megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
200 OK 162 B URL User Request GET HTTP/2 megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
IP
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /1TF9z/Amanda.the.Adventurer-TENOKE.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 05 May 2023 22:16:28 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
X-Download-Options: noopen
megaup.net/themes/flow/images/main_logo_inverted.png
200 OK 7.1 kB URL GET HTTP/2 megaup.net/themes/flow/images/main_logo_inverted.png
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/images/loading_small.gif
200 OK 184 kB URL GET HTTP/2 megaup.net/themes/flow/images/loading_small.gif
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type GIF image data, version 89a, 64 x 64\012- data
Size 184 kB (184355 bytes)
Hash b0dd5b3af9c4c0644d7bddee83716209
30002468d0266b893b3559b8d0d260c6cbf0ad7c
2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d
GET /themes/flow/images/loading_small.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: image/gif
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK 46 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintCA:2C:8E:2F:14:74:84:57:8C:39:86:59:92:AC:A1:7C:C8:FA:99:CA
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
File type ASCII text, with very long lines (2271)
Hash 33e9b366623a39953a09f249d37ea503
0fb47399f8e477f8f1f7ac76ea16c5f9c9b443cb
21c6746e487c1baf2f1c2ae1336d731e7acc22ca875ac0bb674ed65183ce6228
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 05 May 2023 22:16:28 GMT
expires: Fri, 05 May 2023 22:16:28 GMT
cache-control: private, max-age=900
last-modified: Fri, 05 May 2023 21:42:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45872
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
200 OK 189 kB URL GET HTTP/2 dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15948)
Size 189 kB (188764 bytes)
Hash df23c78a602f83ef429cac884769984e
af81fb03ac59b8ae44073fd41f05d6f8dcb35e76
3f2e547583b673b7f70cd7d83cc955b943e07afb70f955b8ed2356bbadc86119
GET /?kzmmd=761186 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 188764
date: Fri, 05 May 2023 21:41:57 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w1CbzPN8f-GSo8w4n8pEEtff3VGo6Q404tSeO8kR3_ScMDWuYvcKfQ==
age: 2071
X-Firefox-Spdy: h2
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK 26 B URL GET HTTP/1.1 keydawnawe.com/gwZ1U5hjA8ii/32575
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectkeydawnawe.com
FingerprintF7:57:30:58:C1:35:AA:9E:BA:6E:40:60:AF:90:29:A9:64:83:53:EA
ValidityThu, 13 Apr 2023 23:00:56 GMT - Wed, 12 Jul 2023 23:00:55 GMT
File type ASCII text, with no line terminators
Hash 4e5d65669f8dcd928dad06adf883f025
d771713d758c3348dd7e5b38bb40c7935399ae46
0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 22:16:28 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sat, 06-May-2023 22:16:28 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sat, 06-May-2023 22:16:28 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK 25 B URL GET HTTP/1.1 altowriestwispy.com/tysaSHG1FMaM/18410
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectaltowriestwispy.com
FingerprintC3:95:E3:67:82:EA:18:9C:5A:2C:E7:4F:33:5E:9E:3A:E2:EE:4C:D8
ValiditySat, 25 Mar 2023 23:05:39 GMT - Fri, 23 Jun 2023 23:05:38 GMT
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 22:16:28 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sat, 06-May-2023 22:16:28 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sat, 06-May-2023 22:16:28 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
megaup.net/themes/flow/styles/file-upload.css
200 OK 34 kB URL GET HTTP/2 megaup.net/themes/flow/styles/file-upload.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type assembler source, ASCII text
Hash c394a5adff07032b436fb7beba4b8970
5997c2c8b1fa43a8e5aa083cace919517bdb250b
80183d647f2e452e69f6e36ffae59755d2b030f0a637c6b7a0e8b965f658ab11
GET /themes/flow/styles/file-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/canvas-to-blob.min.js
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/js/canvas-to-blob.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1032), with no line terminators
Hash b28ecb24edc7df4a1247b12ac14f843b
b007df25a492f1c7d71266813a448d8f9d923e72
42187901ab246b6992eb9f7ab86ecdb6a652e144a06f5ad5bf84b85f5412b22e
GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-408"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.iframe-transport.js
200 OK 34 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.iframe-transport.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash a1489dccf546491adeb7584cb85fd37d
fd5a308216f2b108b66e2b828aed54a231c1cf2e
ec6093d1ace411e846998c3546a02556fbf4bc315046d939d5c00a9e9449853a
GET /themes/flow/js/jquery.iframe-transport.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2427"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.tmpl.min.js
200 OK 22 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.tmpl.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (971), with no line terminators
Hash 2cb8d7ecf5fb596f68acaddb3a5c9c0f
a7b53677b5d43efccdbd5c6e69d1291c45909d39
84b9a2ae8083c30586152c51ba201262cf39626e944e5d41c5e1150c6cbd5803
GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
200 OK 1.7 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash db801834a5d024965ea0f3a217e67ef5
9aa79ac284972eb10f3c3bf33a2cd12504c915fb
e3ed59ae6d40ff82b311e129fed4de315d0f6c1a836f0ad88630b380c1c0155e
GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1099"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/gauge.min.js
200 OK 5.7 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/gauge.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1259)
Hash 5236b8f9b57c58ce87b5c291591985ff
2839e6da4a1867507c7849ba1ed94215594908df
8a31cebb77802fd02621e25706ce2485f43f22b2a1375f24eaf67f8f8eff0432
GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45b8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/responsive.css
200 OK 1.1 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/responsive.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type assembler source, ASCII text
Hash 07f2c112e38e5a1f41930f52528c08fd
85a2a4dfd940f66c2ade5cac3a6b65c4ee21b860
0065bcb62eb6d33e62ee97d4ac9b56261faf246b5296abdd7ebca2adef30b304
GET /themes/flow/frontend_assets/css/responsive.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-e56"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/imageads/019.png
200 OK 163 kB URL GET HTTP/2 megaup.net/imageads/019.png
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 163 kB (162957 bytes)
Hash 67d8f5a75ac6afacc6db055e5b1ca58d
eb538a3b69febd3d1dea26aeb644c58d6f1a91f8
8460892a960f4c741e54cee913c7e985607caffec43419f5dc6d6cfd714b3814
GET /imageads/019.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: image/png
content-length: 162957
last-modified: Sat, 15 Apr 2023 07:22:57 GMT
vary: Accept-Encoding
etag: "643a50d1-27c8d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
workhovdiminatedi.info/alU1S3pFalY4Rz9lWnoZLhNSLg0gFHccIFIUcA4+C2Z4Dys7EBM/Ew5oDXlPU2QEbQoDMQh4SEwmQSoOHyYIelwDO1MkR0wjCHtUU3sEZU9MIAh6XB4lVCxHW3NFPw4GaAR9QllmB39DUmwGeko
204 No Content 0 B URL GET HTTP/2 workhovdiminatedi.info/alU1S3pFalY4Rz9lWnoZLhNSLg0gFHccIFIUcA4+C2Z4Dys7EBM/Ew5oDXlPU2QEbQoDMQh4SEwmQSoOHyYIelwDO1MkR0wjCHtUU3sEZU9MIAh6XB4lVCxHW3NFPw4GaAR9QllmB39DUmwGeko
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /alU1S3pFalY4Rz9lWnoZLhNSLg0gFHccIFIUcA4+C2Z4Dys7EBM/Ew5oDXlPU2QEbQoDMQh4SEwmQSoOHyYIelwDO1MkR0wjCHtUU3sEZU9MIAh6XB4lVCxHW3NFPw4GaAR9QllmB39DUmwGeko HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A%2BgmyvFwLwPrlSZOXSbNZzUeI53Jby%2Bci7n9xme6pFE4d0v5GJJRZbOz365SASvUs6O%2BpH3ex5IbMhAoaWGfiSfcPxbWw9yboODlUroqjWuRijZ07VkTFeMoygWpHn%2FXBm43CCbNNRo6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c591deadd067b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css
200 OK 4.3 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (305), with CRLF line terminators
Hash 9443ddd68641b463c52a7e8a6ba2925b
46f344749226eb2df7fde1c9af687e063a264afd
b8976223711db602915f34704c514ed227c1d638eda0714233b50471ca987e97
GET /themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-59d6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
200 OK 165 B URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash d9a482f3cecac321171489c73ee7a350
fbfe4b8362112dedca078cb027b218bba7cb2996
64156bd3da05f9a15e02c1a0aa9d3999c1098636c47f86bca083bd35f5d55d1c
GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-153"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1683324989399
200 OK 2.8 kB URL GET HTTP/2 platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1683324989399
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (5423), with no line terminators
Hash 049194484095f347d025222bbfcdd75a
d538f8fe3b4ab480af430a0d42482910c808df81
83bc13045196fdd91a85da27bec51bf9907cbaf4f9702fa6ff2355f65554879c
GET /async.php?domainid=5593&sizeid=12&zoneid=6192&k=1683324989399 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sLvWOPw5zNzY7Xg8oUKJ9YtOt9zhl4x2KKeAohekARbouASOVeoM0Vx%2BNb9vypXSH4IMEbLNPbKjHd0U0Bye4cmxdR48xcO4a2ZMoXvyICiqcA4GQ6KcWH085%2BMdw9Vr%2FofXaOOQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c591ecab7b50f-OSL
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-process.js
200 OK 23 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-process.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash 65a7377b819e8923cc602085629656ae
e5eb54589a1ba1752b2f809c023b12d77d87c68d
fd36483119bca2989512ba187f9cfdf3cd46208c85a68ab0c6b3ff25066d34d0
GET /themes/flow/js/jquery.fileupload-process.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
a.exdynsrv.com/ad-provider.js
200 OK 29 kB URL GET HTTP/1.1 a.exdynsrv.com/ad-provider.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectexdynsrv.com
Fingerprint54:0A:66:69:27:EA:63:01:A0:42:9B:75:C5:75:97:C3:19:3C:EC:0F
ValidityMon, 27 Feb 2023 07:27:23 GMT - Sun, 28 May 2023 07:27:22 GMT
File type ASCII text, with very long lines (54191)
Hash 6cebad4a9da95c68f459accf99eabf4a
7b5de6376d08e7ec1a06e28f371ee41dbd4dceb8
6474d9a8357ea8cc465c2ad9df9d8580765b4c1d39a6ce8a3853a4cfdf2549e2
GET /ad-provider.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 05 May 2023 22:16:29 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 28967
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"5edd88b11d181710b873d5701fc"
X-HW: 1683324989.dop227.sk1.t,1683324989.cds065.sk1.shn,1683324989.dop227.sk1.t,1683324989.cds246.sk1.c
Access-Control-Allow-Origin: *, *
megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
200 OK 951 B URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type PNG image data, 114 x 114, 8-bit colormap, non-interlaced\012- data
Hash 76852bc6b2c028db97322a74e85bd020
ed52fb4de0d51f93277bbaae42fa80ba5f92c31e
8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884
GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: image/png
content-length: 951
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-3b7"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/452110/300x250?region=eu-central-1
200 OK 42 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/452110/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/1811811?size=300x250
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 300x250, components 3\012- data
Hash 2428f97d1018cb8ff74be0557c8d6b03
9d1a62804473389b6f96d7223abe413ad961af2b
73ccb761d2b4a3b529465fa2e6e4db02944b4623cbc40085ee917a05f2a79b75
GET /a-ads-banners/452110/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: image/jpeg
content-length: 42200
x-amz-id-2: g82nhJPlaEjlE0aaBVsePc65V9RgpyNQGWB2qp33sVHKy/9JS58V76D+v3KYIxdMv26bhS2Cnbg=
x-amz-request-id: MPTQM51NGZ5XSNYY
x-amz-replication-status: COMPLETED
last-modified: Sat, 29 Apr 2023 06:58:55 GMT
etag: "2428f97d1018cb8ff74be0557c8d6b03"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: 8mUdo74ppyk.WNNHpn2hQGvIDd52p55H
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/load-image.min.js
200 OK 6.5 kB URL GET HTTP/2 megaup.net/themes/flow/js/load-image.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (2546), with no line terminators
Hash 9fbaa77c6b577c2cdd8e03e2ba622caa
50aaf225836042efc13121842d4cea16fa4fc7a5
8bc7af049c96f92abb12511ccb7fd63a5c1fdab29f986a02e5aaf030cebc4d2f
GET /themes/flow/js/load-image.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-9f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/
200 OK 73 B URL GET HTTP/2 dmmzkfd82wayn.cloudfront.net/
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash de37377b72195a4f064edf7ec8a76676
ed544d5b6a37acad78498099407c648a93316ddb
b3209cc0b1d1b71e85af4e843afe00a3079f3286d52b3fb47e72c6c5c48b8399
GET / HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 73
date: Fri, 05 May 2023 21:41:58 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JP_MDPEhQAQ24Zpme5Cw_kO5JuwI2R3VR0YwP-xas9aikzEVGT2Bhg==
age: 2071
X-Firefox-Spdy: h2
syndication.exdynsrv.com/v1/api.php
200 OK 1.1 kB URL POST HTTP/1.1 syndication.exdynsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectexdynsrv.com
Fingerprint54:0A:66:69:27:EA:63:01:A0:42:9B:75:C5:75:97:C3:19:3C:EC:0F
ValidityMon, 27 Feb 2023 07:27:23 GMT - Sun, 28 May 2023 07:27:22 GMT
File type JSON data\012- , ASCII text, with very long lines (1469), with no line terminators
Hash d1fc083dc787f5dc07a129dd764162a1
56b1af9a6b2487c149eb90b687586740aabdf60f
72d3ac59bdbbdab138a3a05523d85da6f801fc362032ad812a03f291d8b32620
POST /v1/api.php HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 319
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 22:16:29 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226455803dab1073.125238173676665373%22%3B%7D; expires=Sun, 04-May-2025 22:16:29 GMT; Max-Age=63072000; path=/; domain=exdynsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
parrecleftne.xyz/utx?tid=832633&top=megaup.net&cb=yK0MnynlQpmt
204 No Content 0 B URL GET HTTP/2 parrecleftne.xyz/utx?tid=832633&top=megaup.net&cb=yK0MnynlQpmt
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectparrecleftne.xyz
Fingerprint36:D5:D9:43:13:F4:FE:83:A7:9F:01:89:96:60:5B:AD:CB:A5:27:B7
ValiditySun, 18 Dec 2022 00:00:00 GMT - Tue, 16 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?tid=832633&top=megaup.net&cb=yK0MnynlQpmt HTTP/1.1
Host: parrecleftne.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 05 May 2023 22:17:29 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 fb13343f41a549822047f18ba839fd5a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: jo5YhPGfJGob_MHPrSn36QjbDZFAd91LRyrWzrpJbn6z-QfwveGKVg==
X-Firefox-Spdy: h2
megaup.net/sw.js?YVkyMTQ6ewoCBldqARMYQ3seE1JZagFSBFU7HwdRUTsfBVADaR8IAFluH1cCBDxXUlECOlFSUUN1EAdSUWoHBQUAdARQB1d0BgJSAHRQAgdTdAoGUQU%2EUVcFBD8FAhZNe0FGFk17RllRCThAWEAYMVtdUE87R0tOQ3UQAARPbBAdUgA1QVQYBzheQlFNP1NdRwQE
40 kB URL megaup.net/sw.js?YVkyMTQ6ewoCBldqARMYQ3seE1JZagFSBFU7HwdRUTsfBVADaR8IAFluH1cCBDxXUlECOlFSUUN1EAdSUWoHBQUAdARQB1d0BgJSAHRQAgdTdAoGUQU%2EUVcFBD8FAhZNe0FGFk17RllRCThAWEAYMVtdUE87R0tOQ3UQAARPbBAdUgA1QVQYBzheQlFNP1NdRwQE
IP
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e5849d9d5584d8337c818a2831ae9615
adcd66ed79069368cca2f811c635bbe9fbadc7b6
ce1718e3cbaeea5d88ce8310b7d41e747d6cbded47bb9b732d333ac491e48ab5
GET /sw.js?YVkyMTQ6ewoCBldqARMYQ3seE1JZagFSBFU7HwdRUTsfBVADaR8IAFluH1cCBDxXUlECOlFSUUN1EAdSUWoHBQUAdARQB1d0BgJSAHRQAgdTdAoGUQU%2EUVcFBD8FAhZNe0FGFk17RllRCThAWEAYMVtdUE87R0tOQ3UQAARPbBAdUgA1QVQYBzheQlFNP1NdRwQE HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:15:31 GMT
vary: Accept-Encoding
etag: W/"63a1dfa3-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/522770/7665900e3a6688f00d13484a825eba5119e81924.gif
200 OK 27 kB URL GET HTTP/2 s3t3d2y8.afcdn.net/library/522770/7665900e3a6688f00d13484a825eba5119e81924.gif
IP
ASN #60068 Datacamp Limited
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectafcdn.net
Fingerprint58:E2:EC:9A:A1:55:22:20:28:3E:43:7C:0D:B9:0A:67:84:6B:EA:FB
ValidityMon, 27 Feb 2023 07:22:15 GMT - Sun, 28 May 2023 07:22:14 GMT
File type GIF image data, version 87a, 300 x 250\012- data
Hash f1e022a28c4270f6ebc6925afbd49468
7665900e3a6688f00d13484a825eba5119e81924
20f202ddf4ddb31cb3d50175c66c7cee3be744d3765362fae046646ee4a9a68d
GET /library/522770/7665900e3a6688f00d13484a825eba5119e81924.gif HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: image/gif
content-length: 27072
last-modified: Tue, 22 Jun 2021 15:10:18 GMT
etag: "60d1fd5a-69c0"
expires: Tue, 24 Oct 2023 20:49:53 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCRQ975n/dXDAAA
x-77-nzt-ray: af5856306a92e9033d8055644602db38
x-accel-expires: @1702249288
x-accel-date: 1670713288
x-cache: HIT
x-age: 12611701
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
workhovdiminatedi.info/bEZCRjVDeSE1CD8oKjNkB3N3FWMAPycoDCMRcQgNDy0EH1ZfcmQyXAh7enQAVXdzYEUFIn91B0o1NidBGTV/dAVccWQvWwopf3QTGntyaAxCd2xzExl7c3ANX3FzdQxVcXV2DFt+c2BBHCclewRKNjYyWVF3dH4GX3R2fwxcdnt2
204 No Content 0 B URL POST HTTP/3 workhovdiminatedi.info/bEZCRjVDeSE1CD8oKjNkB3N3FWMAPycoDCMRcQgNDy0EH1ZfcmQyXAh7enQAVXdzYEUFIn91B0o1NidBGTV/dAVccWQvWwopf3QTGntyaAxCd2xzExl7c3ANX3FzdQxVcXV2DFt+c2BBHCclewRKNjYyWVF3dH4GX3R2fwxcdnt2
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bEZCRjVDeSE1CD8oKjNkB3N3FWMAPycoDCMRcQgNDy0EH1ZfcmQyXAh7enQAVXdzYEUFIn91B0o1NidBGTV/dAVccWQvWwopf3QTGntyaAxCd2xzExl7c3ANX3FzdQxVcXV2DFt+c2BBHCclewRKNjYyWVF3dH4GX3R2fwxcdnt2 HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Alt-Used: workhovdiminatedi.info
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BsBpWmTtMXQXX5Ki%2Fj%2FwSGenKv%2BuPnLy%2FT%2BJzl96kgT26GTgPU9mDAK3RaT75cBwJGAgH3xhENWhc%2BhkXFPvaAlW87X9PSJ6JR6bfpbCkC2ir7%2BpULxchE9%2FlOdMpluLs7yiB4DXbILc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c5922b83a0b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
pogothere.xyz/
200 OK 418 B IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash deb9c2dea16971b9b9bc23d943cdcfa4
349d0da730fabdfc409b5dfc5de3ea52d7332d3f
1c7e96b3a63a33e87ceffc61d45dfd4e8ecf661f7f5d43cdc0b6c7d9a8ffbed6
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: text/plain
set-cookie: csu=1516168063401425@1@1683324989; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1bbhhVDgAccqCRV%2FIBSiQtuTwuI4taUb5BnGPu7q2Jf0bnm89Q9ef6yifpWMiiwefns5EeUNjz1%2FKQ%2FyYoQTg%2FDg6QTnJaPvNPQQQH8%2B36AOBeOD52QUanFqoaNwjgKG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c59216a50069b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneGbEE_7CmaqHuwUQgXKMJWe2_9Ba0X3uS9rweEQ--rq2NFzsUG9zfLDaRgESpyDkK_2dvGKtg
302 Found 399 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneGbEE_7CmaqHuwUQgXKMJWe2_9Ba0X3uS9rweEQ--rq2NFzsUG9zfLDaRgESpyDkK_2dvGKtg
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (382)
Hash 4081183ec8a5e4db038ee534ebff4a59
51098365c93c4bab839a7886ca4b362e8a57a326
12b502462e7e01db5a3bb62f5887f0d18b98d37f2fdfece713c21d0e67d8463e
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneGbEE_7CmaqHuwUQgXKMJWe2_9Ba0X3uS9rweEQ--rq2NFzsUG9zfLDaRgESpyDkK_2dvGKtg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Alt-Used: accounts.google.com
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:uHDrrwj7lh7ZVLTsIJjla1Zeg9o6cA:Kh9DNc3nRZXW4ZC0;Path=/;Expires=Sun, 04-May-2025 22:16:30 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 05 May 2023 22:16:30 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S1594407878%3A1683324990070064&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Af_xneEgzGtEkZyq-DBR_TTsSSXYDL8sAEsVKpLw1oQaJ9VS9SdgOaxj6ka7ApPm-9RHOAgIyUST&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-0SMtwbTfGBnJ3q9FbOfPQw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 399
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
api.purpleads.io/x/init?ts=1683324989778
200 OK 87 B URL GET HTTP/2 api.purpleads.io/x/init?ts=1683324989778
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1225a48532b67fd812920a47e3557ed4
ac910f9679bd805609435e4fa8970cdf74fa4b86
4cdf058286dcc09e5511ec4f021ce5ce4d22052312bf08ce7b672e08eb5a4a9f
GET /x/init?ts=1683324989778 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: application/json
x-purpleads-version: 3.0.4
x-request-url: aHR0cHM6Ly9tZWdhdXAubmV0LzFURjl6L0FtYW5kYS50aGUuQWR2ZW50dXJlci1URU5PS0UucmFy
Authorization: Bearer 70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:30 GMT
content-type: application/json; charset=utf-8
content-length: 87
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-expose-headers: pa-user-id
etag: W/"57-rJEPlnm9gFYJQ15PqJcM33T6S4Y"
vary: Accept-Encoding
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/utx?cb=QdWW2hYV1uKk&top=megaup.net&tid=876318
204 No Content 0 B URL GET HTTP/2 kultingecauyuksehinkitw.info/utx?cb=QdWW2hYV1uKk&top=megaup.net&tid=876318
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=QdWW2hYV1uKk&top=megaup.net&tid=876318 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 05 May 2023 22:17:29 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: kWkOKyvR3I41Tgs4gEpqCs3ZnX0bMzf4MC2c3PqJDGVD8Q2GVcK4xw==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/utx?cb=Tj3rUCm5vfZi&top=megaup.net&tid=825911
204 No Content 0 B URL GET HTTP/2 kultingecauyuksehinkitw.info/utx?cb=Tj3rUCm5vfZi&top=megaup.net&tid=825911
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=Tj3rUCm5vfZi&top=megaup.net&tid=825911 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 05 May 2023 22:17:29 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: 7WulaDEhdXNFw9fCw0bxOCS5ByD4BUicDyJZKUH3ashNBkP2danVEQ==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/utx?cb=NZjWpj65tUUG&top=megaup.net&tid=761186
204 No Content 0 B URL GET HTTP/2 kultingecauyuksehinkitw.info/utx?cb=NZjWpj65tUUG&top=megaup.net&tid=761186
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=NZjWpj65tUUG&top=megaup.net&tid=761186 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 05 May 2023 22:17:29 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: CIWsS571sxudJPXFL2tWAZby36JbuzDK3B4IDxVkQ_4iuc_dtRP1fw==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/utx?cb=75MU5GtEHreA&top=megaup.net&tid=764141
204 No Content 0 B URL GET HTTP/2 kultingecauyuksehinkitw.info/utx?cb=75MU5GtEHreA&top=megaup.net&tid=764141
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=75MU5GtEHreA&top=megaup.net&tid=764141 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 05 May 2023 22:17:29 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: SIRuIIs1L3nOdVx4NJTHHNTm_nsmef2dDYBhQlbza7Umca59ZyXQkQ==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/N2tGYnBWCSUPT1ZWJEQFRQd7R0JxTnQkFFoGPAkWU1N0FRFOBWgBHFgeIgQCWAUyTB5SH2NQNn4OLCgjZlgTOChjHCoxFwIJCAxFeTgHBgJUABQBJ3QuNSUHWDsMM0gOLRERQXwvDy8mYDIwNwcCIggMRXEzAFYKezkMKjZzCDIkG1QvIiE5ZSwHWx1tOgMpKGMHY1AydikUNT5OPiUkNlRZHDMxVS88WgNzEwgHIF4hFzE4ZQUkNyZRKgEoAnM+NSYUBCp1Ogd1AgoaB2I5PxIdZVs2KRFZPjc2MW1YJSYUUSoBKwh2Wn4gNQQhADMITwInDjJ+KixPJVotLiQUU1gDGCN2ISwBQGEnBw8+Wjl2EiV4EQMzOHFbNzgbVFMHUD5OPHYNJX1YcydWXRgpDAAKHAoqH24MLSUGUF8q
200 OK 1.2 kB URL GET HTTP/2 kultingecauyuksehinkitw.info/N2tGYnBWCSUPT1ZWJEQFRQd7R0JxTnQkFFoGPAkWU1N0FRFOBWgBHFgeIgQCWAUyTB5SH2NQNn4OLCgjZlgTOChjHCoxFwIJCAxFeTgHBgJUABQBJ3QuNSUHWDsMM0gOLRERQXwvDy8mYDIwNwcCIggMRXEzAFYKezkMKjZzCDIkG1QvIiE5ZSwHWx1tOgMpKGMHY1AydikUNT5OPiUkNlRZHDMxVS88WgNzEwgHIF4hFzE4ZQUkNyZRKgEoAnM+NSYUBCp1Ogd1AgoaB2I5PxIdZVs2KRFZPjc2MW1YJSYUUSoBKwh2Wn4gNQQhADMITwInDjJ+KixPJVotLiQUU1gDGCN2ISwBQGEnBw8+Wjl2EiV4EQMzOHFbNzgbVFMHUD5OPHYNJX1YcydWXRgpDAAKHAoqH24MLSUGUF8q
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3018), with no line terminators
Hash 63c3669c4c7c56b4b6ea7b9185ac67a3
5a9e9303e478ae8cc16c224eb75a8f658b9ba7ac
d3a0c6b48610240550eeacdd2d12e3d07087f31d9fef5876db49f24a6cd705e8
GET /N2tGYnBWCSUPT1ZWJEQFRQd7R0JxTnQkFFoGPAkWU1N0FRFOBWgBHFgeIgQCWAUyTB5SH2NQNn4OLCgjZlgTOChjHCoxFwIJCAxFeTgHBgJUABQBJ3QuNSUHWDsMM0gOLRERQXwvDy8mYDIwNwcCIggMRXEzAFYKezkMKjZzCDIkG1QvIiE5ZSwHWx1tOgMpKGMHY1AydikUNT5OPiUkNlRZHDMxVS88WgNzEwgHIF4hFzE4ZQUkNyZRKgEoAnM+NSYUBCp1Ogd1AgoaB2I5PxIdZVs2KRFZPjc2MW1YJSYUUSoBKwh2Wn4gNQQhADMITwInDjJ+KixPJVotLiQUU1gDGCN2ISwBQGEnBw8+Wjl2EiV4EQMzOHFbNzgbVFMHUD5OPHYNJX1YcydWXRgpDAAKHAoqH24MLSUGUF8q HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1172
date: Fri, 05 May 2023 22:16:29 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: l6xVWQ31uJN_fSvMy_bPd-9QIkjAJsJZ4wv0ksm3HGEM6JwiJEGEIg==
X-Firefox-Spdy: h2
theharityhild.buzz/
200 OK 0 B IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjecttheharityhild.buzz
Fingerprint4F:3F:5B:8C:AA:6E:37:C3:45:68:90:BE:2C:8B:F0:01:D7:5F:3F:89
ValidityFri, 05 May 2023 05:15:10 GMT - Thu, 03 Aug 2023 05:15:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Content-Length: 396
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/UkNoOEQzIQtVezN+Ch4xIC9VHXYUZlp+ID8uElMiNntaTyUrLUZbKD02DF42PS0cFio3N00KAhEiAmIUHxctchMBBTB8LGclI08zGxsPAXcQND51HBY7DWA8PQ8jbywVDz1qfQECC3sBFjckbhIxBAludQMBLn49FHI5fRIKCil+MyYQJGkzFBctdTEWBR9+EBEZDGAVIRcOYCcXESliNRM0LnsQPHcpfgI+cwlfCRABBAAsAAYEaAYaeiJ7EiozDWkRBxQwajUTNC1hFRUsK1sCIQQMUHwQEhB2fRMVMWgSARENfgI6NA5pARMUD2JhYAEpaQYCASAVfQoUKlAQGRVdchAlEiJ5BRAhL3B8ChEuWwx0KRtXKiJ+DmEzFTFaQXI6
200 OK 1.2 kB URL GET HTTP/2 kultingecauyuksehinkitw.info/UkNoOEQzIQtVezN+Ch4xIC9VHXYUZlp+ID8uElMiNntaTyUrLUZbKD02DF42PS0cFio3N00KAhEiAmIUHxctchMBBTB8LGclI08zGxsPAXcQND51HBY7DWA8PQ8jbywVDz1qfQECC3sBFjckbhIxBAludQMBLn49FHI5fRIKCil+MyYQJGkzFBctdTEWBR9+EBEZDGAVIRcOYCcXESliNRM0LnsQPHcpfgI+cwlfCRABBAAsAAYEaAYaeiJ7EiozDWkRBxQwajUTNC1hFRUsK1sCIQQMUHwQEhB2fRMVMWgSARENfgI6NA5pARMUD2JhYAEpaQYCASAVfQoUKlAQGRVdchAlEiJ5BRAhL3B8ChEuWwx0KRtXKiJ+DmEzFTFaQXI6
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2991), with no line terminators
Hash da7da0c045b08d5c402289931a45464a
6a31d6af9f0a3ddee96574818c181b28a8f73bbf
abae5daff1f9ebc64fbe673a052ee6b3e3376b104b59e217a3dd756920f4e0c4
GET /UkNoOEQzIQtVezN+Ch4xIC9VHXYUZlp+ID8uElMiNntaTyUrLUZbKD02DF42PS0cFio3N00KAhEiAmIUHxctchMBBTB8LGclI08zGxsPAXcQND51HBY7DWA8PQ8jbywVDz1qfQECC3sBFjckbhIxBAludQMBLn49FHI5fRIKCil+MyYQJGkzFBctdTEWBR9+EBEZDGAVIRcOYCcXESliNRM0LnsQPHcpfgI+cwlfCRABBAAsAAYEaAYaeiJ7EiozDWkRBxQwajUTNC1hFRUsK1sCIQQMUHwQEhB2fRMVMWgSARENfgI6NA5pARMUD2JhYAEpaQYCASAVfQoUKlAQGRVdchAlEiJ5BRAhL3B8ChEuWwx0KRtXKiJ+DmEzFTFaQXI6 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1151
date: Fri, 05 May 2023 22:16:30 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: jkCs2W4XwT2JjVU-riPsos2jUk3UM5-1gSWyvXZPNEB-zeWDXMegug==
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
200 OK 6.4 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (15714), with CRLF line terminators
Hash 53bfb2e5d25ff063af5b7888ecf7ed25
71223b6ea50cf664e18108c8d11b4ea8ca656603
8cf3198797dcbb93c257d60e352eec002ca6bed80723bdb6b8c01224fc298b8f
GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3ead"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery-1.11.0.min.js
200 OK 36 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery-1.11.0.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (32341)
Hash 3944ca3a0942b08a838fad8463ab5cdc
a99a8a9fcb656b02f893a1636c24fc35123c5096
5533dc567f4816584e7ce0ac3ac24b88e477e3d84f367cdb0d54de4d500c7271
GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1787d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31568, version 1.1\012- data
Hash e0c4ac0e73196bd0469c5c33304b7773
bb071565f82907d117b0732dca8013409162c67d
ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af
GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:30 GMT
content-type: font/woff
content-length: 31568
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7b50"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
theharityhild.buzz/
200 OK 0 B IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjecttheharityhild.buzz
Fingerprint4F:3F:5B:8C:AA:6E:37:C3:45:68:90:BE:2C:8B:F0:01:D7:5F:3F:89
ValidityFri, 05 May 2023 05:15:10 GMT - Thu, 03 Aug 2023 05:15:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Referer: https://megaup.net/
Content-Length: 355
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
api.purpleads.io/x/init?ts=1683324989778
200 OK 268 B URL GET HTTP/2 api.purpleads.io/x/init?ts=1683324989778
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
Hash 58fe1f2623397cca72ecea6ee95d76b9
ac4d33ae761cf330574597936273a9c5d82f96d0
7cb0b5944c53bbacc5983fbef96aa0c1f514ec12da81666765610eae562a9020
OPTIONS /x/init?ts=1683324989778 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type,x-purpleads-version,x-request-url
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-expose-headers: pa-user-id
access-control-allow-headers: authorization,content-type,x-purpleads-version,x-request-url
access-control-max-age: 86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
200 OK 4.2 kB URL GET HTTP/2 megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (8746)
Hash a8e74f8e8679b35bb53eb79ebca6228b
869304a4b19cc795e6eb38647157585dee9b0881
8f4db5da5516b9be88f7f0a9b4803d9c6ace55582afa2bc58f0dbf3e04369d79
GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2296"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/multi?cs=NDZwOFMFD0YOYgYCQgFmBwRHDmM&abt=0&red=1&sm=76&k=download%20file%20amanda%20adventurer%20tenoke&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1683713997709781&agec=1683324989&fs=1&mbkb=140.64697609001408&ref=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&_kAvo=1683324990087&crc=1
200 OK 1.5 kB URL GET HTTP/2 kultingecauyuksehinkitw.info/multi?cs=NDZwOFMFD0YOYgYCQgFmBwRHDmM&abt=0&red=1&sm=76&k=download%20file%20amanda%20adventurer%20tenoke&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1683713997709781&agec=1683324989&fs=1&mbkb=140.64697609001408&ref=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&_kAvo=1683324990087&crc=1
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3271), with no line terminators
Hash 7c54ea8af6a7821f91db01a2a6a1eb38
a32d73d67d90d36cf58af1ce5113080d7e757ee6
378221c0005f4cc61620f07a834e3c8ecef2dbdfe5f421cc56fc11170adbd5ab
GET /multi?cs=NDZwOFMFD0YOYgYCQgFmBwRHDmM&abt=0&red=1&sm=76&k=download%20file%20amanda%20adventurer%20tenoke&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1683713997709781&agec=1683324989&fs=1&mbkb=140.64697609001408&ref=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&_kAvo=1683324990087&crc=1 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1549
date: Fri, 05 May 2023 22:16:30 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=5b59591c-cabb-4194-93a4-144964dfa410
csu=1683713997709781
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: 2Qzboh5r0bNk8j1Bn0vf9VX-8ZfQ8HeRk30HW4pvidBdl00JJFHHnA==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/IejJSQ3UZXTwlSg5bNn5NSAdrckRcWCEsGwoPJQ89FWs1KDIMVWYvUw5INn5FXF4zLRJHFDctFkcDdCIRGA9mZQEKXTl+ABRWNyUcFFc2ZQAbDz8sDxNePiJQSHRnbUVfAGJrDUsDd3A3XwBiLxwURypmR0pKanUqTAZ3cDdfAGIxA18BE3JFQxxialBIAj-UmFhFdd3EzSAJjc0VLAmNmR0pUOzEQHF0qZkc8A2NyW0oUJ35E
200 OK 388 B URL GET HTTP/2 dmmzkfd82wayn.cloudfront.net/IejJSQ3UZXTwlSg5bNn5NSAdrckRcWCEsGwoPJQ89FWs1KDIMVWYvUw5INn5FXF4zLRJHFDctFkcDdCIRGA9mZQEKXTl+ABRWNyUcFFc2ZQAbDz8sDxNePiJQSHRnbUVfAGJrDUsDd3A3XwBiLxwURypmR0pKanUqTAZ3cDdfAGIxA18BE3JFQxxialBIAj-UmFhFdd3EzSAJjc0VLAmNmR0pUOzEQHF0qZkc8A2NyW0oUJ35E
IP
Requested by https://kultingecauyuksehinkitw.info/N2tGYnBWCSUPT1ZWJEQFRQd7R0JxTnQkFFoGPAkWU1N0FRFOBWgBHFgeIgQCWAUyTB5SH2NQNn4OLCgjZlgTOChjHCoxFwIJCAxFeTgHBgJUABQBJ3QuNSUHWDsMM0gOLRERQXwvDy8mYDIwNwcCIggMRXEzAFYKezkMKjZzCDIkG1QvIiE5ZSwHWx1tOgMpKGMHY1AydikUNT5OPiUkNlRZHDMxVS88WgNzEwgHIF4hFzE4ZQUkNyZRKgEoAnM+NSYUBCp1Ogd1AgoaB2I5PxIdZVs2KRFZPjc2MW1YJSYUUSoBKwh2Wn4gNQQhADMITwInDjJ+KixPJVotLiQUU1gDGCN2ISwBQGEnBw8+Wjl2EiV4EQMzOHFbNzgbVFMHUD5OPHYNJX1YcydWXRgpDAAKHAoqH24MLSUGUF8q
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (492), with no line terminators
Hash 61b9094c85b255a04d24606fd9f13890
33d01ab154d24ed30720b4bbb257d1aa77a27dfc
3cd6ce3bc52720d39a572dd33edcd5645f2e5b16eca8008ac7f1c601cb114f44
GET /IejJSQ3UZXTwlSg5bNn5NSAdrckRcWCEsGwoPJQ89FWs1KDIMVWYvUw5INn5FXF4zLRJHFDctFkcDdCIRGA9mZQEKXTl+ABRWNyUcFFc2ZQAbDz8sDxNePiJQSHRnbUVfAGJrDUsDd3A3XwBiLxwURypmR0pKanUqTAZ3cDdfAGIxA18BE3JFQxxialBIAj-UmFhFdd3EzSAJjc0VLAmNmR0pUOzEQHF0qZkc8A2NyW0oUJ35E HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kultingecauyuksehinkitw.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 388
date: Fri, 05 May 2023 22:16:30 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s3lS9riJSspGND2r6TFBTJ7URV_qJymuRupDdOfdS-rcvIvi02PdhA==
X-Firefox-Spdy: h2
theharityhild.buzz/
200 OK 0 B IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjecttheharityhild.buzz
Fingerprint4F:3F:5B:8C:AA:6E:37:C3:45:68:90:BE:2C:8B:F0:01:D7:5F:3F:89
ValidityFri, 05 May 2023 05:15:10 GMT - Thu, 03 Aug 2023 05:15:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Referer: https://megaup.net/
Content-Length: 364
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 102 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Size 102 kB (101843 bytes)
Hash 02d570b7275f4270bfc9c128da5ca232
a986f6a118422e07a8e471a727602ecb455ffcce
7ced5cbb024207de30caa7d3833aafd293bce6bb1f66193c35e80b5873337200
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: text/plain
set-cookie: csu=1683713997709781@1@1683324989; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hbNwMpgRdcpGy8QJw6vqYqSXAaUhVBz5B4yC6t5CEv75v6QJRGwozyd8%2FgI%2BVrY%2F7qK9kNv7PH40r3hqUOlBi95PJlBJ5zD%2F3BlMrWmYejdSAM0F8C04asRZdRnI1VXc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c59216a4e069b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/YbFlldmEPNgsQXhgwAUtZW29WR1lKMxYZDxxkCR4HLwAoJAAHLQcBBj0sQwIbCGRVUA0NNwJLRwk3BktQSjgBFFxYfxEGDgdkDwIWAyoUDxMPKEMDAFE0CgwIADUEU1MqbEtGRF5pTQ5QXXxWNEReaQkfDxkhQERRFGFTKVdYfFY0RF5pFwBEXxhURlhCaU-xTU1w+ABUKA3xXMFNcaFVGUFxoQERRCjAXEwcDIUBEJ11oVFhRSixYRw
471 B URL dmmzkfd82wayn.cloudfront.net/YbFlldmEPNgsQXhgwAUtZW29WR1lKMxYZDxxkCR4HLwAoJAAHLQcBBj0sQwIbCGRVUA0NNwJLRwk3BktQSjgBFFxYfxEGDgdkDwIWAyoUDxMPKEMDAFE0CgwIADUEU1MqbEtGRF5pTQ5QXXxWNEReaQkfDxkhQERRFGFTKVdYfFY0RF5pFwBEXxhURlhCaU-xTU1w+ABUKA3xXMFNcaFVGUFxoQERRCjAXEwcDIUBEJ11oVFhRSixYRw
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (615), with no line terminators
Hash ec68cc5a2df00ac4c5d9f926677229a3
46963e737b05b4150c07f71fac1bde4e6ba9438c
777222e0e43e9fe8b27b50b8bff517f0990a21fdd8b7572fd085968c9bef1725
GET /YbFlldmEPNgsQXhgwAUtZW29WR1lKMxYZDxxkCR4HLwAoJAAHLQcBBj0sQwIbCGRVUA0NNwJLRwk3BktQSjgBFFxYfxEGDgdkDwIWAyoUDxMPKEMDAFE0CgwIADUEU1MqbEtGRF5pTQ5QXXxWNEReaQkfDxkhQERRFGFTKVdYfFY0RF5pFwBEXxhURlhCaU-xTU1w+ABUKA3xXMFNcaFVGUFxoQERRCjAXEwcDIUBEJ11oVFhRSixYRw HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kultingecauyuksehinkitw.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 471
date: Fri, 05 May 2023 22:16:30 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 66-IVcjxdglQcaoa3pg6kaE39vzpeyAm-ozzrYHPTayNwhIagMmXgQ==
X-Firefox-Spdy: h2
cdn.engine.4dsply.com/Scripts/infinity.js.aspx?guid=86ddec5c-b957-455f-87da-f034ba331fa2
200 OK 46 kB URL GET HTTP/2 cdn.engine.4dsply.com/Scripts/infinity.js.aspx?guid=86ddec5c-b957-455f-87da-f034ba331fa2
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subject4dsply.com
Fingerprint31:FD:E2:5E:52:27:E7:39:C7:DB:EA:A6:84:8F:4E:0E:48:82:BF:5C
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (64095)
Hash 5eb6a9483de722fba2c1ca0fe657bbf0
50ddf12d03865ba935e5eccb60d9eaea245ff954
0976ef8a9894f5aedc5437df026ac6742103df05e2c30784506e961ca15c6559
GET /Scripts/infinity.js.aspx?guid=86ddec5c-b957-455f-87da-f034ba331fa2 HTTP/1.1
Host: cdn.engine.4dsply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:30 GMT
content-type: application/x-javascript; charset=utf-8
vary: Accept-Encoding
cache-control: public, max-age=900
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
last-modified: Fri, 05 May 2023 22:07:53 GMT
cf-cache-status: HIT
expires: Fri, 05 May 2023 22:31:30 GMT
server: cloudflare
cf-ray: 7c2c59258a920b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/5eExlRlkbIwsgZgwlAXtuTnhUcmheJhYpNwhxNy0WFyUvf2EJKwlgLQIoWHZ/FC0LIWReKQslZElqBCI7RXhDMikXJ1gsLQ8jFjcgCi8UYCwZcQgpIxEgCSd8SgpQaGldflVuIUl9QHUbXX5VKjAWOR1ja0g0XXAGTnhAdRtdflU0L11/JHdpQWJVb3xKfA-IjOhMjQHQfSnxUdmlJfFRja0gqDDQ8HiMdY2s+fVR3d0hqEHto
622 B URL dmmzkfd82wayn.cloudfront.net/5eExlRlkbIwsgZgwlAXtuTnhUcmheJhYpNwhxNy0WFyUvf2EJKwlgLQIoWHZ/FC0LIWReKQslZElqBCI7RXhDMikXJ1gsLQ8jFjcgCi8UYCwZcQgpIxEgCSd8SgpQaGldflVuIUl9QHUbXX5VKjAWOR1ja0g0XXAGTnhAdRtdflU0L11/JHdpQWJVb3xKfA-IjOhMjQHQfSnxUdmlJfFRja0gqDDQ8HiMdY2s+fVR3d0hqEHto
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (867), with no line terminators
Hash 951acb285496076f760a079df26455a4
5a9df45826ba3f8773cb3b8e2d40de53718dbd1b
934bcecf42c0ab8b99ea53019ca27de474cbf41326479d417e0913d8463ca1b1
GET /5eExlRlkbIwsgZgwlAXtuTnhUcmheJhYpNwhxNy0WFyUvf2EJKwlgLQIoWHZ/FC0LIWReKQslZElqBCI7RXhDMikXJ1gsLQ8jFjcgCi8UYCwZcQgpIxEgCSd8SgpQaGldflVuIUl9QHUbXX5VKjAWOR1ja0g0XXAGTnhAdRtdflU0L11/JHdpQWJVb3xKfA-IjOhMjQHQfSnxUdmlJfFRja0gqDDQ8HiMdY2s+fVR3d0hqEHto HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kultingecauyuksehinkitw.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 622
date: Fri, 05 May 2023 22:16:30 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mWOfiyXw4K6yTNMi8MAFPVTa4sc9tBjnV6w5Xr9mbOMEqm0neOkplA==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintB2:C2:42:27:DF:EC:CB:1E:FE:A7:09:51:29:57:CF:88:20:1C:AC:E2
ValidityMon, 17 Apr 2023 08:26:19 GMT - Mon, 10 Jul 2023 08:26:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
set-cookie: __Host-GAPS=1:GOPcx7MAfCT7j6fF469IXvDEqgFa:BkKm7qZ3Zc4pW3OO; Expires=Sun, 04-May-2025 22:16:29 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 05 May 2023 22:16:29 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneGbEE_7CmaqHuwUQgXKMJWe2_9Ba0X3uS9rweEQ--rq2NFzsUG9zfLDaRgESpyDkK_2dvGKtg
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-6QgbhbUxm2WOhbDy_iBgaA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-type: application/binary
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
200 OK 23 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectscript.4dex.io
Fingerprint3B:2C:BC:39:64:F4:D4:D0:E1:70:EB:66:ED:61:AD:94:83:40:3A:DB
ValidityWed, 23 Nov 2022 00:00:00 GMT - Wed, 22 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (65354)
Hash 0ffb2c9b6dd933ae18ab7dc729d58e69
bb88b2f3fc47452873348d1cdcb7ea3d4a2bbc10
0cd0e55fa43693dfe4b04a225bf7774eb3f66e232828f8d661547728475a12f2
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 05 May 2023 22:16:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
ETag: W/"c56b6332dacf72f135afcd153ae22448"
Last-Modified: Wed, 23 Nov 2022 15:43:17 GMT
Vary: Origin, Accept-Encoding
Access-Control-Expose-Headers:
CF-Cache-Status: HIT
Age: 61355
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=40568YjvZws61UfaBLZ%2B%2BRG46DOtyBwS9ITvMNawzj8rkMePSL6%2F9GCOTAGD5NhixAbc2bDUM%2BvZV3zS4s5NYlODB8MzYghOEvpFwyrOMLbuDR8FVMZi%2BVFWqL%2Bx2bZZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c2c5927feae1c02-OSL
Content-Encoding: br
prebid.a-mo.net/a/c
204 No Content 0 B IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint86:27:A6:73:5B:D6:49:31:AD:38:AE:5D:D8:43:D7:59:83:60:76:B4
ValidityThu, 13 Apr 2023 07:33:05 GMT - Wed, 12 Jul 2023 07:33:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1489
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: max-age=0, private, must-revalidate
date: Fri, 05 May 2023 22:16:30 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageReferrer=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar
200 OK 178 B URL POST HTTP/2 hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageReferrer=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar
IP
ASN #200271 Iguane Solutions SAS
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subjectomnitagjs.com
Fingerprint2A:15:BB:D7:C8:C4:82:F5:8E:87:59:17:B9:2C:B5:8E:12:AC:26:E3
ValidityTue, 21 Jun 2022 00:00:00 GMT - Fri, 21 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 5ed2666e22847e8d697559ede30aad17
524eab2050d1e8966b0b99d818cdb6c1100c4c1b
3cc744e530a383130d8b306b052291b64a9f993cd5b7cc737ff7d3136613f268
POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageReferrer=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar HTTP/1.1
Host: hb-api.omnitagjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 709
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept-Encoding, Content-Type
access-control-allow-methods: OPTIONS, POST
access-control-allow-origin: https://megaup.net
access-control-max-age: 3600
cache-control: no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=335c1e7245568f41b2e5f5e25dd08ae2; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 05 May 2023 22:16:30 GMT
content-length: 178
x-envoy-upstream-service-time: 5
server: ayl-lb-fra02
X-Firefox-Spdy: h2
api.purpleads.io/x/init?ts=1683324990651
200 OK 87 B URL OPTIONS HTTP/2 api.purpleads.io/x/init?ts=1683324990651
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1225a48532b67fd812920a47e3557ed4
ac910f9679bd805609435e4fa8970cdf74fa4b86
4cdf058286dcc09e5511ec4f021ce5ce4d22052312bf08ce7b672e08eb5a4a9f
OPTIONS /x/init?ts=1683324990651 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type,pa-user-id,x-purpleads-version,x-request-url
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:30 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-expose-headers: pa-user-id
access-control-allow-headers: authorization,content-type,pa-user-id,x-purpleads-version,x-request-url
access-control-max-age: 86400
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/floater?cs=TExHaDl%2FfXBYDXl6clkLdHVxWQk&abt=0&red=1&sm=83&k=download%20file%20amanda%20adventurer%20tenoke&v=0.9.1.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1683713997709781&agec=1683324989&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=140.64697609001408&ref=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&aa=oi1_&_kPis=1683324990091&crc=1
200 OK 1.7 kB URL GET HTTP/2 kultingecauyuksehinkitw.info/floater?cs=TExHaDl%2FfXBYDXl6clkLdHVxWQk&abt=0&red=1&sm=83&k=download%20file%20amanda%20adventurer%20tenoke&v=0.9.1.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1683713997709781&agec=1683324989&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=140.64697609001408&ref=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&aa=oi1_&_kPis=1683324990091&crc=1
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3215), with no line terminators
Hash 55d4310968688f8cf3b4f589c6cceaae
f261dcdb25f96b5ea62d8abcb0735930b3175359
313f5334139aa6fb39071982579c0659853e1719655b4d732914bf44bac2d686
GET /floater?cs=TExHaDl%2FfXBYDXl6clkLdHVxWQk&abt=0&red=1&sm=83&k=download%20file%20amanda%20adventurer%20tenoke&v=0.9.1.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1683713997709781&agec=1683324989&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=140.64697609001408&ref=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&aa=oi1_&_kPis=1683324990091&crc=1 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1732
date: Fri, 05 May 2023 22:16:30 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=6ae4c884-780c-4615-92ae-3a111c95c25c
csu=1683713997709781
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: 4_lJLCW7V6cexbgc9ByDKy-_5TiS2zn2AZfL1k6soQve89ZQhuTgoA==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/ROWlSdDhaBjwSB00ANkkPD1hjTA4fAyEbVklUFiNiVxgUPn5XTyYOXARZdBhZVw5vUl1XCm9FHlgNMEkMHx0iG1MEAyYDV0oYKwZbSE8nFQVUBigdVFUId0Z+DEdiUQoJQSpFCRxaEFEKCQU7Gk1BTGBEQAFfDUIMHFoQUQoJGyRRC3hYYk0WCUB3RgheDD-EfVxxbFEYICFliRQgITGBEXlAbNxJXQUxgMgkIWHxEHkxUYw
625 B URL dmmzkfd82wayn.cloudfront.net/ROWlSdDhaBjwSB00ANkkPD1hjTA4fAyEbVklUFiNiVxgUPn5XTyYOXARZdBhZVw5vUl1XCm9FHlgNMEkMHx0iG1MEAyYDV0oYKwZbSE8nFQVUBigdVFUId0Z+DEdiUQoJQSpFCRxaEFEKCQU7Gk1BTGBEQAFfDUIMHFoQUQoJGyRRC3hYYk0WCUB3RgheDD-EfVxxbFEYICFliRQgITGBEXlAbNxJXQUxgMgkIWHxEHkxUYw
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (865), with no line terminators
Hash feae54f00c3a4b476c30642a3082f4bf
9e2cfd071236276207b5d0f968e8dc8a048ea53a
a419290f157b16e039e7dfc5394755beb936c592530da3cde974047c2389aebb
GET /ROWlSdDhaBjwSB00ANkkPD1hjTA4fAyEbVklUFiNiVxgUPn5XTyYOXARZdBhZVw5vUl1XCm9FHlgNMEkMHx0iG1MEAyYDV0oYKwZbSE8nFQVUBigdVFUId0Z+DEdiUQoJQSpFCRxaEFEKCQU7Gk1BTGBEQAFfDUIMHFoQUQoJGyRRC3hYYk0WCUB3RgheDD-EfVxxbFEYICFliRQgITGBEXlAbNxJXQUxgMgkIWHxEHkxUYw HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kultingecauyuksehinkitw.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 625
date: Fri, 05 May 2023 22:16:30 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: foIXsWNeSjGd8l50lfk24xwAYVVQdnslGh8W2vaSWM0wzf5D3GvpJA==
X-Firefox-Spdy: h2
6.adsco.re/
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 05 May 2023 22:16:31 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c592adb2fb4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
script.4dex.io/localstore.js
200 OK 268 B URL GET HTTP/1.1 script.4dex.io/localstore.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectscript.4dex.io
Fingerprint3B:2C:BC:39:64:F4:D4:D0:E1:70:EB:66:ED:61:AD:94:83:40:3A:DB
ValidityWed, 23 Nov 2022 00:00:00 GMT - Wed, 22 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (482)
Hash 58fe1f2623397cca72ecea6ee95d76b9
ac4d33ae761cf330574597936273a9c5d82f96d0
7cb0b5944c53bbacc5983fbef96aa0c1f514ec12da81666765610eae562a9020
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 05 May 2023 22:16:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"922cffdd75f7192f75231d92684885aa"
Last-Modified: Wed, 23 Nov 2022 15:43:18 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 1569535
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h%2F7xQqFWilDtGgosd6o%2FarxNgBNbGLymnUIhny3%2FsA%2FQkinpJWO5Su%2FWTGdA72Z%2FNNcGAPkO3aTBQmkQoZ7ojvscjH3maknaT76rvxpoPK%2FejAF3Cmf%2FVLBrAO59ZB%2F4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c2c592e7e0bb4ee-OSL
Content-Encoding: br
prebid.a-mo.net/a/c
204 No Content 0 B IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint86:27:A6:73:5B:D6:49:31:AD:38:AE:5D:D8:43:D7:59:83:60:76:B4
ValidityThu, 13 Apr 2023 07:33:05 GMT - Wed, 12 Jul 2023 07:33:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1520
Referer: https://megaup.net/
Origin: https://megaup.net
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: max-age=0, private, must-revalidate
date: Fri, 05 May 2023 22:16:31 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL POST HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerDigiCert Inc
Subject*.creativecdn.com
Fingerprint6B:A3:B1:F5:24:52:3A:1A:F6:71:8D:4B:42:5A:14:D1:C1:60:0B:5C
ValidityWed, 29 Mar 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 837
Referer: https://megaup.net/
Origin: https://megaup.net
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:31 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
200 OK 23 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectscript.4dex.io
Fingerprint3B:2C:BC:39:64:F4:D4:D0:E1:70:EB:66:ED:61:AD:94:83:40:3A:DB
ValidityWed, 23 Nov 2022 00:00:00 GMT - Wed, 22 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (65354)
Hash 0ffb2c9b6dd933ae18ab7dc729d58e69
bb88b2f3fc47452873348d1cdcb7ea3d4a2bbc10
0cd0e55fa43693dfe4b04a225bf7774eb3f66e232828f8d661547728475a12f2
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 05 May 2023 22:16:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
ETag: W/"c56b6332dacf72f135afcd153ae22448"
Last-Modified: Wed, 23 Nov 2022 15:43:17 GMT
Vary: Origin, Accept-Encoding
Access-Control-Expose-Headers:
CF-Cache-Status: HIT
Age: 61356
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0lqVsuCbTDqv3AyF4bsQlJLyJqNVpMUhKk6VgN40AhdLEyZWyVfzraOf3dHsRBperAoIiXSBkTSV%2FdJtwK87%2BCET0Gv%2B2K4JMPXuHSm4ee3YYU2QD3T7dT8gO%2FT0rpiu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7c2c592edb531c02-OSL
Content-Encoding: br
mp.4dex.io/prebid
204 No Content 0 B IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint41:4F:6A:6E:28:C5:B0:0A:0D:CD:46:9A:2B:DA:3E:54:9C:D7:75:E6
ValidityWed, 31 Aug 2022 00:00:00 GMT - Thu, 31 Aug 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2296
Referer: https://megaup.net/
Origin: https://megaup.net
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:31 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin, Accept-Encoding
x-err: Parsing the Prebid Request. org/site not found
x-version: 3.0.0-gcp-ams
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7c2c592eb9790b45-OSL
X-Firefox-Spdy: h2
hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageReferrer=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar
200 OK 180 B URL POST HTTP/2 hb-api.omnitagjs.com/hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageReferrer=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar
IP
ASN #200271 Iguane Solutions SAS
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subjectomnitagjs.com
Fingerprint2A:15:BB:D7:C8:C4:82:F5:8E:87:59:17:B9:2C:B5:8E:12:AC:26:E3
ValidityTue, 21 Jun 2022 00:00:00 GMT - Fri, 21 Jul 2023 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 11a67df25af2266bbe420a8dd82f93bb
4f34172cf4f3972ac4afb6219103fe2a916ceaec
326e3522f8b09fd0a3c9e123989fd893b144b4bf0dcc50a2b66e8379bc72342a
POST /hb-api/prebid/v1?RefererUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageUrl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&PageReferrer=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar HTTP/1.1
Host: hb-api.omnitagjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 745
Referer: https://megaup.net/
Origin: https://megaup.net
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept-Encoding, Content-Type
access-control-allow-methods: OPTIONS, POST
access-control-allow-origin: https://megaup.net
access-control-max-age: 3600
cache-control: no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=814f08a8a9d447597683ec4f0fef86e6; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 05 May 2023 22:16:31 GMT
content-length: 180
x-envoy-upstream-service-time: 24
server: ayl-lb-fra02
X-Firefox-Spdy: h2
xml.serve-servee.com/thumbnail?i=WMTBrm84Svw_0&p=1683324990.220815&imgt=icon
302 Found 0 B URL GET HTTP/2 xml.serve-servee.com/thumbnail?i=WMTBrm84Svw_0&p=1683324990.220815&imgt=icon
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF9:F4:6D:CB:77:34:5B:81:93:D5:4D:A0:AC:62:B8:EA:AB:A6:7E:14
ValiditySat, 04 Feb 2023 00:00:00 GMT - Sat, 03 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=WMTBrm84Svw_0&p=1683324990.220815&imgt=icon HTTP/1.1
Host: xml.serve-servee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 05 May 2023 22:16:33 GMT
content-length: 0
location: https://static.serve-servee.com/n337/ad/192x192_NPwQpW0Xe9wokgoOSRYY.jpeg
cache-control: no-store
age: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WphIjS0E7zXTbp%2B0HyHLVVXQkU0uNkbAm1GZrn132WG9wL9hOc1soUkwT%2Fd7vfjysvjXyRZOYCcZHCG5rh2KcQZSwwHFIxfirM6M7K00LoLqIL0fEm4V6xlndEpm%2FTVc%2Bc1q%2FaUEGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c5939fe3c23ab-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.serve-servee.com/n337/ad/192x192_NPwQpW0Xe9wokgoOSRYY.jpeg
200 OK 5.9 kB URL GET HTTP/2 static.serve-servee.com/n337/ad/192x192_NPwQpW0Xe9wokgoOSRYY.jpeg
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF9:F4:6D:CB:77:34:5B:81:93:D5:4D:A0:AC:62:B8:EA:AB:A6:7E:14
ValiditySat, 04 Feb 2023 00:00:00 GMT - Sat, 03 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 817e4b4654c13e0e36e83b889cabf5f8
ead6ba9b2ea1ca76009edfd06fc192dce81a2e91
8396eac2dea5db817c502e4f960bd364bee3415318383b29f9b123b811fffa71
GET /n337/ad/192x192_NPwQpW0Xe9wokgoOSRYY.jpeg HTTP/1.1
Host: static.serve-servee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:33 GMT
content-type: image/jpeg
content-length: 5930
last-modified: Fri, 07 Apr 2023 23:14:33 GMT
accept-ranges: bytes
etag: "6430a3d9-172a"
cache-control: max-age=86400
x-hw: 1683324993.cds275.lo4.h2,1683324993.cds298.lo4.c
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4gT57vbOH11kvLM8aVCEDvkmpRbdIsMPbkImYXlCuFy%2BhWkstgOyby5WAy6GKhEp6AdGR8%2Bsz2dVh5hcrjZ8iqZF%2B%2BAawGJdaXIHWMg%2FocYBPIy09Z6yKbvkocPgS2BlQt91TXZSgi3IyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c593b482123ab-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.purpleads.io/x/v2/b/?idx=1&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&demand=unifiedPb&ts=1683324993774
204 No Content 0 B URL GET HTTP/2 api.purpleads.io/x/v2/b/?idx=1&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&demand=unifiedPb&ts=1683324993774
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /x/v2/b/?idx=1&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&demand=unifiedPb&ts=1683324993774 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type,pa-user-id,x-purpleads-version,x-request-url
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:33 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-expose-headers: pa-user-id
access-control-allow-headers: authorization,content-type,pa-user-id,x-purpleads-version,x-request-url
access-control-max-age: 86400
X-Firefox-Spdy: h2
prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
204 No Content 0 B URL GET HTTP/2 prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint86:27:A6:73:5B:D6:49:31:AD:38:AE:5D:D8:43:D7:59:83:60:76:B4
ValidityThu, 13 Apr 2023 07:33:05 GMT - Wed, 12 Jul 2023 07:33:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0, private, must-revalidate
date: Fri, 05 May 2023 22:16:35 GMT
server: envoy
x-envoy-upstream-service-time: 1
vary: Accept-Encoding
X-Firefox-Spdy: h2
xml.serve-servee.com/thumbnail?i=LJ55HhqC9hk_0&p=1683324990.220815&imgt=icon
302 Found 0 B URL GET HTTP/3 xml.serve-servee.com/thumbnail?i=LJ55HhqC9hk_0&p=1683324990.220815&imgt=icon
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF9:F4:6D:CB:77:34:5B:81:93:D5:4D:A0:AC:62:B8:EA:AB:A6:7E:14
ValiditySat, 04 Feb 2023 00:00:00 GMT - Sat, 03 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=LJ55HhqC9hk_0&p=1683324990.220815&imgt=icon HTTP/1.1
Host: xml.serve-servee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: xml.serve-servee.com
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 05 May 2023 22:16:37 GMT
content-length: 0
location: https://static.serve-servee.com/n337/ad/192x192_hpbo3YohsfFJjjTRWsB9.jpeg
cache-control: no-store
age: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QGxsyTSffbVoICcDpFgN4JsfZiXBrUnNqyNfx5X2J8RuXR4FqUA0RKc88BnT0NcYwKdFK67WCSkr3wGt5mbLcOOwkHL%2B5Iw5%2BNBM%2BBgoi6MF%2B75Zf1YgbcflbWbmYYTBiqv9lmXmCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c5951eef123cb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
static.serve-servee.com/n337/ad/192x192_hpbo3YohsfFJjjTRWsB9.jpeg
200 OK 6.4 kB URL GET HTTP/3 static.serve-servee.com/n337/ad/192x192_hpbo3YohsfFJjjTRWsB9.jpeg
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF9:F4:6D:CB:77:34:5B:81:93:D5:4D:A0:AC:62:B8:EA:AB:A6:7E:14
ValiditySat, 04 Feb 2023 00:00:00 GMT - Sat, 03 Feb 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 760e083b0199dcf36cfadd363d72dbf6
6469a8818e2991ddee3eb5e1261f27d0bebc13f7
d4f6e490f7ce250a7f89d2b15391bc6e41eebf134ad92e220e6cdb863693c6d7
GET /n337/ad/192x192_hpbo3YohsfFJjjTRWsB9.jpeg HTTP/1.1
Host: static.serve-servee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: static.serve-servee.com
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 05 May 2023 22:16:37 GMT
content-type: image/jpeg
content-length: 6353
last-modified: Fri, 07 Apr 2023 23:13:51 GMT
accept-ranges: bytes
etag: "6430a3af-18d1"
cache-control: max-age=86400
x-hw: 1683324997.cds203.lo4.h2,1683324997.cds281.lo4.c
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UEpHHZ3PNx5Rm07ySiNSyRReNnmuBOIMJJre%2FNmnu2r1a13wY3CECqKjwOfOcbxfMeDybOYTJteDXZns107yxeu5tjFvmjV5fwafdIQC6ZV5ui7vU8nUGBMdjyjcLkXfjDGj7VHtbAbiNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c595338e323cb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
204 No Content 0 B URL GET HTTP/2 prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint86:27:A6:73:5B:D6:49:31:AD:38:AE:5D:D8:43:D7:59:83:60:76:B4
ValidityThu, 13 Apr 2023 07:33:05 GMT - Wed, 12 Jul 2023 07:33:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0, private, must-revalidate
date: Fri, 05 May 2023 22:16:37 GMT
server: envoy
x-envoy-upstream-service-time: 0
vary: Accept-Encoding
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
200 OK 5.4 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (6528), with no line terminators
Hash 86379ef62388dc773f0c909c8678823c
5eff5eeda891aeb71ef023ab40006f5e9be33642
4152201489950049e566388267c82b03eda1810018354b17055593f250d1e658
GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1547"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
workhovdiminatedi.info/VG1vS1Z7Ugw4azE4Xj8EAiMkLRAkXDV7LmM6Jxk+BTU9KTITIEk/PzBQV3ljbVxebSY9CVJ4ZHIeGyoiIR5SeWZkWkkiODICUnlwIlBfZW96XEF+cCFQXm0iJAwIdmdyHRs/OmlcWXNlZ19bcm5tXl55
204 No Content 0 B URL GET HTTP/2 workhovdiminatedi.info/VG1vS1Z7Ugw4azE4Xj8EAiMkLRAkXDV7LmM6Jxk+BTU9KTITIEk/PzBQV3ljbVxebSY9CVJ4ZHIeGyoiIR5SeWZkWkkiODICUnlwIlBfZW96XEF+cCFQXm0iJAwIdmdyHRs/OmlcWXNlZ19bcm5tXl55
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /VG1vS1Z7Ugw4azE4Xj8EAiMkLRAkXDV7LmM6Jxk+BTU9KTITIEk/PzBQV3ljbVxebSY9CVJ4ZHIeGyoiIR5SeWZkWkkiODICUnlwIlBfZW96XEF+cCFQXm0iJAwIdmdyHRs/OmlcWXNlZ19bcm5tXl55 HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3wBSEfmRLBFD%2BQOvHB6mVVywVCk27ggO3YbNmCP2fU30HuOmlyQwUaMd1lnBofe6gh0RxaiDtP7NfukExvE2dssFoNEEoTq4mZ7o%2Bcf8JD8P311iiAHF5313pbbVZ5KlBY%2Fe%2FA3jB3Cj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c591dcacb067b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico
200 OK 1.2 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash e95c130b43ef6c32b9c9459aff5706c1
51b8b0d3ae3eabd9c31e65098acfa9ba18e9bb30
6c3dde0843949903d807800c8d6706e357fd762d29885946bacac881d4abfb35
GET /themes/flow/frontend_assets/images/icons/favicon/favicon.ico HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: image/x-icon
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-47e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
imp9.bidgear.com/rec?t=1&z=6192&uuid=2c830250471e41e297858ea514ae8918&p=28&g=NO&token=4a44335432&tbg=1683324989
200 OK 599 B URL GET HTTP/2 imp9.bidgear.com/rec?t=1&z=6192&uuid=2c830250471e41e297858ea514ae8918&p=28&g=NO&token=4a44335432&tbg=1683324989
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6192&uuid=2c830250471e41e297858ea514ae8918&p=28&g=NO&token=4a44335432&tbg=1683324989 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fZssHId%2BA4O9m8w1Ww%2BpBFjzHuJCp7R7t5UBPppm233KsA6t277vL9Vc5SRz5AX63xQz0TzuC%2BH%2B5JeeyoJXEvErBXfFVvnXEB8P5mSy5OvuB%2F%2F2dFIW6XD%2F9JajclveaN4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c59204cbeb50f-OSL
X-Firefox-Spdy: h2
cdn.prplads.com/prebid-2023-05-04.js
200 OK 334 kB URL GET HTTP/2 cdn.prplads.com/prebid-2023-05-04.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subjectprplads.com
Fingerprint44:46:5A:F0:A0:B0:25:70:06:3F:E4:EB:02:D5:A2:67:7A:E3:7D:0E
ValidityWed, 19 Apr 2023 12:34:16 GMT - Tue, 18 Jul 2023 12:34:15 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 334 kB (334516 bytes)
Hash f12cb6d37d0462c6dd8c60a71da65df2
9c7df0269bf631dead04153558f956858970fef7
9a9b56e9d8227a239f11900c043bc0f96ba1c376a600bb404a54a2b9bd42b998
GET /prebid-2023-05-04.js HTTP/1.1
Host: cdn.prplads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:30 GMT
content-type: application/javascript
cache-control: max-age=1209600
cf-bgj: minify
cf-polished: origSize=335064
etag: W/"9b3f8b7fe908cdb21e8c7a080015cc62"
last-modified: Thu, 04 May 2023 08:04:59 GMT
x-amz-id-2: HhOzSE6LyNLxApw1wgcMqiZqKwjUlVXympV2psRgdaU9SCXm5DkVygbp7lSjH9tI0y2f4hDwPAo=
x-amz-request-id: EMM43EHB4TQGAVJG
cf-cache-status: HIT
age: 126679
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mI7v4SlxOhQqYPvQFF47mk%2Fv7BjWP2N4smPhHUtmtK6qeerh7Ssl7Mf9RdJ0drvvxIXdgNfslShepIyXdS9aDXOmLb1iSY04CrXo38l%2FRALMriu8tBOmcc9GUgJMLCRvRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c5925df21b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
api.purpleads.io/x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[970,90],[728,90],[468,60],[320,100],[320,50],[300,100]]&slotid=97b7a1cb-700c-445b-aa0d-da0cbcc59390&ts=1683324990904
200 OK 0 B URL OPTIONS HTTP/2 api.purpleads.io/x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[970,90],[728,90],[468,60],[320,100],[320,50],[300,100]]&slotid=97b7a1cb-700c-445b-aa0d-da0cbcc59390&ts=1683324990904
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[970,90],[728,90],[468,60],[320,100],[320,50],[300,100]]&slotid=97b7a1cb-700c-445b-aa0d-da0cbcc59390&ts=1683324990904 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type,pa-user-id,x-purpleads-version,x-request-url
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:30 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-expose-headers: pa-user-id
access-control-allow-headers: authorization,content-type,pa-user-id,x-purpleads-version,x-request-url
access-control-max-age: 86400
X-Firefox-Spdy: h2
api.purpleads.io/x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[970,90],[728,90],[468,60],[320,100],[320,50],[300,100]]&slotid=97b7a1cb-700c-445b-aa0d-da0cbcc59390&ts=1683324990904
200 OK 2.9 kB URL GET HTTP/2 api.purpleads.io/x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[970,90],[728,90],[468,60],[320,100],[320,50],[300,100]]&slotid=97b7a1cb-700c-445b-aa0d-da0cbcc59390&ts=1683324990904
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- troff or preprocessor input, ASCII text, with very long lines (3000), with no line terminators
Hash 2f0266032b488c306c6a4a3b735209c6
7cad896181f70f22fddfc947da792bfe0b7090fc
61dd92c4cb281cc9ac9438c788872ba84cdb45cafddba79150cb4c5b1cbb423f
GET /x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[970,90],[728,90],[468,60],[320,100],[320,50],[300,100]]&slotid=97b7a1cb-700c-445b-aa0d-da0cbcc59390&ts=1683324990904 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: application/json
x-purpleads-version: 3.0.4
x-request-url: aHR0cHM6Ly9tZWdhdXAubmV0LzFURjl6L0FtYW5kYS50aGUuQWR2ZW50dXJlci1URU5PS0UucmFy
Authorization: Bearer 70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
pa-user-id: 38ae9749-49a1-405c-b9d6-179f04efd131
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:31 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-expose-headers: pa-user-id
etag: W/"b3a-/8f8HXYJ03gvTKU+NbO+WUEFROA"
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.dataTables.min.js
200 OK 70 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.dataTables.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (768)
Hash 737f853e9fd6a31d62f5028e88663c9f
cf144f2ab49f53a69fbfe10d3588fc23437d2736
6c3ca64b7acfdd29b3ca6f1b9b46696369abd462d4546182085c347f72211841
GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-10fe4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 102 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1620
last-modified: Fri, 05 May 2023 21:49:29 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yh7Bhf6vu46q8c9%2FqXdTBZzzilqXmlPu4i7zJkT0JWsaurIsBw5T8kkgkP7Kr7ohbHwWU0OsC%2Bh8JXLztFnL4FOxI8ZAW2YQ4WsYICdUozTbBy0xnIF8AubbpXh%2FLsWM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c5921aa6a069b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-validate.js
200 OK 4.1 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-validate.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (4192), with no line terminators
Hash 4ad5c2f2ed0230271d44a12b09ea1361
2070df63b71eda62f5a90b091595ef67595273b7
84047dced279f3c811d4cb54e6a5dc9310569b51eba58aec89f03ced7bfadafc
GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-fea"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
200 OK 21 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 20972, version 1.0\012- data
Hash cad75e2dacc6794c4e6b14727d4a989d
694d04c8f643df4100c23efc1463ac9f4e732f60
ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887
GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: font/woff
content-length: 20972
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-51ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
platform.bidgear.com/media/img/b15.png
200 OK 649 B URL GET HTTP/2 platform.bidgear.com/media/img/b15.png
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash d832fb80c97ff291b952757bb98240d2
63732e61a0784ed68fde494f83e4686a5c4bf7fa
7b35c11af8accdb40a14303dd3ae2762a97d2527933c56b6c9be6da2d0d11943
GET /media/img/b15.png HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: image/png
content-length: 649
last-modified: Mon, 25 Jul 2022 09:43:33 GMT
etag: "62de65c5-289"
expires: Wed, 03 May 2023 17:48:03 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 1254649
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MByC6f4G2PzdCaHZU4hCC9TGChvOuyKHjsus6qQ%2Bgvdhk0ihwxZdiG%2BcaC6u08HEwqz%2Bim9tKt1%2B2o%2FgoBCBuwBbqdICpUTGAphfsUh70Drakojs5GqSWNrpQErhNK50eG1pbsBa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c59201c69b50f-OSL
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
200 OK 36 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-8d4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
200 OK 53 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-ce4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
workhovdiminatedi.info/UzluQ2J8Bg0wXx4ICio3YmwlGTQZXjQCMD5uXA0LEQs4Gzs+bEg3CzcEWXVWYg1fZRI6XVNyRCBNDzcXIARfZQs9XwF+RCUEX21RZxddcUxhHxt+U3VNHiIFbghIMxYnVVNyVGsKXXFWagFXcFZn
204 No Content 0 B URL GET HTTP/2 workhovdiminatedi.info/UzluQ2J8Bg0wXx4ICio3YmwlGTQZXjQCMD5uXA0LEQs4Gzs+bEg3CzcEWXVWYg1fZRI6XVNyRCBNDzcXIARfZQs9XwF+RCUEX21RZxddcUxhHxt+U3VNHiIFbghIMxYnVVNyVGsKXXFWagFXcFZn
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UzluQ2J8Bg0wXx4ICio3YmwlGTQZXjQCMD5uXA0LEQs4Gzs+bEg3CzcEWXVWYg1fZRI6XVNyRCBNDzcXIARfZQs9XwF+RCUEX21RZxddcUxhHxt+U3VNHiIFbghIMxYnVVNyVGsKXXFWagFXcFZn HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=brjAz2jsptHNvmtO15gwGyjgIuozTY766gKt9mrAwGMVGt5TBl12Mx5mAaXbwHPCRdCoCLzIjc0S6NBLtWASyT8p8gd7WozniGynkpn%2B3%2BWn2RYtH59oVuAL%2BSAsUZHyU2GDScJZdDhP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c591e1afb067b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31836, version 1.1\012- data
Hash 4514fa5a5b3d1e0b14aa32a7d068124a
e634977bfabc20ed15fe7ed03d3876cf68834b93
5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: font/woff
content-length: 31836
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c5c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery-ui.js
200 OK 436 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery-ui.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (840)
Size 436 kB (435844 bytes)
Hash ec9758d9508e2fd22ddbdc6d5a28f214
0ed7df6cc32be8f9687cda3cd6e109e5de44339e
ba0103f765802f299bc7dca5c35d9a00359a0abb10cac136f43caf9c0bf98b7c
GET /themes/flow/js/jquery-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6a684"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/WGxiWnI5DgE3TTlRAHwHKgBff0AeSVAcFjUBGDEUPFRQLRMhAkw5HjcZBjwANwIWdBw9GEdoNAojNTYhPCgKOzAyGzEYQmgtLDEZCChTMhgMLVY8MyEpAAwZNDkkMzwxOho9JwgCVwImITUtAjMKNgYYGgI6FW8EDQBTAjE1VSQSHj8iLx8ZFSQaahsfXS8fMyE1JgxCNzUpLSg6PydiHB49NA8wMQsGDDQNJQZqKH1eIB43PAU3Cx0SPTEqNBs+Gjs3HikpGSMNWyUxQxo4JRg3CS0kPDYNJS8SNDc9NwsdEisbCCAbXwoDKzNcNRknGl8wPRo9KCZ3Nz46GiIQHik7EzEeAAsIIz8lNh0wHTQOGxAWFCgCIw0UBRcVMyU1EgodJAkiJwEbRDABNwISZzYPNgwrNBIqDA
200 OK 3.0 kB URL GET HTTP/2 kultingecauyuksehinkitw.info/WGxiWnI5DgE3TTlRAHwHKgBff0AeSVAcFjUBGDEUPFRQLRMhAkw5HjcZBjwANwIWdBw9GEdoNAojNTYhPCgKOzAyGzEYQmgtLDEZCChTMhgMLVY8MyEpAAwZNDkkMzwxOho9JwgCVwImITUtAjMKNgYYGgI6FW8EDQBTAjE1VSQSHj8iLx8ZFSQaahsfXS8fMyE1JgxCNzUpLSg6PydiHB49NA8wMQsGDDQNJQZqKH1eIB43PAU3Cx0SPTEqNBs+Gjs3HikpGSMNWyUxQxo4JRg3CS0kPDYNJS8SNDc9NwsdEisbCCAbXwoDKzNcNRknGl8wPRo9KCZ3Nz46GiIQHik7EzEeAAsIIz8lNh0wHTQOGxAWFCgCIw0UBRcVMyU1EgodJAkiJwEbRDABNwISZzYPNgwrNBIqDA
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3039), with no line terminators
Hash 9e94d9f87be0f3130eb6fff2043bcef4
ce2af461af1c95f023b1a69418b5144e76f9ce89
60128c1b062a991eb8bfacd1148a1267fbd6443bf379c531dd5d126aaf210f12
GET /WGxiWnI5DgE3TTlRAHwHKgBff0AeSVAcFjUBGDEUPFRQLRMhAkw5HjcZBjwANwIWdBw9GEdoNAojNTYhPCgKOzAyGzEYQmgtLDEZCChTMhgMLVY8MyEpAAwZNDkkMzwxOho9JwgCVwImITUtAjMKNgYYGgI6FW8EDQBTAjE1VSQSHj8iLx8ZFSQaahsfXS8fMyE1JgxCNzUpLSg6PydiHB49NA8wMQsGDDQNJQZqKH1eIB43PAU3Cx0SPTEqNBs+Gjs3HikpGSMNWyUxQxo4JRg3CS0kPDYNJS8SNDc9NwsdEisbCCAbXwoDKzNcNRknGl8wPRo9KCZ3Nz46GiIQHik7EzEeAAsIIz8lNh0wHTQOGxAWFCgCIw0UBRcVMyU1EgodJAkiJwEbRDABNwISZzYPNgwrNBIqDA HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1168
date: Fri, 05 May 2023 22:16:30 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: x6AWj_lEnpiC7P_bDCIF0oDL0183kN56iNVK4R1G10rnddI4I7JgQA==
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
200 OK 31 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31344, version 1.1\012- data
Hash 21f79e4c0fbe54a555170aa70bb4c8b7
9d4aaf2016cd21f16bc45089a48de84dba951fa7
2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: font/woff
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.purpleads.io/agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
200 OK 75 kB URL GET HTTP/2 cdn.purpleads.io/agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655 HTTP/1.1
Host: cdn.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 21906
last-modified: Thu, 04 May 2023 11:04:57 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Fri, 05 May 2023 11:05:03 GMT
etag: "ff70d9f9fae24229f0d0a396a41b49da"
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: violoRnJGnU6axE7BDnnjHbwK56GsfTb54alO8ssHEco1ZY857yRiQ==
age: 40286
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/custom.css
200 OK 14 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/custom.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type assembler source, ASCII text, with CRLF line terminators
Hash 5c6cc304ddf594371c91e46020c2dec5
5b8d133530fe6092bcd642ab20c028dd869ab45d
cb11ef787fc18b87a0420239ee788379f6218b79ac81fa012ecad676ae1cb144
GET /themes/flow/frontend_assets/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3577"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
200 OK 29 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (28941)
Hash ba847811448ef90d98d272aeccef2a95
5814e91bb6276f4de8b7951c965f2f190a03978d
898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1
GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
theharityhild.buzz/SFBSVFQzciEjCz0iPnZuajgmICQ7an17OS03MyEkZj43IHs7J3w%2BJ2p8cCc5LnJoZXhqIz8idnJyZnpnanxwIDUvDzswdnJyamdmfmNhdnhqIyc2CyE0YHZuajZqZ2crYGY2eX41YjZ5fDQwZHlxZGpjeS5mNzExKzUxNzcrNXAp
502 Bad Gateway 0 B URL GET HTTP/2 theharityhild.buzz/SFBSVFQzciEjCz0iPnZuajgmICQ7an17OS03MyEkZj43IHs7J3w%2BJ2p8cCc5LnJoZXhqIz8idnJyZnpnanxwIDUvDzswdnJyamdmfmNhdnhqIyc2CyE0YHZuajZqZ2crYGY2eX41YjZ5fDQwZHlxZGpjeS5mNzExKzUxNzcrNXAp
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjecttheharityhild.buzz
Fingerprint4F:3F:5B:8C:AA:6E:37:C3:45:68:90:BE:2C:8B:F0:01:D7:5F:3F:89
ValidityFri, 05 May 2023 05:15:10 GMT - Thu, 03 Aug 2023 05:15:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /SFBSVFQzciEjCz0iPnZuajgmICQ7an17OS03MyEkZj43IHs7J3w%2BJ2p8cCc5LnJoZXhqIz8idnJyZnpnanxwIDUvDzswdnJyamdmfmNhdnhqIyc2CyE0YHZuajZqZ2crYGY2eX41YjZ5fDQwZHlxZGpjeS5mNzExKzUxNzcrNXAp HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 502 Bad Gateway
set-cookie: 3c2d14eb864ddf239d6086fb2f968510=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
X-Firefox-Spdy: h2
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
200 OK 0 B URL GET HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerDigiCert Inc
Subject*.facebook.com
Fingerprint9B:19:49:BA:96:1D:82:D8:4A:07:27:B8:64:EF:0F:BC:AB:26:CA:13
ValiditySun, 12 Feb 2023 00:00:00 GMT - Sat, 13 May 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 0/jmTGFdbGUz7nRw32tchT0OdJDFmket4wke2YJrDheVOMgj9i5aNcFTgceQ+8nKT1D3x+9NQV8tmkA6QcQc2A==
date: Fri, 05 May 2023 22:16:29 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/sw.js
200 OK 103 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103036 bytes)
Hash 9ee51131e416458b88d6da4e6e6959ca
a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4
db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:15:31 GMT
vary: Accept-Encoding
etag: W/"63a1dfa3-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
200 OK 2.4 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (2449), with no line terminators
Hash 7b61bf63f1c5a5854b24046257705068
dcac61a8cbb82440b4b09f3d391c0800eba6ee89
15eb8a14ded6c8eaf1e4f528a77c02be72e8e3d743e44b259dc8036ef26864fb
GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-981"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
c.adsco.re/
0 B IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:30 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Mon, 05 Jun 2023 22:16:30 GMT
etag: W/"cMPvpvd3jDHdlppiuYNttw=="
cf-cache-status: HIT
age: 1994017
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c5927ec7bb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css
200 OK 48 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 6678bbbf8814eac6d7f987ad2a32111a
aa9021d4f27c58d5ffe5a8545c20b47232d7d0cb
9b36949876f75f2961b55a066b1f9695ec8c3772771d700e951736b1fba45cbe
GET /themes/flow/frontend_assets/css/animations/animate.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-bc86"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
workhovdiminatedi.info/VHJnNXF7TQRGTBolUn0kZT8iY0ISHj5SFTUWMEUcFh4fQisDP0FBGDBPXwJHZ0NfEwE9FloHSHIBE1QFIQFaBFc9HAFaTHIEWgRfZFxRBV9nVBIIQHIGF1QWaUNBRQUgHloER2xBVAdFbUpeBkNk
204 No Content 0 B URL GET HTTP/2 workhovdiminatedi.info/VHJnNXF7TQRGTBolUn0kZT8iY0ISHj5SFTUWMEUcFh4fQisDP0FBGDBPXwJHZ0NfEwE9FloHSHIBE1QFIQFaBFc9HAFaTHIEWgRfZFxRBV9nVBIIQHIGF1QWaUNBRQUgHloER2xBVAdFbUpeBkNk
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /VHJnNXF7TQRGTBolUn0kZT8iY0ISHj5SFTUWMEUcFh4fQisDP0FBGDBPXwJHZ0NfEwE9FloHSHIBE1QFIQFaBFc9HAFaTHIEWgRfZFxRBV9nVBIIQHIGF1QWaUNBRQUgHloER2xBVAdFbUpeBkNk HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CLcd%2BvJZzX0smilM%2Fn9CoIpJihI2rh%2B9NRxBUf6AJChm45vrsiGWMP5wcOMD6pX%2FrRbf9Dq4JodFUDE48qinme7njUWXZwWt3pCieqRgwsCE0ClJ6zSo%2FvaWwNZfXwkO%2Fe6OGbkb7vWl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c591ddad4067b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/stylesheet.css
200 OK 28 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/stylesheet.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 8568ee885222fb5ef651a99221bfd347
0dc1b30d1a58c3cdafab8b38da04f3fc2462ee46
3b35d09fae892be2b76a67f47bbbcbe289b05a2850e02295f70f9c2e537d927a
GET /themes/flow/frontend_assets/css/stylesheet.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6c82"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css
200 OK 2.8 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (3129), with no line terminators
Hash 51c9993916aaff91429614ae79394a6b
51383b05a8ada15406d7eff96fc706c47cfb581b
7c418339961aab6dec877ed3760307367e9deea17a1fbd175e611c215e48634f
GET /themes/flow/frontend_assets/css/isotope/isotope-style.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-af3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
workhovdiminatedi.info/aHJWeklHTTUJdCYlJUsoWTsRIggqKw8dGwozEA4uKiRuNBEFEXAOIAxPYUx4WUpgXDkBFmtLbxsGNw48G09nXCAGFDlHbx5PZ1R6XFxlSGdaVCNHeE4GJhsuVUNwCj0cHmtLf1BBZUh9UUpvSHBe
204 No Content 0 B URL GET HTTP/2 workhovdiminatedi.info/aHJWeklHTTUJdCYlJUsoWTsRIggqKw8dGwozEA4uKiRuNBEFEXAOIAxPYUx4WUpgXDkBFmtLbxsGNw48G09nXCAGFDlHbx5PZ1R6XFxlSGdaVCNHeE4GJhsuVUNwCj0cHmtLf1BBZUh9UUpvSHBe
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aHJWeklHTTUJdCYlJUsoWTsRIggqKw8dGwozEA4uKiRuNBEFEXAOIAxPYUx4WUpgXDkBFmtLbxsGNw48G09nXCAGFDlHbx5PZ1R6XFxlSGdaVCNHeE4GJhsuVUNwCj0cHmtLf1BBZUh9UUpvSHBe HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eCVrhmCKFEHgFV%2B%2Fot5%2FHqBaGcsr19FOR6FMplaQ1ABa951cgEgrCGaeuoy8NWqqBGSZOt1T2x9A4Ji32%2Bso8gSjWIIeU0ndP3VM%2BTXvfRTg68gQW%2B96p3Dw%2BymCg2XsJ5XI8iMYmwj2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c591dcac7067b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 102 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1620
last-modified: Fri, 05 May 2023 21:49:29 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RZtLpIDVJrf%2BGzlF%2BThged6QvH864J55DynI0GxxK9NCN79ysbpUPVifsiT1aMQ%2B9VLKpJdNwcyHeABRzNyLT3trNK%2FNIj%2B84%2Fz5G21TqKauK8pHc3jVstghVlmseaT6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c59219a5e069b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
200 OK 18 kB URL GET HTTP/2 megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45f5"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/ejlmNnAbWwVbTxsEBBAFCFVbE0I8HFRwFBdUHF0WHgFUQREDV0hVHBVMAlACFVcSGB4fTUMENk9cI04cKFUNVDkNSgFsFw1VJ24ED20IXiUZVA5TOhJgFngHEkEoT0Atfx9jBhwLI3w7DVUBeiEzVjF+Kl8LIHAzSnUvYSIfcjdFHCB8CkcyOXBRZCgSfStfGyJzV1EDNmheXDYQWgF1GUJsP3UHIFo3UQAzQSNRMyldXmUXCmgHcRweXwpgBTNsCg8hMmwEbihPby1cMS12NAcaGwkBBigieCFiHhJ4AmQEHl8KY0A2CFcTQjxzLlIAK24sYBJJQS1QMVdwDHkYN1M3fiEcaghOJR5UCnwWPGsMV0AdSCJyIUJxD3sUIwsVE0I4XzBkQx4JDkc1Mk0JEBoJVghGTShSKVkZMABeRxcW
200 OK 3.0 kB URL GET HTTP/2 kultingecauyuksehinkitw.info/ejlmNnAbWwVbTxsEBBAFCFVbE0I8HFRwFBdUHF0WHgFUQREDV0hVHBVMAlACFVcSGB4fTUMENk9cI04cKFUNVDkNSgFsFw1VJ24ED20IXiUZVA5TOhJgFngHEkEoT0Atfx9jBhwLI3w7DVUBeiEzVjF+Kl8LIHAzSnUvYSIfcjdFHCB8CkcyOXBRZCgSfStfGyJzV1EDNmheXDYQWgF1GUJsP3UHIFo3UQAzQSNRMyldXmUXCmgHcRweXwpgBTNsCg8hMmwEbihPby1cMS12NAcaGwkBBigieCFiHhJ4AmQEHl8KY0A2CFcTQjxzLlIAK24sYBJJQS1QMVdwDHkYN1M3fiEcaghOJR5UCnwWPGsMV0AdSCJyIUJxD3sUIwsVE0I4XzBkQx4JDkc1Mk0JEBoJVghGTShSKVkZMABeRxcW
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3043), with no line terminators
Hash 4e998f740258506deca2678fbcd013ff
c411c7c7a71873a1a5bf9171788c076b74723719
1543e2f0491abe28f4f34c38727998c295be144ece5bad54c654df55db9d268b
GET /ejlmNnAbWwVbTxsEBBAFCFVbE0I8HFRwFBdUHF0WHgFUQREDV0hVHBVMAlACFVcSGB4fTUMENk9cI04cKFUNVDkNSgFsFw1VJ24ED20IXiUZVA5TOhJgFngHEkEoT0Atfx9jBhwLI3w7DVUBeiEzVjF+Kl8LIHAzSnUvYSIfcjdFHCB8CkcyOXBRZCgSfStfGyJzV1EDNmheXDYQWgF1GUJsP3UHIFo3UQAzQSNRMyldXmUXCmgHcRweXwpgBTNsCg8hMmwEbihPby1cMS12NAcaGwkBBigieCFiHhJ4AmQEHl8KY0A2CFcTQjxzLlIAK24sYBJJQS1QMVdwDHkYN1M3fiEcaghOJR5UCnwWPGsMV0AdSCJyIUJxD3sUIwsVE0I4XzBkQx4JDkc1Mk0JEBoJVghGTShSKVkZMABeRxcW HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1170
date: Fri, 05 May 2023 22:16:30 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: rJKmE8pQlG-yDtDITjJA_1LTdVtXWcvEpqVXtKzt1yra1YWhHAQB6g==
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload.js
200 OK 56 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash b85ba9fdc07788f5208002e4588c1e2a
f4a5b283e901f573f1237b6a096da4c295e8a65b
f809de94a782db6c7c5bc85db8bc8f6b05b1a473f736080b3ea8377fd6ed35cc
GET /themes/flow/js/jquery.fileupload.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-dbd4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
api.purpleads.io/x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&ts=1683324989993
200 OK 0 B URL OPTIONS HTTP/2 api.purpleads.io/x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&ts=1683324989993
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&ts=1683324989993 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type,x-purpleads-version,x-request-url
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-expose-headers: pa-user-id
access-control-allow-headers: authorization,content-type,x-purpleads-version,x-request-url
access-control-max-age: 86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-resize.js
200 OK 8.1 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-resize.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (8281), with no line terminators
Hash fe90ec8075308aa0695b41a01faa8d7c
9ef0157a99a6efd2a8672b699dbf4225d8fa67ad
782f2530cd4df35901bcdba4dab3cd8769f7cebfcfa96cec776cbcdc10d66062
GET /themes/flow/js/jquery.fileupload-resize.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1f7f"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
200 OK 1.8 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1946), with no line terminators
Hash 28bfbd66415c5e20a0d8ce1ee03bd87c
144fa15fb0a7090117e6f4ef33d9f465241e5459
6eb7ee7937139b13785d0befc27eb61cffbae32d066959c6370829209c0c4e46
GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31980, version 1.1\012- data
Hash 99ac81a158028ac2023fb3350d2497e7
f08c12c91ab29282a616c3ba8e533f49b5b433ca
92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d
GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: font/woff
content-length: 31980
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7cec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/fonts.css
200 OK 1.7 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/fonts.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1734), with no line terminators
Hash 4d22ff28e999a5c332705be886a5984b
8f458405367020346f614bbe41d21da151fdfa87
65e973e0ec1ed64f42a2ad48e4d02a34c9db54a7340761d86c53149a508e9b32
GET /themes/flow/frontend_assets/css/fonts.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-690"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
nativiser-prebid.smart-hub.io/pbjs
0 B URL POST nativiser-prebid.smart-hub.io/pbjs
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoDaddy.com, Inc.
Subject*.smart-hub.io
Fingerprint03:66:24:78:C7:E7:67:6E:9C:7D:BF:51:11:F9:1F:E8:24:B8:35:DC
ValidityThu, 29 Sep 2022 07:40:18 GMT - Thu, 05 Oct 2023 07:12:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pbjs HTTP/1.1
Host: nativiser-prebid.smart-hub.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 463
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
pogothere.xyz/asd100.bin
200 OK 102 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1620
last-modified: Fri, 05 May 2023 21:49:29 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=emPnsF8FuEc%2BKp%2BtFRThRucrdW6JESy1RD7Q%2B4NS%2FQjh7O91GKxPFjFniOd7JJYM%2BQ2VDnil4%2FaWbhhHxm08%2BCSkucVVWSIYXAH%2BOzA32kc58QD4CTr7m9SjuE9rxwx1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c59216a4f069b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-ui.js
200 OK 25 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-ui.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash 6d74ec0b03e02825fef8093d64629489
de746f1c7aeb0927541e1d55bdea4672bb47aa73
5d4a5378ed9f8bf68dbfb6246761e6d44e2b11fa626d8b4f8d1d6a779f037cd2
GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-61ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
200 OK 7.4 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (7733), with no line terminators
Hash aaaac23173da082efba2d6874d01cf03
b14b1cd1e6bf4cf4a324182e4ee3fe3ec370b896
85ede8080213e13bdc68570d742105289541dfc11847ea8cab78c5575bac71e9
GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
nativiser-prebid.smart-hub.io/pbjs
0 B URL POST nativiser-prebid.smart-hub.io/pbjs
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoDaddy.com, Inc.
Subject*.smart-hub.io
Fingerprint03:66:24:78:C7:E7:67:6E:9C:7D:BF:51:11:F9:1F:E8:24:B8:35:DC
ValidityThu, 29 Sep 2022 07:40:18 GMT - Thu, 05 Oct 2023 07:12:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pbjs HTTP/1.1
Host: nativiser-prebid.smart-hub.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 506
Referer: https://megaup.net/
Origin: https://megaup.net
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
cdn.prplads.com/agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
200 OK 75 kB URL GET HTTP/2 cdn.prplads.com/agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subjectprplads.com
Fingerprint44:46:5A:F0:A0:B0:25:70:06:3F:E4:EB:02:D5:A2:67:7A:E3:7D:0E
ValidityWed, 19 Apr 2023 12:34:16 GMT - Tue, 18 Jul 2023 12:34:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655 HTTP/1.1
Host: cdn.prplads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:30 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"ff70d9f9fae24229f0d0a396a41b49da"
last-modified: Thu, 04 May 2023 11:04:59 GMT
x-amz-id-2: TtrD3RQ9oUFwIK+geFimuyZ5kFCm38ESxEUZPzVrXN4bOUKC3ZrIaQ2XSdD7wwvjG3xUQl1qxXk=
x-amz-request-id: EMM33KCCWV1526KF
cache-control: max-age=86400
cf-cache-status: HIT
age: 4204
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MKRlsiFxy3UcSqpRi%2FLTvN6Op3Rlxd%2BW48F%2B95WX41c2I%2FymA3ZnWMg1iiBxJDCLKIl1lkDxBeV0C8tMPmPbdiLiusmW5J1K89uWMtPaGsYoEgAQYnKygnQDwyvwNd39wA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c5925df1eb4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
ad.a-ads.com/1811811?size=300x250
200 OK 12 kB URL GET HTTP/2 ad.a-ads.com/1811811?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash a40d4752433a29260f9ae55cb3b69ddd
79e76f06b240ca40ff25fc547481e30074a1c90c
84518ce51eade38d9ea1de350982250ede208bde42bf3d14bd2fa98702451068
GET /1811811?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:29 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://megaup.net/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Af_xneGw46SuN_cOhydEuih7RpuMsecUED22jiUzyD8yD2DNSGrnsZqYpLAkqTy2Ee4T0RZnBQ1I9A
302 Found 0 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Af_xneGw46SuN_cOhydEuih7RpuMsecUED22jiUzyD8yD2DNSGrnsZqYpLAkqTy2Ee4T0RZnBQ1I9A
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Af_xneGw46SuN_cOhydEuih7RpuMsecUED22jiUzyD8yD2DNSGrnsZqYpLAkqTy2Ee4T0RZnBQ1I9A HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Alt-Used: accounts.google.com
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:hEeOgApjPSrgEJmK5NqmaDXKR9ay8w:8xYWf9HvCNA368KR;Path=/;Expires=Sun, 04-May-2025 22:16:29 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 05 May 2023 22:16:30 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-452706920%3A1683324990012297&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Af_xneGWHvITj-uq556rayNcYCqBZp6A7SATeGggfD5he04HmOFpWJ97FK5ZdBWaGn0PMwZ8N02D&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-Hbpjzto4nsnS5KUqAhlZTQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 391
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
engine.4dsply.com/Tag.vrfy?time=0&id=86ddec5c-b957-455f-87da-f034ba331fa2&rand=60763&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=981&res=1280x1024&curl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&kw=amanda%2Cthe%2Cadventurer%2Ctenoke%2Crar%2Cdownload%2Cfile%2Cupload%2Cmp3%2Cavi%2Czip
0 B URL GET engine.4dsply.com/Tag.vrfy?time=0&id=86ddec5c-b957-455f-87da-f034ba331fa2&rand=60763&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=981&res=1280x1024&curl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&kw=amanda%2Cthe%2Cadventurer%2Ctenoke%2Crar%2Cdownload%2Cfile%2Cupload%2Cmp3%2Cavi%2Czip
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subject4dsply.com
Fingerprint31:FD:E2:5E:52:27:E7:39:C7:DB:EA:A6:84:8F:4E:0E:48:82:BF:5C
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Tag.vrfy?time=0&id=86ddec5c-b957-455f-87da-f034ba331fa2&rand=60763&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=0&fpe=1&bw=1280&bh=981&res=1280x1024&curl=https%3A%2F%2Fmegaup.net%2F1TF9z%2FAmanda.the.Adventurer-TENOKE.rar&kw=amanda%2Cthe%2Cadventurer%2Ctenoke%2Crar%2Cdownload%2Cfile%2Cupload%2Cmp3%2Cavi%2Czip HTTP/1.1
Host: engine.4dsply.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 05 May 2023 22:16:33 GMT
content-type: application/json; charset=utf-8
cf-ray: 7c2c5935d969b50c-OSL
access-control-allow-origin: *
cache-control: private, no-transform
content-encoding: gzip
vary: Accept-Encoding
cf-cache-status: DYNAMIC
p3p: CP="CAO PSA OUR IND"
set-cookie: IKSR={}; path=/; SameSite=None; secure
__INF_CC=; expires=Tue, 25-Apr-2023 22:16:33 GMT; path=/
INF_DFL8=false; path=/; SameSite=None; secure
IUID=7731c1ea-d213-4dd2-ab1d-b87bfef29530; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure
ISSH=6B1094; path=/; SameSite=None; secure
VMI=; path=/; SameSite=None; secure
CHN=#[]; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
MSSH=#{}; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
MSRH=#{}; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
ILP=null; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure
ILPLU=#1/1/0001 12:00:00 AM; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
ILEALC=#1/1/0001 12:00:00 AM; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
ILMPF=#False; expires=Sat, 06-May-2023 02:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
IPMPLU=#; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
IPMUID=#; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
BSWUID=#; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
IKSR={}; path=/; SameSite=None; secure
IBL=#[]; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
ISH=#{"22494":[{"SId":"6B1094","D":"23/5/5T15:16:33"}]}; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
ISH_Q=#[22494]; expires=Thu, 05-May-2033 22:16:33 GMT; path=/; SameSite=None; secure; HttpOnly
x-adscore-status: null
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
megaup.net/themes/flow/frontend_assets/css/colors/flow.css
200 OK 2.7 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/colors/flow.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (3023), with no line terminators
Hash 9adec578563e5d2ce244e42529bd6a0c
2d9d05a9914fff69e279803400fa089638ad30ea
f9247eaf086df740e94ede1041b462994eb50899b273c70572a72f09048d1ce6
GET /themes/flow/frontend_assets/css/colors/flow.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-a83"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
200 OK 198 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (464), with CRLF line terminators
Size 198 kB (197554 bytes)
Hash 35045d45f7d1dde1f90457c5d73700c5
a7fcee0ab1da615e828e51967c474ae91d768569
d72616e59f2ba832c54a0e734cdf0a79cb8730f81a07b5de43864c15a240e221
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
200 OK 1.5 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1485), with no line terminators
Hash 81e829f6440dd7da485221dc6c313a11
b6530a173b945abda1e8bae3da825189ffd9efc3
d526eb464ff9722d6639269b69f241cb5816452149e5a89acd866fbcda382102
GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-5c6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
workhovdiminatedi.info/a2x3c01EUxQAcDpcGEAZLQRHFQwPXBUrC1ItPwc8DyRDMCtZKVEHJA9RTkd0U1pDVT0CCEpCdU0fAxI5Hh9KQmsCAhEccE0aSkJjW0JFXX5NGUpCax8cFhRwWkoHBzkHUUZFdVhfRUd0U1VEQH0
204 No Content 0 B URL GET HTTP/2 workhovdiminatedi.info/a2x3c01EUxQAcDpcGEAZLQRHFQwPXBUrC1ItPwc8DyRDMCtZKVEHJA9RTkd0U1pDVT0CCEpCdU0fAxI5Hh9KQmsCAhEccE0aSkJjW0JFXX5NGUpCax8cFhRwWkoHBzkHUUZFdVhfRUd0U1VEQH0
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a2x3c01EUxQAcDpcGEAZLQRHFQwPXBUrC1ItPwc8DyRDMCtZKVEHJA9RTkd0U1pDVT0CCEpCdU0fAxI5Hh9KQmsCAhEccE0aSkJjW0JFXX5NGUpCax8cFhRwWkoHBzkHUUZFdVhfRUd0U1VEQH0 HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 05 May 2023 22:16:29 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fXtDSIcBSXTWU12x6ef0a%2F%2B28CPD5ATYzDrD2fqJXmxn701xfkGOhmlYc5V%2BtGgd4xHJyB9sGveKhfJ1uO97ELr14ZO8K%2F%2Fqqeq6UQHtn9gl1DF12HuVP%2F4Bkd51EYR32PVRmnsnxsgY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c2c591dfaee067b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
workhovdiminatedi.info/popunder.gif
200 OK 35 B URL GET HTTP/3 workhovdiminatedi.info/popunder.gif
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectworkhovdiminatedi.info
Fingerprint24:21:C6:9C:11:74:7D:7D:73:8F:98:35:FA:68:4E:DE:1A:86:04:CB
ValidityThu, 27 Apr 2023 07:34:32 GMT - Wed, 26 Jul 2023 07:34:31 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: workhovdiminatedi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Alt-Used: workhovdiminatedi.info
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 21394
last-modified: Fri, 05 May 2023 16:19:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XcNsOy8VNM%2BxaYbLb%2BgIeKgwMXzlhOILVE0LwrNNRA%2FDEEPUxPnCDnym7VJoznzQlHIXJM9ZOVBA7ex3KzJNUOjPzQzX6JpH2Dd0%2Bfks7NkruHJFcWa5a8zFrkPYV2J5KJlUN%2Bcxkld8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c592258030b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
megaup.net/themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css
200 OK 118 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type assembler source, ASCII text, with very long lines (540), with CRLF line terminators
Size 118 kB (117787 bytes)
Hash 26bfa8a47d74b90e1fc4632710026e85
2993c7f968fb5e5be8d256d5c7271fe64c87326d
69c6352bd7a8de550563a81b40dab2234fa30ff0ae9e90a8b5c896dea033ca3b
GET /themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cc1b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S-452706920%3A1683324990012297&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Af_xneGWHvITj-uq556rayNcYCqBZp6A7SATeGggfD5he04HmOFpWJ97FK5ZdBWaGn0PMwZ8N02D&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?dsh=S-452706920%3A1683324990012297&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Af_xneGWHvITj-uq556rayNcYCqBZp6A7SATeGggfD5he04HmOFpWJ97FK5ZdBWaGn0PMwZ8N02D&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?dsh=S-452706920%3A1683324990012297&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Af_xneGWHvITj-uq556rayNcYCqBZp6A7SATeGggfD5he04HmOFpWJ97FK5ZdBWaGn0PMwZ8N02D&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Alt-Used: accounts.google.com
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 05 May 2023 22:16:30 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-l0Veem7uNcvqNNBleF0mbg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OW2oDMQy8Si8Qo6dt5bvfLaT0AF7vbr8aCk0hhTl8vJsSqpHQk9EIiR7Ihz9xPXI+SiA4BSWTxG54eT3BGJ/LR/v5SuflAhcphZAjyCpCrUqGWTauGc4ML66WKyqrRRQDOxQ0IGNhW5WISMNK4Sxeahgq4f3teQ8eECjRVZxGvUkAk2Awga4b0aLGMc/rRDrLLDQ+9Zw7ebZofdkP/2umO9JQrDv73wDKpmKCAz8awzDCvm7fv+cOPM7v8J1gyDTbEso6vkqrTWXJoT1WFZonKpO3zmu/Aerwnu1lAQAA
200 OK 0 B URL GET HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OW2oDMQy8Si8Qo6dt5bvfLaT0AF7vbr8aCk0hhTl8vJsSqpHQk9EIiR7Ihz9xPXI+SiA4BSWTxG54eT3BGJ/LR/v5SuflAhcphZAjyCpCrUqGWTauGc4ML66WKyqrRRQDOxQ0IGNhW5WISMNK4Sxeahgq4f3teQ8eECjRVZxGvUkAk2Awga4b0aLGMc/rRDrLLDQ+9Zw7ebZofdkP/2umO9JQrDv73wDKpmKCAz8awzDCvm7fv+cOPM7v8J1gyDTbEso6vkqrTWXJoT1WFZonKpO3zmu/Aerwnu1lAQAA
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerLet's Encrypt
Subjectexdynsrv.com
Fingerprint54:0A:66:69:27:EA:63:01:A0:42:9B:75:C5:75:97:C3:19:3C:EC:0F
ValidityMon, 27 Feb 2023 07:27:23 GMT - Sun, 28 May 2023 07:27:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01OW2oDMQy8Si8Qo6dt5bvfLaT0AF7vbr8aCk0hhTl8vJsSqpHQk9EIiR7Ihz9xPXI+SiA4BSWTxG54eT3BGJ/LR/v5SuflAhcphZAjyCpCrUqGWTauGc4ML66WKyqrRRQDOxQ0IGNhW5WISMNK4Sxeahgq4f3teQ8eECjRVZxGvUkAk2Awga4b0aLGMc/rRDrLLDQ+9Zw7ebZofdkP/2umO9JQrDv73wDKpmKCAz8awzDCvm7fv+cOPM7v8J1gyDTbEso6vkqrTWXJoT1WFZonKpO3zmu/Aerwnu1lAQAA HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226455803dab1073.125238173676665373%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 22:16:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.0199%22%7D; expires=Sun, 04 May 2025 22:16:29 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
kultingecauyuksehinkitw.info/bkRtWGoPJg41VQ95D34fHChQfVgoYV8eDgMpFzMMCnxfLwsXKkM7BgExCT4YASoZdgQLMEhqLDcmKzQGCikoCCQJNzwAAgkzLA0eNBNfYT08dQETJxYdNxwSFi8uCl4mCBoZBSQFLBAmPycvGgBeNzwvIwwHKgo8OwVdFiQZDiEKHQV3LzMePxcHPygoAhUBDBYBKhwNCi8pLyM5BRQ3Pyo8IAghKwkpGSwrdC4/HScFKQ0vO3UgKQgrMCoKLFs0OQlfPxw1ID0gAT89Cz8vCxwSBSw8HTg8AioePiUSCQEMKB1dCixbNCsvKCscFTA/PCgFGws7aRUMP18zSGooLwY4EytdPDUVLCAnDB48KRErIAU/AT8KKQQFNR0dDQAkDSgrDlxpBTgCBQo5Bzw0Ch1ILh43BB55ATAMLR0gCgsFMA8vDT8x
200 OK 3.0 kB URL GET HTTP/2 kultingecauyuksehinkitw.info/bkRtWGoPJg41VQ95D34fHChQfVgoYV8eDgMpFzMMCnxfLwsXKkM7BgExCT4YASoZdgQLMEhqLDcmKzQGCikoCCQJNzwAAgkzLA0eNBNfYT08dQETJxYdNxwSFi8uCl4mCBoZBSQFLBAmPycvGgBeNzwvIwwHKgo8OwVdFiQZDiEKHQV3LzMePxcHPygoAhUBDBYBKhwNCi8pLyM5BRQ3Pyo8IAghKwkpGSwrdC4/HScFKQ0vO3UgKQgrMCoKLFs0OQlfPxw1ID0gAT89Cz8vCxwSBSw8HTg8AioePiUSCQEMKB1dCixbNCsvKCscFTA/PCgFGws7aRUMP18zSGooLwY4EytdPDUVLCAnDB48KRErIAU/AT8KKQQFNR0dDQAkDSgrDlxpBTgCBQo5Bzw0Ch1ILh43BB55ATAMLR0gCgsFMA8vDT8x
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subjectkultingecauyuksehinkitw.info
Fingerprint92:71:EB:2A:19:25:DF:1C:2A:8F:E3:1A:92:7B:DD:8F:18:79:39:0F
ValidityThu, 27 Apr 2023 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3053), with no line terminators
Hash 59e7331336e3e47050b208a1987ad42a
5355ca80e84ee01b607aae047558d6c4200443b0
7e84bba25fa56d73e30b13a7ef2fef1dcc93245ba68b75ed46ac3ec60209af8e
GET /bkRtWGoPJg41VQ95D34fHChQfVgoYV8eDgMpFzMMCnxfLwsXKkM7BgExCT4YASoZdgQLMEhqLDcmKzQGCikoCCQJNzwAAgkzLA0eNBNfYT08dQETJxYdNxwSFi8uCl4mCBoZBSQFLBAmPycvGgBeNzwvIwwHKgo8OwVdFiQZDiEKHQV3LzMePxcHPygoAhUBDBYBKhwNCi8pLyM5BRQ3Pyo8IAghKwkpGSwrdC4/HScFKQ0vO3UgKQgrMCoKLFs0OQlfPxw1ID0gAT89Cz8vCxwSBSw8HTg8AioePiUSCQEMKB1dCixbNCsvKCscFTA/PCgFGws7aRUMP18zSGooLwY4EytdPDUVLCAnDB48KRErIAU/AT8KKQQFNR0dDQAkDSgrDlxpBTgCBQo5Bzw0Ch1ILh43BB55ATAMLR0gCgsFMA8vDT8x HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1178
date: Fri, 05 May 2023 22:16:30 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 037f9fcf8ac2918e2613d732caf26df4.cloudfront.net (CloudFront)
x-amz-cf-pop: ICN55-C1
x-amz-cf-id: iSn5fwaC_14y4wsv30YLlzP9K9aWjMkf22Aos6u4kxUsSmrQsOAcyA==
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S1594407878%3A1683324990070064&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Af_xneEgzGtEkZyq-DBR_TTsSSXYDL8sAEsVKpLw1oQaJ9VS9SdgOaxj6ka7ApPm-9RHOAgIyUST&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?dsh=S1594407878%3A1683324990070064&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Af_xneEgzGtEkZyq-DBR_TTsSSXYDL8sAEsVKpLw1oQaJ9VS9SdgOaxj6ka7ApPm-9RHOAgIyUST&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintA3:4E:A3:86:10:DA:6C:D1:8C:73:54:AB:E6:8F:7D:21:72:2C:B4:D5
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?dsh=S1594407878%3A1683324990070064&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Af_xneEgzGtEkZyq-DBR_TTsSSXYDL8sAEsVKpLw1oQaJ9VS9SdgOaxj6ka7ApPm-9RHOAgIyUST&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Alt-Used: accounts.google.com
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 05 May 2023 22:16:30 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-pw68y613W54xl8WinT5wnA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
200 OK 85 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (23470)
Hash 04426bc66c09c8881b5b329310e903e9
ff7f2f64ed5938023a91050e27f22f77becba78c
ebf4e570b96d611fa540bb8745ba518a1005d50c4589a2c2cf3a60a97151a184
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14cc1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
200 OK 15 kB URL GET HTTP/2 megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1288)
Hash d31e0426a59b32581835680633809ea3
98caf983b9349fcf2a32d6512f998ea9a557a90e
c7fe89a030ea54a29616f0a473366e07d109dfb775f2afa050c2de82e3606fba
GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3bd2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/global.js
200 OK 3.4 kB URL GET HTTP/2 megaup.net/themes/flow/js/global.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (3612), with no line terminators
Hash e44702657a9e124a9ba6ba57e941d9e8
cbfc48ed2d804918f7f97c4f1ed6ea2a4780151b
39b318c989a0ac479bbf9196494fb1bec96cd1e54186051f5ba6225877acfd83
GET /themes/flow/js/global.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-d59"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintB2:C2:42:27:DF:EC:CB:1E:FE:A7:09:51:29:57:CF:88:20:1C:AC:E2
ValidityMon, 17 Apr 2023 08:26:19 GMT - Mon, 10 Jul 2023 08:26:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
set-cookie: __Host-GAPS=1:YlAFwqXNyFadtWzTQdoAXnVXEfkRmg:yj02AJAW2S-fFZWa; Expires=Sun, 04-May-2025 22:16:29 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 05 May 2023 22:16:29 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Af_xneGw46SuN_cOhydEuih7RpuMsecUED22jiUzyD8yD2DNSGrnsZqYpLAkqTy2Ee4T0RZnBQ1I9A
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-jaLsRkijdNfypCoU8n2yGA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, require-trusted-types-for 'script';report-uri /cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-type: application/binary
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.purpleads.io/x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&ts=1683324989993
200 OK 2.8 kB URL GET HTTP/2 api.purpleads.io/x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&ts=1683324989993
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerAmazon
Subject*.purpleads.io
Fingerprint2C:07:41:61:C9:75:ED:6A:72:5B:30:CE:B3:18:1C:47:DB:07:BF:D4
ValidityFri, 24 Feb 2023 00:00:00 GMT - Wed, 29 Nov 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- troff or preprocessor input, ASCII text, with very long lines (2954), with no line terminators
Hash 85fcc76230b3812b7791401c4151fffa
fa9a459ecbdd3619fd359ee055cd3717029300a2
e9af2a7fa7c7d071fda4fcaa8fce4fab3d9155345f8124050418d54534aeb2c7
GET /x/v2/b/?idx=0&pid=ab0beed8b05843c0a074412469bd3e79&sizes=[[300,250]]&slotid=89a7e541-21b7-4497-acc6-9637a54c7c99&ts=1683324989993 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: application/json
x-purpleads-version: 3.0.4
x-request-url: aHR0cHM6Ly9tZWdhdXAubmV0LzFURjl6L0FtYW5kYS50aGUuQWR2ZW50dXJlci1URU5PS0UucmFy
Authorization: Bearer 70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:30 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-expose-headers: pa-user-id
set-cookie: pa-user-id=38ae9749-49a1-405c-b9d6-179f04efd131; Domain=.purpleads.io; Path=/
pa-user-id: 38ae9749-49a1-405c-b9d6-179f04efd131
etag: W/"b0c-g6lrlZ8aNNbpYjYspixGIX7iY7A"
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
cdn.prplads.com/prebid-2023-05-04.js
200 OK 334 kB URL GET HTTP/2 cdn.prplads.com/prebid-2023-05-04.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerGoogle Trust Services LLC
Subjectprplads.com
Fingerprint44:46:5A:F0:A0:B0:25:70:06:3F:E4:EB:02:D5:A2:67:7A:E3:7D:0E
ValidityWed, 19 Apr 2023 12:34:16 GMT - Tue, 18 Jul 2023 12:34:15 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 334 kB (334516 bytes)
Hash f12cb6d37d0462c6dd8c60a71da65df2
9c7df0269bf631dead04153558f956858970fef7
9a9b56e9d8227a239f11900c043bc0f96ba1c376a600bb404a54a2b9bd42b998
GET /prebid-2023-05-04.js HTTP/1.1
Host: cdn.prplads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:31 GMT
content-type: application/javascript
cache-control: max-age=1209600
cf-bgj: minify
cf-polished: origSize=335064
etag: W/"9b3f8b7fe908cdb21e8c7a080015cc62"
last-modified: Thu, 04 May 2023 08:04:59 GMT
x-amz-id-2: HhOzSE6LyNLxApw1wgcMqiZqKwjUlVXympV2psRgdaU9SCXm5DkVygbp7lSjH9tI0y2f4hDwPAo=
x-amz-request-id: EMM43EHB4TQGAVJG
cf-cache-status: HIT
age: 126680
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NpMvXcpe6sKhGvBRoHpvUGLFWncahTYyjGVC1obr5mHhKR%2FIW6f2yGWcGvY9WoiUCBO0ulMUO8YEsKmLv5nZFBp35YFol1JNh6GZfkZhONp01uR%2F%2BGVJwnQiAu3yFTlXKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c592c9ca0b4ee-OSL
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/retina/retina.js
200 OK 1.3 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/retina/retina.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1353), with no line terminators
Hash 63539576529cb2ba2cf10de877f1e8cc
78cf75b3bc45e3da2e5753c4d47582957b222e1c
f3bf2760a81cfb66c729ad39451b437da09f7e0a04fe93ffc34e23194d813619
GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-52e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/custom/custom.js
200 OK 5.2 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/custom/custom.js
IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (5537), with no line terminators
Hash f11b915d430ce9e1d2470ce7a88c8df7
9f1fbcd5391969567e9b0c14467d637446cb69ed
13d1a0a149018d6e707511272a19e324ca469919e8546570cfef14f24c2219e6
GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Connection: keep-alive
Cookie: filehosting=3pgn9ai72ce2ttgq7fc2voobm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 05 May 2023 22:16:28 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1420"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 102 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 22:16:29 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1620
last-modified: Fri, 05 May 2023 21:49:29 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QEChKJKdBsi9swrL8%2Fx3h0yCWOsdOiR2hd5QBJ7Qr7JMAgX49rhoVnpMkk8gBcjJxba96llNPZzpMrZlBVbswlsx41Iw9nvgp5DJ7VlOW9Q212fn%2FPYvD8EqFFucTuc5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c59216a4d069b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.adsco.re/
200 OK 80 kB IP
Requested by https://megaup.net/1TF9z/Amanda.the.Adventurer-TENOKE.rar
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint41:E8:B6:73:76:84:BF:F4:F7:36:CE:88:E3:48:7B:FF:4E:47:4A:43
ValidityFri, 16 Sep 2022 00:00:00 GMT - Fri, 29 Sep 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (713)
Hash 70c3efa6f7778c31dd969a62b9836db7
42c5ecc44c26f6e121b11711cc72cab20390b128
4dfbe54cd0d883df19cb2fead29e32505dd6ae88afa3f41671c577fecc092b2e
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Alt-Used: c.adsco.re
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 05 May 2023 22:16:31 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Mon, 05 Jun 2023 22:16:31 GMT
etag: W/"cMPvpvd3jDHdlppiuYNttw=="
cf-cache-status: HIT
age: 1994018
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c2c592a3ab1b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
91.209.70.182
172.255.6.95
185.76.9.23
188.114.96.1
185.255.84.150
148.251.152.47
104.16.158.17
172.67.74.93
157.240.200.35
185.200.118.90
185.200.116.90
0.0.0.0