7F:82:C6:5F:4C:A8:99:64:D4:F9:F7
Validity Wed, 02 Jul 2025 13:30:22 GMT - Tue, 30 Sep 2025 13:30:21 GMT
GET /thumbnail?i=cLUtL9mrLjY_0&p=1752965679.220815&imgt=icon HTTP/1.1
Host: xml.yhisladyloveheh.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 19 Jul 2025 22:54:42 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.yhisladyloveheh.org/n337/ad/250x250_Q9KZuyHG.png
GET megaup.net/sw.js
5.34.214.148200 OK 103 kB IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-03-09
Last Seen 2025-08-02
Times Seen 3755
Size 103 kB (103036 bytes)
MD5 9ee51131e416458b88d6da4e6e6959ca
SHA1 a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4
SHA256 db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 22:15:30 GMT
vary: Accept-Encoding
etag: W/"63a23402-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET d3og8t183i1vbg.cloudfront.net/?itgod=761186
3.167.7.201200 OK 489 kB URL
d3og8t183i1vbg.cloudfront.net/?itgod=761186
IP / ASN
3.167.7.201
#0
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 2
Size 489 kB (489387 bytes)
MD5 66855dff0c4b33b2a74b53a51e896385
SHA1 cde6390472844746e4a2d61a81d63f6b1a7ec5aa
SHA256 0b60d5c404db424298d8224dfade315797c131875298bb9ec7caea2a0afabb35
Certificate Info
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /?itgod=761186 HTTP/1.1
Host: d3og8t183i1vbg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 151961
date: Sat, 19 Jul 2025 22:23:21 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: AUcIPvK0rVCY_qPIq05G3J0QkiaxNvMbRXOg2vd38dfYE0_iWLbGfw==
age: 1876
X-Firefox-Spdy: h2
POST undaymidydle.com/Q2J3cmpsXRQBVxY6GyEPBA4eIy0ZMi8fMAo4MhoIIjcbGT5yCVEGAydfT0BfelNGVBoqBkpBWGURAxMeNhFKQFpzVVEbBCUNSkBMNV9HXFNtUFlETDZfRlQeMwMQT1tlEgMGBn5TQEdYelRCRF16V0RA
104.21.16.1204 No Content 0 B URL
undaymidydle.com/Q2J3cmpsXRQBVxY6GyEPBA4eIy0ZMi8fMAo4MhoIIjcbGT5yCVEGAydfT0BfelNGVBoqBkpBWGURAxMeNhFKQFpzVVEbBCUNSkBMNV9HXFNtUFlETDZfRlQeMwMQT1tlEgMGBn5TQEdYelRCRF16V0RA
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
POST /Q2J3cmpsXRQBVxY6GyEPBA4eIy0ZMi8fMAo4MhoIIjcbGT5yCVEGAydfT0BfelNGVBoqBkpBWGURAxMeNhFKQFpzVVEbBCUNSkBMNV9HXFNtUFlETDZfRlQeMwMQT1tlEgMGBn5TQEdYelRCRF16V0RA HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 19 Jul 2025 22:54:39 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xTTgHpjR4%2B%2FN0z99z0DlaVbjM2llhNxnxyBW6vLpYGyh5VamctWEqTU%2Bou0YaJt4f7kw53L9V9TetgATjpxUIKuXsO2UaPs7GjaAQOOFCXkM5Uumgss3fWAIh3Y6YYKowSSX"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: *
cf-cache-status: DYNAMIC
cf-ray: 961dcd49cf3b56b4-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6389&min_rtt=551&rtt_var=4413&sent=115&recv=149&lost=0&retrans=0&sent_bytes=11417&recv_bytes=8844&delivery_rate=249331&ss_exit_cwnd=14919&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=1a543369f33e5eff&ts=937&inflight_dur=92&x=40"
GET nriceukwater.org/floater?cs=NDlQQ08HAGR0eAMIZnN9DAlmdH8&abt=0&red=1&sm=83&k=schedule%200xdeadcode&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F45abf1fdbd09392b2977125f91547fcf%2FSchedule.I.v0.3.6f6-0xdeadcode.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_2zVQ=1752965679536&crc=1
54.240.174.40200 OK 7.4 kB URL
nriceukwater.org/floater?cs=NDlQQ08HAGR0eAMIZnN9DAlmdH8&abt=0&red=1&sm=83&k=schedule%200xdeadcode&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F45abf1fdbd09392b2977125f91547fcf%2FSchedule.I.v0.3.6f6-0xdeadcode.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_2zVQ=1752965679536&crc=1
IP / ASN
54.240.174.40
#16509 AMAZON-02
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with very long lines (7447), with no line terminators
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 1
Size 7.4 kB (7447 bytes)
MD5 8a2a521a44e7ca01d9bf67a68938e2de
SHA1 40ec253c858c012f668841d9f47e9a5d4c0dc8ce
SHA256 ac615f852cd7cd23bccb175df0fda9cd41a4192ccb27d6b527fa18e7937c7daf
Certificate Info
Issuer Amazon
Subject nriceukwater.org
Fingerprint D4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3
Validity Wed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
GET /floater?cs=NDlQQ08HAGR0eAMIZnN9DAlmdH8&abt=0&red=1&sm=83&k=schedule%200xdeadcode&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F45abf1fdbd09392b2977125f91547fcf%2FSchedule.I.v0.3.6f6-0xdeadcode.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20android%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0&tzd=0&uloc=&if=0&aa=oi1_&_2zVQ=1752965679536&crc=1 HTTP/1.1
Host: nriceukwater.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 4925
date: Sat, 19 Jul 2025 22:54:40 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=4j+qD3X1YT69AiInxWRPybq+JDc7ZF2yVTVcXCNmWYwQiaYI5sKDvdU8t1rRs8yoWUAwuiKB17QPEJrSWp9ajsjKpzJWDELWm7BuliMeT4zfmMw5jtSc7YfqdH0X; Expires=Sat, 26 Jul 2025 22:54:39 GMT; Path=/
AWSALBCORS=4j+qD3X1YT69AiInxWRPybq+JDc7ZF2yVTVcXCNmWYwQiaYI5sKDvdU8t1rRs8yoWUAwuiKB17QPEJrSWp9ajsjKpzJWDELWm7BuliMeT4zfmMw5jtSc7YfqdH0X; Expires=Sat, 26 Jul 2025 22:54:39 GMT; Path=/; SameSite=None
csu=d9e857a4-9a7e-4484-9fb1-49783ffdf9d0
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v17JJaVRzDVNuXy8n_jT5E91gnP5vdsSRUCxARZMb3k5Bz2aD9tLGQ==
X-Firefox-Spdy: h2
GET ukankingwithea.com/asd100.bin
104.21.96.1404 Not Found 159 B URL
ukankingwithea.com/asd100.bin
IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type HTML document, ASCII text, with CRLF line terminators
First Seen 2023-04-13
Last Seen 2025-08-02
Times Seen 1133
Size 159 B (159 bytes)
MD5 fb9666f93e418b95fea8fdbc20e80af9
SHA1 d4eefca1b299cc266a80e83c9e39c4261cb87583
SHA256 c6252ea6e785c1dc0d44dab86653a7209eb507e45b70d138ce515576743b64f7
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sat, 19 Jul 2025 22:54:39 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 0
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ieG0NaVhHHD8N3hcV5s5dco2eRscRuPdHkjIIOZmJTcn16nBC6HQSYBTzLVDfaUNuSFKRFzkdo2OpRzJJXf80e%2BNKxCdwz2QgAvJx7ggq%2F4%3D"}]}
content-encoding: br
cf-ray: 961dcd4b2e950b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.96.1200 OK 27 B IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 1
Size 27 B (27 bytes)
MD5 db2030efcaa6585e7b6e82cafb86cb57
SHA1 df00f12ea1fb9b6875510562cbc551ab09b0da43
SHA256 769275b5d3caff7802ba5452a9d4c9587eb2ad2ac1452578c687cf94a62443a9
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Jul 2025 22:54:40 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=muQlocDcQ1EeWaJO%2BPkTi7T79%2FKMDMIY9zXeA1AhR6S3nVXEWDGa1O54ujy7HGxtZGt80mBc8lpoiEbn5nB3weyfbU%2FMMz6RsVrU7NR2NWk%3D"}]}
content-encoding: br
set-cookie: csu=1359389417184341@1@1752965680; SameSite=None; Secure; Max-Age=31104000
cf-ray: 961dcd4b2e830b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
5.34.214.148200 OK 739 B URL
megaup.net/themes/spirit/assets/frontend/css/mu-waiting-upload.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with CRLF line terminators
First Seen 2025-04-06
Last Seen 2025-08-02
Times Seen 1228
Size 739 B (739 bytes)
MD5 a19cdfde4cca33ccafc0b8bfd518bebb
SHA1 df1830e07033d0ae31288f62892121778fc7c765
SHA256 a347474d3c97d5440c2f06c86c314eb1e9c2a20e2b84e8367d57743fe77a8115
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/mu-waiting-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Mon, 17 Feb 2025 00:39:28 GMT
vary: Accept-Encoding
etag: W/"67b28540-2e3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
142.250.178.99200 OK 27 kB URL
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 26596, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-02
Times Seen 5488
Size 27 kB (26596 bytes)
MD5 dae1850484b86d299c31bc08aaa563cf
SHA1 dca808d6d16965c40bfba4e4b3c8a819f843890d
SHA256 8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 17:14:31 GMT
expires: Fri, 17 Jul 2026 17:14:31 GMT
cache-control: public, max-age=31536000
age: 193207
last-modified: Wed, 28 May 2025 17:52:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
5.34.214.148200 OK 80 kB URL
megaup.net/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 80148, version 331.17301
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 6339
Size 80 kB (80148 bytes)
MD5 c500da19d776384ba69573ae6fe274e7
SHA1 6290834672aba86d5b6c1c73b30b57c9c53996f7
SHA256 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/font-awesome.min.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:39 GMT
content-type: font/woff2
content-length: 80148
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-13914"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiPI7aHa-mBxJHf1A1BWHnKB-QziMKPBlIolJMx7VU7GpE2ijxDQvXZYBZ31WeN4SMqIo9lPJw
173.194.73.84302 Found 0 B URL
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiPI7aHa-mBxJHf1A1BWHnKB-QziMKPBlIolJMx7VU7GpE2ijxDQvXZYBZ31WeN4SMqIo9lPJw
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint AB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
Validity Mon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiPI7aHa-mBxJHf1A1BWHnKB-QziMKPBlIolJMx7VU7GpE2ijxDQvXZYBZ31WeN4SMqIo9lPJw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:rgz5xBYhYAp3rwMxqDRhxOiKGbLmGw:6ZaUuUaBZ0oD9ZiJ;Path=/;Expires=Mon, 19-Jul-2027 22:54:40 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Jul 2025 22:54:40 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiNRBezJUamoAFwvAaarwgTMJsAvRTiZDq3L9-kGHbnYEyDOVqcbxWG6EKQLJ-Ig6TZZ3YPYDA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1623603204%3A1752965680269862
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-OEun-dCRA2b87Wg4INnWDg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 419
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
5.34.214.148200 OK 77 kB URL
megaup.net/themes/spirit/assets/frontend/css/bootstrap.min.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with very long lines (65319), with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-02
Times Seen 2109
Size 77 kB (76922 bytes)
MD5 9b67b9ffbfcbe226a8c413fa740fd91c
SHA1 7837bd0c312897e46311aaf472947f3e23d75df2
SHA256 2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-12c7a"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/images/logo/logo.png
5.34.214.148200 OK 5.9 kB URL
megaup.net/themes/spirit/assets/images/logo/logo.png
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced
First Seen 2025-04-01
Last Seen 2025-08-02
Times Seen 1282
Size 5.9 kB (5900 bytes)
MD5 fa360a47a62ae74a0a3d8c0f3e6f7f12
SHA1 168c72a918b04b735f8e0f8a72223a16f0eda358
SHA256 1d3a3c84dd36871d1009693761f441537117d5ee62c8e775d7d52c77d4c46de4
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: image/png
content-length: 5900
last-modified: Sat, 08 Feb 2025 04:50:36 GMT
vary: Accept-Encoding
etag: "67a6e29c-170c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET dtheriverwasqu.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
108.157.214.104200 OK 3.1 kB URL
dtheriverwasqu.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
IP / ASN
108.157.214.104
#16509 AMAZON-02
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type HTML document, ASCII text, with very long lines (3074), with no line terminators
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 1
Size 3.1 kB (3074 bytes)
MD5 08a151255895152bc111a557da29026c
SHA1 05ffee7da171d56e98f82eeeb0c016e41edd58c8
SHA256 2953ee78d1d89dc9a139227d0ad42e625ba0f4eb450890353439927b935e30b5
Certificate Info
Issuer Amazon
Subject dtheriverwasqu.com
Fingerprint 36:56:B3:D7:DB:37:70:F9:5D:29:5D:0C:A3:A7:45:5B:7D:39:14:B4
Validity Fri, 27 Jun 2025 00:00:00 GMT - Sun, 26 Jul 2026 23:59:59 GMT
GET /U1h0RFgyOhcpZzJlFmItITRJYWoVfUYCPGA3E3wsYmBHLWklOhNqOz83ASA+ITcaMHY9PQBhahUWIXcWFxYyES8bG0UXOTo7FQ4vPzEuERIqHDMKaRIiMhYVYWwRDjQeaD4jFicPHgU2BQsYDBc5aDAiNmorNi47IgoDDRwCNSIFFCk8OycgGm05LGg4GywJahsLNQ4CGw0nDmkJNy51DWAKMCtsBzIABgg5LxUINB40JBYsPwkgFi0bMQwLCBdgEg0wFTYyEQInGjwGMAJqAAAIF2gsCB0eNRAvHikPHQJqAgA5AgILaTAePzAAEC8eKQkOM2EBAFknCgkwMhM7AgkAHg03NTY8PGEJLAoOHCIXBhQVaAwgMxIaMRM8ORkgEQoJMD4HOxIaQx1pIzU2KQ1jHh0GPhw2LgYaAgIYHTMdIjYTDjoOGgEdHiIbBhI/EUIPaQkgFykKNApGdB0wIS4LOzR+Hjc3PShJD2EGHB03DwNp HTTP/1.1
Host: dtheriverwasqu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1220
date: Sat, 19 Jul 2025 22:54:38 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=CCzzlPsIPNM+rN36uMpx5ZxhFv9iXE1dN43wUmTC//ERjZVpwm2bNMWEqdvll0qWq9GFcCuUugT5wUFxRq7Ivyd09DKTnHUER3kPFD31IUlZVGhWvKFlRmZs+ald; Expires=Sat, 26 Jul 2025 22:54:38 GMT; Path=/
AWSALBCORS=CCzzlPsIPNM+rN36uMpx5ZxhFv9iXE1dN43wUmTC//ERjZVpwm2bNMWEqdvll0qWq9GFcCuUugT5wUFxRq7Ivyd09DKTnHUER3kPFD31IUlZVGhWvKFlRmZs+ald; Expires=Sat, 26 Jul 2025 22:54:38 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: bnYTLuxr4JWQXyc8X46aZ8HaHCZBDP_7hWWyMCu7dn_ftnfL5f8CEA==
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/socicon.css
5.34.214.148200 OK 9.8 kB URL
megaup.net/themes/spirit/assets/frontend/css/socicon.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-02
Times Seen 1681
Size 9.8 kB (9838 bytes)
MD5 910a42ce112991b31b30a735f1006a5f
SHA1 6c8b4769270f1c86bb1c7a6b54325465395ba614
SHA256 010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-266e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
142.250.74.10200 OK 39 kB URL
fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
IP / ASN
142.250.74.10
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with very long lines (1572)
First Seen 2025-06-02
Last Seen 2025-08-02
Times Seen 645
Size 39 kB (39341 bytes)
MD5 0812d3cfd3d7800435f05536b513ecfd
SHA1 e70839be86f9de0d31aa6b5f0903da7c1fc7c286
SHA256 00e20cfbdec23113781e1620e51b3e336b15acd9a3c026a184390736b26dab70
Certificate Info
Issuer Google Trust Services
Subject upload.video.google.com
Fingerprint DC:40:BF:B1:59:C9:CC:B5:4A:38:2D:D0:16:8D:06:A5:1D:B4:08:8B
Validity Mon, 23 Jun 2025 08:41:28 GMT - Mon, 15 Sep 2025 08:41:27 GMT
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 19 Jul 2025 22:54:37 GMT
date: Sat, 19 Jul 2025 22:54:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=UA-108868042-1
142.250.74.168200 OK 290 kB URL
www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP / ASN
142.250.74.168
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (5911)
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 2
Size 290 kB (289752 bytes)
MD5 72f1742e4e2e9ff763a46074b0c430be
SHA1 cb0eea20181858a576f0b78e6895eab705c38365
SHA256 67dc06893118747bf07a448fc4dcc3913f553103ddad97782c9719f100d3d621
Certificate Info
Issuer Google Trust Services
Subject *.google-analytics.com
Fingerprint 3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20
Validity Mon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Jul 2025 22:54:37 GMT
expires: Sat, 19 Jul 2025 22:54:37 GMT
cache-control: private, max-age=900
last-modified: Sat, 19 Jul 2025 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 102092
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.178.99200 OK 48 kB URL
fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP / ASN
142.250.178.99
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 48332, version 1.0
First Seen 2025-05-29
Last Seen 2025-08-02
Times Seen 31356
Size 48 kB (48332 bytes)
MD5 5734e133a619a6ae6ee21a6c00a95eba
SHA1 57c0ac17302d07bd4f968240098afe5ed53d4ad2
SHA256 d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
Validity Mon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48332
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Jul 2025 15:48:02 GMT
expires: Fri, 17 Jul 2026 15:48:02 GMT
cache-control: public, max-age=31536000
age: 198396
last-modified: Wed, 28 May 2025 18:06:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET theharityhild.buzz/YmpnYmkZSBQVNhcYC0BTQAITFhkRUEhNBAcNBhcZTAQCFkYRHUkIGkBGRREEBEhdU0VAGQoUS1hIU0xaQEZFFggFNQ4GS1hIX1FbVFlUQEVAGRIANgsOVUBTQAxfUVoBWlMARFQPVwBEVg4FUkRbXl9VRARcAgcMAQ8EAQoBD0Uf
34.41.139.193200 OK 0 B URL
theharityhild.buzz/YmpnYmkZSBQVNhcYC0BTQAITFhkRUEhNBAcNBhcZTAQCFkYRHUkIGkBGRREEBEhdU0VAGQoUS1hIU0xaQEZFFggFNQ4GS1hIX1FbVFlUQEVAGRIANgsOVUBTQAxfUVoBWlMARFQPVwBEVg4FUkRbXl9VRARcAgcMAQ8EAQoBD0Uf
IP / ASN
34.41.139.193
#396982 GOOGLE-CLOUD-PLATFORM
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer ZeroSSL
Subject *.theharityhild.buzz
Fingerprint D7:A3:95:2E:55:27:58:09:40:C1:B4:BA:1F:ED:FA:B4:82:6C:83:AE
Validity Wed, 25 Jun 2025 00:00:00 GMT - Tue, 23 Sep 2025 23:59:59 GMT
GET /YmpnYmkZSBQVNhcYC0BTQAITFhkRUEhNBAcNBhcZTAQCFkYRHUkIGkBGRREEBEhdU0VAGQoUS1hIU0xaQEZFFggFNQ4GS1hIX1FbVFlUQEVAGRIANgsOVUBTQAxfUVoBWlMARFQPVwBEVg4FUkRbXl9VRARcAgcMAQ8EAQoBD0Uf HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 19 Jul 2025 22:54:39 GMT
Connection: close
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
173.194.73.84302 Found 0 B URL
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP / ASN
173.194.73.84
#15169 GOOGLE
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint BC:3A:20:55:47:6C:AF:90:A0:22:C3:30:DA:31:36:4A:92:62:DE:3D
Validity Mon, 23 Jun 2025 08:42:22 GMT - Mon, 15 Sep 2025 08:42:21 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:mxqtVRMqQkbMFf6V_u5Mgw4m-3UStQ:4p54repVzGKJK33Y; Expires=Mon, 19-Jul-2027 22:54:39 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 19 Jul 2025 22:54:39 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiMJlmZkkYoGJ62C2CdAOhviJgseqC7Ify2i8eH2VWo2O11wQYpPMDQWECPrUbOK1BdN_GuvGg
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-cG9bJ_H3tBQV14Y7Ez0UvA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
5.34.214.148200 OK 590 B URL
megaup.net/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
First Seen 2025-04-01
Last Seen 2025-08-02
Times Seen 1310
Size 590 B (590 bytes)
MD5 ed3d11830b3e136b384f2a0b8082f235
SHA1 3b75f2a64d528165f108d62e8c30d464b76945d7
SHA256 1aef6752088fe69a166d3a84375431e1041dde8fa3f9ccbde26accb220feb4a5
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t; _ga_Z9TE2LW16Q=GS2.1.s1752965679$o1$g0$t1752965679$j60$l0$h0; _ga=GA1.1.1988607232.1752965680
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:39 GMT
content-type: image/png
content-length: 590
last-modified: Thu, 13 Feb 2025 17:42:00 GMT
vary: Accept-Encoding
etag: "67ae2ee8-24e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
5.34.214.148200 OK 80 kB URL
megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
IP / ASN
5.34.214.148
#42532 SIA VEESP
Resource Info
File type HTML document, Unicode text, UTF-8 text, with very long lines (51662)
First Seen 2025-07-19
Last Seen 2025-07-19
Times Seen 1
Size 80 kB (79780 bytes)
MD5 1bb13f3f6c940c439ba202834f8baa00
SHA1 49981fa7dc46ebe13289dc4702e9b4fd798791f3
SHA256 95e2670a12852f5ca8c49c43c0f3e683ff24b0392a23bf8106d4ee8faf089e85
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t; expires=Sun, 20 Jul 2025 22:54:37 GMT; Max-Age=86400; path=/; domain=megaup.net; secure; HttpOnly; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
access-control-allow-origin: https://megaup.net
access-control-allow-headers: Content-Type, Content-Range, Content-Disposition, Content-Description
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
5.34.214.148200 OK 3.2 kB URL
megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Unicode text, UTF-8 text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-02
Times Seen 1694
Size 3.2 kB (3160 bytes)
MD5 4541b29b6040bc31b760f98e914fd1d7
SHA1 0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba
SHA256 6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-c58"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/scripts.js
5.34.214.148200 OK 115 kB URL
megaup.net/themes/spirit/assets/frontend/js/scripts.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (914), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 1881
Size 115 kB (114862 bytes)
MD5 ce260d2170faf98639ab8e0e3758f1e2
SHA1 32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f
SHA256 ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1c0ae"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
5.34.214.148200 OK 54 kB URL
megaup.net/themes/spirit/assets/frontend/js/flickity.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 2155
Size 54 kB (53873 bytes)
MD5 8c1e666176ac7bdce67d58b45823ffac
SHA1 75947e4316427ce0c5e33300aeb4dc4d7d54dd09
SHA256 c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-d271"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
5.34.214.148200 OK 4.3 kB URL
megaup.net/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 4292, version 1.0
First Seen 2023-04-20
Last Seen 2025-08-02
Times Seen 4855
Size 4.3 kB (4292 bytes)
MD5 ae072782b361d2afdbf43db08d3cfb73
SHA1 f3db2e65b53d97491672f8631e21d6d05905cc88
SHA256 31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/spirit/assets/frontend/css/stack-interface.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:38 GMT
content-type: font/woff2
content-length: 4292
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: "62594310-10c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/js/typed.min.js
5.34.214.148200 OK 3.9 kB URL
megaup.net/themes/spirit/assets/frontend/js/typed.min.js
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type JavaScript source, ASCII text, with very long lines (3949), with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-02
Times Seen 4888
Size 3.9 kB (3949 bytes)
MD5 2f6185a8a32a50b2b3e04849f44359d4
SHA1 0e5501588c5c0d1c9462f34b0d56c21abff5bfef
SHA256 914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: application/javascript
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-f6d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/custom.css
5.34.214.148200 OK 8.9 kB URL
megaup.net/themes/spirit/assets/frontend/css/custom.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type assembler source, ASCII text, with CRLF line terminators
First Seen 2025-04-06
Last Seen 2025-08-02
Times Seen 1228
Size 8.9 kB (8936 bytes)
MD5 68443327ebd1d8f35857bbb29d3ce6df
SHA1 d34e37d8cebc246854f05dde78abc32b5ad5d9fe
SHA256 98cf7514d65d87963ee938b6f83493b4429f8005a5f6814ba226a7b89c80aa45
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Tue, 11 Feb 2025 19:56:14 GMT
vary: Accept-Encoding
etag: W/"67abab5e-22e8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
5.34.214.148200 OK 6.0 kB URL
megaup.net/themes/spirit/assets/frontend/css/jquery.steps.css
IP / ASN
5.34.214.148
#42532 SIA VEESP
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type ASCII text, with CRLF line terminators
First Seen 2023-04-11
Last Seen 2025-08-02
Times Seen 1726
Size 6.0 kB (6019 bytes)
MD5 25cfe48e07622a00154b677afcbaeb47
SHA1 23e3ae1bd04ad1d00d25d30e39815104ceeae52f
SHA256 709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
Certificate Info
Issuer Sectigo Limited
Subject *.megaup.net
Fingerprint 28:91:4F:48:70:2D:9A:F8:A6:4C:97:3C:D2:8B:69:C0:85:C0:C9:A2
Validity Fri, 18 Jul 2025 00:00:00 GMT - Tue, 18 Aug 2026 23:59:59 GMT
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=hli8ej1o0i9gm1ftecofrpg27t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 19 Jul 2025 22:54:37 GMT
content-type: text/css
last-modified: Fri, 15 Apr 2022 10:04:00 GMT
vary: Accept-Encoding
etag: W/"62594310-1783"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
GET undaymidydle.com/UHJlckx/TQYBcTI0PAUoBDADEDsCMSdDOD4wDicPBjU8NR03M0MGJTRPXUB5aUNUVDw5FlhBfnYBERM4JQFYQ2o5HAMdcXYEWEJiaVxXXHp2B1hDaiQCBBVxYVQVBjg8T1RFeWJLU0d6Z0pWQXQ
104.21.16.1204 No Content 0 B URL
undaymidydle.com/UHJlckx/TQYBcTI0PAUoBDADEDsCMSdDOD4wDicPBjU8NR03M0MGJTRPXUB5aUNUVDw5FlhBfnYBERM4JQFYQ2o5HAMdcXYEWEJiaVxXXHp2B1hDaiQCBBVxYVQVBjg8T1RFeWJLU0d6Z0pWQXQ
IP / ASN
104.21.16.1
#13335 CLOUDFLARENET
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject undaymidydle.com
Fingerprint BC:B2:B1:78:62:F7:0B:6A:B4:8F:14:DD:96:20:E5:8F:26:A3:E2:89
Validity Wed, 11 Jun 2025 06:24:06 GMT - Tue, 09 Sep 2025 07:22:40 GMT
GET /UHJlckx/TQYBcTI0PAUoBDADEDsCMSdDOD4wDicPBjU8NR03M0MGJTRPXUB5aUNUVDw5FlhBfnYBERM4JQFYQ2o5HAMdcXYEWEJiaVxXXHp2B1hDaiQCBBVxYVQVBjg8T1RFeWJLU0d6Z0pWQXQ HTTP/1.1
Host: undaymidydle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 19 Jul 2025 22:54:38 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cfDTGqHMPcR82JUFpsXAE3JVKu%2FOSCb32F2xN%2FD9KHB1GdKlxtlChq1ma%2FHLx0ibr4Z%2B9tNH%2FRztcXfNOG%2BS4fwO2MTqNtxgN6h%2FtDGI"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 961dcd428f9a56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 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
0.0.0.0 0 B URL
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
IP / ASN
0.0.0.0
#0
Requested by https://megaup.net/45abf1fdbd09392b2977125f91547fcf/Schedule.I.v0.3.6f6-0xdeadcode.zip
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5605997
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ZlRuOVcHNg1UaAdpDB8iFDhTHGUgcVx/M1U7CQEjV2xdUGYQNgkXNAo7G10xFDsATXkIMRocZSAhC2ENMTcDATYhAAlsAidkCHQ8XwM6bG4TBihNMSQ9P2EUMwUMdC8zGyp4DVIcL1YZMxAZexYkNylYLjNhI30dCxUZSRosOSx/FTRkHWAtCh4qaCAfAF8AMSE+DVoUIwY/dC8RGTx8MxERGUo1NWYkbBAOPCJ2L1YCK3s4UBFeSRsrEyBaD1csK2M7CQ0rezAfHDxeHDNmPHoWN2U6YxIsMT1vPwsCX05gM2Y8ehAkFTdgEjwfPVMFHAUoARU3E0NzDz4QGm0NIx0hfy8vPyZoDgIBXGwgNT8afh0nBiVqPQI6P28jPgYAAA8+AQVrGh4RK387KD8gf2YsBlxjFD4/AnE0VhYIcS9ePyhOPDEQAHcWLQEGfw4KLAhhICgmP05xDCcBVydbAzhwE1YlCwwHUGMEXQ1THw HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache