Overview

URLmegaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
IP 91.209.70.182 (Russia)
ASN#43317 FNK LLC
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-08-30 22:00:58 UTC
StatusLoading report..
IDS alerts0
Blocklist alert5
urlquery alerts No alerts detected
Tags None

Domain Summary (32)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
freychang.fun (5) 20665 2021-01-12 15:52:59 UTC 2022-08-30 14:04:16 UTC 104.21.45.207
firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2022-08-30 13:03:36 UTC 143.204.55.115
ocsp.pki.goog (5) 175 2017-06-14 07:23:31 UTC 2022-08-30 04:23:24 UTC 142.250.74.3
altowriestwispy.com (1) 951913 2021-02-24 10:44:10 UTC 2022-08-30 11:12:05 UTC 23.109.82.143
rtyvaluation.shop (9) 0 2022-08-21 19:26:17 UTC 2022-08-30 19:27:21 UTC 143.204.55.97 Unknown ranking
atebilaterde.one (1) 0 2022-07-21 07:34:35 UTC 2022-08-30 14:16:00 UTC 104.21.60.149 Unknown ranking
platform.bidgear.com (1) 30367 2016-07-27 11:51:48 UTC 2022-08-30 15:59:23 UTC 104.26.2.107
accounts.google.com (3) 81 2012-05-23 06:57:57 UTC 2022-08-30 16:35:24 UTC 216.58.207.237
www.googletagmanager.com (1) 75 2012-10-04 01:07:32 UTC 2022-08-30 04:24:15 UTC 142.250.74.72
ad.a-ads.com (1) 26970 2013-04-19 21:54:57 UTC 2022-08-30 17:33:37 UTC 46.4.20.142
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-08-30 04:25:59 UTC 34.117.237.239
static.a-ads.com (1) 34827 2013-06-01 16:47:05 UTC 2022-08-30 15:00:39 UTC 136.243.35.166
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-08-30 13:55:21 UTC 34.120.237.76
megaup.net (53) 179052 2017-09-01 18:45:15 UTC 2022-08-30 15:31:53 UTC 91.209.70.182
keydawnawe.com (1) 586690 2020-10-08 14:33:32 UTC 2022-08-30 11:12:05 UTC 23.109.82.239
syndication.exdynsrv.com (2) 34243 2016-04-20 18:35:15 UTC 2022-08-30 17:15:03 UTC 95.211.229.246
hw-cdn2.ang-content.com (1) 165651 2019-03-25 22:41:04 UTC 2022-08-30 17:20:07 UTC 205.185.208.20
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-08-30 20:00:24 UTC 93.184.220.29
hw-cdn2.adtng.com (1) 11917 2020-02-20 16:50:17 UTC 2022-08-30 17:20:07 UTC 209.197.3.25
societingna.info (1) 978921 2020-01-01 12:45:00 UTC 2022-08-30 11:12:27 UTC 107.22.28.167
static.serve-servee.com (1) 0 2022-06-18 03:19:30 UTC 2022-08-30 19:40:23 UTC 172.67.217.88 Unknown ranking
r3.o.lencr.org (10) 344 2020-12-02 08:52:13 UTC 2022-08-30 04:23:29 UTC 23.36.77.32
dmmzkfd82wayn.cloudfront.net (3) 0 2021-03-18 17:00:47 UTC 2022-08-30 11:12:05 UTC 143.204.42.171 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-08-30 04:28:52 UTC 35.165.41.15
a.adtng.com (1) 15165 2018-07-26 19:17:41 UTC 2022-08-30 12:01:39 UTC 66.254.114.171
e1.o.lencr.org (2) 6159 2021-08-20 07:36:30 UTC 2022-08-30 04:25:40 UTC 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-08-30 04:28:52 UTC 143.204.55.35
ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-08-30 19:36:46 UTC 172.64.155.188
www.google-analytics.com (1) 40 2012-05-21 07:15:40 UTC 2022-08-30 15:34:57 UTC 142.250.74.174
stellihandles.hair (3) 0 2022-07-21 07:05:11 UTC 2022-08-30 16:45:58 UTC 107.22.28.167 Unknown ranking
xml.serve-servee.com (1) 0 2022-06-18 07:06:23 UTC 2022-08-30 19:40:23 UTC 172.67.217.88 Unknown ranking
www.facebook.com (1) 99 2012-05-21 00:23:41 UTC 2022-08-30 04:23:37 UTC 31.13.72.36

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-08-30 2 freychang.fun Sinkholed
2022-08-30 2 freychang.fun Sinkholed
2022-08-30 2 freychang.fun Sinkholed
2022-08-30 2 freychang.fun Sinkholed
2022-08-30 2 freychang.fun Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 91.209.70.182
Date UQ / IDS / BL URL IP
2023-03-28 14:29:01 +0000 0 - 6 - 0 megaup.net/1d04b/RimWorld.v1.4.3676.zip 91.209.70.182
2023-03-28 13:17:52 +0000 0 - 6 - 0 megaup.net/176vy/sc22307-DLTWOSH.part01.rar 91.209.70.182
2023-03-28 10:49:35 +0000 0 - 5 - 0 megaup.net/19lre/Call.of.Duty.Modern.Warfare. (...) 91.209.70.182
2023-03-28 06:30:10 +0000 0 - 9 - 5 megaup.net/1d03s/11.2.11.X64.part1.rar 91.209.70.182
2023-03-27 21:00:32 +0000 0 - 6 - 0 megaup.net/18qr0/TLOZ-BOTW-JPN-LOADIINE-DLC-Z (...) 91.209.70.182


Last 5 reports on ASN: FNK LLC
Date UQ / IDS / BL URL IP
2023-03-28 14:29:01 +0000 0 - 6 - 0 megaup.net/1d04b/RimWorld.v1.4.3676.zip 91.209.70.182
2023-03-28 13:17:52 +0000 0 - 6 - 0 megaup.net/176vy/sc22307-DLTWOSH.part01.rar 91.209.70.182
2023-03-28 10:49:35 +0000 0 - 5 - 0 megaup.net/19lre/Call.of.Duty.Modern.Warfare. (...) 91.209.70.182
2023-03-28 06:30:10 +0000 0 - 9 - 5 megaup.net/1d03s/11.2.11.X64.part1.rar 91.209.70.182
2023-03-27 21:00:32 +0000 0 - 6 - 0 megaup.net/18qr0/TLOZ-BOTW-JPN-LOADIINE-DLC-Z (...) 91.209.70.182


Last 5 reports on domain: megaup.net
Date UQ / IDS / BL URL IP
2023-03-28 14:29:01 +0000 0 - 6 - 0 megaup.net/1d04b/RimWorld.v1.4.3676.zip 91.209.70.182
2023-03-28 13:17:52 +0000 0 - 6 - 0 megaup.net/176vy/sc22307-DLTWOSH.part01.rar 91.209.70.182
2023-03-28 10:49:35 +0000 0 - 5 - 0 megaup.net/19lre/Call.of.Duty.Modern.Warfare. (...) 91.209.70.182
2023-03-28 06:30:10 +0000 0 - 9 - 5 megaup.net/1d03s/11.2.11.X64.part1.rar 91.209.70.182
2023-03-27 21:00:32 +0000 0 - 6 - 0 megaup.net/18qr0/TLOZ-BOTW-JPN-LOADIINE-DLC-Z (...) 91.209.70.182


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-10-20 20:18:38 +0000 0 - 0 - 1 megaup.net/17Dm4/Lake.v1.0.10.rar 91.209.70.182

JavaScript

Executed Scripts (57)

Executed Evals (1)
#1 JavaScript::Eval (size: 47) - SHA256: 0f13250dac3eba96683a13d9c0c14c812448cc2f499a6ad6637a17adf094884d
window.fanfilnfjkdsabfhjdsbfkljsvmjhdfb = true;

Executed Writes (2)
#1 JavaScript::Write (size: 2290) - SHA256: 57042e5caeca78ccf62bb822d9423f514cca7cefdbf1d76cd8cd7d5e1e2c1115
< div style = "display:none" > < /div><div id="bg_content"><div style="display:none"><img data-cfasync="false" src="/ / imp9.bidgear.com / rec ? t = 1 & z = 6192 & uuid = ce07563023bc4f9c9c03bc4f7f811f6f & p = 28 & g = NO & token = 4 a44335432 & tbg = 1661896847 " rel="
noindex nofollow " referrerpolicy="
unsafe - url "/></div><div data-ifr=2 style=" - webkit - transition: width 0.5 s!important; /*background-color:#fcfcfc!important;*/
background - color: # e3e3e3!important;
opacity: 0.6;
color: #00aecd;font-family:Arial!important;height:15px!important;line-height:15px!important;overflow:hidden!important;position:absolute!important;left:1px!important;top:1px!important;transition:width 0.5s!important;white-space:nowrap!important;width:16px!important;z-index:99999!important; border-bottom-right-radius: 4px" onmouseover= "this.style.width='100px';this.style.borderBottomRightRadius='3px';this.style.opacity=1;"
onmouseout = "this.style.width='16px';this.style.borderBottomRightRadius='4px';this.style.opacity=0.6;" > < div style = "float: left!important;position: absolute!important;left: 6px!important;bottom: 0px!important;" > < a href = //bidgear.com/?ref=banner target=_blank style="color:inherit!important;font-size:11px!important;padding:0 5px!important;text-decoration:none!important;margin:0!important;text-indent: 0!important; display: inline!important;"><span style="/*background-color:#fcfcfc!important;*/display:block!important;height:14px!important;position:absolute!important;right:1px!important;bottom:0!important;width: 13px!important;text-indent: 0!important; padding: 0!important; border-bottom-right-radius: 4px"><img src=//platform.bidgear.com/media/img/b15.png alt=Ad by Bidgear style="width:100%!important; height: 13px!important;"></span></a></div><div style="float: left!important;clear: right!important; padding-left: 16px!important;"><a href=//bidgear.com/?ref=banner target=_blank style="color:inherit!important;font-size:11px!important;padding:0 5px!important;text-decoration:none!important;margin:0!important;text-indent: 0!important;">Ad by Bidgear</a></div></div><script async type="application/javascript" src="https://a.exdynsrv.com/ad-provider.js"></script> <ins class="adsbyexoclick" data-zoneid="4464186" data-keywords="keywords"></ins> <script>(AdProvider = window.AdProvider || []).push({"serve": {}});</script></div>
#2 JavaScript::Write (size: 419) - SHA256: a0c206f01941bfe248a2d7918ad0457f3e77d0c7564c35cdbef1b351e48ddc72
< body style = "margin:0px;" > < iframe width = "300"
height = "250"
scrolling = "no"
frameborder = "0"
src = "https://a.adtng.com/get/10012456?time=1614803572912&apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7aeauWuzifjWmeviaizS6umzjO2zTiae10rv9.czijBuZznSuldK6V0rpXSuldK4Ps"
allowtransparency = "true"
marginheight = "0"
marginwidth = "0"
name = "spot_id_10012456" > < /iframe></body >


HTTP Transactions (125)


Request Response
                                        
                                            GET /4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         91.209.70.182
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 30 Aug 2022 22:00:45 GMT
Content-Length: 162
Connection: keep-alive
Location: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
X-Download-Options: noopen


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ECE269E8B9BE8A5839D75C1343823D68B96930C593C2E3E8D522999176EE3149"
Last-Modified: Mon, 29 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2233
Expires: Tue, 30 Aug 2022 22:37:58 GMT
Date: Tue, 30 Aug 2022 22:00:45 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 30 Aug 2022 21:19:21 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: M6fQjuNUvcrrEh7WcYzqKJyUzlaaaESYt1vMNlV3Ue96GB2XeslRxA==
Age: 2484


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 29 Aug 2022 22:35:59 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BPaGVcsef18OgyH3XP82AWWTLWHutGFmSceAEmjJDt6fvbs918goKw==
age: 84287
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:45 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 22:00:46 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 29 Aug 2022 12:41:16 GMT
Expires: Mon, 05 Sep 2022 12:41:15 GMT
Etag: "cebedd11d66ad029554a9356cbfb3f853f9e3daa"
Cache-Control: max-age=484228,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7430cd177f93b4e8-OSL

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 30 Aug 2022 21:17:12 GMT
Expires: Tue, 30 Aug 2022 21:28:24 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GoIY5CcS-8AkQXI44CKpSgV5awEexZ6ynq_F_ucQg5rES4Si2poB7Q==
Age: 2614


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /?kzmmd=761186 HTTP/1.1 
Host: dmmzkfd82wayn.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.42.171
HTTP/2 200 OK
                                        
content-length: 188751
date: Tue, 30 Aug 2022 21:38:07 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zwFDVelC220tXvcl-7b1aaj39chOfgcSBfQ1Z-9L5SIiZVWjWNGalg==
age: 1359
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (15945)
Size:   188751
Md5:    8035abc1b80ecc806ae4880b5a6b7f45
Sha1:   b9709a1a128dc302971d9eb8ffd3fd41c3e70ffe
Sha256: 77948894c0460a11533a0c4d0de6e9b2542e8edf828adaa1921986c634d980a2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E2885E0B1BDF15D9CC3B5A940B9F60FCC7B1E88B8884885EE4731353C0B57B9D"
Last-Modified: Mon, 29 Aug 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13727
Expires: Wed, 31 Aug 2022 01:49:33 GMT
Date: Tue, 30 Aug 2022 22:00:46 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 22:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "591F61B7BA63F05A084E67CB4A6BA528B51E430F999514B33A9F332F68C829E4"
Last-Modified: Tue, 30 Aug 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11854
Expires: Wed, 31 Aug 2022 01:18:20 GMT
Date: Tue, 30 Aug 2022 22:00:46 GMT
Connection: keep-alive

                                        
                                            GET /themes/flow/images/main_logo_inverted.png HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size:   7137
Md5:    5d15526be10b904a6b48d1af04a10cc3
Sha1:   c09b6874359ac6d71db95593618a9acb55baa984
Sha256: 894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
                                        
                                            GET /themes/flow/frontend_assets/css/isotope/isotope-style.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-af3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1297
Md5:    7009174cc624c1f7e2587186caf170a6
Sha1:   52ac88076d3993189312572e3fc1b00249b9ce58
Sha256: 3cc220fa9d0396ac58d9d861947798ca331ee8bcfc29c454b6704e129ee8863a
                                        
                                            GET /gtag/js?id=UA-108868042-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 30 Aug 2022 22:00:46 GMT
expires: Tue, 30 Aug 2022 22:00:46 GMT
cache-control: private, max-age=900
last-modified: Tue, 30 Aug 2022 21:14:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41985
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1615)
Size:   41985
Md5:    9b0186868d27cf4a3f0b6e687a5a16a8
Sha1:   bc34221cae1606c52590d5822e2c0e45f55dd775
Sha256: 0d001e1517ba9f15d88aa792e217e3d8a255646785f08ec500c8aa0e7a16ccc7
                                        
                                            GET /tysaSHG1FMaM/18410 HTTP/1.1 
Host: altowriestwispy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.109.82.143
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Tue, 30 Aug 2022 22:00:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; expires=Wed, 31-Aug-2022 22:00:46 GMT; Max-Age=86400; path=/; secure; SameSite=None GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Wed, 31-Aug-2022 22:00:46 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   25
Md5:    d488addc5df5fc9b9ff4135bb4e3a823
Sha1:   6ce56f48e851df4d562b43d3bc1269a504ae83fc
Sha256: d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
                                        
                                            GET /gwZ1U5hjA8ii/32575 HTTP/1.1 
Host: keydawnawe.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.109.82.239
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Tue, 30 Aug 2022 22:00:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; expires=Wed, 31-Aug-2022 22:00:46 GMT; Max-Age=86400; path=/; secure; SameSite=None GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Wed, 31-Aug-2022 22:00:46 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   26
Md5:    4e5d65669f8dcd928dad06adf883f025
Sha1:   d771713d758c3348dd7e5b38bb40c7935399ae46
Sha256: 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 22:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
content-length: 31836
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c5c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 31836, version 1.1\012- data
Size:   31836
Md5:    4514fa5a5b3d1e0b14aa32a7d068124a
Sha1:   e634977bfabc20ed15fe7ed03d3876cf68834b93
Sha256: 5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
                                        
                                            GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 31344, version 1.1\012- data
Size:   31344
Md5:    21f79e4c0fbe54a555170aa70bb4c8b7
Sha1:   9d4aaf2016cd21f16bc45089a48de84dba951fa7
Sha256: 2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fqqOcD6JqkUDDtVD2tpakQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.165.41.15
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lnfv6FZmUMVMlJdDRjSCGpXrdSc=

                                        
                                            GET /themes/flow/frontend_assets/css/animations/animate.min.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-bc86"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   4157
Md5:    6960589d2029c21d9b7f12e46b0abed2
Sha1:   aaa79e17dedbc0c02d1d9bacd635e9a06635e5b1
Sha256: a3963dbd29751b2f22b9979906abeeaccfa06dad7841d1762480df2522d63b60
                                        
                                            GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
content-length: 31980
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7cec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 31980, version 1.1\012- data
Size:   31980
Md5:    99ac81a158028ac2023fb3350d2497e7
Sha1:   f08c12c91ab29282a616c3ba8e533f49b5b433ca
Sha256: 92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d
                                        
                                            GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
content-length: 20972
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-51ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 20972, version 1.0\012- data
Size:   20972
Md5:    cad75e2dacc6794c4e6b14727d4a989d
Sha1:   694d04c8f643df4100c23efc1463ac9f4e732f60
Sha256: ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887
                                        
                                            GET /bUxvRWsMLgwoVAxxDWMeHyBSYFkraV0DDwAhFS4NCXRdMgoUIkEmBwI5CyMZAiIbawUIOEp3LR8YBHwoDBgmMSIuOz8BPwIhJSk6KykncBE4HT0qITkJKB0vWDUhA18vDQVxXyl/Ih07Pz9ZIVkKeyAEWz0qAi4eLgoYNQgAHSIdKFw1DHVSOQcGdE5fCjcXOlscFnUoKTYAcCcKDicLAQ5+LnU5AgMGCz41NSp0IBoaCglZHTsjMg8KKl0hCSwhNnYIXCs3IzpcIjgyIgQGBjIIPiEbfAgFCSQgKS98NxcPVAg4IQksJhhwMVw8FSFYAT84Fx8fKjdoIiIaFnUAIRkYBCglfRYSKidpXQcNAwY2A1gVaV0DISwOLg4SBjgqFw9VDzcxDSUEWjUlXB0rYwEeIwE1Vht7XAkaFyouHBk0Hyo HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         143.204.55.97
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1177
date: Tue, 30 Aug 2022 22:00:46 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: A7ZW1zeOpiG9T4hOhd5SayLTmzqm6kC7ZDP8zlnSIx_RhEu_K6wShw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3019), with no line terminators
Size:   1177
Md5:    600ca7eb04589c5af665eb781f6e4dc5
Sha1:   441fab7f9ac31c6fe3818039f86c0ff221986d8a
Sha256: 601a7f5225005f5b32384dbaf8517c2081a28e9945d3ec8be0650455e021d1dc
                                        
                                            GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2296"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8746)
Size:   4174
Md5:    6d4cf8a589918b6ca59567fc7238bfda
Sha1:   efeaf8919eb48dfd9c04b04a66be0c22d224467d
Sha256: f8245880df24e354051eef909247d97e91870f67291734a72f06cc4b3cc27618
                                        
                                            GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3ead"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (15714), with CRLF line terminators
Size:   6369
Md5:    6eef1012e8877e3a040e23e52579a346
Sha1:   0a99798f189676fe013a22a4990db3f4bfb40f33
Sha256: 664188805ee6d117ea41ea94caf46f4edae8090803592e3037fcf45013f9dd32
                                        
                                            GET /bVFaT00MMzkicgxsOGk4Hz1nan8rdGgJKQA8ICQrCWloOCwUP3QsIQIkPik/Aj8uYSMIJX99CzcEHyt8OQQtNQYvIigsNDwkHxcPXAsSegMIYjJ9ATwIMwYkL2ceOD47Gxh/Jy4ZLTUOPBdjLiQ8aB8XD1U1MzwYJCguOxQ/EDADf1xjDzY6Ahw0Pw8MKzE3KAU2MwEnBiMdHDUdCD0JDDRiIn4pOAc2AQorYw8HeSI1AhkLJAIPan8vHD1+Igs8G2p/KwUCPBk3PxQeKwpkaysYOHRoCQIDB2oBBT9nPCEpDjASeiokExs6BxdoMx06GXRoDRQlCxwpFVw2PiNgL3RoCSspCC8NNAogCjV0PDctPz0OBy52LAQHbB0MSzspICMdbCAJFBkLDAp9Dh8ufw HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.97
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1154
date: Tue, 30 Aug 2022 22:00:46 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WV-DZRYqHzwebNRo9035DRSyB-yKsaxk03cudoZbbRhNOgeNGaHNRw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2996), with no line terminators
Size:   1154
Md5:    bdf6fd30f2dd531aeb8d3823b4ee437e
Sha1:   45fd542164d3a368df99da42c8b1a5d6694238d3
Sha256: ed957a0e9ddf2dc0ab366b9b1d824fce5d6e6c5258831eb2b8674ae8afd7de0c
                                        
                                            GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-52e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1249)
Size:   646
Md5:    4d59385d7a019720d2fa366fa5e10562
Sha1:   6c31c87d1fd67579ba0156ee5b310a30cadb26dc
Sha256: 3c276010422a5c52835214892457d3e8d6e8e4d7b9b9c598702945e517891f3d
                                        
                                            GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1099"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1427
Md5:    5293d9ffe64707d397d956907bd2a7e2
Sha1:   44ace4566260e461ce369ac622428735504a3ed8
Sha256: ffe0d8b8f71ddd664d39ab424e81ddfb4d9e91d9fc728fd939f645ed1b282003
                                        
                                            GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-ce4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   7641
Md5:    fa5dda79cffc6844c8109d33eec4cb16
Sha1:   ff7f445bf6ce7a4dd8152f307aa15db47b0bef73
Sha256: fc401a790720c04fe9ed758ea98f3f7eb9811c5054093ec5d3c575933c3ec5b0
                                        
                                            GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (464), with CRLF line terminators
Size:   39255
Md5:    f65998d4474b292b80d987dc0a31a038
Sha1:   7cc26097b9545d9ff6697576cd8950bdb48ffa7a
Sha256: d11664f76dcbb42cf3f394806f235b7e154a42793e48e99756ecd3313ca49147
                                        
                                            GET /themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cc1b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text, with very long lines (540), with CRLF line terminators
Size:   19180
Md5:    06fe8320ffc3ce8f9c395afbe16446aa
Sha1:   ce80ceb3847bfd8a574d58b6c1045e867820b5bd
Sha256: db1da37a0423754275d91f311ae7703f267093128911d2526b22eb2f48b4ea37
                                        
                                            GET /bHFScm8NEzEfUA1MMFQaHh1vV10qVGA0CwEcKBkJCElgBQ4VH3wRAwMENhQdAx8mXAEJBXdAKS0mB0NeP0EDRCYEAiYXFlwaFyo1FhNhHioKQgRXXSo7JSsEJxg+BScUPGs6GCk3HxsIXTAEP0peNwIYXhsjBUIAIzIfIQsBOGo7FzZDNipXHzQBHloOJiEwIBUCKxEuKUgZNi5YNQY/GCELJiY/BSc5Oy0DCR4mOgQ3FUddJEI6EApeNyAUOVwLNiUHAyM1HgcNQmIoJgUeITw5LkQ2MSldICogFg4mOjUsOzcgFD4PSAslACElGkMeDSYAIwo0IHdALSczfysIJ0IqV10qPGEeXw05YzQKAiM9EyoIRhsYLklDFDcsXAMbJQckNQpDGTVBBAYiOyNqVAUfHjwCUgYpKzQjHAg+HiM HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.97
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1168
date: Tue, 30 Aug 2022 22:00:46 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: deMAQT1OEnyBQeNE6wUoe0Lj0UZPaeHvlVGLOal56E7gkauhkozjuA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3012), with no line terminators
Size:   1168
Md5:    850dc3f329681d647a3bdd26f75be1f5
Sha1:   34ed7dc0db5a7ac49ed20e8bbf844ebeca1513ce
Sha256: 0cb019f731c7b5af8a786605e4d6fcc1af180efdf30798d1ed6c64468dfc4c70
                                        
                                            GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2311
Md5:    c38146fcad4a6b0913ce3e2fd343a0ef
Sha1:   b728f9657d1e5bb2b0bbfee607c397dc253a54ab
Sha256: 0e88c830d7950480f0cbfdbefead7b4713f13d1c22a552fd1c842f7031c82365
                                        
                                            GET /RUNkNUdqfAdGehMbNkUiAycPZBF0CT0HBQAbVHMuHAYibxYSBkJBLiF+UwNzdHdVEzcsJ1kEYTY3BUEyNn5VEy4rJQsIYTN+VRt0cW1WDWl1ZREIdmM3FFQgeHJCRTMxL1kEcXNyXAxxfXdTBXdx HTTP/1.1 
Host: atebilaterde.one
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.60.149
HTTP/2 204 No Content
                                        
date: Tue, 30 Aug 2022 22:00:46 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jVFTnaTlDosIvm2Ok%2BjbWwupwrlNmu6ccp5LlLGBTNpdF6UzWAxIwKey1%2FC%2Bj%2Bet86OYrDuEw5F3b3kMDF9N4G9W%2FnhPg%2Bxw%2BsHoKCRwFfw%2BQERHaKXUlhfgkfPZVj9jLmIw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7430cd1cc99cb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-5c6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1285)
Size:   203260
Md5:    7357ffbf427b75909d685a96f3a58762
Sha1:   7a38680fa32eac18b6ee1719c40418abb434153c
Sha256: c5021c6c6ad99ba46c87fbda7dee329f722be028bc0af5d0d574f6b347b49956
                                        
                                            GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45f5"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   4156
Md5:    b28d71273a373fcedca3f1c86f6639af
Sha1:   bed65fdddbc959230a2e3d261883f6a459c65746
Sha256: 7e4a8dd5ee6d0e6e72d9cbe84378eed1502a9b9c570add8658a77e36f9eb444c
                                        
                                            GET /themes/flow/frontend_assets/css/colors/flow.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-a83"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   888
Md5:    370218019c68f1e4dd5694d7ebd44ef6
Sha1:   1a6ca622148ca119e35d728fb20f1cdc5d6a4eef
Sha256: f71a944ce35302b1569bfcdb67f508824cfe721f96a4147ac1bac56de5fff155
                                        
                                            GET /themes/flow/js/load-image.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-9f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2546), with no line terminators
Size:   1645
Md5:    18122ff115b71cca82ff9533be354540
Sha1:   8c988697af725d5991520cfbeeedfb91b046ae62
Sha256: 262282789257712e2acecea1bb9b20baf62d56130c6ef49d6d70eb8855809f52
                                        
                                            GET /async.php?domainid=5593&sizeid=12&zoneid=6192&k=1661896847183 HTTP/1.1 
Host: platform.bidgear.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.26.2.107
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NATY32URhCUPgvy8hujIYjVHR2Jt%2Ff%2FW%2BPWVEyaIv6tLMoFAX3yFHSDOOP%2BAj%2FaO%2BZwcuDLGblHPVIq3AkNPWq5cuW54NgY6CgPIiZmRC4XaVMpd%2FgCKajMpqVcOUCjoRrGTTCt5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7430cd1e0b3cb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (4445), with no line terminators
Size:   25449
Md5:    b0284a4b91008dbe15b3ecdc9f488f6b
Sha1:   c07544d2eda74d0ce6ef9deca7f24b8d1f456ceb
Sha256: 7e3758ced5df8e69acf5be747ca53da304fe1ae5a9b14b5827df99162c15e1c4
                                        
                                            GET /themes/flow/frontend_assets/css/stylesheet.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6c82"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   4947
Md5:    8015cd81d0d8b9fe766defa4c6b1450c
Sha1:   d0afd492c24ca220db4e49828b324c13383d04e3
Sha256: c9f19bce760ba81bc3d88b367dae6290bab35df73b14c98819588d751625b2af
                                        
                                            GET /themes/flow/js/jquery.fileupload.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-dbd4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   12815
Md5:    564acd220b1e7c7a5f48c18ce2f06037
Sha1:   596251337464301550a6d23e38cd40b7d795b891
Sha256: b334d68f4b3698c3a7c057019adc717d89a6e77bcd0d64c348e89314623704f6
                                        
                                            GET /AWU11S0Q6Ihstey0kEXZzb3lEf3V/JwYkKilwHxM9HwEFMig1AVM/Pj1wRW0oOCMSdmI8IxZ2dX8sESl5bWsBOysycAE9KDA4DTMwMztTPiVkIBoxLTUhFG52H3hbe2FrfV0zdWhoRglha30ZIiosNVB5dCF1QxRybWhGCWFrfQc9YWoMTH1qaWRQeXQ+KB-YgK3x/M3l0aH1FenRoaEd7IjA/EC0rIWhHDX1vY0VtMWR8 HTTP/1.1 
Host: dmmzkfd82wayn.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rtyvaluation.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.42.171
HTTP/2 200 OK
                                        
content-length: 594
date: Tue, 30 Aug 2022 22:00:47 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IsDNLCOpYBjcnckp2dBe6Lj6OO0eZhcSitAzPL7loFGhRVeYQgHoog==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (830), with no line terminators
Size:   594
Md5:    90f12b879ca8cb92a7a1ad5776258796
Sha1:   4ed812ae5e6e04219938e1d5a58802c4556af093
Sha256: 2bf732bbb0d2caf2d0ba18e9a046202576451e555e59159d0ea888250ca86130
                                        
                                            GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3bd2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1288)
Size:   4593
Md5:    67f6a3b06b943d7b5bac83d12f917346
Sha1:   f345be1f0ff59e47cf181364d36570fc37557b8e
Sha256: 345ebc37023dbc2e0926c5d7d19dc688bfa51413ee47a319bff310b70d6c5cc6
                                        
                                            GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-61ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5012
Md5:    69fe007d36e90a296ec8c26bec7bb2c0
Sha1:   21a15559c3aa6a85799a6f5428b534574a1a0ab8
Sha256: c37bea375236303e69c81c25090b32d88a64f6913f0883493cd50b5da8304a47
                                        
                                            GET /themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-8d4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   4985
Md5:    b72544424ad5852a7a3ee1c3cb4ccf24
Sha1:   74558d756f7427c6abb9fc137728588fd383ae10
Sha256: 9bf6dddcbd4439eca8e1543264594af502c9fb07f33316217f33d60732f5f036
                                        
                                            GET / HTTP/1.1 
Host: dmmzkfd82wayn.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.42.171
HTTP/2 200 OK
                                        
content-length: 73
date: Tue, 30 Aug 2022 21:38:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: brneBFvOZF1fW7wthTBDozwZqad5Wy3XdfrLbB8AEcCFvp_Ygxi9nw==
age: 1359
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   73
Md5:    de37377b72195a4f064edf7ec8a76676
Sha1:   ed544d5b6a37acad78498099407c648a93316ddb
Sha256: b3209cc0b1d1b71e85af4e843afe00a3079f3286d52b3fb47e72c6c5c48b8399
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3527
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 22:00:47 GMT
Last-Modified: Tue, 30 Aug 2022 21:02:00 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /themes/flow/frontend_assets/css/responsive.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-e56"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text
Size:   1730
Md5:    ca5ccdec1dae2455ed8c95b197c968e9
Sha1:   a8856207c7f332bdff68ddf495d2528608728e5f
Sha256: dc02f1a90bf137242115d0ba8d5e2a3f4b7200533dccd1bd52cfc3a601d3bf2d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 22:00:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /utx?cb=6h4stt3pQ0fl&top=megaup.net&tid=761186 HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.97
HTTP/2 204 No Content
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Tue, 30 Aug 2022 22:01:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n44zAQQSmUwu3NwMAbzMtLRrZi4rZGHZZ015qtoOoAxuiXk_28AACA==
X-Firefox-Spdy: h2

                                        
                                            GET /themes/flow/js/jquery-ui.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6a684"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (840)
Size:   128527
Md5:    a910e3eb5e23f3edb8566fdff6eebac0
Sha1:   0fd593fbfe7109c05f7848a98549dd01d9afb9aa
Sha256: 7de80964ce8f26cbc84dea38942cec77c6e0995145a631448102f7c38410ac4a
                                        
                                            GET /utx?cb=pVOYcNsmeao0&top=megaup.net&tid=825911 HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.97
HTTP/2 204 No Content
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Tue, 30 Aug 2022 22:01:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XJW2yhIX5ECypcZq9xVfMHxIhYxrKU0ULl2QC72EX2aL8HJKHKIwWA==
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 22:00:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.237
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 30 Aug 2022 22:00:47 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S1124790227%3A1661896847427391&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmXyZhz41JwuEe8eZ1EU_5gsNxKt_sAZpexf5ljYP3Wy-H4XHLZA0lbHOkxsQVoxDD6UYp5JhA
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-k1laAG0wGz81TvcFLhSecw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 398
server: GSE
set-cookie: __Host-GAPS=1:FCG_bvPXSY-SeLJY2dxuSmI7IKoqBQ:F4t-ofICe1nAEfhK;Path=/;Expires=Thu, 29-Aug-2024 22:00:47 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (384)
Size:   398
Md5:    7138765b4a65a65c091b360309738c2a
Sha1:   f9871797c7b14a324ec6e12f582c62f9ad70ce62
Sha256: 89f0f215732d67f8da0b2a4483eea7de81b53b9837617556c787dd643a067ade
                                        
                                            POST /j/collect?v=1&_v=j96&a=711776698&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2F4sI1V%2FLEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar&ul=en-us&de=UTF-8&dt=LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAAC~&jid=928402391&gjid=783564372&cid=2074972047.1661896848&tid=UA-108868042-1&_gid=218703422.1661896848&_r=1&gtm=2ou8t0&z=1505448068 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain
Content-Length: 0
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://megaup.net
date: Tue, 30 Aug 2022 22:00:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            GET /utx?cb=Z3JBuLlKGuN3&top=megaup.net&tid=876318 HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.97
HTTP/2 204 No Content
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Tue, 30 Aug 2022 22:01:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mSdX5V8usm1TO3px5aZaLyQafk5IvrW_Ki-PPiJ-yP2N_DyTt-yB4A==
X-Firefox-Spdy: h2

                                        
                                            GET /utx?cb=b1hYTpg9IeVx&top=megaup.net&tid=764141 HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.97
HTTP/2 204 No Content
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Tue, 30 Aug 2022 22:01:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LDCc_1go6Qs0w61EevafKDq-XwxOAhk7lvaD-ixcLkYJV3QM9Lne6g==
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 30 Aug 2022 22:00:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.237
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 30 Aug 2022 22:00:47 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S772055977%3A1661896847476616&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmWLAKnyYfn03d-Fv5RwtXhXin50NhVIdMdo6cdtqhbnLSkveAIy1fSSAa0XTkwAS_wxtHUzYQ
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-Cu80bSnv7MOV9c90f3AM7Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 389
server: GSE
set-cookie: __Host-GAPS=1:vDm-7iLYK002lSjzBj7pgenHq85hWQ:MAI0w6kVWP4fwSsX;Path=/;Expires=Thu, 29-Aug-2024 22:00:47 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (379)
Size:   389
Md5:    f2c3b7d58075365f7b74ac3bbd09f468
Sha1:   f3f96a2bd7d9863336bee0221c5bbf65cb2daefd
Sha256: a99f2d99928616bf2cf5c134259124c18a7bc89c9ae90ca3a5317d830fd58c40
                                        
                                            POST /v1/api.php HTTP/1.1 
Host: syndication.exdynsrv.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 323
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Server: nginx
Date: Tue, 30 Aug 2022 22:00:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Content-Encoding: gzip


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (966), with no line terminators
Size:   726
Md5:    dd2da804ce7636dfffe2bdac879c1878
Sha1:   7cb21008cb426081d2b4b081097aa2464b86ce2d
Sha256: 9338c2c5f10510736661b123bf41718a2d377accba71631fc99f667817e27313
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3527
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 22:00:47 GMT
Last-Modified: Tue, 30 Aug 2022 21:02:00 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /cimp.php?t=api&data=H4sIAAAAAAAAA01P7UrEQAx8FV+gZZLNZrP3298Kig/Q9rr+8hA84YR5eLc9KWYI5GOSTBSqA2JIeJA4AScrrDJWjKajZOPT8wtN+LG+T9+f42W9Mkl1Bb1WWLAmC3WauUk4swhNq+ditIgiMFAyE9GhOZlt0QhAGODb6+Pu0qFMwE1zH9jPUqC0nuC2DZ9VHF6atsXUm6QyV7fSpihzE42N+F8n7hghpvv2v0J/wJL22iBHYuwG7u3p6+eykAf9jnws6Lojo3mxLLMXmfv1dVV0YWeFLIv8AhUJPj9VAQAA HTTP/1.1 
Host: syndication.exdynsrv.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Tue, 30 Aug 2022 22:00:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5952
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 22:00:47 GMT
Last-Modified: Tue, 30 Aug 2022 20:21:35 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /a-ads-banners/407258/300x250?region=eu-central-1 HTTP/1.1 
Host: static.a-ads.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         136.243.35.166
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:47 GMT
content-length: 621339
x-amz-id-2: NWYHcLsAEQSNK9YLbRCXElLMS9HiuWK6GkURkaBgeVVv3prApbdnS5Ktt7XKQw8TL/dDNdo4sx8=
x-amz-request-id: A8TTJS70FZ4DSBT3
x-amz-replication-status: COMPLETED
last-modified: Fri, 05 Aug 2022 10:27:24 GMT
etag: "c8694e7d5d3b9a928d4d57026ac2b68b"
cache-control: max-age=315360000
x-amz-version-id: 4Mo2D8..v2g7Hr5lFGow.NiBZmPPXN08
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 250\012- data
Size:   621339
Md5:    c8694e7d5d3b9a928d4d57026ac2b68b
Sha1:   169b9f311167e19bd5061b53fc7e4f528e3ba7a9
Sha256: 0c23834abdcff9f74a47b37290da55f2c84c31c82ce26d9493b39a388b51ed6a
                                        
                                            GET /asd100.bin HTTP/1.1 
Host: freychang.fun
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.21.45.207
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1641
last-modified: Tue, 30 Aug 2022 21:33:26 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZTGbSmdUIF8sckSjiPT3rmanXWniIkGy4qhA3MnLTNApBbNmJJgFsBMYnup2l8w2l8X3HaNfzcciCWwuEL9Paq%2Bb8jDShh6UUF%2FJAsU0BUzGPH28XqLiu661yao%2BNNJQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7430cd203aca0b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   102400
Md5:    4c6426ac7ef186464ecbb0d81cbfcb1e
Sha1:   5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
Sha256: f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v3/signin/identifier?dsh=S1124790227%3A1661896847427391&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmXyZhz41JwuEe8eZ1EU_5gsNxKt_sAZpexf5ljYP3Wy-H4XHLZA0lbHOkxsQVoxDD6UYp5JhA HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.237
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 30 Aug 2022 22:00:47 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-LDp9MyRn19LouenIHTS7yQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=Yz7A1AgmDdGdtmObWeOoqlfIuasOQ6mawW8VJLCKEg-ZPal04poFrrNSvzAKbhvapFmuuyi8vhTSrNtOUMzVzNpbac4ZdTVqDi9RwJIajAr9DXnOf5Pr-FvO7OtxaNnbYGf_PWhC7yT2ck99LrcimJL2YW-Of60Ca80G_ZhfIbk; expires=Wed, 01-Mar-2023 22:00:47 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   14804
Md5:    372a422ce9654a3dd3f35622dd9d3424
Sha1:   72d0f9a533a8a5f99b32eac2849f53b8f743c4dd
Sha256: 077223849f0a799795deae17f7abb0f61711513001d59889965639916506fc64
                                        
                                            GET /delivery/intersection_observer/IntersectionObserver.js HTTP/1.1 
Host: hw-cdn2.adtng.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

search
                                         209.197.3.25
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 30 Aug 2022 22:00:47 GMT
Connection: Keep-Alive
ETag: "1649192094"
Content-Length: 16885
Last-Modified: Tue, 05 Apr 2022 20:54:54 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10430420
X-HW: 1661896847.dop205.sk1.t,1661896847.cds202.sk1.shn,1661896847.cds202.sk1.c
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines (16885), with no line terminators
Size:   16885
Md5:    48c80c7c28b5b00a8b4ff94a22b72fe3
Sha1:   d57303c2ad2fd5cedc5cb20f264a6965a7819cee
Sha256: 6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356
                                        
                                            GET /ZDN0NWwfEQdCMxFBGBdWRlsAQRwXCVsaAQFUFUAcSl0RQUMXRFpfH0YfVkYBAhFOBEBGRxVSMw1XVg9OXABGA19XEVgXHxFRK1wIVhFOFwpQV00AXQFXWQZcVApZAVRTVVkNClIGWQ1dBgoVAlsBAkFWCkZO HTTP/1.1 
Host: societingna.info
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         107.22.28.167
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
set-cookie: edb8e3985455d49706ed0e9d988307fc=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"e0fc-JXPpv5UrKAYVTHzKx/hGURPzU9k"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   38509
Md5:    d896ed0ba10542ab1b84747dd31febc9
Sha1:   2912dd2cdef283a07463be0dd7c02b449fc33fff
Sha256: 4bcebedb226d92dcf8d1cd53d0bf107c08f186ce2b4bda60843fb28be2d6bab7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8B34D51987195F7A6AC75B7AE2BED61ADDA8F3BADD1AB0B56822A65A4E1AFC2F"
Last-Modified: Tue, 30 Aug 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11599
Expires: Wed, 31 Aug 2022 01:14:06 GMT
Date: Tue, 30 Aug 2022 22:00:47 GMT
Connection: keep-alive

                                        
                                            GET /a7/creatives/39/1393/805208/1028974/1028974_video.mp4 HTTP/1.1 
Host: hw-cdn2.ang-content.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         205.185.208.20
HTTP/1.1 206 Partial Content
Content-Type: video/mp4
                                        
Date: Tue, 30 Aug 2022 22:00:47 GMT
Connection: Keep-Alive
ETag: "1649875693"
Content-Length: 513036
Content-Range: bytes 0-513035/513036
Last-Modified: Wed, 13 Apr 2022 18:48:13 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10471743
X-HW: 1661896847.dop202.sk1.t,1661896847.cds255.sk1.shn,1661896847.dop202.sk1.t,1661896847.cds222.sk1.c
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Size:   513036
Md5:    b8e13fc38d24155acfee347096dd0337
Sha1:   8b197d6a698841b21d30425c79c640912c31c55f
Sha256: 968c1265d8caffcb43ce690d7964e6f8c2f9fd2df304b53b43d4b76cf33834de
                                        
                                            GET /multi?cs=b0JIQmtccHt3W1lycXZfXnN7dF4&abt=0&red=1&sm=76&k=download%20file%20lego%20star%20wars%20skywalker%20saga%20v8771975%20part2&v=1.0.59.0&sts=0&prn=0&emb=0&tid=876318&u=358811664490142&agec=1661896847&fs=1&mbkb=143.06151645207441&ref=https%3A%2F%2Fmegaup.net%2F4sI1V%2FLEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_wsW9=1661896847822&crc=1 HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.97
HTTP/2 200 OK
content-type: text/plain
                                        
content-length: 1529
date: Tue, 30 Aug 2022 22:00:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=e7a8829d-f58a-4032-a13c-740bd466fbb6 csu=358811664490142
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OXt8oBdSL9-GP1eEk9qsiL4JZpDwd0LKU25IN-Zm3XOmIt_AsOwhlA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3199), with no line terminators
Size:   1529
Md5:    5f0a0ff25d8622ccd9ce71204d6f8f8e
Sha1:   4a4e1ce410f67e0c977b14b69256736253db2b91
Sha256: 8d8fa586c811477dffe8abe7529186be651d149ace4f073e10623a9f67fb3e20
                                        
                                            GET /1811811?size=300x250 HTTP/1.1 
Host: ad.a-ads.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         46.4.20.142
HTTP/2 200 OK
content-type: text/html;charset=utf-8
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:47 GMT
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://megaup.net/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Size:   4719
Md5:    22fa08a628115f74d5e07cae1763acc0
Sha1:   0046d88ad3d2ea15c96ed97fa1d2e79e71c47bdf
Sha256: be8f8bb808d9ed1f77dcedc486da1c5bf93d3c9c7117864d9ff6a3251dba1fa4
                                        
                                            GET /track/adviews/eyJleHRfemlkIjoiIiwiZXh0X2MiOiIiLCJleHRfYWlkIjoiIiwicGlkIjoiMTM5MyIsInNpZCI6IjEwMDEyNDU2IiwibmlkcyI6IjU5MTUxIiwiZHluX2RtbiI6IiIsImNyaWQiOiIxMDI4OTc0Iiwic3YiOiI1NjQ5IiwicmVmX2RtbiI6Im1lZ2F1cC5uZXQiLCJleHRfY2lkIjoiIiwidHNuYW1lIjoiTUIiLCJjcmMiOiIzIiwiY24iOiIzMDBYMjUwX1BDX05US19UR1BUUzVfU0ZXIiwibmlkIjoiNTkxNTEiLCJleHRfcHViIjoiIiwiY3JwIjoiMjcuMTMiLCJ0aWQiOiIxIiwiaXQiOiIzMFwvQXVnXC8yMDIyOjIyOjAwOjQ3ICswMDAwIiwiY2MiOiIzIiwic25jaWQiOiIxMDI3NjgiLCJjaWQiOiIzODA3MSIsImV4dF91aWQiOiIiLCJjcCI6IjE5LjAyIiwic25jY2lkIjoiMTg5MDk2NCIsImlpZCI6IjRkZmM4MDBiMzhkZThkYjYwYWM0NjA2ZjczNGZjOWNlIiwiZXh0X2lpZCI6IiJ9?unique_view=1 HTTP/1.1 
Host: a.adtng.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a.adtng.com/get/10012456?time=1614803572912&apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc7aeauWuzifjWmeviaizS6umzjO2zTiae10rv9.czijBuZznSuldK6V0rpXSuldK4Ps
Cookie: adtool_guid=Ch5KImMOiI9Nt0a53t/DAg==; RNLBSERVERID=ded7079
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         66.254.114.171
HTTP/2 200 OK
content-type: text/html
                                        
server: openresty
date: Tue, 30 Aug 2022 22:00:47 GMT
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
x-request-id: 630E888F-42FE72AB01BB6A93-10A77D95
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   31588
Md5:    e65001d43e0a34fea4ed2bfc49852ebf
Sha1:   7531a358d3d87341aa0f30389cf7a36fcf289d09
Sha256: 396fae1d401b36613b8e4e7c880b69b697c9f4fd556dbcaf64b34269c59e314d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Wed, 31 Aug 2022 00:35:04 GMT
Date: Tue, 30 Aug 2022 22:00:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Wed, 31 Aug 2022 00:35:04 GMT
Date: Tue, 30 Aug 2022 22:00:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Wed, 31 Aug 2022 00:35:04 GMT
Date: Tue, 30 Aug 2022 22:00:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Wed, 31 Aug 2022 00:35:04 GMT
Date: Tue, 30 Aug 2022 22:00:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Wed, 31 Aug 2022 00:35:04 GMT
Date: Tue, 30 Aug 2022 22:00:48 GMT
Connection: keep-alive

                                        
                                            GET /floater?cs=Y1REMnlWYX0GSVZsdgJPVWx8Aks&abt=0&red=1&sm=83&k=download%20file%20lego%20star%20wars%20skywalker%20saga%20v8771975%20part2&v=0.8.9.0&sts=0&prn=0&emb=0&tid=825911&u=358811664490142&agec=1661896847&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=143.06151645207441&ref=https%3A%2F%2Fmegaup.net%2F4sI1V%2FLEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=td5_oi1_&_BOJg=1661896847819&crc=1 HTTP/1.1 
Host: rtyvaluation.shop
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.97
HTTP/2 200 OK
content-type: text/plain
                                        
content-length: 4942
date: Tue, 30 Aug 2022 22:00:48 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=764f59e7-021e-4e58-94c3-d1ddc4c3b822 csu=358811664490142
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TP-rK5WEMfTNlMTlw8IBWUvfifKgUVMlyJ9krfcbtY7h73qGyz_RUg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7270), with no line terminators
Size:   4942
Md5:    61390b1b44bddb2434ba075e00c3e098
Sha1:   660d1a72242fcff13978a23af3900590f8883f7c
Sha256: 070e6c33acb1c42e46d4fc88b02cfc5e3deaeb981aaead9bf3d5b6112694682a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8478
x-amzn-requestid: 8ae5ce3f-0d58-412b-84f1-579c5cf21fd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTWIH5JoAMFh9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d328d-7bb707102a3acb0320585b52;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: G0y5MCu_U2IUMTrWxPmyUefwSkF5tcEWpPh7sZ-Bn_1lXZv12tlpgQ==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:50:47 GMT
age: 601
etag: "b2866f84f93b73d97e9aecfa2293ff47131b6d67"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8478
Md5:    87425d52d274ccbc12298aa7a47395f2
Sha1:   b2866f84f93b73d97e9aecfa2293ff47131b6d67
Sha256: 2284c74b04493c7a67907b2477bac252832f3550c6a7e57c221abefc45a12549
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5925
x-amzn-requestid: 15e5a8fd-8a14-486d-9e83-7da3dafd1713
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpSfZEEooAMFbeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d312f-05652d4e06746e8b4f4be29b;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:35:43 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: lSs35Lmgha3GkE6sMAJVcAycqK5Kgkgf3GjucztP40NHtOpF_MacKg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:46:39 GMT
age: 849
etag: "ec2a4baf0a21c1738a541d89756cccd6f3bef5fd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5925
Md5:    91310bc1fb5ae0efa502a9bafe046399
Sha1:   ec2a4baf0a21c1738a541d89756cccd6f3bef5fd
Sha256: 5fe0511116c6bd2d6e668c69764905c3a5c93fa23a4dc207b0f4b1604783ceb6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10672
x-amzn-requestid: 9044b578-ffc7-4890-a16f-bf6d5e242f46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTWcEUnoAMF_UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c65c2-4397932f1417f6ab2463c4b0;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:07:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vqHJR_zF8qR54qyIPx-Dqsh6kwjgRmcSF8imM4PLacc4PjhyxvI6ww==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 07:44:52 GMT
age: 51356
etag: "bf1d4347e1641da5aebe6ae438c0431232ae6242"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10672
Md5:    9f9132960db725a095b0db1773dc6f69
Sha1:   bf1d4347e1641da5aebe6ae438c0431232ae6242
Sha256: 0e0b84df674d48517a04819604deb555c904518f093784691de4914b6ddb9e9d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9980
x-amzn-requestid: b9f6b930-9c47-41b9-879d-ce239e39f033
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTMGHlNoAMFuoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d324d-72ea52c010dff34438bbca28;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:40:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uLci7wtakYizcJUQT4h7dqVwsn8T567hG7b9Gnnz9E0tW1LbcqU4og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:47:30 GMT
age: 798
etag: "0c122f15422cab7ee3461e8fa657183ae54adcc5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9980
Md5:    82bc1c69018845280d29653d6b2d6f8d
Sha1:   0c122f15422cab7ee3461e8fa657183ae54adcc5
Sha256: e221638eff281c27ef4656f76e64963718186285c57e50a8958bd3065e662674
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4955929-0b9f-4215-9599-dffe8c74c90c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8909
x-amzn-requestid: 2c4357d3-5c22-465a-a65a-e281d87c5305
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTxZGYEIAMFeZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c666f-36b5010a793ab9c87182a895;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:10:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Y3cwsCGFKFQYWkxG96XsjTJMrCMccbdhjRvbB04PCNF2YupDcEcng==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 07:24:56 GMT
age: 52552
etag: "143f7bb98f57f8e6189e73e75a9fc93d29548962"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8909
Md5:    feb433a0823cccb81dc4c5fa13ba4ed2
Sha1:   143f7bb98f57f8e6189e73e75a9fc93d29548962
Sha256: 09a5ddc32918b441b6d3ce3eed211d674d3844db6770e06bb3fecb86cc85771a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19e4053-4c42-4436-ba83-5e76fd16f5a4.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10056
x-amzn-requestid: 2eb7bbf2-47ad-4f80-98e8-ecb45e98961b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xguh2H_woAMFXnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6309c472-7dda060b4e7c81262aef3421;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 07:14:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1cunCq4Z1J-oQSmTlcAtgfXO0A4_XpHKl2UHpRCbf75--3eHEIgZGQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 07:36:27 GMT
age: 51861
etag: "110f2eecf72c6b89f250ebefeff5ef664dc2f3f6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10056
Md5:    0502c5060f29d82fd10f9f79459e2ce0
Sha1:   110f2eecf72c6b89f250ebefeff5ef664dc2f3f6
Sha256: f722656c432bbec2baa63b6edc4116c1996850462864456105d9fea9c3bc7ff4
                                        
                                            POST / HTTP/1.1 
Host: stellihandles.hair
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://megaup.net
Content-Length: 351
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         107.22.28.167
HTTP/2 200 OK
                                        
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: stellihandles.hair
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://megaup.net
Content-Length: 352
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         107.22.28.167
HTTP/2 200 OK
                                        
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "2BAD5A74DA16025D8ACA0967C36E87EC039519E04B543B9000C27FE96284BCC7"
Last-Modified: Mon, 29 Aug 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3835
Expires: Tue, 30 Aug 2022 23:04:45 GMT
Date: Tue, 30 Aug 2022 22:00:50 GMT
Connection: keep-alive

                                        
                                            GET /thumbnail?i=Hx8mzzhBVmI_0&imgt=icon HTTP/1.1 
Host: xml.serve-servee.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.67.217.88
HTTP/2 302 Found
                                        
date: Tue, 30 Aug 2022 22:00:50 GMT
content-length: 0
location: https://static.serve-servee.com/n337/ad/250x250_hqCCg8Cm.png
cache-control: no-store
age: 0
pragma: no-cache
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gEfmhLhD8g7oSnjnN5ftOE4NnVBmPcReBv0ii6f0MbpeSkJCTbVh2rJ3SeyQSt%2B880XcfyWC2KsYWwj029J5bBxXvtZWHdYpE7IWe433Z1GPghi733kgyojiPgalFvgKYSTu%2BMakUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7430cd330932b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "2BAD5A74DA16025D8ACA0967C36E87EC039519E04B543B9000C27FE96284BCC7"
Last-Modified: Mon, 29 Aug 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3835
Expires: Tue, 30 Aug 2022 23:04:45 GMT
Date: Tue, 30 Aug 2022 22:00:50 GMT
Connection: keep-alive

                                        
                                            GET /n337/ad/250x250_hqCCg8Cm.png HTTP/1.1 
Host: static.serve-servee.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.67.217.88
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 30 Aug 2022 22:00:50 GMT
content-length: 88957
last-modified: Thu, 08 Apr 2021 13:54:09 GMT
accept-ranges: bytes
etag: "606f0b01-15b7d"
cache-control: max-age=86400
x-hw: 1661896850.cds225.sk1.h2,1661896850.cds203.sk1.c
access-control-allow-origin: *
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AA4r5nZIuDdVXx64ESdEM%2Fb9mX7i77YJgScnVB3cOGXUd1YZKglJcwU5benOf3Dc9yUZje50nEUsGjmvY3rbLhnp6OG1cBdDTxbA%2Bf%2Bwka%2BrtSLXivZGkspCuQHcVVXonYov3N5YZluFbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7430cd33ca00b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced\012- data
Size:   88957
Md5:    0994ec31361ea569c5549063145bfdd2
Sha1:   9b270e9f7a346a0f0f60a978e154f49740350270
Sha256: e4dbff1cf1f9750d68296737897eba9bd59ebdcb292015e87c3be61b5c242422
                                        
                                            GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3; _ga=GA1.2.2074972047.1661896848; _gid=GA1.2.218703422.1661896848; _gat_gtag_UA_108868042_1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: font/woff
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:53 GMT
content-length: 31900
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c9c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 31900, version 1.1\012- data
Size:   31900
Md5:    1b285c8e5b7445a8e434b2cdf036bab2
Sha1:   c97d4772fbb5c5637d466b5f991bc7ec28830b32
Sha256: 09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "19732A691CDDB1515BD47CD69421DBFAE5C99ACED289122FFB66EB5B0AC50CB3"
Last-Modified: Tue, 30 Aug 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1618
Expires: Tue, 30 Aug 2022 22:27:52 GMT
Date: Tue, 30 Aug 2022 22:00:54 GMT
Connection: keep-alive

                                        
                                            GET /4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
vary: Accept-Encoding
set-cookie: filehosting=a13d0m4056cbjb38svvaplvue3; expires=Wed, 31-Aug-2022 22:00:46 GMT; Max-Age=86400; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: freychang.fun
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.21.45.207
HTTP/2 200 OK
content-type: text/plain
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
set-cookie: csu=358811664490142@1@1661896847; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FqHbv4oauu%2FRysaSehQThO28bi5QI47y1MVFYALgkjlFOQegvvVhdLIYHYCSQ3nX7YboTLLgPP9BTYlPuZ3W2VrV0rKKwN9rNZFyq2o8zIFAQrV26%2Fbv6%2FCcCQ7BSLvq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7430cd204ade0b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /themes/flow/js/global.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-d59"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /asd100.bin HTTP/1.1 
Host: freychang.fun
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.21.45.207
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1641
last-modified: Tue, 30 Aug 2022 21:33:26 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Yiy%2FAYX1UN9hrFIf7mNAazxk9YvZg3u0f6Ja6CXHR7MYm9f35uhpUlF5eR%2FBQcdstLUYtJoxPwwDg3HL1iA31vFC7Y9ndMVigh%2BmVooz0l9b9yg%2BgI8CqPYCJvPMyc7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7430cd202abb0b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-408"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/js/jquery.iframe-transport.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2427"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /asd100.bin HTTP/1.1 
Host: freychang.fun
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.21.45.207
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1641
last-modified: Tue, 30 Aug 2022 21:33:26 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cpqL8FBtK%2FT%2FuXjZkAoH0JC7Mm%2Bwqart%2FoECqE7K7aq0c3iQB4IqEY0qUDlsJWl2KFGA7171xqTPYkvkb2uiJARmZR%2FyKlfbxnGHwAmLKz1Fl6LbZc%2ByAv5zPNdYI2bZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7430cd203ac70b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.36
HTTP/2 200 OK
content-type: text/html; charset="utf-8"
                                        
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-fb-debug: PUsrdDlkPqDV/aF9Tqq5N4lIAFSJT66AmAe1cPEh7mVB8bn1f453fUD8FOmw2EF2ksaERz8AoHttNcWZghi9yQ==
date: Tue, 30 Aug 2022 22:00:47 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-59d6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/css/custom.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3577"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/images/icons/favicon/favicon.ico HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: image/x-icon
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:47 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-47e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-10fe4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14cc1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-fea"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/images/loading_small.gif HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /sw.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:52 GMT
vary: Accept-Encoding
etag: W/"60758f38-12fe6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /asd100.bin HTTP/1.1 
Host: freychang.fun
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.21.45.207
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
date: Tue, 30 Aug 2022 22:00:47 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1641
last-modified: Tue, 30 Aug 2022 21:33:26 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y1nYjP10YE4qE7OjH6ekkeCyLfLUayK1Twoa01gPOOLGAaXOCn3N6A8yGJ74hcFuSzn%2Fe1PfiJYh3rWbQxMGIEkAwzbqBX8ZCVhgz0ol3J11fRLn0xkGFOpiPMQkcRvL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7430cd204ad30b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-981"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /Z2xMSHM8TnR7QVFff2pfRU5gahVTCHV9QgIIYXtDV1VhfEtQCmFwFVFZYXBCBVUtf0QCXXkrFUVAbilLBQkvKxADQSgqFVNBeHFEVEF0LRVQQXR6FVcPeX9CAloqKlFLTj8%2EUUtOPzwWCwAlIBIJCCAtAEkELSEBRUBueUNJWW5kFQYAPy1fAQ0gOxZLCi0kAAIx HTTP/1.1 
Host: stellihandles.hair
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

search
                                         107.22.28.167
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
set-cookie: 88951788d7019f9adf7a127ebe31897b=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8449-Y0BrcXmc9Qzj377CLqg79HnkIGs"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1420"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/css/fonts.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-690"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1787d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1547"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-153"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/styles/file-upload.css HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45b8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/js/jquery.fileupload-process.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /themes/flow/js/jquery.fileupload-resize.js HTTP/1.1 
Host: megaup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4sI1V/LEGO.Star.Wars.The.Skywalker.Saga.v8771975.ALL.DLC.part2.rar
Connection: keep-alive
Cookie: filehosting=a13d0m4056cbjb38svvaplvue3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         91.209.70.182
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Tue, 30 Aug 2022 22:00:46 GMT
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1f7f"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---