ocsp.sectigo.com/
471
IP
Hash
947d33200febe263b75c67d50890ab8b
1edccc0cbbd64f0d6457b0c832563e8ec220fa4a
8e41e228b6762acc899b676c536d58df4a7e6ecc78d996f8bc7674985f2c0cd7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 06 May 2023 00:44:31 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 05 May 2023 11:25:45 GMT
Expires: Fri, 12 May 2023 11:25:44 GMT
Etag: "1edccc0cbbd64f0d6457b0c832563e8ec220fa4a"
Cache-Control: max-age=556272,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7c2d31f7acc6b4f9-OSL
megaup.net/themes/flow/images/main_logo_inverted.png
200 OK
7137
URL
GET
HTTP/2
megaup.net/themes/flow/images/main_logo_inverted.png
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash
5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:31 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/images/loading_small.gif
200 OK
184355
URL
GET
HTTP/2
megaup.net/themes/flow/images/loading_small.gif
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
GIF image data, version 89a, 64 x 64\012- data
Hash
b0dd5b3af9c4c0644d7bddee83716209
30002468d0266b893b3559b8d0d260c6cbf0ad7c
2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d
GET /themes/flow/images/loading_small.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:31 GMT
content-type: image/gif
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472
IP
Hash
df9a61446a4aa3ddbe888c855736f8d0
6608e220dd3d235ffa6de04a27b3127283d0d984
da4050fecb9a095a59461305b38e676279eeb928f1936ef1085a4042bd8bed82
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 06 May 2023 00:44:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK
45872
URL
GET
HTTP/2
www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintCA:2C:8E:2F:14:74:84:57:8C:39:86:59:92:AC:A1:7C:C8:FA:99:CA
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
Magic
ASCII text, with very long lines (2271)
Hash
33e9b366623a39953a09f249d37ea503
0fb47399f8e477f8f1f7ac76ea16c5f9c9b443cb
21c6746e487c1baf2f1c2ae1336d731e7acc22ca875ac0bb674ed65183ce6228
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 06 May 2023 00:44:32 GMT
expires: Sat, 06 May 2023 00:44:32 GMT
cache-control: private, max-age=900
last-modified: Sat, 06 May 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45872
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/retina/retina.js
200 OK
1149
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/js/retina/retina.js
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (1249)
Hash
a2d2e9ff41df813bb7e53cf985f38e65
2b1bd3759e8c18c9108d911d0e70456aef13d833
c7f4ab8e487eead2ba067bda555b4081f6f43d4f07a551957fc96ac5980a3a5f
GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:31 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-52e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
200 OK
1153
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with CRLF line terminators
Hash
e6fcbbcbbf718b6175c6ad375f181be2
0d494230807fe753e94f6e77a5efdae644b484f9
70d9bd64b6943cab0d621aecb6429ecb8126bc5596d7ab9f88f0c53dcc463031
GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:31 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
200 OK
188765
URL
GET
HTTP/2
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
Magic
Unicode text, UTF-8 text, with very long lines (15948)
Hash
888d2d19ceeb1ba7db1e85998b2cf058
9fcbe4781f40d553f2d4b6db5918bb7cbe6bc0b2
956ad29f0dce3070426a45dc798323e5c51d13951be23edccadb274f4d54fc76
GET /?kzmmd=761186 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 188765
date: Sat, 06 May 2023 00:44:32 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: suT_EBX3tbzwu8yo57HOGXMLZPlvItpUuRWEAXlAqEzOMTHgSHj7zw==
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
200 OK
58907
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (464), with CRLF line terminators
Hash
9628a59d956de68f2cda2003697bafe1
39580481f894d1f78177b9611a984cb8d45af1e9
a6808b64af549da8cda1e3ded3db5645ab56502e2467f510291c533e9df28bf0
Analyzer
Verdict
Alert
urlquery
suspicious
Suspicious - Suspicious Javascript code
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:31 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK
25
URL
GET
HTTP/1.1
altowriestwispy.com/tysaSHG1FMaM/18410
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerLet's Encrypt
Subjectaltowriestwispy.com
FingerprintC3:95:E3:67:82:EA:18:9C:5A:2C:E7:4F:33:5E:9E:3A:E2:EE:4C:D8
ValiditySat, 25 Mar 2023 23:05:39 GMT - Fri, 23 Jun 2023 23:05:38 GMT
Magic
ASCII text, with no line terminators
Hash
d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 06 May 2023 00:44:32 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sun, 07-May-2023 00:44:32 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sun, 07-May-2023 00:44:32 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK
26
URL
GET
HTTP/1.1
keydawnawe.com/gwZ1U5hjA8ii/32575
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerLet's Encrypt
Subjectkeydawnawe.com
FingerprintF7:57:30:58:C1:35:AA:9E:BA:6E:40:60:AF:90:29:A9:64:83:53:EA
ValidityThu, 13 Apr 2023 23:00:56 GMT - Wed, 12 Jul 2023 23:00:55 GMT
Magic
ASCII text, with no line terminators
Hash
4e5d65669f8dcd928dad06adf883f025
d771713d758c3348dd7e5b38bb40c7935399ae46
0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 06 May 2023 00:44:32 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sun, 07-May-2023 00:44:32 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sun, 07-May-2023 00:44:32 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
megaup.net/sw.js
200 OK
71698
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (65536), with no line terminators
Hash
43d3ce275baf90103ae153d546179e0b
36ab6c801e473779b0eec0956e8aa4da03bc1c14
fed3b564090c13a73519a6ca5be70d59b601193b896de82912b3c56924bbf3c7
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:31 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:15:31 GMT
vary: Accept-Encoding
etag: W/"63a1dfa3-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
200 OK
38985
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
Unicode text, UTF-8 text, with CRLF line terminators
Hash
5c689b6f3183dbd844d67490996f6b35
fdfd943ad13c8c4e4cf4f4cb7f7a46bb6b24a56c
f29002b136729abb3ebd0e6c6e6c462c2058cfe497941a6205f1ef2aafa356bc
GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:32 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-ce4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
200 OK
31980
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
Web Open Font Format, TrueType, length 31980, version 1.1\012- data
Hash
99ac81a158028ac2023fb3350d2497e7
f08c12c91ab29282a616c3ba8e533f49b5b433ca
92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d
GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:32 GMT
content-type: font/woff
content-length: 31980
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7cec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
200 OK
20972
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
Web Open Font Format, TrueType, length 20972, version 1.0\012- data
Hash
cad75e2dacc6794c4e6b14727d4a989d
694d04c8f643df4100c23efc1463ac9f4e732f60
ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887
GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:32 GMT
content-type: font/woff
content-length: 20972
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-51ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
200 OK
1862
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
ASCII text, with CRLF line terminators
Hash
88167ae4710e6df4c28a62f9eeb2a14c
c458370ce9f757c926bae898d3ddd5c233ae3060
25c92310ff1c0016176daebc879b773277e6959aab0153e7f966db685a836ee7
GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:31 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1547"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
workhovdiminatedi.info/VGs4UGZ7VFsjWwAGfj0pE1odYiQCLWkeMBwxbgY3IApdBiAHKG4FQCACXG1eZl4BYVdyG1E0W2dZHiMSNR9NI1tmWwhnQD0FXj9bZk1ObVZ6UhZhSGFNTW1Xch9IMQFpWh4gEiAHBWFQbFgLY1VsXAppX2U
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/VGs4UGZ7VFsjWwAGfj0pE1odYiQCLWkeMBwxbgY3IApdBiAHKG4FQCACXG1eZl4BYVdyG1E0W2dZHiMSNR9NI1tmWwhnQD0FXj9bZk1ObVZ6UhZhSGFNTW1Xch9IMQFpWh4gEiAHBWFQbFgLY1VsXAppX2U
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /VGs4UGZ7VFsjWwAGfj0pE1odYiQCLWkeMBwxbgY3IApdBiAHKG4FQCACXG1eZl4BYVdyG1E0W2dZHiMSNR9NI1tmWwhnQD0FXj9bZk1ObVZ6UhZhSGFNTW1Xch9IMQFpWh4gEiAHBWFQbFgLY1VsXAppX2U HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 06 May 2023 00:44:32 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LNb7uWR%2BJ6MwvWWE5VpmosJbR%2F534NLk3SaZ08Ojus5jRzcl6raF9FgAAt%2FcMPyWcA0WJQLqFGxfOuP7qGzbAZ0BSd2JerKDnxchaDyfttuwCLjjxUc7%2FEP1vJCU9eS6FOVOshNyZXsw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2d31feddbbb511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
workhovdiminatedi.info/ZjVKbXJJCikeTzJZG14hLm94NAUsTRg1Ag5xJAU3AAcTLxQjYGwZGwIIclpEVQRySwIPUXdfS0BGPgwGE0Z3XFQPWywCT0BDd1xcVht8XVxVEz9QQ0BBOgwVWwRsHQYSWXdcRF4GeV5BXgJ5XUJR
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/ZjVKbXJJCikeTzJZG14hLm94NAUsTRg1Ag5xJAU3AAcTLxQjYGwZGwIIclpEVQRySwIPUXdfS0BGPgwGE0Z3XFQPWywCT0BDd1xcVht8XVxVEz9QQ0BBOgwVWwRsHQYSWXdcRF4GeV5BXgJ5XUJR
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ZjVKbXJJCikeTzJZG14hLm94NAUsTRg1Ag5xJAU3AAcTLxQjYGwZGwIIclpEVQRySwIPUXdfS0BGPgwGE0Z3XFQPWywCT0BDd1xcVht8XVxVEz9QQ0BBOgwVWwRsHQYSWXdcRF4GeV5BXgJ5XUJR HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 06 May 2023 00:44:32 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C7Z3d6Wo9oaChWLJ3vAx0wryrL2DA90ZejcK9P%2FsVic5aq8jv9VIkoLwQVOzGWdfAi0R7y41DPpVpAc7NEz6tSI6yq06FnbUkauCH0muq95pOBHUKu52Z8VZ%2BKaa5jgbzpEv%2FDtm%2BBxk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2d31feedc7b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/imageads/012.png
200 OK
141764
URL
GET
HTTP/2
megaup.net/imageads/012.png
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Magic
PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash
f9a1d27cde281744b83f07019f9a00ff
7430124e45e3b0e3413e6bc582c2d27cd8804d6c
67d587f59bf10b9ac9e745071b5051d76790f40c440e52fccdeff3f6cc679fd8
GET /imageads/012.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:32 GMT
content-type: image/png
content-length: 141764
last-modified: Sat, 15 Apr 2023 07:22:56 GMT
vary: Accept-Encoding
etag: "643a50d0-229c4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
workhovdiminatedi.info/eUZiUHFWeQEjTCwDVzo+LBwFNUA8CwRiGU8TIyAJI3VXCDIxckQkGB17WmJEQHdTdgEQIl9jQ181FjEFDDVfYVcQKAQ/TF8wX2BfQGhTfkRfM19hVw02AzdMSGASJAUVe1NmSUp1UWNJTnRbaUE
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/eUZiUHFWeQEjTCwDVzo+LBwFNUA8CwRiGU8TIyAJI3VXCDIxckQkGB17WmJEQHdTdgEQIl9jQ181FjEFDDVfYVcQKAQ/TF8wX2BfQGhTfkRfM19hVw02AzdMSGASJAUVe1NmSUp1UWNJTnRbaUE
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eUZiUHFWeQEjTCwDVzo+LBwFNUA8CwRiGU8TIyAJI3VXCDIxckQkGB17WmJEQHdTdgEQIl9jQ181FjEFDDVfYVcQKAQ/TF8wX2BfQGhTfkRfM19hVw02AzdMSGASJAUVe1NmSUp1UWNJTnRbaUE HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 06 May 2023 00:44:32 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JCbAxLlb7PFK48PZ7FLVVB4d71eKDexEMrCK4tyD6LX62Wk%2B4jKZtnMuKrhC9u59obUaPpp3ecfoJJ4U4C8YRonF3AU1HVgFYcsxcOnIEqwI1t95x52RKUkA0cPaRFsiOkjX2rAQ24b0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2d31fefdcfb511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
workhovdiminatedi.info/bmRpb1FBWwocbCMxM10DKgcuCwQ8HSg+C141BxgXLSxQJzIZPU8bOApZUFtoVlJdSSEHAFReaUgXHQ4lGxdUXncHCg8AbEgSVF5/XkpbQWJIEVRedxoUCAhsX0IZGyUCWVhZaV1XWlxpWVdZXmk
204 No Content
0
URL
GET
HTTP/2
workhovdiminatedi.info/bmRpb1FBWwocbCMxM10DKgcuCwQ8HSg+C141BxgXLSxQJzIZPU8bOApZUFtoVlJdSSEHAFReaUgXHQ4lGxdUXncHCg8AbEgSVF5/XkpbQWJIEVRedxoUCAhsX0IZGyUCWVhZaV1XWlxpWVdZXmk
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bmRpb1FBWwocbCMxM10DKgcuCwQ8HSg+C141BxgXLSxQJzIZPU8bOApZUFtoVlJdSSEHAFReaUgXHQ4lGxdUXncHCg8AbEgSVF5/XkpbQWJIEVRedxoUCAhsX0IZGyUCWVhZaV1XWlxpWVdZXmk HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 06 May 2023 00:44:32 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tTCsYcXnbvKXPOiRKkZsKpEI79s4iAVI04QH2v54flomPIAKmTi459H20tOdPj12ZqT1ODzM%2FlQ8ohp6snjqc0Sb4WWKNdzNdFLQ5izgoKIXKFyuoOALA4M%2FvDz11hlsu5o%2F09OxNd8h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2d31ff0dd7b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/ZnNLV0IHESg6fQdOKXE3FB92cnAgVnkRJgseMTwkAkt5ICMfHWU0LgkGLzEwCR0/eSwDB25lBDQXEx0aNxksAAoyGCAVNSMRBmR6NiJ7GS8DFH4DBSUiPwElMCMMPncUMhkBNy87exEDHjYYNRE0MBIAECs3Mw0zBRt/DQccGCcVFCsrBAQHICENBnAsHzseEAg2eQQACSkqPSY3NQkwKygfCjMBHBsgAxA0IwQ+cyU7CWN1Lwt6HwwhOTgUBCQyEWUyJyEOGTsFKzsGEyEQPgIQFTsHZSEtIRonNAI0LxMQCDkzMi4kMhEtACkmDhIVBQQjGhohXi8lCjMXCBoBAhEDP3MfEANiCjceES4BIyEIDS8FOBkFE0NBCRoEVicDBHsIMCEZBjwdBgAQMCIiMTUNVSEkLQgDdhouNQcsbiAjAzoREjMie2E
200 OK
1184
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/ZnNLV0IHESg6fQdOKXE3FB92cnAgVnkRJgseMTwkAkt5ICMfHWU0LgkGLzEwCR0/eSwDB25lBDQXEx0aNxksAAoyGCAVNSMRBmR6NiJ7GS8DFH4DBSUiPwElMCMMPncUMhkBNy87exEDHjYYNRE0MBIAECs3Mw0zBRt/DQccGCcVFCsrBAQHICENBnAsHzseEAg2eQQACSkqPSY3NQkwKygfCjMBHBsgAxA0IwQ+cyU7CWN1Lwt6HwwhOTgUBCQyEWUyJyEOGTsFKzsGEyEQPgIQFTsHZSEtIRonNAI0LxMQCDkzMi4kMhEtACkmDhIVBQQjGhohXi8lCjMXCBoBAhEDP3MfEANiCjceES4BIyEIDS8FOBkFE0NBCRoEVicDBHsIMCEZBjwdBgAQMCIiMTUNVSEkLQgDdhouNQcsbiAjAzoREjMie2E
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3029), with no line terminators
Hash
166b402eb2c547c121537e38485b8c8e
1ad975b75d2013d54489ca68f69ff650fcde4c3c
d4fe10803072bcabb0b9afb655ebfbbda16737e45a2c3337ec603dce3ad99551
GET /ZnNLV0IHESg6fQdOKXE3FB92cnAgVnkRJgseMTwkAkt5ICMfHWU0LgkGLzEwCR0/eSwDB25lBDQXEx0aNxksAAoyGCAVNSMRBmR6NiJ7GS8DFH4DBSUiPwElMCMMPncUMhkBNy87exEDHjYYNRE0MBIAECs3Mw0zBRt/DQccGCcVFCsrBAQHICENBnAsHzseEAg2eQQACSkqPSY3NQkwKygfCjMBHBsgAxA0IwQ+cyU7CWN1Lwt6HwwhOTgUBCQyEWUyJyEOGTsFKzsGEyEQPgIQFTsHZSEtIRonNAI0LxMQCDkzMi4kMhEtACkmDhIVBQQjGhohXi8lCjMXCBoBAhEDP3MfEANiCjceES4BIyEIDS8FOBkFE0NBCRoEVicDBHsIMCEZBjwdBgAQMCIiMTUNVSEkLQgDdhouNQcsbiAjAzoREjMie2E HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1184
date: Sat, 06 May 2023 00:44:32 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 62106b168ab54fb8472f59ef6c264a5c.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: 1ytL-paez_2D_YIcdhCie2NTYseqB_ln01kDI_hfJhBwYdMNKoYgzw==
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
200 OK
2285
URL
GET
HTTP/2
megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash
3aea5970f7edfa3b4e4e402f955b9fa6
95199bf5f5c23a4e15ea2aeebbecd15f450403f0
64c4d9eb27d6b38f1a0a4eb94fe77ed252fb9a0b3f68123842db671fb60cc8b7
GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=c2eo5enhfdaiqeo34s3qbphs85
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 06 May 2023 00:44:31 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/eUlGMmoYKyVfVRh0JBQfCyV7F1g/bHR0DhQkPFkMHXF0RQsAJ2hRBhY8IlQYFicyHAQcPWMALDcdLWRfHREPRiERKhJmPhY6DmcCMiwefCErDDZdJg4mJ3ouTH0PYTM8AgV/GTAxdgoOL3EEcSkJfRVkJxwFP0EPKg8XQCEBOQ9jWB4iDmAOKSwrfyQ7G3ZeDzg+IncTKD4CYFoYBz9CDDgLCEghOxAWdRMwOQF0KDgKDnAyKx8iCg4vDAhjWUAuFVgOIS8OZzwxCzEFOi8xDmMAI3ASSxo8LCtwITd4IgoOKDoCZFlJDBV3PDUQDmQ7LAwEF1g7AC4fHS4OFXQNKjMIcwwXGwxgPzdsdHAOPzEOYwMeOgVKKywAEgMJKzMUF1g/LQNaCCgkIUU4PBhgWBkWJzYPMio/IFQ/LyY0Ag
200 OK
1171
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/eUlGMmoYKyVfVRh0JBQfCyV7F1g/bHR0DhQkPFkMHXF0RQsAJ2hRBhY8IlQYFicyHAQcPWMALDcdLWRfHREPRiERKhJmPhY6DmcCMiwefCErDDZdJg4mJ3ouTH0PYTM8AgV/GTAxdgoOL3EEcSkJfRVkJxwFP0EPKg8XQCEBOQ9jWB4iDmAOKSwrfyQ7G3ZeDzg+IncTKD4CYFoYBz9CDDgLCEghOxAWdRMwOQF0KDgKDnAyKx8iCg4vDAhjWUAuFVgOIS8OZzwxCzEFOi8xDmMAI3ASSxo8LCtwITd4IgoOKDoCZFlJDBV3PDUQDmQ7LAwEF1g7AC4fHS4OFXQNKjMIcwwXGwxgPzdsdHAOPzEOYwMeOgVKKywAEgMJKzMUF1g/LQNaCCgkIUU4PBhgWBkWJzYPMio/IFQ/LyY0Ag
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3015), with no line terminators
Hash
75c898184d3b92608a376d7580db7ed5
e79a740b65e2c5b43b4f2641b343ebd230327213
46a559224c68d098a1a7dfcd39e6934e7262c99b0811517da1f8c9405581cbcd
GET /eUlGMmoYKyVfVRh0JBQfCyV7F1g/bHR0DhQkPFkMHXF0RQsAJ2hRBhY8IlQYFicyHAQcPWMALDcdLWRfHREPRiERKhJmPhY6DmcCMiwefCErDDZdJg4mJ3ouTH0PYTM8AgV/GTAxdgoOL3EEcSkJfRVkJxwFP0EPKg8XQCEBOQ9jWB4iDmAOKSwrfyQ7G3ZeDzg+IncTKD4CYFoYBz9CDDgLCEghOxAWdRMwOQF0KDgKDnAyKx8iCg4vDAhjWUAuFVgOIS8OZzwxCzEFOi8xDmMAI3ASSxo8LCtwITd4IgoOKDoCZFlJDBV3PDUQDmQ7LAwEF1g7AC4fHS4OFXQNKjMIcwwXGwxgPzdsdHAOPzEOYwMeOgVKKywAEgMJKzMUF1g/LQNaCCgkIUU4PBhgWBkWJzYPMio/IFQ/LyY0Ag HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1171
date: Sat, 06 May 2023 00:44:32 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 62106b168ab54fb8472f59ef6c264a5c.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: NKK4leIUq3QGujzNPlfeGb-nAie5Y_40bN5VM5qTnfxQhSUB9DWFrA==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/aUV4dUsIJxsYdAh4GlM+GylFUHkvYEozLwQoAh4tDX1KAioQK1YWJwYwHBM5BisMWyUMMV1HDSgWMDsIOBITBwMqMhYjIR4kMhszOCM9BX0NdEkADD0ADTcxAQo8Rh4MACweDiQvPTAKPhRJMDIRChsYKC8OKkUnDwBAAQM6A0AiDF0WMhwFPCM+IHggAykZAy0iFzcYOBYiRgYfIy5EMjMDDEEcEzUPIgxYBDkyGQsgOk05JT0PAh0HBwAwEysDMC0vDSctNAozAwxBCj0XEyIsBQYbGyMhID4FJQp0EwMNAAAJNyZYBzo9BTMgLTsyCgMUQB0HaDoNDxAAOj8yCgI1MxEeB0kdfjgoAA0fE3Q3FjxPLwsaJRl4NUE8MA8+BhMlNw
200 OK
1154
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/aUV4dUsIJxsYdAh4GlM+GylFUHkvYEozLwQoAh4tDX1KAioQK1YWJwYwHBM5BisMWyUMMV1HDSgWMDsIOBITBwMqMhYjIR4kMhszOCM9BX0NdEkADD0ADTcxAQo8Rh4MACweDiQvPTAKPhRJMDIRChsYKC8OKkUnDwBAAQM6A0AiDF0WMhwFPCM+IHggAykZAy0iFzcYOBYiRgYfIy5EMjMDDEEcEzUPIgxYBDkyGQsgOk05JT0PAh0HBwAwEysDMC0vDSctNAozAwxBCj0XEyIsBQYbGyMhID4FJQp0EwMNAAAJNyZYBzo9BTMgLTsyCgMUQB0HaDoNDxAAOj8yCgI1MxEeB0kdfjgoAA0fE3Q3FjxPLwsaJRl4NUE8MA8+BhMlNw
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2994), with no line terminators
Hash
fcd7952ed3f25eb4da39c3d6f8f7d5d8
5ef012b2e6fc77b30e60a65e4698a3b97e64fc71
6a9a452aa00619096f92265957dc81f7fb8a753679d26d29cd02d3ac00dab64d
GET /aUV4dUsIJxsYdAh4GlM+GylFUHkvYEozLwQoAh4tDX1KAioQK1YWJwYwHBM5BisMWyUMMV1HDSgWMDsIOBITBwMqMhYjIR4kMhszOCM9BX0NdEkADD0ADTcxAQo8Rh4MACweDiQvPTAKPhRJMDIRChsYKC8OKkUnDwBAAQM6A0AiDF0WMhwFPCM+IHggAykZAy0iFzcYOBYiRgYfIy5EMjMDDEEcEzUPIgxYBDkyGQsgOk05JT0PAh0HBwAwEysDMC0vDSctNAozAwxBCj0XEyIsBQYbGyMhID4FJQp0EwMNAAAJNyZYBzo9BTMgLTsyCgMUQB0HaDoNDxAAOj8yCgI1MxEeB0kdfjgoAA0fE3Q3FjxPLwsaJRl4NUE8MA8+BhMlNw HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1154
date: Sat, 06 May 2023 00:44:32 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 62106b168ab54fb8472f59ef6c264a5c.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: l4B6R4CQRpkiR5qvrG4J53J6373RogNaC1MefVQt48Tl1xR_-03HGg==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/MlRGZ1pTNiUKZVNpJEEvQDh7Qmh0cXQhPl85PAw8Vmx0EDtLOmgENl0hIgEoXToySTRXIGNVHEABAi1pVhEtHQJgPxUDM2A2A1c2Sg0hAxVgDC5VDXMFJC0jcwQWNA9EGiElG3wtCw05cWwoLWloEwI1GAINBDY4dAclVB4DERQtIH8EFAsTXRoAJRFjE34MC1ozIAMZZDcDHx9EGxAQCXcTfgsPAjscLTNCNgEfPV0wFyYiYwMiABwCAgM+CVUQFAscBBEuAxxgFxNSAnMdCwUdexcCVyIXZgAjLWAQEz81YRJ2MR99LR8/CHYCcj4bRg4UIBgDFQNKOWYYAikAdRIAUBxVFg41Al4zB1c+dDYBLhl3BnZQFGQFHyMdSj0iIgB0MQ5TGWcFAFcDY3IsFDVcJHstC1QydFAZWCcEPwlc
200 OK
1175
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/MlRGZ1pTNiUKZVNpJEEvQDh7Qmh0cXQhPl85PAw8Vmx0EDtLOmgENl0hIgEoXToySTRXIGNVHEABAi1pVhEtHQJgPxUDM2A2A1c2Sg0hAxVgDC5VDXMFJC0jcwQWNA9EGiElG3wtCw05cWwoLWloEwI1GAINBDY4dAclVB4DERQtIH8EFAsTXRoAJRFjE34MC1ozIAMZZDcDHx9EGxAQCXcTfgsPAjscLTNCNgEfPV0wFyYiYwMiABwCAgM+CVUQFAscBBEuAxxgFxNSAnMdCwUdexcCVyIXZgAjLWAQEz81YRJ2MR99LR8/CHYCcj4bRg4UIBgDFQNKOWYYAikAdRIAUBxVFg41Al4zB1c+dDYBLhl3BnZQFGQFHyMdSj0iIgB0MQ5TGWcFAFcDY3IsFDVcJHstC1QydFAZWCcEPwlc
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3021), with no line terminators
Hash
6b9943ed2ce833d1b50513c275670d39
758a831b54241cc98066700e2bd6f037ff5fff7b
2dc06ef21ca6bb11c545ebda28c359c515a1f75ef9d0766e09ce0201e092757e
GET /MlRGZ1pTNiUKZVNpJEEvQDh7Qmh0cXQhPl85PAw8Vmx0EDtLOmgENl0hIgEoXToySTRXIGNVHEABAi1pVhEtHQJgPxUDM2A2A1c2Sg0hAxVgDC5VDXMFJC0jcwQWNA9EGiElG3wtCw05cWwoLWloEwI1GAINBDY4dAclVB4DERQtIH8EFAsTXRoAJRFjE34MC1ozIAMZZDcDHx9EGxAQCXcTfgsPAjscLTNCNgEfPV0wFyYiYwMiABwCAgM+CVUQFAscBBEuAxxgFxNSAnMdCwUdexcCVyIXZgAjLWAQEz81YRJ2MR99LR8/CHYCcj4bRg4UIBgDFQNKOWYYAikAdRIAUBxVFg41Al4zB1c+dDYBLhl3BnZQFGQFHyMdSj0iIgB0MQ5TGWcFAFcDY3IsFDVcJHstC1QydFAZWCcEPwlc HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1175
date: Sat, 06 May 2023 00:44:32 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 62106b168ab54fb8472f59ef6c264a5c.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: N3bWdm3iBT0Hdec_xvBYx9pIUdDNuriyAo-zW3y7kswAxZ8iJtYdmQ==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/QTZTS0kgVDAmdiALMW08M1pubnsHE2ENLSxbKSAvJQ5hPCg4WH0oJS5DNy07LlgnZSckQnZ5DzV7ODh8IAQBGQMHVR0ceRhfCx0TFXQbcwAZBwYeABRZFggiCwQFMQw4ZzQFPwVlam57B1QGexsAd2p8ATZVFRMKNnMHGg8ifRIZKBBaHj0ecGwCDQ14fBEKcRFmPw4CBV0wbnsHYwIGLRlhYgYKLVo1AQwMdRANfTB+FSAgAwQGAR0tbxASeQdXBRktdVNjfh4AXzcaCxNwGCkuNVQbCjl4bD96GAcFO3wdLW8QBBx4eQV4B3d1BQECAFsaKB4XZAUHJWxZEggxJQM1eiUUd2A4AxZaAg8rJkIxCiUyAwsKeQ1lPn8FDWAGDywpUjEaIiUEEApvK0U8JTl8WAkdOQlgNQAE
200 OK
1170
URL
GET
HTTP/2
kultingecauyuksehinkitw.info/QTZTS0kgVDAmdiALMW08M1pubnsHE2ENLSxbKSAvJQ5hPCg4WH0oJS5DNy07LlgnZSckQnZ5DzV7ODh8IAQBGQMHVR0ceRhfCx0TFXQbcwAZBwYeABRZFggiCwQFMQw4ZzQFPwVlam57B1QGexsAd2p8ATZVFRMKNnMHGg8ifRIZKBBaHj0ecGwCDQ14fBEKcRFmPw4CBV0wbnsHYwIGLRlhYgYKLVo1AQwMdRANfTB+FSAgAwQGAR0tbxASeQdXBRktdVNjfh4AXzcaCxNwGCkuNVQbCjl4bD96GAcFO3wdLW8QBBx4eQV4B3d1BQECAFsaKB4XZAUHJWxZEggxJQM1eiUUd2A4AxZaAg8rJkIxCiUyAwsKeQ1lPn8FDWAGDywpUjEaIiUEEApvK0U8JTl8WAkdOQlgNQAE
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3013), with no line terminators
Hash
4d4751c04736c74413a147a8092eba60
00ec9f8e39e45797cf75bd3ca9512f00b11bd8fe
7927afa165af3a7a63d2d35b1c496adac124b4c9092f4dc6f8de74c8535efce2
GET /QTZTS0kgVDAmdiALMW08M1pubnsHE2ENLSxbKSAvJQ5hPCg4WH0oJS5DNy07LlgnZSckQnZ5DzV7ODh8IAQBGQMHVR0ceRhfCx0TFXQbcwAZBwYeABRZFggiCwQFMQw4ZzQFPwVlam57B1QGexsAd2p8ATZVFRMKNnMHGg8ifRIZKBBaHj0ecGwCDQ14fBEKcRFmPw4CBV0wbnsHYwIGLRlhYgYKLVo1AQwMdRANfTB+FSAgAwQGAR0tbxASeQdXBRktdVNjfh4AXzcaCxNwGCkuNVQbCjl4bD96GAcFO3wdLW8QBBx4eQV4B3d1BQECAFsaKB4XZAUHJWxZEggxJQM1eiUUd2A4AxZaAg8rJkIxCiUyAwsKeQ1lPn8FDWAGDywpUjEaIiUEEApvK0U8JTl8WAkdOQlgNQAE HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1170
date: Sat, 06 May 2023 00:44:32 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 62106b168ab54fb8472f59ef6c264a5c.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: dccvUJB0qcrOyOawjCz5QQ9rQPDfYD2e9fy3ngPpaJ8C8KFVqed35A==
X-Firefox-Spdy: h2
platform.bidgear.com/media/img/b15.png
200 OK
649
URL
GET
HTTP/2
platform.bidgear.com/media/img/b15.png
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
Magic
PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash
d832fb80c97ff291b952757bb98240d2
63732e61a0784ed68fde494f83e4686a5c4bf7fa
7b35c11af8accdb40a14303dd3ae2762a97d2527933c56b6c9be6da2d0d11943
GET /media/img/b15.png HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 06 May 2023 00:44:32 GMT
content-type: image/png
content-length: 649
last-modified: Mon, 25 Jul 2022 09:43:33 GMT
etag: "62de65c5-289"
expires: Wed, 03 May 2023 17:48:03 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1263532
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RXhxF%2BF3f1FVLl9ZurfVSr6Qhb6%2BE%2FienZVjOwbVPtssHJ%2FyLVI7eOOATcJm2qYy%2F%2Bpa2WUTSNjBO%2Bau3AM3gb2X5lUCUdkTSxIDmJXfDR%2BvGvDRGkWtvEDrV8G%2BfxFAv0is4OX9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2d3201cfd3b4fd-OSL
X-Firefox-Spdy: h2
platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1683333873074
200 OK
2695
URL
GET
HTTP/2
platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1683333873074
IP
Requested by
https://megaup.net/2yEir/MK8-DLUXE-(USA)-NSwTcH-NSP-Update230-Ziperto.rar
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (5423), with no line terminators
Hash
e32af09540c84dfa35b13d20fea43e07
cade1c847e340d3511d358ffe5b6ba907aaac8a5
3bbe47e4f6806697bb95dc1016f101a41e81697bd8e05a655d68144f8257c6e8
GET /async.php?domainid=5593&sizeid=12&zoneid=6192&k=1683333873074 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 06 May 2023 00:44:32 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3P%2BIKczHZv1sXAHjliXjRHUGCJ37UlyWOI8zkBz3VTDQdE4EsG1b9ZpWdy%2FJJIBEgnzWuGefwUwUrIaCDYq31EEgcsjlpMKC1W%2FGeylKCXEPPG33Aq%2BkPqsomfoqvRrMvXNPBo%2FE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2d31ffced7b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/responsive.css
200 OK
23037
91.209.70.182
142.250.74.109
147.75.84.158
178.63.97.71
104.18.2.114
188.114.97.1![URL megaup.net/themes/flow/images/main_logo_inverted.png](/search?q=http.url.addr:"megaup.net%2fthemes%2fflow%2fimages%2fmain_logo_inverted.png"){kind=link}
![URL megaup.net/themes/flow/images/loading_small.gif](/search?q=http.url.addr:"megaup.net%2fthemes%2fflow%2fimages%2floading_small.gif"){kind=link}
![URL megaup.net/imageads/012.png](/search?q=http.url.addr:"megaup.net%2fimageads%2f012.png"){kind=link}
![URL platform.bidgear.com/media/img/b15.png](/search?q=http.url.addr:"platform.bidgear.com%2fmedia%2fimg%2fb15.png"){kind=link}