Report - multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip

Report Overview

Submitted URL
multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
IP
104.21.235.13
ASN
#13335 CLOUDFLARENET
Submitted
2023-06-10 14:09:04
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2023-06-10	3.3 kB	115 kB	142.250.74.3
ulmoyc.com	34189	2021-10-13	2021-10-13	2023-06-10	491 B	14 kB	172.67.221.4
cjvdfw.com	332488	2021-06-03	2021-08-31	2023-06-10	470 B	7.9 kB	185.56.234.205
multiup.org	263500	2008-12-17	2014-11-01	2023-06-10	12 kB	2.3 MB	104.21.235.14
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-10	999 B	2.1 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-06-10	medium	cjvdfw.com

ThreatFox

No alerts detected

JavaScript (17)

	URL	Size	First Seen	Last Seen
	multiup.org/build/app.6b0cbd46.js	188 kB	2023-03-08	2023-09-23
Pretty URL multiup.org/build/app.6b0cbd46.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:34 Last Seen2023-09-23 13:02:07 Times Seen3560 Hash a21d541255816732908799938079f718 14216027fa9c0cb0ef714027fcaf6c6339ac14ac 10b559de7efb3d9c46811dd99c72edb2f1559e047bc8c02cd06937431f97c8a8 Loading...

	multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip	206 B	2023-03-08	2023-09-25
Pretty URL multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:40:34 Last Seen2023-09-25 13:57:51 Times Seen1810 Hash f0f42d78748fb98334f467277c580a21 58529499749138ec3f0b5f8397ab9e37a8e4e716 1a4873812e8ccb12b9a1be4b3f7e0f25e195b6f469c52405a99e718d46107806 Loading...

	multiup.org/cdn-cgi/apps/head/XkVrbd_c43ISY8nEHEfYRluUjsk.js	50 kB	2023-03-08	2023-09-23
Pretty URL multiup.org/cdn-cgi/apps/head/XkVrbd_c43ISY8nEHEfYRluUjsk.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:34 Last Seen2023-09-23 15:49:25 Times Seen3630 Hash d386c171a094a093eebab48ead9e1b9d 8e4da57e2bcffb297fc57da37c3ff26f0fcaf659 f85618df77818b06664c55947df64a46f326a80845f80526e1dff209975e19bd Loading...

	multiup.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-04-25
Pretty URL multiup.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-25 17:42:45 Times Seen54939 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	multiup.org/assets/javascripts/theme.custom.js	3.6 kB	2023-03-08	2023-09-23
Pretty URL multiup.org/assets/javascripts/theme.custom.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:34 Last Seen2023-09-23 13:02:07 Times Seen2624 Hash 6ccbfbd5162db51c87ee6b9b95d219df 687387526b4a4f8947035328b317174383e49db7 dfc57470abcca9f208c8dcbcae2b91428d91a6f86a820780db27989e6c54d18d Loading...

	multiup.org/assets/javascripts/theme.init.js	9.0 kB	2023-03-08	2023-09-23
Pretty URL multiup.org/assets/javascripts/theme.init.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:34 Last Seen2023-09-23 13:02:07 Times Seen2619 Hash 37e4411325f1313a8d2ba98df3365428 1d3d819ec5f2c70190ee5802c009f1b38c1c9155 f0b026e419f60657a6d336a20563651d60340034a4534d996b85b8133695ad63 Loading...

	multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip	168 B	2023-03-08	2023-09-23
Pretty URL multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 14:40:34 Last Seen2023-09-23 13:02:07 Times Seen1689 Hash 0e0da241fa94a988d504063e479fad7e f8b3e20c944f1ec0c24932770488cb8f7c9a7b5d ba29025cf1f911119d59704ea3cf7df6968b8a5b16e0f807524ede21e0608213 Loading...

	unknown	325 B	2023-06-10	2023-06-10
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-10 16:09:04 Last Seen2023-06-10 16:09:04 Times Seen1 Hash f63a3e1651d49f6d8a9e08128c6f47ac 904e8bdb780345e7318b424f059fcb900903db7a a10f49359235ec533b82437704bd20e285e84b59558ea8218ff5739f3030b274 Loading...

	multiup.org/cdn-cgi/challenge-platform/scripts/invisible.js	25 kB	2023-06-10	2023-06-10
Pretty URL multiup.org/cdn-cgi/challenge-platform/scripts/invisible.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-10 16:09:04 Last Seen2023-06-10 16:09:04 Times Seen2 Hash e4a12384f7e0e7b57b20d3b5252a4e9d 9f5253f825ee744a2fabefab52db8fcc008cd481 2249ae8d82af0b6db7346a452ff61a1d438b5fdedc2024af1dbb7cfcc81921fd Loading...

	ulmoyc.com/v1/sdk.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ&d=multiup.org&sw=evasw.js	13 kB	2023-04-20	2023-06-13
Pretty URL ulmoyc.com/v1/sdk.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ&d=multiup.org&sw=evasw.js IP 172.67.221.4 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-20 16:12:34 Last Seen2023-06-13 11:17:56 Times Seen784 Hash 4506969d99431a8f408c57335fe0a11e 6f2a039fb32b02360e0d15f087bbb6a7c6dbcfd5 f5973deec1b339f243dce2c22df2522bc764cf6f0a079815643279fe497f564d Loading...

	multiup.org/build/runtime.0b137493.js	1.4 kB	2023-03-08	2023-12-18
Pretty URL multiup.org/build/runtime.0b137493.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:34 Last Seen2023-12-18 06:33:23 Times Seen2817 Hash 0b4fc9b3ef5d80f5ed570385eee3fa4c 397c84c672e54103fa082f592f83e8afb6961af5 582c9d450dcfaf9d550547fc8e22f5da17262c8f4ce6d283c0357e94e4803937 Loading...

	cjvdfw.com/code/native.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ	7.7 kB	2023-04-20	2023-09-25
Pretty URL cjvdfw.com/code/native.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ IP 185.56.234.205 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-20 16:12:34 Last Seen2023-09-25 13:57:51 Times Seen1583 Hash b4fcba74e2b75cde2a94dd08236adedf 5283b5824bca5bce2e83be5fda06b0e60354c7d8 8f7c2f28234cc692e04108fb39f9267c401bfb74bcb9a1ce5c3b97a23b8ef2c5 Loading...

	multiup.org/cdn-cgi/apps/body/LB8uToQ_S6rnQol8hy6t_XJXVLk.js	8.2 kB	2023-03-08	2023-09-23
Pretty URL multiup.org/cdn-cgi/apps/body/LB8uToQ_S6rnQol8hy6t_XJXVLk.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:34 Last Seen2023-09-23 15:49:25 Times Seen2587 Hash cb7086d040f0e5bf6c2c6d9c62c95816 4c33b6dfbc238d2c78fb1e35dfbd8ae6c0769da5 881b735cf622b409aee1ed8a48716ad520b9632722c4e3ce9a9d6af25fe05711 Loading...

	multiup.org/assets/javascripts/theme.js	82 kB	2023-03-08	2023-09-23
Pretty URL multiup.org/assets/javascripts/theme.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:34 Last Seen2023-09-23 13:02:07 Times Seen3544 Hash f01549269ed8d1b65264bf5013bf2f7c 4d4fe93ac2e036e605ce0b1cd907fdac57118758 ed58648d2ca83678104822b8cfc6e9ce61b63483d3dfaed8ad0b33799e1900b8 Loading...

	multiup.org/build/610.15f042f0.js	1.1 MB	2023-03-08	2023-09-23
Pretty URL multiup.org/build/610.15f042f0.js IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:50:32 Last Seen2023-09-23 13:02:07 Times Seen2719 Hash c72ecec0483ed72951d8b849ba576579 47de19c824f05efd317649297e93408bb3ef2c83 7d0529946415e97f9fd595dbc44bacb78b84be0ae44c146fa41ec24b4dc65e78 Loading...

	multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip	3.7 kB	2023-06-10	2023-06-10
Pretty URL multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-10 16:09:04 Last Seen2023-06-10 16:09:04 Times Seen1 Hash 180ff26063195c71aed34e103ae706fa e331cdc63cf1d8ea9514b8e9ececa824177828f5 d1dc40570b546836e89e27b3f75dbf6ee3308f59f5d90f532c8ebe4ce136df14 Loading...

	multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip	1.2 kB	2023-06-10	2023-06-10
Pretty URL multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip IP 104.21.235.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-10 16:09:04 Last Seen2023-06-10 16:09:04 Times Seen1 Hash 8121e7dbdc8f922d4c8eaf93b13012e4 a1bdd4626e5b6161a4ec964a488b16f4837bed87 a216612309c8e46361d9cb69e5860696ad352e8ae5e128f11dc4b8bbe6bc70b8 Loading...

HTTP Transactions (33)

URL IP Response Size

multiup.org/assets/share/facebook_icon.png

104.21.235.14

200 OK

447 B

URL GET HTTP/2
multiup.org/assets/share/facebook_icon.png
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Size
447 B (447 bytes)
Hash
1262e2367b9402eaebe6da4c48649313
00bb9c047c87216cd73e319832e791f2cdd080db
a145cc11ef790f22fde699f8729d5899b6c97529b0dc012be9f15253b466212f

HTTP Headers

GET /assets/share/facebook_icon.png HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: image/png
content-length: 447
last-modified: Mon, 13 Apr 2015 01:04:08 GMT
etag: "552b1608-1bf"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 2039
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LEzGHkc8wapbMlwkHMlDUXE9%2BuW1Y3qaObNDq1%2FGtiZtVFoNqprFpSctDiXOBga44MHfq%2Bo2lXbuu56YcI%2FbVq2aE0D1fNXIBWa1vvFKm%2FjjcENCyYzw1tE0sr%2FHeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302b3e7675d8-LHR
X-Firefox-Spdy: h2

multiup.org/assets/share/twitter_icon.png

104.21.235.14

200 OK

676 B

URL GET HTTP/2
multiup.org/assets/share/twitter_icon.png
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size
676 B (676 bytes)
Hash
06c86f9bce743d1b3b35a4485b4a4122
ade73651ec1d6c038beb44d4808b4ea04bec86eb
1b6a51d3005bd8870c6193c1d376e8c4f44e12b76c5acb55ace757f834dd725e

HTTP Headers

GET /assets/share/twitter_icon.png HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: image/png
content-length: 676
last-modified: Mon, 13 Apr 2015 01:04:08 GMT
etag: "552b1608-2a4"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 2039
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jEiHXzLATPn0dgW9C6JabLC34Gd7ijQM166%2FAKdRwjnA5lhPznqNlysNRFCDUpin9f%2F%2FU7fewQHXXq44OeRSI5Rsu7IVyjXi13v6IoPn1boH0KO%2Bhl3nFsc%2Br6K3JA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302b3e7775d8-LHR
X-Firefox-Spdy: h2

multiup.org/assets/share/gplus_icon.png

104.21.235.14

200 OK

874 B

URL GET HTTP/2
multiup.org/assets/share/gplus_icon.png
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size
874 B (874 bytes)
Hash
5ee15998036f1df1e35845795236ef6d
27f4ce53881fa2e5b1352d76475b599217483d66
88d5b1ad0f5726843f60cbffa0fd3aade27ba79a8adcec3abefb238ebc668107

HTTP Headers

GET /assets/share/gplus_icon.png HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: image/png
content-length: 874
last-modified: Mon, 13 Apr 2015 01:04:08 GMT
etag: "552b1608-36a"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 2038
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0LzuTpD%2BFt%2BJ3ihK1G%2Bs5LYHpF9HZ72SwX0s%2Bf0l1YzCL5GiZpgGQFK2b%2FKTO5mbSZWpQYJTUtSIJDG0XlMdOSPvwU51BISIq23FJbYHHFXx7uMHrqgg826BiIscTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302b3e7975d8-LHR
X-Firefox-Spdy: h2

multiup.org/assets/share/whatsapp_icon.png

104.21.235.14

200 OK

4.5 kB

URL GET HTTP/2
multiup.org/assets/share/whatsapp_icon.png
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Size
4.5 kB (4509 bytes)
Hash
17578a0d5000d8d5e980456d7756b0f0
4642c0bc9178971c7a419201ae0828ef7d0c7f92
c8b9becadb21b39790e84aa55ba821e02d6d48e8b7c877916445cacecd794123

HTTP Headers

GET /assets/share/whatsapp_icon.png HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: image/png
content-length: 4509
last-modified: Sat, 16 Jan 2016 10:34:46 GMT
etag: "569a1cc6-119d"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 2038
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ex%2FCABkkzzEKzHaIDJrcWEL8N1C0bKhIFIpaCe%2FDNhqcQEv%2BoMJiBFkNxs17kHzBRX7rc9H%2BhCcIfsvn0aQCcAMLpsGG%2Fkl%2F%2BkffQHFm%2BcpIk3fhdH9cpQ881wRfug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302b3e7a75d8-LHR
X-Firefox-Spdy: h2

multiup.org/build/images/gray_jean.ced81a01.png

104.21.235.14

200 OK

14 kB

URL GET HTTP/2
multiup.org/build/images/gray_jean.ced81a01.png
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
PNG image data, 150 x 150, 8-bit grayscale, non-interlaced\012- data
Size
14 kB (13475 bytes)
Hash
e3d55104d9a9f186da3df4f730b77f4d
7e5e6e302e5ac36d5d45ed171cda5c3ccb182d13
7037cba1540dc0d8eaec93c3d6f978f6757b72ed63177e6c458f738872fa3224

HTTP Headers

GET /build/images/gray_jean.ced81a01.png HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/build/app.3a8e05b1.css
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: image/png
content-length: 13475
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
etag: "6481d6c5-34a3"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 3836
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r4q5sSiwOMI7bED6ZSqN7PUX3wWQxif%2F59%2F8iebPQglbEx28gx1rpv%2FTjfo0jhV07O6BA1OB15lwXC5lxn7YWCbr9R%2FCrYsb23e3lr1UtKXqhJyboLgdl%2FhvB9rNMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302c5fba75d8-LHR
X-Firefox-Spdy: h2

multiup.org/build/fonts/fontawesome-webfont.20fd1704.woff2

104.21.235.14

200 OK

77 kB

URL GET HTTP/2
multiup.org/build/fonts/fontawesome-webfont.20fd1704.woff2
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /build/fonts/fontawesome-webfont.20fd1704.woff2 HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/build/app.3a8e05b1.css
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/font-woff2
content-length: 77160
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
etag: "6481d6c5-12d68"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 659
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I7Ml06uTe%2BelqEjxRWmmss4nnusRgOuIca7zcdvkqEk%2FX1AGqGB6MHqWHVQVmN1xCG3Ng2DaQv6xKCmlqDWt3mkVxTKoH2bRtuqnurxK1xhI2P3ItlCLVNc%2FhFRMjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302c881175d8-LHR
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
6109dc90074997c867d10212ff8f9a81
4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b
d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:08:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
6109dc90074997c867d10212ff8f9a81
4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b
d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:08:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

multiup.org/assets/javascripts/theme.custom.js

104.21.235.14

200 OK

1.8 kB

URL GET HTTP/2
multiup.org/assets/javascripts/theme.custom.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (1369)
Size
1.8 kB (1797 bytes)
Hash
6ccbfbd5162db51c87ee6b9b95d219df
687387526b4a4f8947035328b317174383e49db7
dfc57470abcca9f208c8dcbcae2b91428d91a6f86a820780db27989e6c54d18d

HTTP Headers

GET /assets/javascripts/theme.custom.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5475
etag: W/"5ee4c53d-1563"
last-modified: Sat, 13 Jun 2020 12:23:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 2038
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bllVZK0uxjAHP4jAbv8g%2FDy81PxhV6QhOtxqNlc5pwgkZz7WkbhAMPKPGrFpgDpR3bCqDAG1zRJe7WdYmxTQD6CbghDo0ynR%2BcFJBgoJzetowY1qC98jomN1lFG3WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302b4e9975d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf

142.250.74.3

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP
142.250.74.3:443
ASN
#15169 GOOGLE

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-R\012- data
Size
18 kB (17857 bytes)
Hash
c045b73d86803686f4cd1cc3f9ceba59
92d652578c531e2c3d9db4622584f6a1ab2c225a
927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc

HTTP Headers

GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.org
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17857
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 19:42:27 GMT
expires: Sun, 02 Jun 2024 19:42:27 GMT
cache-control: public, max-age=31536000
age: 584778
last-modified: Wed, 11 Oct 2017 21:49:44 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf

142.250.74.3

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP
142.250.74.3:443
ASN
#15169 GOOGLE

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open Sans LightRegular1.10;1ASC;Open\012- data
Size
18 kB (18450 bytes)
Hash
177cc92d2e8027712a8c1724abd272cd
861b3593521709d9fa8a8efb6f40817dd7fa9337
2289b94b0f245d3078128fbdd2a5c59648ddd94ac1a7dd749b2375596ac8d562

HTTP Headers

GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.org
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 19:02:25 GMT
expires: Sun, 02 Jun 2024 19:02:25 GMT
cache-control: public, max-age=31536000
age: 587180
last-modified: Wed, 11 Oct 2017 21:49:35 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf

142.250.74.3

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP
142.250.74.3:443
ASN
#15169 GOOGLE

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-Bold\012- data
Size
19 kB (18670 bytes)
Hash
7e08cc656863d52bcb5cd34805ac605b
f6e1c78441d4ca2ef589ce79e48d3dbf9dca9a0d
0782a52179d0e25f19c39b43253795b25787d65abdbd8bfa38be0f21a4512748

HTTP Headers

GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.org
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 18:01:09 GMT
expires: Wed, 05 Jun 2024 18:01:09 GMT
cache-control: public, max-age=31536000
age: 331656
last-modified: Wed, 11 Oct 2017 21:49:43 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
6109dc90074997c867d10212ff8f9a81
4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b
d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:08:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf

142.250.74.3

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP
142.250.74.3:443
ASN
#15169 GOOGLE

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-R\012- data
Size
18 kB (17857 bytes)
Hash
c045b73d86803686f4cd1cc3f9ceba59
92d652578c531e2c3d9db4622584f6a1ab2c225a
927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc

HTTP Headers

GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.org
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17857
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 19:42:27 GMT
expires: Sun, 02 Jun 2024 19:42:27 GMT
cache-control: public, max-age=31536000
age: 584778
last-modified: Wed, 11 Oct 2017 21:49:44 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf

142.250.74.3

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP
142.250.74.3:443
ASN
#15169 GOOGLE

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open Sans LightRegular1.10;1ASC;Open\012- data
Size
18 kB (18450 bytes)
Hash
177cc92d2e8027712a8c1724abd272cd
861b3593521709d9fa8a8efb6f40817dd7fa9337
2289b94b0f245d3078128fbdd2a5c59648ddd94ac1a7dd749b2375596ac8d562

HTTP Headers

GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.org
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 19:02:25 GMT
expires: Sun, 02 Jun 2024 19:02:25 GMT
cache-control: public, max-age=31536000
age: 587180
last-modified: Wed, 11 Oct 2017 21:49:35 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf

142.250.74.3

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP
142.250.74.3:443
ASN
#15169 GOOGLE

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT

File type
TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-Bold\012- data
Size
19 kB (18670 bytes)
Hash
7e08cc656863d52bcb5cd34805ac605b
f6e1c78441d4ca2ef589ce79e48d3dbf9dca9a0d
0782a52179d0e25f19c39b43253795b25787d65abdbd8bfa38be0f21a4512748

HTTP Headers

GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.org
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 18:01:09 GMT
expires: Wed, 05 Jun 2024 18:01:09 GMT
cache-control: public, max-age=31536000
age: 331656
last-modified: Wed, 11 Oct 2017 21:49:43 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

multiup.org/cdn-cgi/apps/head/XkVrbd_c43ISY8nEHEfYRluUjsk.js

104.21.235.14

200 OK

50 kB

URL GET HTTP/2
multiup.org/cdn-cgi/apps/head/XkVrbd_c43ISY8nEHEfYRluUjsk.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (4290)
Size
50 kB (50286 bytes)
Hash
d386c171a094a093eebab48ead9e1b9d
8e4da57e2bcffb297fc57da37c3ff26f0fcaf659
f85618df77818b06664c55947df64a46f326a80845f80526e1dff209975e19bd

HTTP Headers

GET /cdn-cgi/apps/head/XkVrbd_c43ISY8nEHEfYRluUjsk.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: o8FDc9s/t3P3yNatFYWipkQK737wNuCi+A7nFB0qsdGuF2xfToqXSbzQbWcfqd9qewZ/EUe0s/Q=
x-amz-request-id: S4F1KX22CBA03NVY
cache-control: public, max-age=31536000
last-modified: Sat, 04 Jun 2022 09:30:37 GMT
x-amz-version-id: TheAQ38xyMHkFwEn9Pk0YGcbSqPdfjO3
etag: W/"2ab21ac51cc163427fa25bb0ff173b75"
cf-cache-status: HIT
age: 174719
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zVUvXFTckfwv6CkbHg0yxZ8My20%2F7oR0wgvgObmAnE7UJy21XNcJUmd5ESN7ndzmiPP0W53CkCJEzHFeIlfAjd61OuF9XsnH7ctxOA51QD3zWaC07z5AJ4spvfWx1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302b1e5a75d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/build/runtime.0b137493.js

104.21.235.14

200 OK

1.4 kB

URL GET HTTP/2
multiup.org/build/runtime.0b137493.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (1413), with no line terminators
Size
1.4 kB (1399 bytes)
Hash
dd3a350f4c212bb3209e26d5fb231271
2d0d594d349f20b48e06e2ceb2b9e0faf76f15c7
eb79b66bbdd4977ad101a516639204f06cf5a9bdb8454e9041aaed2f43f73472

HTTP Headers

GET /build/runtime.0b137493.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6481d6c5-577"
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4384
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2YwbY2upZYSbZmrJLhW%2FttYjKCCx41E3D7FDHfjMkeXWF6tRr8Vw0sCVj98Wb23nL42cOMq9wcGOIAT5n4lqpUcO%2BWyIIbwW9WYjrIVYZ5TohXwf3dOlrbGz%2Bi48YQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302b3e8575d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/build/610.15f042f0.js

104.21.235.14

200 OK

1.1 MB

URL GET HTTP/2
multiup.org/build/610.15f042f0.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type

Size
1.1 MB (1101149 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /build/610.15f042f0.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1101152
etag: W/"6481d6c5-10cd60"
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4384
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EwKGYPNSkB89PG3WPuAV5mZElvwHbMK4T7y6tcfRyS39gvNToQSjSduGII9FCCz4E3WtULSyxaz0IIxmDLpqcf%2Fw3RW81JMXDP2H%2FjWy3yQxMfubUlUMrQUDGIE1zg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302b3e8b75d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/cdn-cgi/challenge-platform/scripts/invisible.js

104.21.235.14

302 Found

25 kB

URL GET HTTP/2
multiup.org/cdn-cgi/challenge-platform/scripts/invisible.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type

Size
25 kB (25136 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cdn-cgi/challenge-platform/scripts/invisible.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sat, 10 Jun 2023 14:08:45 GMT
cache-control: max-age=300, public
access-control-allow-origin: *
vary: accept-encoding
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/5da7637f/invisible.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wxcpIOvGUjWlvBimauNoPGb0FBYMGurDQ2XDch8UfHeFDV6uWcl7NpZtTIwju284u5bYvCvTuKeepym%2FLglCaUmfoueMOXEQgI2LVrRd2vnSsCIeKvs5iSWF5OhENA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302e5a1775d8-LHR
X-Firefox-Spdy: h2

ulmoyc.com/v1/sdk.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ&d=multiup.org&sw=evasw.js

172.67.221.4

200 OK

13 kB

URL GET HTTP/2
ulmoyc.com/v1/sdk.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ&d=multiup.org&sw=evasw.js
IP
172.67.221.4:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintCD:DD:38:36:C9:D7:C6:57:0F:37:40:C0:26:79:F4:CB:12:B0:0C:48
ValiditySun, 29 Jan 2023 00:00:00 GMT - Sun, 28 Jan 2024 23:59:59 GMT

File type
ASCII text, with very long lines (13265), with no line terminators
Size
13 kB (13265 bytes)
Hash
4506969d99431a8f408c57335fe0a11e
6f2a039fb32b02360e0d15f087bbb6a7c6dbcfd5
f5973deec1b339f243dce2c22df2522bc764cf6f0a079815643279fe497f564d

HTTP Headers

GET /v1/sdk.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ&d=multiup.org&sw=evasw.js HTTP/1.1
Host: ulmoyc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
cache-control: public, max-age=14400
access-control-allow-origin: https://multiup.org
etag: W/"byoDn7MrAjYODRXwh7u2p8bbz9U"
last-modified: Thu, 20 Apr 2023 11:04:15 GMT
x-zone: eu
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eZ0LkFYXbEuuD8rWjDUoAir0qbOKrPbqmEwqBy%2F4sxllOui6cjsJxlh51Rjtp8Q88y5qLVScxabbq2WbuFDSh8FZbYVEA65DgliD%2FSW%2B2xfxlESvfCSyHZ2MFQxo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302eab6eb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

multiup.org/cdn-cgi/challenge-platform/h/b/scripts/pica.js

104.21.235.14

200 OK

5.7 kB

URL GET HTTP/2
multiup.org/cdn-cgi/challenge-platform/h/b/scripts/pica.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (5679), with no line terminators
Size
5.7 kB (5676 bytes)
Hash
96ac53a6e52316692775df05a0bc4d3f
5d77bcd8c75e71c0bdab5b7b3541cbbd277d6a1a
7d5a2c0be90201b77878b62ba7644f7589041ba33c78fd0d216e3cf565b2f4ed

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/pica.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc; timezone=Africa/Abidjan
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dXw9Y6DwseYzzgszkmGd3bX6Ns5X1laF65epEuJ1rOXHNssuJ4%2FaeTJf3JuDoQ4IaUFttvf3xbaWM4KUmXkVXOfxWP%2BFqZBfKXWCw9%2F0pKKpgUxjY6GR7OE5V9nGHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302f3b5475d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/build/app.6b0cbd46.js

104.21.235.14

200 OK

188 kB

URL GET HTTP/2
multiup.org/build/app.6b0cbd46.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
188 kB (188402 bytes)
Hash
a21d541255816732908799938079f718
14216027fa9c0cb0ef714027fcaf6c6339ac14ac
10b559de7efb3d9c46811dd99c72edb2f1559e047bc8c02cd06937431f97c8a8

HTTP Headers

GET /build/app.6b0cbd46.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=188405
etag: W/"6481d6c5-2dff5"
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4384
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Br7HbT6QJS3YuqzrPRK3wNTzqEFV2P1uN6pfIJ04DMAPhPLuEHOWCDUPefmxPlwjudEBWUgfcVoUnfaJWKLueogzoAsOFxS9raDo3U%2FSKivfQ3SZnMsE6cWDGKMGWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302b3e8c75d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

104.21.235.14

200 OK

1.2 kB

URL GET HTTP/2
multiup.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
HTML document, ASCII text, with very long lines (1271), with no line terminators
Size
1.2 kB (1239 bytes)
Hash
40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 15:21:01 GMT
etag: W/"6476145d-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9NX2T5jnADVuRm956IWHXGFU62lz8MfzqrG%2BSf%2BbHrd0wk3tsX3DnUzncTBFlvGfQGLWJMgn6JlNjyMTbuhefMAljaDMhps3pY2KVQ7AdB6LJn4%2FXYZ0iS%2BNDW%2FdtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302b3e8075d8-LHR
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 12 Jun 2023 14:08:45 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2

multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip

104.21.235.14

200 OK

33 kB

URL User Request GET HTTP/2
multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type

Size
33 kB (32680 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=0, must-revalidate, private
expires: Sat, 10 Jun 2023 14:08:45 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: BYPASS
set-cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc; path=/; HttpOnly; SameSite=lax
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hoWU2e3ZOk2GxpqPInlV5p3rjfkO01yrRGUqvRIfft1tBfDXXCobjbnUDgMXGe5EbYHDf27UVvqYcLQoYNSCbbWPwAWCX0hVE%2FQA%2Fv7An71qdVNOFCWdGzkG7PqBdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d5230291be775d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/cdn-cgi/challenge-platform/h/b/cv/result/7d5230291be775d8

104.21.235.14

200 OK

2 B

URL POST HTTP/2
multiup.org/cdn-cgi/challenge-platform/h/b/cv/result/7d5230291be775d8
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with no line terminators
Size
2 B (2 bytes)
Hash
444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

HTTP Headers

POST /cdn-cgi/challenge-platform/h/b/cv/result/7d5230291be775d8 HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12477
Origin: https://multiup.org
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc; timezone=Africa/Abidjan
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:46 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=A1FlYHn_ftVNvi7__mbYdD1AV6dlqQBiu6Tb8W6Eh44-1686406126-0-AV0kzC6sqhW2mKQ0fzp1OJBPRM4l4YegqcfxQoqfe/Fyy+2YMziPz1fddZFCSK6hZA==; path=/; expires=Sat, 10-Jun-23 14:38:46 GMT; domain=.multiup.org; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2F%2B3bDnzjZO4n1maByy01x0uBblMEVMC7Ico%2Fgtoh%2BUDDNO7A4SMmn2SKvLx5%2BSWdA%2Bes%2FntmL0DG1HHJli2exghq6pcTfa4Rf4t0Lk6pupRvro%2B2ioXiMGrRpkaQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d523030bcf275d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/build/app.3a8e05b1.css

104.21.235.14

200 OK

621 kB

URL GET HTTP/2
multiup.org/build/app.3a8e05b1.css
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (63987)
Size
621 kB (621299 bytes)
Hash
2a80ffd01bcc1960b259f74c4eeb3bde
960eea8700d348dc83578b428d62848c30de706f
359a4efead0ed02eec481d8eb2d6e7e7ba785a4eec645dbe7ef0a949ad6c87af

HTTP Headers

GET /build/app.3a8e05b1.css HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=621844
etag: W/"6481d6c5-97d14"
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4386
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A0d9iCQI0ob41peJwXnmoXho8FAWwZ0UcaUu1OOClCjqQacuwIDsI4Vzg4WiQELPiHpzRJezUtqso4jy4v9l2e1NPa5ubY2S6Z4pl1J%2B9vC2%2F5WiWxiIfR9uVTwP0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302b1e5b75d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/assets/javascripts/theme.init.js

104.21.235.14

200 OK

9.0 kB

URL GET HTTP/2
multiup.org/assets/javascripts/theme.init.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (8987), with no line terminators
Size
9.0 kB (8962 bytes)
Hash
6c91a3a6b40bda80fb09792fc06f6fc5
0ad9c55ee9081ac0041dff30746ae83f0c39db1e
05c9cac1ca893028d2a18173d14596bdd20be4a2d0c95debeb334c976f2a71a7

HTTP Headers

GET /assets/javascripts/theme.init.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=12419
etag: W/"592c67d8-3083"
last-modified: Mon, 29 May 2017 18:26:32 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4384
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JzDRjJNjWOt49duqFadl4z3lMsypCIWUpk3c%2For9keXDQqPBvroP%2F4zoiuxNG2rkLTOtVQHc8es7LEibIqslwQWXjzlHsVBsuGLduIcTOu7BnIUnHYxhSNXLoh3aoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302b4e9a75d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/cdn-cgi/apps/body/LB8uToQ_S6rnQol8hy6t_XJXVLk.js

104.21.235.14

200 OK

8.2 kB

URL GET HTTP/2
multiup.org/cdn-cgi/apps/body/LB8uToQ_S6rnQol8hy6t_XJXVLk.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (8386), with no line terminators
Size
8.2 kB (8167 bytes)
Hash
822370dfffc7251ee8d3bb4c0b666767
7be083d2f4a578f3184a6b871fb5c02952d7e6b0
202903eca6b3911cb7a406949b3c8207654026e36db7a4bfc55367c89170a6f9

HTTP Headers

GET /cdn-cgi/apps/body/LB8uToQ_S6rnQol8hy6t_XJXVLk.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: EFj4l3eeoemqc8zRsl15tJdbZbaKzCA60BrkWdQSB3/I5CrIsz51nmWOeMy23Ox3+30j4ZBRE84=
x-amz-request-id: PQT80YRH7PE6GEFC
cache-control: public, max-age=31536000
last-modified: Sat, 04 Jun 2022 09:30:37 GMT
x-amz-version-id: 6A40r2N183C5H3BqvK3uJglPPBMC4e0u
etag: W/"6b4ec796f09dac7231ee7f236c3eb7c2"
cf-cache-status: HIT
age: 174717
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9vpmLxScppjdId8VEKBM4AZyKaOfLsY%2FYfhQA26YxbPSwZ2qvwZIWROcrunMb%2BF6XPOcD2%2FNgpcHNXV8la0EtevAKpSUmB7tpAu6wbOWa5fEMPf2QgQOpfHWLAi9VQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302b8ed975d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/cdn-cgi/challenge-platform/h/b/scripts/jsd/5da7637f/invisible.js

104.21.235.14

200 OK

25 kB

URL GET HTTP/2
multiup.org/cdn-cgi/challenge-platform/h/b/scripts/jsd/5da7637f/invisible.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (25136), with no line terminators
Size
25 kB (25136 bytes)
Hash
e4a12384f7e0e7b57b20d3b5252a4e9d
9f5253f825ee744a2fabefab52db8fcc008cd481
2249ae8d82af0b6db7346a452ff61a1d438b5fdedc2024af1dbb7cfcc81921fd

HTTP Headers

GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/5da7637f/invisible.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8N8wp%2F8ocrR60kYTS6gycJhECkgXfBPuf2Z9byo7351WAYf6OjVor04A4Juz%2FMsjYD5m%2FjLlXDcQ80B3TepMeqgZcinAXMFSHf8qXerNVqCxwvTapLYFVdIs8kCZDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302eaa6775d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/favicon.ico

104.21.235.14

200 OK

854 B

URL GET HTTP/2
multiup.org/favicon.ico
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
854 B (854 bytes)
Hash
53bfb4a8399c379e6857b5e848d3a408
6c59da45ce3e443722a71c4cfaaa92a990e17610
9f55eab5447f560225a66911fcbe9edca0c35c7da9ca994bf6f7e5af6881b11e

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: image/x-icon
last-modified: Fri, 07 Aug 2020 09:03:58 GMT
etag: W/"5f2d18fe-356"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 658
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rthSgiJ%2FZ%2F2jL9BicrhO%2B4LtsRMHyYTrH00i0eWQc2rS2PboPl7ihVJm1Lsg9lt77tkPIiAaup9hq6ywTgahvToPs7Swd0S4iAN3VWCQMOhK%2BR4u3o7mO%2FkMpixmaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d52302f3b4375d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

multiup.org/assets/javascripts/theme.js

104.21.235.14

200 OK

82 kB

URL GET HTTP/2
multiup.org/assets/javascripts/theme.js
IP
104.21.235.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectmultiup.org
Fingerprint23:E9:18:02:73:2B:DD:7C:B9:EE:9B:F1:A6:F4:A3:F8:6F:6A:97:04
ValidityFri, 05 May 2023 23:47:09 GMT - Thu, 03 Aug 2023 23:47:08 GMT

File type
ASCII text, with very long lines (6060)
Size
82 kB (81700 bytes)
Hash
f01549269ed8d1b65264bf5013bf2f7c
4d4fe93ac2e036e605ce0b1cd907fdac57118758
ed58648d2ca83678104822b8cfc6e9ce61b63483d3dfaed8ad0b33799e1900b8

HTTP Headers

GET /assets/javascripts/theme.js HTTP/1.1
Host: multiup.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Cookie: PHPSESSID=6of9s563jdot48cptlmtlopsjc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=112659
etag: W/"5a475fa5-1b813"
last-modified: Sat, 30 Dec 2017 09:43:01 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 4384
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2FUxxnGtQkm8o2JeLvll7hdFy43mFm%2FLUDGu65nKRr%2FZP8GMqaTYoJag3%2BBhmhOVtggWQL0y%2B6CuPSH7wcjIC22WguiasuQ%2BpnqSYZZqLUd3cOUPtzeJtYq6I4vLDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d52302b4e9775d8-LHR
content-encoding: br
X-Firefox-Spdy: h2

cjvdfw.com/code/native.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ

185.56.234.205

200 OK

7.7 kB

URL GET HTTP/2
cjvdfw.com/code/native.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ
IP
185.56.234.205:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://multiup.org/download/99bfd27a0d432b5670e5a691c09416e5/Hearts.of.Iron.IV.v1.11.4.zip
Certificate
IssuerLet's Encrypt
Subjectcjvdfw.com
Fingerprint08:9B:FA:59:7C:D5:7F:C3:1B:73:8D:EC:28:98:A9:7A:8E:B3:F2:D7
ValidityWed, 10 May 2023 21:15:57 GMT - Tue, 08 Aug 2023 21:15:56 GMT

File type
ASCII text, with very long lines (7739), with no line terminators
Size
7.7 kB (7671 bytes)
Hash
20a98716344c7fafe776c6c94d5f67e4
448327a402c22212133b8ffc9dad1e7a34b1a18c
f4e1cf4c001edeaa548dd23dd968c8da8d68577830b388fbffb6772b60958fa8

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /code/native.js?h=waWQiOjExMzk5OTQsInNpZCI6MTE3MDYxMSwid2lkIjozOTY4NTgsInNyYyI6Mn0=eyJ HTTP/1.1
Host: cjvdfw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.21.1
date: Sat, 10 Jun 2023 14:08:45 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://multiup.org
x-zone: eu
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (17)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL