megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
301 Moved Permanently 162 B URL HTTP/1.1 megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /2xvqp/Nun.Massacre.Definitive.Edition.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 31 Mar 2023 06:49:06 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
X-Download-Options: noopen
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7af19a5145a4ee99bdf18831bad04bfd
7bdd2a4785b999ef54a2644211d2b2b7190fb8e1
3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0"
Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6415
Expires: Fri, 31 Mar 2023 08:36:01 GMT
Date: Fri, 31 Mar 2023 06:49:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cca063332ba9a89eadd62a8dd7f81a9b
d473b2a7a32c964599ff3bac8f98fa578f03d1d1
02fb74c7c695ad99f7f2fd7c02ae2b88e2da1c5db339f883333d9090291931dc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02FB74C7C695AD99F7F2FD7C02AE2B88E2DA1C5DB339F883333D9090291931DC"
Last-Modified: Wed, 29 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14972
Expires: Fri, 31 Mar 2023 10:58:38 GMT
Date: Fri, 31 Mar 2023 06:49:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 374c9e295a804e605c402f48ae7e2446
967394b36ecdff2dd32842f878887f061024c6b3
7652dfcb9e2d620ce1d033be8ecc53166d2881154c15decd60899415e5ac2706
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7652DFCB9E2D620CE1D033BE8ECC53166D2881154C15DECD60899415E5AC2706"
Last-Modified: Thu, 30 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2235
Expires: Fri, 31 Mar 2023 07:26:21 GMT
Date: Fri, 31 Mar 2023 06:49:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 29fdbcd53b5646cfcdd46510063734c4
85e3ceda5ef130219f4fe8a31e52e2690c8f7d8e
24c27586332c016685e6231fec5836e921048d8aaefbcd4cd6f88969f9d91e18
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 31 Mar 2023 06:28:22 GMT
content-type: application/json
age: 1244
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: KDhpQCf5/iI8ehjgmek4RgWgcFpKZ3Ew1R9GLZImdGiuFUuOZlYgIz4RbISG7xRz5GyhkKws/hw=
x-amz-request-id: GJMJ59F5HM41T46X
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 31 Mar 2023 06:33:59 GMT
age: 907
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:06 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2fdd88c5328a20e99bd682e34b8c0173
a6415caf042550cb51822e482d1f5b9178938ea3
f15a1244d7acc3b892df1a3ea767c24ce5f661e2e623fedc25ade8c7094c8af6
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 27 Mar 2023 23:25:48 GMT
Expires: Mon, 03 Apr 2023 23:25:47 GMT
Etag: "a6415caf042550cb51822e482d1f5b9178938ea3"
Cache-Control: max-age=318399,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b06a68a9ea3b500-OSL
megaup.net/themes/flow/images/main_logo_inverted.png
200 OK 7.1 kB URL HTTP/2 megaup.net/themes/flow/images/main_logo_inverted.png
IP
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/images/loading_small.gif
200 OK 184 kB URL HTTP/2 megaup.net/themes/flow/images/loading_small.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Size 184 kB (184355 bytes)
Hash b0dd5b3af9c4c0644d7bddee83716209
30002468d0266b893b3559b8d0d260c6cbf0ad7c
2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d
GET /themes/flow/images/loading_small.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: image/gif
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
200 OK 1.7 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
IP
File type ASCII text, with very long lines (2241), with CRLF line terminators
Hash ea3cb573f4c0aa9376f694a6956e59a9
501a67a9ce186128c0238e83f9be238f0dca6810
2c4a8e61b2f2e7655fd9c9dbc816b9d642efbe60782f6c1c3661930b2e4827c5
GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-981"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
File type ASCII text, with very long lines (2206)
Hash 36518d71e1dd93e418a3f21d0229599a
98d701e0fff47f211df7972dc8ae85e21ec0d6f9
a10e159c1c64293a15579306caddc3178edc5957e0ad5fffb1312695031f3960
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 31 Mar 2023 06:49:07 GMT
expires: Fri, 31 Mar 2023 06:49:07 GMT
cache-control: private, max-age=900
last-modified: Fri, 31 Mar 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45041
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
200 OK 5.7 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
IP
File type HTML document, ASCII text, with very long lines (15714), with CRLF line terminators
Hash 6b523971a85df4dd8833ec0bba969c68
9b5a7ca6840f8b2622a9409a1ac499d0ce8743b2
a7f73ebb11f60327af169b72ee618b8644196ede500be2d3521986fad157ca73
GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3ead"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
200 OK 6.2 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
IP
Hash ccee98f11210ae35c374abd55391e29d
618521bef0247c884fc37874696e178c9d57972d
0e6f73c65daecf7b623a0727e085ffd693d1830158ed3f8d91131f62a8ee0b91
GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1099"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/retina/retina.js
200 OK 1.1 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/retina/retina.js
IP
File type ASCII text, with very long lines (1249)
Hash af10fb6048c2f41d51cd59c1d40f3a01
b3b855614e1337f00d3a1394df8b6534d7ef0707
1b9d25af700676b81c8f6643cf7d984d95ee409150b8f9821558be0d93a4588b
GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-52e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/custom/custom.js
200 OK 33 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/custom/custom.js
IP
File type ASCII text, with CRLF line terminators
Hash 9f9c337e62b65dacb9e6a7aa870ac25d
d002d2e3b35d64630c5acef6bc99531716e77f01
c12dbeb10ede86319240f432c4dadb93233ba82f64e4d017c314de7c2dcc7b21
GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1420"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
200 OK 31 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
IP
File type Web Open Font Format, TrueType, length 31344, version 1.1\012- data
Hash 21f79e4c0fbe54a555170aa70bb4c8b7
9d4aaf2016cd21f16bc45089a48de84dba951fa7
2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: font/woff
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
200 OK 79 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
IP
File type ASCII text, with very long lines (464), with CRLF line terminators
Hash 408bd1829e2e9b9fe12d5c6c9a297416
c40c4c559546ed7b184bf1b36dafd2edbbc5266f
f1c92ed59042445dd1fa7b0de2b6a8e023de511b37821f042d2a927c20580ed4
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
200 OK 21 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
IP
File type Web Open Font Format, TrueType, length 20972, version 1.0\012- data
Hash cad75e2dacc6794c4e6b14727d4a989d
694d04c8f643df4100c23efc1463ac9f4e732f60
ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887
GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: font/woff
content-length: 20972
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-51ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK 25 B URL HTTP/1.1 altowriestwispy.com/tysaSHG1FMaM/18410
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 06:49:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Sat, 01-Apr-2023 06:49:07 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sat, 01-Apr-2023 06:49:07 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK 26 B URL HTTP/1.1 keydawnawe.com/gwZ1U5hjA8ii/32575
IP
File type ASCII text, with no line terminators
Hash 4e5d65669f8dcd928dad06adf883f025
d771713d758c3348dd7e5b38bb40c7935399ae46
0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 06:49:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Sat, 01-Apr-2023 06:49:07 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Sat, 01-Apr-2023 06:49:07 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Backoff, Last-Modified, Alert, Content-Length, Pragma, Cache-Control, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 31 Mar 2023 06:17:26 GMT
age: 1901
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
200 OK 189 kB URL HTTP/2 dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
IP
File type Unicode text, UTF-8 text, with very long lines (15948)
Size 189 kB (188711 bytes)
Hash 49e085f39a627d5d58f971fba75a0b7f
2d6532579f18285dd9b7cfce9a6b8260d5a84053
d720a868ef21453b4f4df4b8cb2e5259ecb2582594b4110116e7d7b2d7d8dcbf
GET /?kzmmd=761186 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 188711
date: Fri, 31 Mar 2023 06:49:07 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VJHC_OJfm5fKUy5ReRfYkQJmOh6QK8zJMDFso-okJwb6qK21mVwz2A==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 782ca4845ea5e0ec981e33231b1e61cb
032116b75e124c57877524e9e4f523b6d7c65820
94d007862fc7a4cd67f582ff22f2339619177435559c1dd5075a08c7240f3520
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94D007862FC7A4CD67F582FF22F2339619177435559C1DD5075A08C7240F3520"
Last-Modified: Wed, 29 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6489
Expires: Fri, 31 Mar 2023 08:37:16 GMT
Date: Fri, 31 Mar 2023 06:49:07 GMT
Connection: keep-alive
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK 25 B URL HTTP/1.1 altowriestwispy.com/tysaSHG1FMaM/18410
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 06:49:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
vingartistictaste.com/T1JUZUouMDcIdS5vNkM/PT5pQHgJd2YjLiI/Lg4sK2pmEis2PHoGJiAnMAM4IDwgSyQqJnFXDBoxAyMzFWAjNg4nJRYwPRobEgk6GgNlNwYZPmU9CTgXHSQtCTEfIXssGhAkHQQRETQDJ2cWIgs8FABULgQaBSQpDhQSPQgNJREwHw0aERIHAAYSMx8KKiMACSRqByQiGhcSJH4MFBUzHwo1ZSgODWIwJxh/HBFVACocZTcpGWI4IR8ZPQUnGHcUHDcLKQQSKwkMADwwH38YAz0MdgACVBs6BBIrCQoTAQMcfwgXPTABFwUjKRoAZTMSGRFhMB9/fx0zDSMAByh7FTEGIHMMBj8JDhoAASYONz0bM3saIwVUDAsEZR0LGgcaJhIkFxwiMhoYEhJ+BAM4UXkaFx42GyQUHCd7PzZyDzkgPCRYEBViOTQuAB81JiY
200 OK 1.2 kB URL HTTP/2 vingartistictaste.com/T1JUZUouMDcIdS5vNkM/PT5pQHgJd2YjLiI/Lg4sK2pmEis2PHoGJiAnMAM4IDwgSyQqJnFXDBoxAyMzFWAjNg4nJRYwPRobEgk6GgNlNwYZPmU9CTgXHSQtCTEfIXssGhAkHQQRETQDJ2cWIgs8FABULgQaBSQpDhQSPQgNJREwHw0aERIHAAYSMx8KKiMACSRqByQiGhcSJH4MFBUzHwo1ZSgODWIwJxh/HBFVACocZTcpGWI4IR8ZPQUnGHcUHDcLKQQSKwkMADwwH38YAz0MdgACVBs6BBIrCQoTAQMcfwgXPTABFwUjKRoAZTMSGRFhMB9/fx0zDSMAByh7FTEGIHMMBj8JDhoAASYONz0bM3saIwVUDAsEZR0LGgcaJhIkFxwiMhoYEhJ+BAM4UXkaFx42GyQUHCd7PzZyDzkgPCRYEBViOTQuAB81JiY
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3037), with no line terminators
Hash 2d2694b4b80a22dab7a63c2ecb8a5f16
1ac9fd57f12887e1340e0b7a1030de6149931e79
9a52f8df4c791d0cd1f300ed4f67c735c91c36a9a014d8927bae6b43431f2fe0
GET /T1JUZUouMDcIdS5vNkM/PT5pQHgJd2YjLiI/Lg4sK2pmEis2PHoGJiAnMAM4IDwgSyQqJnFXDBoxAyMzFWAjNg4nJRYwPRobEgk6GgNlNwYZPmU9CTgXHSQtCTEfIXssGhAkHQQRETQDJ2cWIgs8FABULgQaBSQpDhQSPQgNJREwHw0aERIHAAYSMx8KKiMACSRqByQiGhcSJH4MFBUzHwo1ZSgODWIwJxh/HBFVACocZTcpGWI4IR8ZPQUnGHcUHDcLKQQSKwkMADwwH38YAz0MdgACVBs6BBIrCQoTAQMcfwgXPTABFwUjKRoAZTMSGRFhMB9/fx0zDSMAByh7FTEGIHMMBj8JDhoAASYONz0bM3saIwVUDAsEZR0LGgcaJhIkFxwiMhoYEhJ+BAM4UXkaFx42GyQUHCd7PzZyDzkgPCRYEBViOTQuAB81JiY HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1185
date: Fri, 31 Mar 2023 06:49:07 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tXe__72HSiQtnQfCFqM-k3yz8lozBrd7mvLXwh1S8mA4kdM1J_CDww==
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
200 OK 4.7 kB URL HTTP/2 megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
IP
Hash 5ebe318133795f6c43cfc3be48510a6c
873bf3b575753ca29c949686c11695104f44da99
a4f8204fd0b202a1d7382ec67526962d55d9253e680ffcc483b7da656d676398
GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45f5"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-validate.js
200 OK 1.3 kB URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-validate.js
IP
Hash 62e3977c5a457dc54676933048703cec
b85283762bb49075c46ef2277d46d3334e05553a
85f97e56f44315a3a198795d7894c0c61ed51dfd83d9784611df14233627c130
GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-fea"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
alargeredrubygsw.com/R3VvQ0VoSgwweCUgFysSLDs6JgMVBwovKXYiODs8ES0HFSQPLEk3LCNIV3RzdERXZTUuEVJxfGEGGyIxMgZScmMuGwkseGEDUnJrd1tZc2t0Uxp+dGEBHyIiekRJMzEzGVJyc39FXXdwdEFYdHdw
204 No Content 0 B URL HTTP/2 alargeredrubygsw.com/R3VvQ0VoSgwweCUgFysSLDs6JgMVBwovKXYiODs8ES0HFSQPLEk3LCNIV3RzdERXZTUuEVJxfGEGGyIxMgZScmMuGwkseGEDUnJrd1tZc2t0Uxp+dGEBHyIiekRJMzEzGVJyc39FXXdwdEFYdHdw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /R3VvQ0VoSgwweCUgFysSLDs6JgMVBwovKXYiODs8ES0HFSQPLEk3LCNIV3RzdERXZTUuEVJxfGEGGyIxMgZScmMuGwkseGEDUnJrd1tZc2t0Uxp+dGEBHyIiekRJMzEzGVJyc39FXXdwdEFYdHdw HTTP/1.1
Host: alargeredrubygsw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:07 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fvSCXOASw%2BMJdllSPXYFK1NAOt1%2Fw0vSWBa96L%2BEDgxsXCVRj2wCPIfyOk4tYWLSv604IOtghBAjmPpARSGPilQnSvr0c0lHUWVMFBaNfeNFTEJNjlPJy4%2BJSu5geAj9TTERmGSJig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a68fcf47b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
alargeredrubygsw.com/TjcwZEZhCFMXewAFQAwUC1x/MSoUQFM1FBphAzZyDGEFMSIWBxYQLyoKCFZzdwYBQjYnUw1XdGhERAUyO0QNVnZ+ABYNKChYDVZgOAoASn9gBh5RYDsKAUIyPlZXWXdoR0QQKnMGBlx2fAMFV3J5AAFc
204 No Content 0 B URL HTTP/2 alargeredrubygsw.com/TjcwZEZhCFMXewAFQAwUC1x/MSoUQFM1FBphAzZyDGEFMSIWBxYQLyoKCFZzdwYBQjYnUw1XdGhERAUyO0QNVnZ+ABYNKChYDVZgOAoASn9gBh5RYDsKAUIyPlZXWXdoR0QQKnMGBlx2fAMFV3J5AAFc
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TjcwZEZhCFMXewAFQAwUC1x/MSoUQFM1FBphAzZyDGEFMSIWBxYQLyoKCFZzdwYBQjYnUw1XdGhERAUyO0QNVnZ+ABYNKChYDVZgOAoASn9gBh5RYDsKAUIyPlZXWXdoR0QQKnMGBlx2fAMFV3J5AAFc HTTP/1.1
Host: alargeredrubygsw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:07 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L4NhwGwgBtazGGnvZfRUshQQQwotpCbH1iQl7Mrbj5w7IVl0izvqO5IqF426AWRAmWiY663DY7QNDYDhpzSGRn2qjbvdN0VVPCkVDznUkVuBSLJjLUVqbF5onx5lE2Z2vuVI0PnKPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a68fcf46b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
alargeredrubygsw.com/QzVkWHlsCgcrRBJYIhMYLmNTDyFyUDwAPxpTIigsIHMyfUsFYlUdXzdcAGVBcQBdaUhlRQ08RHAHQisNIkERK0RyEw02HywIQi5EcxtddkhtAEItRHITECgYJAhVfgk3QQhlSHUNVGpNdgZQb05yAg
204 No Content 0 B URL HTTP/2 alargeredrubygsw.com/QzVkWHlsCgcrRBJYIhMYLmNTDyFyUDwAPxpTIigsIHMyfUsFYlUdXzdcAGVBcQBdaUhlRQ08RHAHQisNIkERK0RyEw02HywIQi5EcxtddkhtAEItRHITECgYJAhVfgk3QQhlSHUNVGpNdgZQb05yAg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /QzVkWHlsCgcrRBJYIhMYLmNTDyFyUDwAPxpTIigsIHMyfUsFYlUdXzdcAGVBcQBdaUhlRQ08RHAHQisNIkERK0RyEw02HywIQi5EcxtddkhtAEItRHITECgYJAhVfgk3QQhlSHUNVGpNdgZQb05yAg HTTP/1.1
Host: alargeredrubygsw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:07 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LLKQqMvT5mOQZBradv9I9NczDoXhxB8SYCwlda4mf7DOlUfN2qjyl7Hxw4ov032uvcvNgaEhph2PWksGPGwkNt4FSi%2BctXEnQemeWanHlXoxJnPMFS%2FuuRN6SG4HsPzdQ4aHMOqvmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a68fcf43b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vingartistictaste.com/RmhYdE0nCjsZcidVOlI4NARlUX8ATWoyKSsFIh8rIlBqAyw/BnYXISkdPBI/KQYsWiMjHH1GCzQ/DxgCCD83Qg8vKgwiHnYpExMlFQo0TXQELhJRfwApIkUsBCs0IQl3BAw6DiEwGgwiNiswTR0FEC87LAMtCSQbFE1qNggxMWw2NC0hDDA6DiQJHC8gHz8FG3cMLCA3Ni4aIAcTJx0tLg0qKwcbMQ8pNgouKRtGHAMhDUwJCDkNAggADz4sCgcuDEY5HDIzPQkIH2gcHC4EYCN+cwoQGjUkDj8mLCJZNAYPLwBgI35zKxkOKSANMDYXAVggTA8UIi4sGmsbHz8FPgo+Hy4lDh4bHQQuKAcfdVw7IH8yMhMiDAwlPy4/BBEgBhoeUB4jIC4yPgwPHwkJTCMUH2BRfwAqMi0cESphLSshKh0VGH5fGzI+YAIrGyM2VRkYdCspAUY9NgsJDiwDDw
200 OK 1.2 kB URL HTTP/2 vingartistictaste.com/RmhYdE0nCjsZcidVOlI4NARlUX8ATWoyKSsFIh8rIlBqAyw/BnYXISkdPBI/KQYsWiMjHH1GCzQ/DxgCCD83Qg8vKgwiHnYpExMlFQo0TXQELhJRfwApIkUsBCs0IQl3BAw6DiEwGgwiNiswTR0FEC87LAMtCSQbFE1qNggxMWw2NC0hDDA6DiQJHC8gHz8FG3cMLCA3Ni4aIAcTJx0tLg0qKwcbMQ8pNgouKRtGHAMhDUwJCDkNAggADz4sCgcuDEY5HDIzPQkIH2gcHC4EYCN+cwoQGjUkDj8mLCJZNAYPLwBgI35zKxkOKSANMDYXAVggTA8UIi4sGmsbHz8FPgo+Hy4lDh4bHQQuKAcfdVw7IH8yMhMiDAwlPy4/BBEgBhoeUB4jIC4yPgwPHwkJTCMUH2BRfwAqMi0cESphLSshKh0VGH5fGzI+YAIrGyM2VRkYdCspAUY9NgsJDiwDDw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3048), with no line terminators
Hash a585555f6059de050d2a43e8c7358984
9ba9b45d2dddfee1e318e950a36b200307777309
14b1802172c59f0562e736c89f62cae3e46ec6639179b1e96d6ae8f26b357c00
GET /RmhYdE0nCjsZcidVOlI4NARlUX8ATWoyKSsFIh8rIlBqAyw/BnYXISkdPBI/KQYsWiMjHH1GCzQ/DxgCCD83Qg8vKgwiHnYpExMlFQo0TXQELhJRfwApIkUsBCs0IQl3BAw6DiEwGgwiNiswTR0FEC87LAMtCSQbFE1qNggxMWw2NC0hDDA6DiQJHC8gHz8FG3cMLCA3Ni4aIAcTJx0tLg0qKwcbMQ8pNgouKRtGHAMhDUwJCDkNAggADz4sCgcuDEY5HDIzPQkIH2gcHC4EYCN+cwoQGjUkDj8mLCJZNAYPLwBgI35zKxkOKSANMDYXAVggTA8UIi4sGmsbHz8FPgo+Hy4lDh4bHQQuKAcfdVw7IH8yMhMiDAwlPy4/BBEgBhoeUB4jIC4yPgwPHwkJTCMUH2BRfwAqMi0cESphLSshKh0VGH5fGzI+YAIrGyM2VRkYdCspAUY9NgsJDiwDDw HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1195
date: Fri, 31 Mar 2023 06:49:07 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8ZnwaIx5JJRS8Fk2GEgnUErqOEW_CGEZUhwcByg4nFxNGKEG5M9iGQ==
X-Firefox-Spdy: h2
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK 26 B URL HTTP/1.1 keydawnawe.com/gwZ1U5hjA8ii/32575
IP
File type ASCII text, with no line terminators
Hash 4e5d65669f8dcd928dad06adf883f025
d771713d758c3348dd7e5b38bb40c7935399ae46
0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 06:49:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
vingartistictaste.com/TFd4QkotNRsvdS1qGmQ/PjtFZ3gKckoELiE6AiksKG9KNSs1OVYhJiMiHCQ4IzkMbCQpI11wDAM1EzYeLwI1DAAIZyAkCCM+NnIyegAWCDgeZBwLAx8WHQ4YeWU1Bw87ECApHwUDMSsANAUgDDIdIRopDCAWES1zCjlNCwYmZyskJnUjNSofJAJLe3sOFDIWACYgNAktBTk1Lhg0HDB3cx0AIiEvfyQ/CS0NISgDEzsESy4gBC0cDi8bGTkheg5gHCkDDgRLLiAOPhcDLBszLSEJNCIhFw97ADB7eB0wPg4vGxo8DB84Yz0pCDYAShQgGxAiIS82eikXAw0CEyYhAREgCj4lBiAMLCllMhcpGmMMDS0BOjsBGz4BMAclKTo2BygaYgwIITQuXig5IzkIfyl8JA9wDRwmNC4N
200 OK 1.2 kB URL HTTP/2 vingartistictaste.com/TFd4QkotNRsvdS1qGmQ/PjtFZ3gKckoELiE6AiksKG9KNSs1OVYhJiMiHCQ4IzkMbCQpI11wDAM1EzYeLwI1DAAIZyAkCCM+NnIyegAWCDgeZBwLAx8WHQ4YeWU1Bw87ECApHwUDMSsANAUgDDIdIRopDCAWES1zCjlNCwYmZyskJnUjNSofJAJLe3sOFDIWACYgNAktBTk1Lhg0HDB3cx0AIiEvfyQ/CS0NISgDEzsESy4gBC0cDi8bGTkheg5gHCkDDgRLLiAOPhcDLBszLSEJNCIhFw97ADB7eB0wPg4vGxo8DB84Yz0pCDYAShQgGxAiIS82eikXAw0CEyYhAREgCj4lBiAMLCllMhcpGmMMDS0BOjsBGz4BMAclKTo2BygaYgwIITQuXig5IzkIfyl8JA9wDRwmNC4N
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3017), with no line terminators
Hash e779246c6405dd64779ce9a845a55c3a
efd455666372e1a0e7b138e9dddb1ea2c8a0e0f9
da7170fce9fddcdf4e32dd954c4c8de52ce27a5c6435901bf793b47e842621c7
GET /TFd4QkotNRsvdS1qGmQ/PjtFZ3gKckoELiE6AiksKG9KNSs1OVYhJiMiHCQ4IzkMbCQpI11wDAM1EzYeLwI1DAAIZyAkCCM+NnIyegAWCDgeZBwLAx8WHQ4YeWU1Bw87ECApHwUDMSsANAUgDDIdIRopDCAWES1zCjlNCwYmZyskJnUjNSofJAJLe3sOFDIWACYgNAktBTk1Lhg0HDB3cx0AIiEvfyQ/CS0NISgDEzsESy4gBC0cDi8bGTkheg5gHCkDDgRLLiAOPhcDLBszLSEJNCIhFw97ADB7eB0wPg4vGxo8DB84Yz0pCDYAShQgGxAiIS82eikXAw0CEyYhAREgCj4lBiAMLCllMhcpGmMMDS0BOjsBGz4BMAclKTo2BygaYgwIITQuXig5IzkIfyl8JA9wDRwmNC4N HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1172
date: Fri, 31 Mar 2023 06:49:07 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YvXN3un5mHeHYszgFJno16TiGt-WzEz6jIKeIsU4MfTDJX9QuX_ELg==
X-Firefox-Spdy: h2
vingartistictaste.com/Tko3WHkvKFQ1Ri93VX4MPCYKfUsIbwUeHSMnTTMfKnIFLxg3JBk7FSE/Uz4LISRDdhcrPhJqPygvYA41GQ1yOTonHxJqOxYtBxU1fBxgDEgIfFUeOygOTT9KCj1bATYZIV4ZPwMCcyEWfA4FaAoJMgYBHH1+eR84PTltDRotCU4wFRsMDx01NDpUDCwDbwUeMg9+ZA89fjhxLx4WAWM3PQ0tXyw1HwhyGzofI3QaLAQBWWktHnt1NBgLGHsOLgM8dBoaDAB0YCoWDFNvNyYcVA5KOjpiDh0YKForExYMU281OS1vDUp3c2IyDQ8vYD8jGntxLRg3BFQOSmM5Rh5INh10NRUcHnIsTi0fZRQvHT0OGREHAVU1FiAZBg5PLwxxES8WOg4NSSUOfjEWCwJANwMoHHp9SwgcfywNGnpbHCkjHGZ+Ez0lWShEPHt0IU8CHXwXEw
200 OK 1.2 kB URL HTTP/2 vingartistictaste.com/Tko3WHkvKFQ1Ri93VX4MPCYKfUsIbwUeHSMnTTMfKnIFLxg3JBk7FSE/Uz4LISRDdhcrPhJqPygvYA41GQ1yOTonHxJqOxYtBxU1fBxgDEgIfFUeOygOTT9KCj1bATYZIV4ZPwMCcyEWfA4FaAoJMgYBHH1+eR84PTltDRotCU4wFRsMDx01NDpUDCwDbwUeMg9+ZA89fjhxLx4WAWM3PQ0tXyw1HwhyGzofI3QaLAQBWWktHnt1NBgLGHsOLgM8dBoaDAB0YCoWDFNvNyYcVA5KOjpiDh0YKForExYMU281OS1vDUp3c2IyDQ8vYD8jGntxLRg3BFQOSmM5Rh5INh10NRUcHnIsTi0fZRQvHT0OGREHAVU1FiAZBg5PLwxxES8WOg4NSSUOfjEWCwJANwMoHHp9SwgcfywNGnpbHCkjHGZ+Ez0lWShEPHt0IU8CHXwXEw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3036), with no line terminators
Hash 32a5fe36738eede991cce313e65b9c7e
06d053c6e779d700e1480915a09adf331d2295ac
d0358109167ca1260783e372222676939deabff92b3c6954ca157c4cf6862903
GET /Tko3WHkvKFQ1Ri93VX4MPCYKfUsIbwUeHSMnTTMfKnIFLxg3JBk7FSE/Uz4LISRDdhcrPhJqPygvYA41GQ1yOTonHxJqOxYtBxU1fBxgDEgIfFUeOygOTT9KCj1bATYZIV4ZPwMCcyEWfA4FaAoJMgYBHH1+eR84PTltDRotCU4wFRsMDx01NDpUDCwDbwUeMg9+ZA89fjhxLx4WAWM3PQ0tXyw1HwhyGzofI3QaLAQBWWktHnt1NBgLGHsOLgM8dBoaDAB0YCoWDFNvNyYcVA5KOjpiDh0YKForExYMU281OS1vDUp3c2IyDQ8vYD8jGntxLRg3BFQOSmM5Rh5INh10NRUcHnIsTi0fZRQvHT0OGREHAVU1FiAZBg5PLwxxES8WOg4NSSUOfjEWCwJANwMoHHp9SwgcfywNGnpbHCkjHGZ+Ez0lWShEPHt0IU8CHXwXEw HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1188
date: Fri, 31 Mar 2023 06:49:07 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yzpvNdPDbb5dTiuVqoLWFSXmmG69-mXx-MlUk9arU7HKIgTr7smohw==
X-Firefox-Spdy: h2
alargeredrubygsw.com/bEtlaFBDdAYbbQh6DSADASMtCRg+cz09EgsoPQACPXlUHzU6JEMcOQh2XFxpVH1RTiAFL1hZaEo4EQkkGThYWXYFJQMHbUo9WFl+XGVXRmNKPlhZdhg7BA9tXW0VHCQAdlReaFx5UV1jWHxSW2Y
204 No Content 0 B URL HTTP/2 alargeredrubygsw.com/bEtlaFBDdAYbbQh6DSADASMtCRg+cz09EgsoPQACPXlUHzU6JEMcOQh2XFxpVH1RTiAFL1hZaEo4EQkkGThYWXYFJQMHbUo9WFl+XGVXRmNKPlhZdhg7BA9tXW0VHCQAdlReaFx5UV1jWHxSW2Y
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bEtlaFBDdAYbbQh6DSADASMtCRg+cz09EgsoPQACPXlUHzU6JEMcOQh2XFxpVH1RTiAFL1hZaEo4EQkkGThYWXYFJQMHbUo9WFl+XGVXRmNKPlhZdhg7BA9tXW0VHCQAdlReaFx5UV1jWHxSW2Y HTTP/1.1
Host: alargeredrubygsw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:07 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UzbvCZqU%2Fdw6UHncl%2BJvZpNDBIc%2BHGHa%2Fd%2Bevj1AREsv3oDeINahfnwjg50K6eJjwmDq1bfn42I1FUirJns5qrhHxbL8rr2vFCBP%2FrQNEqD2ML5lKwV4HuVCeke%2FXlLSTYrkUizkgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a6902fb0b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
alargeredrubygsw.com/eVpYaTBWZTsaDS8xbRhiSRA/DAEBajwuCUoPNlxHIxIsMFZKD34dWR1nb18ESG5pT0AQPmVYFgouOR1FCmdpT1kXPDdUFg9naUcDTXRrWx5LfC1UAV8uKAhXRGt+GUQNNmVYBkFqal0FSm5vXgRB
204 No Content 0 B URL HTTP/2 alargeredrubygsw.com/eVpYaTBWZTsaDS8xbRhiSRA/DAEBajwuCUoPNlxHIxIsMFZKD34dWR1nb18ESG5pT0AQPmVYFgouOR1FCmdpT1kXPDdUFg9naUcDTXRrWx5LfC1UAV8uKAhXRGt+GUQNNmVYBkFqal0FSm5vXgRB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eVpYaTBWZTsaDS8xbRhiSRA/DAEBajwuCUoPNlxHIxIsMFZKD34dWR1nb18ESG5pT0AQPmVYFgouOR1FCmdpT1kXPDdUFg9naUcDTXRrWx5LfC1UAV8uKAhXRGt+GUQNNmVYBkFqal0FSm5vXgRB HTTP/1.1
Host: alargeredrubygsw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:07 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0INItl6%2FU9YBsUJP1Z2dKPN2bQZRFPQt59Gy6G0%2Fg4r17397HGVlW%2FPAdXpRyfuIW%2Fp8EHhTB1yaY3Id0B9BYS4VPjAzxJjP8LYHa%2BxXokFNfskRrd25lHFTQTIUTR4Co3xZHTaYtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a6902fb7b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/imageads/013.gif
200 OK 273 kB URL HTTP/2 megaup.net/imageads/013.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Size 273 kB (272609 bytes)
Hash 7beac686260b0ebdea6f9f698938cafa
9780e2a185899456b34aad78a1cd8d1cfc856653
55b0832dd2d9cdc67b9bc6f605c4a8e45b69a533029eed40f87d4a949a49c4dc
GET /imageads/013.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: image/gif
content-length: 272609
last-modified: Thu, 01 Apr 2021 04:05:56 GMT
vary: Accept-Encoding
etag: "606546a4-428e1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/UcWFyZ2wSDhwBUwUIFlpUQ1RLVl1XCwEIAgFcKD1cHDAWKCEQIh5BGAsFT1dKHQAcAFFXBBwEUUBHEwMOTFVUExweCk8SAhUEFA4CFAVUEg1MDB0dBR0NE0JeN1RcV0lDUVoQBR8FHRAfVFNCCRhUU0JWXF9RV1QuVFNCEAUfV0ZCXzNEQFcUR1VXVC5UU0-IVGlRSM1ZcRE9CTklDURUCDxoOV1UqQ1FDV1xAUUNCXkEHGxUJFw4KQl43UEJSQkFHB1pd
200 OK 374 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/UcWFyZ2wSDhwBUwUIFlpUQ1RLVl1XCwEIAgFcKD1cHDAWKCEQIh5BGAsFT1dKHQAcAFFXBBwEUUBHEwMOTFVUExweCk8SAhUEFA4CFAVUEg1MDB0dBR0NE0JeN1RcV0lDUVoQBR8FHRAfVFNCCRhUU0JWXF9RV1QuVFNCEAUfV0ZCXzNEQFcUR1VXVC5UU0-IVGlRSM1ZcRE9CTklDURUCDxoOV1UqQ1FDV1xAUUNCXkEHGxUJFw4KQl43UEJSQkFHB1pd
IP
File type ZZip archive data\012- , ASCII text, with very long lines (479), with no line terminators
Hash 10e55efe0db7bf1e1774cb766ef3f381
62c53e3dc48370bd49328e944091c4896c1757c9
36d2400af3bd6c6bedfb1197936a3bdb1fb7e4a071648fba5547251c425dd885
GET /UcWFyZ2wSDhwBUwUIFlpUQ1RLVl1XCwEIAgFcKD1cHDAWKCEQIh5BGAsFT1dKHQAcAFFXBBwEUUBHEwMOTFVUExweCk8SAhUEFA4CFAVUEg1MDB0dBR0NE0JeN1RcV0lDUVoQBR8FHRAfVFNCCRhUU0JWXF9RV1QuVFNCEAUfV0ZCXzNEQFcUR1VXVC5UU0-IVGlRSM1ZcRE9CTklDURUCDxoOV1UqQ1FDV1xAUUNCXkEHGxUJFw4KQl43UEJSQkFHB1pd HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vingartistictaste.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 374
date: Fri, 31 Mar 2023 06:49:08 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aMcFY8pju1mV5-a6XKV40ThTdnajNUYYUestR0BTI0Jv6lyhc1Qd0w==
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
200 OK 34 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
IP
File type ASCII text, with very long lines (23470)
Hash 7461d63397ad467b014cf02d407b2f29
fd21fe248e87ca20e89940e76d84ddd04a54d66b
bfef16cdb4a8974d4e2527d49ce3fbfd319ea0289d6d792aca9d6b9f8f4d5c06
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14cc1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/hZ0w3cW8EI1kXUBMlU0xYUX0GSVlBJkQeARdxUT8mFSUPEANePA5XGx0oCkFJCy1ZFlJBKVkSUlZqVhUNWngRBR8IJwoHHBE9RRMNBT9aVxoGcVoeFQ4gWxBKVQoCX19CfgdZGA4iUx4YFGkFQQETaQVBXldiB1RcJWkFQRgOIgFFSlQOEkNfH3oDVFwlaQ-VBHRFpBDBeV3kZQUZCfgcWCgQnWFRdIX4HQF9XfQdASlV8URgdAipYCUpVCgZBWkl8EQRSVg
200 OK 609 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/hZ0w3cW8EI1kXUBMlU0xYUX0GSVlBJkQeARdxUT8mFSUPEANePA5XGx0oCkFJCy1ZFlJBKVkSUlZqVhUNWngRBR8IJwoHHBE9RRMNBT9aVxoGcVoeFQ4gWxBKVQoCX19CfgdZGA4iUx4YFGkFQQETaQVBXldiB1RcJWkFQRgOIgFFSlQOEkNfH3oDVFwlaQ-VBHRFpBDBeV3kZQUZCfgcWCgQnWFRdIX4HQF9XfQdASlV8URgdAipYCUpVCgZBWkl8EQRSVg
IP
File type ASCII text, with very long lines (847), with no line terminators
Hash 3c0679bea90f37b5aadb141cf6c1d1fb
c29b50ffb314fb0e811c903541e52ac954f50696
5b9f22521f92fe390e75f9e67d2b02d9fa5abc437e191927b3b2bd0894fa195a
GET /hZ0w3cW8EI1kXUBMlU0xYUX0GSVlBJkQeARdxUT8mFSUPEANePA5XGx0oCkFJCy1ZFlJBKVkSUlZqVhUNWngRBR8IJwoHHBE9RRMNBT9aVxoGcVoeFQ4gWxBKVQoCX19CfgdZGA4iUx4YFGkFQQETaQVBXldiB1RcJWkFQRgOIgFFSlQOEkNfH3oDVFwlaQ-VBHRFpBDBeV3kZQUZCfgcWCgQnWFRdIX4HQF9XfQdASlV8URgdAipYCUpVCgZBWkl8EQRSVg HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vingartistictaste.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 609
date: Fri, 31 Mar 2023 06:49:08 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RcXNPLdyvXrN-jIRM3yOO3nqopJHgP9A_fMk-9xjhmmssdx_BhObzQ==
X-Firefox-Spdy: h2
platform.bidgear.com/media/img/b15.png
200 OK 649 B URL HTTP/2 platform.bidgear.com/media/img/b15.png
IP
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash d832fb80c97ff291b952757bb98240d2
63732e61a0784ed68fde494f83e4686a5c4bf7fa
7b35c11af8accdb40a14303dd3ae2762a97d2527933c56b6c9be6da2d0d11943
GET /media/img/b15.png HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: image/png
content-length: 649
last-modified: Mon, 25 Jul 2022 09:43:43 GMT
etag: "62de65cf-289"
expires: Fri, 21 Apr 2023 07:19:14 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 767011
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YCb%2BAfjzz%2FRBqvqDD2nNzZG3aIe39%2BbDC88H%2F35yDC2Aq2CVZqRDK24gXX75S%2FSsrw05XCN6OEl3QIqusfxCdVENErhu9VGKT7vRsQuhrDwuQQgTkjURgLMcsJ9ISXbQiyqiKFSH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b06a6921d211bfe-OSL
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/rWWlONWo6BiBTVS0AKghSbl99BFJ/Az1aBClUD1lTNCgXBxopCh9PCxwOaEEQPVR+EwY4BykITDwHLQhbfwgqV1dtTzpFBTJUOEYcKBssVwgqBGhAC2QEIU8DNQUvEFgfXGAFT2tZZkIDNw0hQhl8W35bHnxbfgRad1lrBih8W35CAzdfehBZG0x8BRJvXW-sGKHxbfkccfFoPBFpsR34cT2tZKVAJMgZrByxrWX8FWmhZfxBYaQ8nRw8/BjYQWB9YfgBEaU87CFs
200 OK 459 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/rWWlONWo6BiBTVS0AKghSbl99BFJ/Az1aBClUD1lTNCgXBxopCh9PCxwOaEEQPVR+EwY4BykITDwHLQhbfwgqV1dtTzpFBTJUOEYcKBssVwgqBGhAC2QEIU8DNQUvEFgfXGAFT2tZZkIDNw0hQhl8W35bHnxbfgRad1lrBih8W35CAzdfehBZG0x8BRJvXW-sGKHxbfkccfFoPBFpsR34cT2tZKVAJMgZrByxrWX8FWmhZfxBYaQ8nRw8/BjYQWB9YfgBEaU87CFs
IP
File type ASCII text, with very long lines (603), with no line terminators
Hash 517d7214abb631744ffaa0f693bb8daa
8cf9b0c1766e4a895d9424e05edf7baf4d739af2
36f2b4669fc7189549b2fdc37876671524d4aab5e6b24ae543812c856338900a
GET /rWWlONWo6BiBTVS0AKghSbl99BFJ/Az1aBClUD1lTNCgXBxopCh9PCxwOaEEQPVR+EwY4BykITDwHLQhbfwgqV1dtTzpFBTJUOEYcKBssVwgqBGhAC2QEIU8DNQUvEFgfXGAFT2tZZkIDNw0hQhl8W35bHnxbfgRad1lrBih8W35CAzdfehBZG0x8BRJvXW-sGKHxbfkccfFoPBFpsR34cT2tZKVAJMgZrByxrWX8FWmhZfxBYaQ8nRw8/BjYQWB9YfgBEaU87CFs HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vingartistictaste.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 459
date: Fri, 31 Mar 2023 06:49:08 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GUEX7TD0nn4E_c5nte4g8N_hrYNN2YMD6sn1oQ-ehf6ZVr3srawDpg==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0feb476b3ad4f21891ddf5fb16903fa2
9b5e967c9979b136ba7c7fc6301ffe177e294498
b34d944ce50c3e555f1ea8d004821db8bad99550699c2c3656b731685182eeb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B34D944CE50C3E555F1EA8D004821DB8BAD99550699C2C3656B731685182EEB1"
Last-Modified: Wed, 29 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12339
Expires: Fri, 31 Mar 2023 10:14:47 GMT
Date: Fri, 31 Mar 2023 06:49:08 GMT
Connection: keep-alive
platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1680245347912
200 OK 2.4 kB URL HTTP/2 platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1680245347912
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (5343), with no line terminators
Hash 99bcb524c62a01a368a9cf101f3f54ba
7fe1c91d4368f0f97ca02fea53d1418472414a39
9468c5603a2ed6fd5d154dfc2a6fef586cd7b63639be6964c58709f61110b9c8
GET /async.php?domainid=5593&sizeid=12&zoneid=6192&k=1680245347912 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4PhQuwa6HIz62dnWsF6MITQkzBkGfzReQ3xHMyhKmK1djgWfG9EdC40GJSOKJinx2UjlOhSsmbxvTacbj1ExLXEy0xHGWsS629inwxP2%2BLrpNN3Lx1qD%2Fitx12GIZ5fWOc3bNP%2Bj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a6911bfa1bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/ObktTcUMNJD0XfBoiN0x6WnJrR3dIISAeLR52MEEwGXkUITIiJxRXNxQvbkFlAio9Fn5ILj0Sfl9tMhUhU391BCJTJjwLKgInMlRxKH59QWZce3sGKgAvPAYwS3ljHzdLeWNAc0B7dkIBS3ljBioAfWdUcCxuYUE7WH92QgFLeWMDNUt4EkBzW2VjWGZcez-QUIAUkdkMFXHtiQXNfe2JUcV4tOgMmCCQrVHEoemNEbV5tJkxy
200 OK 193 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/ObktTcUMNJD0XfBoiN0x6WnJrR3dIISAeLR52MEEwGXkUITIiJxRXNxQvbkFlAio9Fn5ILj0Sfl9tMhUhU391BCJTJjwLKgInMlRxKH59QWZce3sGKgAvPAYwS3ljHzdLeWNAc0B7dkIBS3ljBioAfWdUcCxuYUE7WH92QgFLeWMDNUt4EkBzW2VjWGZcez-QUIAUkdkMFXHtiQXNfe2JUcV4tOgMmCCQrVHEoemNEbV5tJkxy
IP
File type ASCII text, with no line terminators
Hash dc92ccc429cb249233a5ed9a97a671f7
20361f74d2160ce739f856388515c9733ead22d2
0371735dc0b8e820ab5d0d68c17b7b596ba8aaf6b1469790e8b715d0370b0484
GET /ObktTcUMNJD0XfBoiN0x6WnJrR3dIISAeLR52MEEwGXkUITIiJxRXNxQvbkFlAio9Fn5ILj0Sfl9tMhUhU391BCJTJjwLKgInMlRxKH59QWZce3sGKgAvPAYwS3ljHzdLeWNAc0B7dkIBS3ljBioAfWdUcCxuYUE7WH92QgFLeWMDNUt4EkBzW2VjWGZcez-QUIAUkdkMFXHtiQXNfe2JUcV4tOgMmCCQrVHEoemNEbV5tJkxy HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vingartistictaste.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 193
date: Fri, 31 Mar 2023 06:49:08 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4KKCNobcaR_WgMS9WpqdmA25NlbL7dd1yhSI-JjieSHoN3OHl0QAPA==
X-Firefox-Spdy: h2
a.exdynsrv.com/ad-provider.js
200 OK 27 kB URL HTTP/1.1 a.exdynsrv.com/ad-provider.js
IP
File type ASCII text, with very long lines (52886)
Hash caff325c3dedde56662118710021ba52
e8ac8e95435ebffc411a75ba572b492079db0903
2599a4794875f4b05a6e1166832a35356a2144b6f6edabdf4016206cac7490bc
GET /ad-provider.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:08 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 26741
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"11f47ce07ddb24215f4f3a5ce34"
X-HW: 1680245348.dop016.sk1.t,1680245348.cds213.sk1.shn,1680245348.dop016.sk1.t,1680245348.cds246.sk1.c
Access-Control-Allow-Origin: *, *
dmmzkfd82wayn.cloudfront.net/feWVLWGEaCiU+Xg0ML2VWT1F6bFBfDzg3DwlYOWkiAFMHDyo2D20sGx1Ye34NGAssZUccCyhlUF8ELzpcTUM/KA4SWD0rFwgXKToDCghtLQBECCQiCBUJKn1TP1BlaERLVWMvCBcBJC8SXFd7NhVcV3tpUVdVbmsjXFd7LwgXU399UjtAeWgZT1FuayNcV3-sqF1xWCmlRTEt7cURLVSw9AhIKbmonS1V6aFFIVXp9U0kDIioEHwozfVM/VHttT0lDPmVQ
200 OK 617 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/feWVLWGEaCiU+Xg0ML2VWT1F6bFBfDzg3DwlYOWkiAFMHDyo2D20sGx1Ye34NGAssZUccCyhlUF8ELzpcTUM/KA4SWD0rFwgXKToDCghtLQBECCQiCBUJKn1TP1BlaERLVWMvCBcBJC8SXFd7NhVcV3tpUVdVbmsjXFd7LwgXU399UjtAeWgZT1FuayNcV3-sqF1xWCmlRTEt7cURLVSw9AhIKbmonS1V6aFFIVXp9U0kDIioEHwozfVM/VHttT0lDPmVQ
IP
File type ASCII text, with very long lines (846), with no line terminators
Hash 985998688983b2149fbe53697ec338e8
3f30d2a4e56d36d2aa774b476f19ff88c069511a
47b4e8c96d6477bf7e98c1481564dc975d2037a5a3f06af03126426d20c91dc1
GET /feWVLWGEaCiU+Xg0ML2VWT1F6bFBfDzg3DwlYOWkiAFMHDyo2D20sGx1Ye34NGAssZUccCyhlUF8ELzpcTUM/KA4SWD0rFwgXKToDCghtLQBECCQiCBUJKn1TP1BlaERLVWMvCBcBJC8SXFd7NhVcV3tpUVdVbmsjXFd7LwgXU399UjtAeWgZT1FuayNcV3-sqF1xWCmlRTEt7cURLVSw9AhIKbmonS1V6aFFIVXp9U0kDIioEHwozfVM/VHttT0lDPmVQ HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vingartistictaste.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 617
date: Fri, 31 Mar 2023 06:49:08 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kOvX2cxKsZUgm8V3-5wHMKc3mRMFO9dDfTr-c_CWuQQ8EW9vNzm4fA==
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
200 OK 951 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
IP
File type PNG image data, 114 x 114, 8-bit colormap, non-interlaced\012- data
Hash 76852bc6b2c028db97322a74e85bd020
ed52fb4de0d51f93277bbaae42fa80ba5f92c31e
8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884
GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: image/png
content-length: 951
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-3b7"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
imp9.bidgear.com/rec?t=1&z=6192&uuid=c3af9de23cbd4448acf6e20bf94b4471&p=28&g=NO&token=4a44335432&tbg=1680245348
200 OK 599 B URL HTTP/2 imp9.bidgear.com/rec?t=1&z=6192&uuid=c3af9de23cbd4448acf6e20bf94b4471&p=28&g=NO&token=4a44335432&tbg=1680245348
IP
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6192&uuid=c3af9de23cbd4448acf6e20bf94b4471&p=28&g=NO&token=4a44335432&tbg=1680245348 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NK82kvZp2juYzV50p7YqjqjX%2BuFkXuaJBC4EPbm0lnXFbrC5eFp3YmkhbxAss4%2Fc%2FM2IgRlkAdc2%2BRsaJCp5vH6hLDsM0IitJms5Aa2pSm8Yet84eHmN1lfFKZ%2Fumbf9cd0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a6921d291bfe-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c90bd7c311e02a4f9063c08ebf5261eb
4e2b8db47531a9c124ab0c6cf5a0900a199348ca
34744e7e236ec71b63064fc97c38099ef3460770078518828afd3078a835ef22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 06:49:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
megaup.net/themes/flow/js/jquery.fileupload.js
200 OK 32 kB URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload.js
IP
Hash 845e9f4dc886b3fd6439acd883b7bf56
7ed0d3dd5e2c605812cb86dff455a99b59deb683
494f0edd0ad833a8cf0a6c5e6ee1d4342d21ba6f7bc629d7ebc2d8eef5488c32
GET /themes/flow/js/jquery.fileupload.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-dbd4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c90bd7c311e02a4f9063c08ebf5261eb
4e2b8db47531a9c124ab0c6cf5a0900a199348ca
34744e7e236ec71b63064fc97c38099ef3460770078518828afd3078a835ef22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 06:49:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash ce7308102e0dd738be581569aab3c18f
1cad180ddadf6b3f9da7cddb50f6b8295128553d
1927bf86d6f33ee13042472aadda4133d65bc9535025c5f8a36dc76dfbaa6012
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2850
Cache-Control: max-age=94633
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 06:49:08 GMT
Etag: "642545eb-1d7"
Expires: Sat, 01 Apr 2023 09:06:21 GMT
Last-Modified: Thu, 30 Mar 2023 08:18:51 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
vingartistictaste.com/utx?cb=2LHpOJHThEhS&top=megaup.net&tid=761186
204 No Content 0 B URL HTTP/2 vingartistictaste.com/utx?cb=2LHpOJHThEhS&top=megaup.net&tid=761186
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=2LHpOJHThEhS&top=megaup.net&tid=761186 HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:08 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 31 Mar 2023 06:50:08 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vsXbwOW4I6PSmGv5qzWASZmvvRAW52sab1ACLGZKIWO0lHmbB-HVow==
X-Firefox-Spdy: h2
vingartistictaste.com/utx?cb=bCqUpKSTEdO2&top=megaup.net&tid=825911
204 No Content 0 B URL HTTP/2 vingartistictaste.com/utx?cb=bCqUpKSTEdO2&top=megaup.net&tid=825911
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=bCqUpKSTEdO2&top=megaup.net&tid=825911 HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:08 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 31 Mar 2023 06:50:08 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L-TTskBoy-t624p_s9QU_bKKRfbpLKmI3cUOIfUBaHGwlls4ctIqbQ==
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=440480300&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&ul=en-us&de=UTF-8&dt=Nun.Massacre.Definitive.Edition.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1498086202&gjid=769843527&cid=1073024686.1680245348&tid=UA-108868042-1&_gid=2087791335.1680245348&_r=1>m=457e33t0&jsscut=1&z=1946883183
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=440480300&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&ul=en-us&de=UTF-8&dt=Nun.Massacre.Definitive.Edition.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1498086202&gjid=769843527&cid=1073024686.1680245348&tid=UA-108868042-1&_gid=2087791335.1680245348&_r=1>m=457e33t0&jsscut=1&z=1946883183
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j99&a=440480300&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&ul=en-us&de=UTF-8&dt=Nun.Massacre.Definitive.Edition.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1498086202&gjid=769843527&cid=1073024686.1680245348&tid=UA-108868042-1&_gid=2087791335.1680245348&_r=1>m=457e33t0&jsscut=1&z=1946883183 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain
Content-Length: 0
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://megaup.net
date: Fri, 31 Mar 2023 06:49:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/
200 OK 73 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/
IP
File type ASCII text, with no line terminators
Hash de37377b72195a4f064edf7ec8a76676
ed544d5b6a37acad78498099407c648a93316ddb
b3209cc0b1d1b71e85af4e843afe00a3079f3286d52b3fb47e72c6c5c48b8399
GET / HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73
date: Fri, 31 Mar 2023 06:49:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZvhjupfJ6djWpnmb2udTxiwtS-iIYuHXjfIjCVoun_q7Mg2wdORutQ==
X-Firefox-Spdy: h2
syndication.exdynsrv.com/v1/api.php
200 OK 858 B URL HTTP/1.1 syndication.exdynsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (1186), with no line terminators
Hash 0fe3c8be2dfb1f04eb54f18e7e5152f3
a5c37cbd93642cfbe2af266c2c5a852006e48c3a
787a42c5231d345ad87e287f59f1990b83423bacb151883231aba8b731fa276f
POST /v1/api.php HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 332
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 06:49:08 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2264268264653482.316658494122212351%22%3B%7D; expires=Sun, 30-Mar-2025 06:49:08 GMT; Max-Age=63072000; path=/; domain=exdynsrv.com; secure; SameSite=None
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AQMjQ7TmMZ9gJMzejVc5DRhpN61e2FLhtMGUy8BnagjILEFPoin1CXXAv-STxILXoVukAbR3l0Ps6Q
302 Found 400 B URL HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AQMjQ7TmMZ9gJMzejVc5DRhpN61e2FLhtMGUy8BnagjILEFPoin1CXXAv-STxILXoVukAbR3l0Ps6Q
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (383)
Hash 75d83077190328da303a0729a8fabee1
4c4e4c0fd37d80489d5a4ea9ac1eaa41b96b3ce3
6802c5fc200c57af860218ce7839b8d2e47173cd79fb4d54d0c7d7de40aec0f2
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AQMjQ7TmMZ9gJMzejVc5DRhpN61e2FLhtMGUy8BnagjILEFPoin1CXXAv-STxILXoVukAbR3l0Ps6Q HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 31 Mar 2023 06:49:08 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-83366135%3A1680245348432907&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AQMjQ7R1d5wlgs02CisVUngdX094HM2HNsLztcuxREEGwnvO3kcap_FF4YrEbWjyaBpJY_ikXvJ0Ww&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-MQj88NKdD2-8mBVGa9iUBQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 400
server: GSE
set-cookie: __Host-GAPS=1:4gANGPmd13XI_jIshDh-eaUjfrYVWA:Oicikw_0jY0cDGLQ;Path=/;Expires=Sun, 30-Mar-2025 06:49:08 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
theharityhild.buzz/RjJWTEY9ECU7GTNAOm58ZFoiODY1CHljKyNVNzk2aFwzOGk1RXgmNWQedD8rIBBsfWpkQTs6ZHwQYmJ1ZB50OCchbT8oZHwQbn90cAFlbmpkQSMuGS9WZG58ZFRuf3UlAmIua3BXZi5rclY0fGt%2FBm57ayAEMykjJVc1LyUlV3Qx
502 Bad Gateway 471 B URL HTTP/2 theharityhild.buzz/RjJWTEY9ECU7GTNAOm58ZFoiODY1CHljKyNVNzk2aFwzOGk1RXgmNWQedD8rIBBsfWpkQTs6ZHwQYmJ1ZB50OCchbT8oZHwQbn90cAFlbmpkQSMuGS9WZG58ZFRuf3UlAmIua3BXZi5rclY0fGt%2FBm57ayAEMykjJVc1LyUlV3Qx
IP
Hash d9bccde084c491a04e52752f2af1e16d
5a7a761608a0d79d383e104a0455f76bb0d2248e
aed5aade370f65d015700850f0a3a80c5f47066e82d200f5cf1d2d44657388dd
GET /RjJWTEY9ECU7GTNAOm58ZFoiODY1CHljKyNVNzk2aFwzOGk1RXgmNWQedD8rIBBsfWpkQTs6ZHwQYmJ1ZB50OCchbT8oZHwQbn90cAFlbmpkQSMuGS9WZG58ZFRuf3UlAmIua3BXZi5rclY0fGt%2FBm57ayAEMykjJVc1LyUlV3Qx HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 502 Bad Gateway
set-cookie: f3679c0baad8b2e456a7b8bdbe7182f8=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AQMjQ7ShN63IASJnxR2IUA9WANdVQs2QlmrwgTQXpjYkuE9-QU6b2lk_wYnaLA_0LJuRXPViIV76Qg
302 Found 397 B URL HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AQMjQ7ShN63IASJnxR2IUA9WANdVQs2QlmrwgTQXpjYkuE9-QU6b2lk_wYnaLA_0LJuRXPViIV76Qg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (381)
Hash f7752fd853344f6c60cf89844a61320a
1b3acb46fcabb54dd0eb157f1b3507d57b70ac6d
8f14004a65a0d257001568d503a522205db7746fd699963dddc501f7117ed459
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AQMjQ7ShN63IASJnxR2IUA9WANdVQs2QlmrwgTQXpjYkuE9-QU6b2lk_wYnaLA_0LJuRXPViIV76Qg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 31 Mar 2023 06:49:08 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1056452253%3A1680245348442420&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AQMjQ7RPVc7PQ2qSrLObo1YH85cZgD3YkPDQM6JlCuJtxG8Y34yEYt0Kwy5-3Ea8fQbuaJD6XSXEhw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-obj1gVV_F5yoAIPwptptaA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 397
server: GSE
set-cookie: __Host-GAPS=1:HD3G9LIM-NEm1-JYNFud4RHvPbWAEA:_xrwxdyF85uHh5vm;Path=/;Expires=Sun, 30-Mar-2025 06:49:08 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
vingartistictaste.com/utx?cb=yJUbz8OfksNZ&top=megaup.net&tid=876318
204 No Content 0 B URL HTTP/2 vingartistictaste.com/utx?cb=yJUbz8OfksNZ&top=megaup.net&tid=876318
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=yJUbz8OfksNZ&top=megaup.net&tid=876318 HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:08 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 31 Mar 2023 06:50:08 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o-g59gNy65tZZ_rT2a1guUPtlPbnQKD5Z1b-HR1Xq_VSub0LiWZCqA==
X-Firefox-Spdy: h2
vingartistictaste.com/utx?cb=Aw4QosOiQnpa&top=megaup.net&tid=764141
204 No Content 0 B URL HTTP/2 vingartistictaste.com/utx?cb=Aw4QosOiQnpa&top=megaup.net&tid=764141
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=Aw4QosOiQnpa&top=megaup.net&tid=764141 HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:08 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 31 Mar 2023 06:50:08 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Rc6LSWxF6GimrPnP6tWJ_l1DhM4gga58n6Dlm62xFiD6tNltFy8Mcg==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 0df2e2ff4ead187d9223303ef5099043
d2a02977a9a7606d61848f7df79197c950a487eb
e876264f6b57ac3f7e70b97c840fe9519bfde482e7ffd3009a4d21cc1603f372
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 31 Mar 2023 01:11:36 GMT
Expires: Fri, 07 Apr 2023 01:11:35 GMT
Etag: "d2a02977a9a7606d61848f7df79197c950a487eb"
Cache-Control: max-age=583946,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b06a692d905b500-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash ce7308102e0dd738be581569aab3c18f
1cad180ddadf6b3f9da7cddb50f6b8295128553d
1927bf86d6f33ee13042472aadda4133d65bc9535025c5f8a36dc76dfbaa6012
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3646
Cache-Control: max-age=95429
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 06:49:08 GMT
Etag: "642545eb-1d7"
Expires: Sat, 01 Apr 2023 09:19:37 GMT
Last-Modified: Thu, 30 Mar 2023 08:18:51 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OW2oDMRC7Si+wRvOwvc53v1tI6QH2YferodAUUtDh482WpSMGRkijGYXaABtMnqAnLyeMLBIKgmuQ6Hx5PdOFn/Vj+vkKl3qlZNMCplLg3Ww+aqJ7chkTowi95JwBZpFOYxdBIzo0mvs2BUCkcATf354fLR1KA24a0eftLqWneCe4bduptapWmktd0tqvz82WxVFtam31uBn/P4odAXv2H6WJm7pykIM4e4EPefr+vSzkYd8RjwAh67RGaTLJonGWUc2T5aSmKc9zV+4AmOYRVQEAAA==
200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OW2oDMRC7Si+wRvOwvc53v1tI6QH2YferodAUUtDh482WpSMGRkijGYXaABtMnqAnLyeMLBIKgmuQ6Hx5PdOFn/Vj+vkKl3qlZNMCplLg3Ww+aqJ7chkTowi95JwBZpFOYxdBIzo0mvs2BUCkcATf354fLR1KA24a0eftLqWneCe4bduptapWmktd0tqvz82WxVFtam31uBn/P4odAXv2H6WJm7pykIM4e4EPefr+vSzkYd8RjwAh67RGaTLJonGWUc2T5aSmKc9zV+4AmOYRVQEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01OW2oDMRC7Si+wRvOwvc53v1tI6QH2YferodAUUtDh482WpSMGRkijGYXaABtMnqAnLyeMLBIKgmuQ6Hx5PdOFn/Vj+vkKl3qlZNMCplLg3Ww+aqJ7chkTowi95JwBZpFOYxdBIzo0mvs2BUCkcATf354fLR1KA24a0eftLqWneCe4bduptapWmktd0tqvz82WxVFtam31uBn/P4odAXv2H6WJm7pykIM4e4EPefr+vSzkYd8RjwAh67RGaTLJonGWUc2T5aSmKc9zV+4AmOYRVQEAAA== HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2264268264653482.316658494122212351%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 06:49:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.0199%22%7D; expires=Sun, 30 Mar 2025 06:49:08 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
static.a-ads.com/a-ads-banners/432413/300x250?region=eu-central-1
200 OK 185 kB URL HTTP/2 static.a-ads.com/a-ads-banners/432413/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 300 x 250\012- data
Size 185 kB (185390 bytes)
Hash a2b40be8d3b0bd39ad63b96bded8c955
0c281ba913a56d5b39df52e1cc7b88450c0b21af
f0819c7f352206ae6b784246fc71e3eb93e3a2d65ca539dc9438c98f2a9177ae
GET /a-ads-banners/432413/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: image/gif
content-length: 185390
x-amz-id-2: 2Ih0WqrejCS0GR/K3nA/oiJaz7/BiGlc11QJKQeOaf5OS5TFVPBBN+ugKM3Gz0ANOk9YoiINkBo=
x-amz-request-id: M19K7C5VHZSHNDVF
x-amz-replication-status: COMPLETED
last-modified: Fri, 23 Dec 2022 09:21:16 GMT
etag: "a2b40be8d3b0bd39ad63b96bded8c955"
cache-control: max-age=315360000
x-amz-version-id: wBQUN8UYWQe5ZIWAPnMLUT42DK.mDsam
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
200 OK 106 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
IP
File type ASCII text, with very long lines (28941)
Size 106 kB (106091 bytes)
Hash 5b9ae766ad0eb25541e54105dfce09c5
af625bc57718cd08393aee854d7f0906c444142c
9ec26d3d8090724d14ac1cf48e121c53e10b8758849c1949407b9250754cf33b
GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/173290/aa68fc7c6a0638701bbb72f7992e1094895ec2ff.webp
200 OK 11 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/173290/aa68fc7c6a0638701bbb72f7992e1094895ec2ff.webp
IP
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3c995f51d1e127f1154682cc250ebf0d
aa68fc7c6a0638701bbb72f7992e1094895ec2ff
a1ec6a07b965a746b10df04adfb7f578760762fa2e9ad3f7626a58286a44edf8
GET /library/173290/aa68fc7c6a0638701bbb72f7992e1094895ec2ff.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: image/webp
content-length: 11058
last-modified: Thu, 04 Nov 2021 10:05:55 GMT
etag: "6183b083-2b32"
expires: Wed, 25 Oct 2023 04:40:35 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-robots-tag: noindex, follow
x-cache-op: HIT
server: CDN77-Turbo
x-77-nzt: AblMCQ2L/PT/yAmVAA
x-77-nzt-ray: c0a4cc28c19c89a4648226640a82da24
x-accel-expires: @1702013980
x-cache: HIT
x-age: 9767368
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 035ff34de1720aa1fe117278f90d64f9
f95111008ef3625f7b8675e9e3b856042b6a828b
41ab22d9b3e08834d30ccf6390db63520fda50c7b11aea66131efc10baba7259
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102655
Date: Fri, 31 Mar 2023 06:49:08 GMT
Etag: "642559a7-1d7"
Expires: Sat, 01 Apr 2023 11:20:03 GMT
Last-Modified: Thu, 30 Mar 2023 09:43:03 GMT
Server: ECAcc (bsa/EACA)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tidEIPWV3AD5Ei_R6mPRBwKZNe531rZg8pzPWqEO5e2hrHweRUJbBg==
Age: 5820
parrecleftne.xyz/utx?tid=832633&top=megaup.net&cb=1ZBe4NeYxjlX
204 No Content 0 B URL HTTP/2 parrecleftne.xyz/utx?tid=832633&top=megaup.net&cb=1ZBe4NeYxjlX
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?tid=832633&top=megaup.net&cb=1ZBe4NeYxjlX HTTP/1.1
Host: parrecleftne.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 31 Mar 2023 06:49:08 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 31 Mar 2023 06:50:08 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MsMxE2ZOKcRwqR9RlTEQouTLIiTMcngUpjxO2DDVC50ivcSrmVHrGw==
X-Firefox-Spdy: h2
vingartistictaste.com/multi?cs=Y0gyZTBafAdUCVdxClMBW3wGVwU&abt=0&red=1&sm=76&k=download%20file%20massacre%20definitive%20edition&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_VYZD=1680245348465&crc=1
200 OK 1.6 kB URL HTTP/2 vingartistictaste.com/multi?cs=Y0gyZTBafAdUCVdxClMBW3wGVwU&abt=0&red=1&sm=76&k=download%20file%20massacre%20definitive%20edition&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_VYZD=1680245348465&crc=1
IP
File type ASCII text, with very long lines (3322), with no line terminators
Hash 81c3632ec97829a6ebe5bd9959b42dab
c30dd80de2d3d591335fe85d2c2fd9a2ebe6002e
4ee087e23a143ce7d92b6e2cc28e6997f029e1f23b511d15669e519c7e561acb
GET /multi?cs=Y0gyZTBafAdUCVdxClMBW3wGVwU&abt=0&red=1&sm=76&k=download%20file%20massacre%20definitive%20edition&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_VYZD=1680245348465&crc=1 HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1613
date: Fri, 31 Mar 2023 06:49:08 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=350b6ae4-6540-4eda-aada-6e3059977e96
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3F1EBhSPUsej6jZrrKWC0GwGhTe9FfkwkrDf4KcVL2UbOG_WNqfxSQ==
X-Firefox-Spdy: h2
theharityhild.buzz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Content-Length: 384
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
theharityhild.buzz/TkgwWUcVaghqdXh7A3trbGoceyF2ewM6d3oqHW8ifiodbSMseB1gc3Z%2EHT9xKy1VOiItK1M6ImxkEm9xfCwAPXAqZVQ9cCplBGx2f2UIbnV7ZQhudHh%2BVGx%2EfXpSaGViakMuZWJqRDEiJilCMDM3IFk1I2AqRSM9bGQSaHdgfRJ1IS8kQzxrKClcKiJiLlE1NCsV
200 OK 13 kB URL HTTP/2 theharityhild.buzz/TkgwWUcVaghqdXh7A3trbGoceyF2ewM6d3oqHW8ifiodbSMseB1gc3Z%2EHT9xKy1VOiItK1M6ImxkEm9xfCwAPXAqZVQ9cCplBGx2f2UIbnV7ZQhudHh%2BVGx%2EfXpSaGViakMuZWJqRDEiJilCMDM3IFk1I2AqRSM9bGQSaHdgfRJ1IS8kQzxrKClcKiJiLlE1NCsV
IP
File type ASCII text, with very long lines (33865), with no line terminators
Hash 58382332ce9c2c9668dafb2634da7b13
85af7b60e387c9a980d48673d8f92fa624f67b94
4fc0b4cf217317f1f3ad65f588cd5d124c1491dce9388b7196653a2051332025
GET /TkgwWUcVaghqdXh7A3trbGoceyF2ewM6d3oqHW8ifiodbSMseB1gc3Z%2EHT9xKy1VOiItK1M6ImxkEm9xfCwAPXAqZVQ9cCplBGx2f2UIbnV7ZQhudHh%2BVGx%2EfXpSaGViakMuZWJqRDEiJilCMDM3IFk1I2AqRSM9bGQSaHdgfRJ1IS8kQzxrKClcKiJiLlE1NCsV HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 0b27a53bb2a2f86dabd4d5826b19014e=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8449-7eDEcfX8HFekP3AvnCtQzMIWwCE"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.engine.4dsply.com/Scripts/infinity.js.aspx?guid=86ddec5c-b957-455f-87da-f034ba331fa2
200 OK 73 kB URL HTTP/2 cdn.engine.4dsply.com/Scripts/infinity.js.aspx?guid=86ddec5c-b957-455f-87da-f034ba331fa2
IP
File type ASCII text, with very long lines (64095)
Hash 1a1627fc7c6e603eda3edd8655fc6c29
20f8afc5d6a451ed09be5184bb6519bc70117ea6
b8937ba75d8a21e0d1cc6da1691fdc7c5710105b98630fd3362e6d1aee48e907
GET /Scripts/infinity.js.aspx?guid=86ddec5c-b957-455f-87da-f034ba331fa2 HTTP/1.1
Host: cdn.engine.4dsply.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: application/x-javascript; charset=utf-8
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version
vary: Accept-Encoding
cache-control: public, max-age=900
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
last-modified: Fri, 31 Mar 2023 06:41:09 GMT
cf-cache-status: HIT
expires: Fri, 31 Mar 2023 07:04:08 GMT
server: cloudflare
cf-ray: 7b06a6951b16b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
6.adsco.re/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:09 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://megaup.net
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b06a6985b0e0b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 936c0c039da628c3d17f54cedef3a208
eef536f92ef7a4fc9ae3b0f1d426650fa1e4ec98
a2027e6b28861a8374df580cb629096db6ef763f277fead8a0d6d72e519ded88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2027E6B28861A8374DF580CB629096DB6EF763F277FEAD8A0D6D72E519DED88"
Last-Modified: Wed, 29 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5695
Expires: Fri, 31 Mar 2023 08:24:04 GMT
Date: Fri, 31 Mar 2023 06:49:09 GMT
Connection: keep-alive
vingartistictaste.com/floater?cs=TGxIOUZ1VH8Nfn9Vfgl3flh9CHI&abt=0&red=1&sm=83&k=download%20file%20massacre%20definitive%20edition&v=0.9.1.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=oi1_&_1LbV=1680245348464&crc=1
200 OK 5.2 kB URL HTTP/2 vingartistictaste.com/floater?cs=TGxIOUZ1VH8Nfn9Vfgl3flh9CHI&abt=0&red=1&sm=83&k=download%20file%20massacre%20definitive%20edition&v=0.9.1.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=oi1_&_1LbV=1680245348464&crc=1
IP
File type ASCII text, with very long lines (7847), with no line terminators
Hash 8bb3ab6bb0a7907d668914376f83b528
9f219141abe9ca92f6cda9d7fa44b13059609c97
ff0c47e28db7de92a419f6d72c17752973320184d1a98ded06253ab80fb545d4
GET /floater?cs=TGxIOUZ1VH8Nfn9Vfgl3flh9CHI&abt=0&red=1&sm=83&k=download%20file%20massacre%20definitive%20edition&v=0.9.1.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=oi1_&_1LbV=1680245348464&crc=1 HTTP/1.1
Host: vingartistictaste.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 5235
date: Fri, 31 Mar 2023 06:49:09 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=03fb3313-21dc-46fa-af28-83ddfde2517b
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uhs0hKMwE5g9TDifIdIct95eSxdGu29qK14xMUYlctlyNpOhpfiVzw==
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 102 kB IP
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Fri, 31 Mar 2023 04:46:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6lPClaH7tjiTFwWrM%2FFJUlZUBJR8AnseSVkCX4nfPPTGuwzyhPxUm6JTJLcqDgSZYT%2FmUcpBByEbItbNs3hVGtm7Diwt39fmj7VwJSc8ADWsd2HZFL6zKd7afOBMpB9Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b06a69399d62408-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
File type ASCII text, with no line terminators
Hash a684f3b449a125d2285678a6be0172a9
f5ba7774839ee9f45e1f2a88d322d3c3cfcc971f
91945112515f30fe6017f31f87a483adb2040d8435fce14fe9c44e89cf433b2c
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3297
Expires: Fri, 31 Mar 2023 07:44:06 GMT
Date: Fri, 31 Mar 2023 06:49:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3237
Expires: Fri, 31 Mar 2023 07:43:06 GMT
Date: Fri, 31 Mar 2023 06:49:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3297
Expires: Fri, 31 Mar 2023 07:44:06 GMT
Date: Fri, 31 Mar 2023 06:49:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3237
Expires: Fri, 31 Mar 2023 07:43:06 GMT
Date: Fri, 31 Mar 2023 06:49:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3297
Expires: Fri, 31 Mar 2023 07:44:06 GMT
Date: Fri, 31 Mar 2023 06:49:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F067b6c49-6e52-4dcc-af72-f7292299f912.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F067b6c49-6e52-4dcc-af72-f7292299f912.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 876e5464aba1639f3b07b07d1d694514
93885a6205be71d16187782b1803f53d5c8538cb
6e2b6b15f462922a9e8260f55cfcd94d488d1a48435458db43270ea3b825d8c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F067b6c49-6e52-4dcc-af72-f7292299f912.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13775
x-amzn-requestid: 43d1a1f3-b189-4fcd-a298-429123d1921b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUloF9woAMFU4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260156-13778451622503253ea252eb;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: bXA995GxGti4_AzSi9F19ZNvUwm5_ZSBw0BB0lRIfNHcmX7Ajt6bSg==
via: 1.1 8731d2a1a7d15f67b588bf58f652f9f0.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:46:36 GMT
age: 32553
etag: "93885a6205be71d16187782b1803f53d5c8538cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36630e1b-1c89-4e55-ac67-f104436fd02c.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36630e1b-1c89-4e55-ac67-f104436fd02c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45a4bac8a91b725def9099fd6f720285
134ace682a567c7e385817c8f8af0d49acfde847
3d60e54132cbbba19ce8ad4bdf79a4b3b6ae74573f45bf4f080a283aa250b53c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36630e1b-1c89-4e55-ac67-f104436fd02c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8358
x-amzn-requestid: 8069495f-4ea5-4975-8369-fc4db9199774
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUllH2fIAMFdlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260156-2e5418a132076d0569e30de6;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: z4Jd4oIn19s5lhDNYlrrh6RlxDz7mxCg1KJKUyFfJfqZsymvADn88g==
via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 6a6653dfb47ccc5082f2a5b9d0d168ce.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:47:31 GMT
age: 32498
etag: "134ace682a567c7e385817c8f8af0d49acfde847"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2f9b47f-7e28-468a-96d8-f92534ab813e.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2f9b47f-7e28-468a-96d8-f92534ab813e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 809c8ac4f4ec3c118e43e401ff7f1570
5e3437ccd6b18b17b5fd2ffe67ee592acb01eb29
5c8e37e45cabe2b53d654fb01f869846c282f53b36a8fdb3521992aedc96cf70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2f9b47f-7e28-468a-96d8-f92534ab813e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9471
x-amzn-requestid: 3882bb5f-32d0-451d-aeb2-ff6474747a14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnVE_Gx_oAMFmsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6426021f-486afb1d6942e493158fe68a;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:41:51 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: Xfe4nK7qR9dZMWpLgTzWWNahRgBatgegu_hUkG6hX-VHhZaCxauudg==
via: 1.1 4e4278a2778e72cc34feef6db603088c.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:46:27 GMT
age: 32562
etag: "5e3437ccd6b18b17b5fd2ffe67ee592acb01eb29"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39bdd16276747b1445a79e674a2a3347
d0676f63738484298a78b7abf7e4934c3d256065
67aa526299060c2a39c4baa10fd03f121497dccd5e765676639ed73ac529c34b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11061
x-amzn-requestid: 428128ec-c441-4ff7-9c84-880a01672b00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnVFnFf0IAMFTvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260223-185c48300f161931310fa35f;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:41:55 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: gc77o7y-moH1HuMEZFe9-00DVAda9baa-5VEPlMA4SIZDJNzQ8jUlA==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:49:08 GMT
etag: "d0676f63738484298a78b7abf7e4934c3d256065"
content-type: image/jpeg
age: 32401
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0530376e431b6563796e4abb0db0bc4e
6921f4bd83a806e1ea8247854ad4c045fa7ee298
d6371c81d5494d5e50fd5cc1cfe1ce28213dfa70ea5a94df82c9f4b3e6430a53
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10490
x-amzn-requestid: 0525e5c4-485e-47eb-ab95-1136e4d5c29a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUnTEztoAMFzMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260161-54b47454475ff6ee4d880534;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:41 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: AdbJgoCBGJGvjP53lBj3_GWyuRF8O_fgNTPPEjUmFmyRxMQl2pgTzw==
via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:54:29 GMT
age: 32080
etag: "6921f4bd83a806e1ea8247854ad4c045fa7ee298"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8600e41520408df4865627256a0a0736
dffeaf1a8f73ae9f6247b9dc7f05301fefc00aef
9163d80d7b6087b804e6682a50d4f66339d339894cf1c5808f2e5c2e0b3de930
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5806
x-amzn-requestid: cee5b166-592b-405e-b5f1-e36eb249ec59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUllFFooAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260156-01840fa47177285667bca060;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jktkwc3JLU31AY5B5pC5JTjPGARjflqoJRZiD6IpF5-10IO6UNlH_Q==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 adc2002956acc4d61bfbf3b973fdf246.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:46:33 GMT
age: 32556
etag: "dffeaf1a8f73ae9f6247b9dc7f05301fefc00aef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
200 OK 32 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
IP
File type Web Open Font Format, TrueType, length 31568, version 1.1\012- data
Hash e0c4ac0e73196bd0469c5c33304b7773
bb071565f82907d117b0732dca8013409162c67d
ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af
GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7; _ga=GA1.2.1073024686.1680245348; _gid=GA1.2.2087791335.1680245348; _gat_gtag_UA_108868042_1=1; a=v2P9Gq3Kr8UNdOeqZZaqnU1TIF68tZWT
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:09 GMT
content-type: font/woff
content-length: 31568
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7b50"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 844cb76d84e051ab3709ed690f0cce4a
8b0c3757d4e692acca542fefc6109986ae546f61
6eea12aaeada523c06d1ec7532a8a3d652e07701e04ed825e9f9f3b62da2fcfd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6EEA12AAEADA523C06D1EC7532A8A3D652E07701E04ED825E9F9F3B62DA2FCFD"
Last-Modified: Wed, 29 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4814
Expires: Fri, 31 Mar 2023 08:09:23 GMT
Date: Fri, 31 Mar 2023 06:49:09 GMT
Connection: keep-alive
tags.h12-media.com/v3/go.asp?payload=%7B%22mtoken%22%3A%2291.90.42.154%22%2C%22adtype%22%3A%22sticky%22%2C%22adformat%22%3A%22stickybottom%22%2C%22pubid%22%3A%22f21629f80d751907d93079a5076d4249%22%2C%22adunitid%22%3A%2228061%22%2C%22topurl%22%3A%22https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar%22%2C%22docref%22%3A%22%22%2C%22auction%22%3A%222g9g5zks041%22%2C%22pubsubid%22%3Anull%2C%22index%22%3A%221%22%2C%22ishidden%22%3Afalse%2C%22istopwindow%22%3Atrue%2C%22isscrollable%22%3Atrue%2C%22dayofweek%22%3A5%2C%22hourofday%22%3A6%2C%22clang%22%3A%22en-US%22%2C%22docdir%22%3A%22LTR%22%2C%22cdims%22%3A%5B1280%2C898%5D%2C%22ddims%22%3A%5B1280%2C898%5D%2C%22sbars%22%3A%5B0%2C0%5D%2C%22endpoint%22%3A%22https%3A%2F%2Ftags.h12-media.com%22%2C%22coords%22%3A%5B643%2C434%5D%2C%22pwidth%22%3A%5B100%2C0%2C1170%2C1280%5D%2C%22pheight%22%3A%5Bnull%2C0%2C256%2C286%2C421%2C466%2C706%5D%2C%22maxwidth%22%3A1280%2C%22maxheight%22%3A898%7D&rnd=0.25557070802338444
200 OK 25 kB URL HTTP/2 tags.h12-media.com/v3/go.asp?payload=%7B%22mtoken%22%3A%2291.90.42.154%22%2C%22adtype%22%3A%22sticky%22%2C%22adformat%22%3A%22stickybottom%22%2C%22pubid%22%3A%22f21629f80d751907d93079a5076d4249%22%2C%22adunitid%22%3A%2228061%22%2C%22topurl%22%3A%22https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar%22%2C%22docref%22%3A%22%22%2C%22auction%22%3A%222g9g5zks041%22%2C%22pubsubid%22%3Anull%2C%22index%22%3A%221%22%2C%22ishidden%22%3Afalse%2C%22istopwindow%22%3Atrue%2C%22isscrollable%22%3Atrue%2C%22dayofweek%22%3A5%2C%22hourofday%22%3A6%2C%22clang%22%3A%22en-US%22%2C%22docdir%22%3A%22LTR%22%2C%22cdims%22%3A%5B1280%2C898%5D%2C%22ddims%22%3A%5B1280%2C898%5D%2C%22sbars%22%3A%5B0%2C0%5D%2C%22endpoint%22%3A%22https%3A%2F%2Ftags.h12-media.com%22%2C%22coords%22%3A%5B643%2C434%5D%2C%22pwidth%22%3A%5B100%2C0%2C1170%2C1280%5D%2C%22pheight%22%3A%5Bnull%2C0%2C256%2C286%2C421%2C466%2C706%5D%2C%22maxwidth%22%3A1280%2C%22maxheight%22%3A898%7D&rnd=0.25557070802338444
IP
File type ISO-8859 text, with very long lines (10181), with CRLF line terminators
Hash 0cefdf50331958bb9cc6b4c29470d471
ad0e1e00bec9f09f1b20e0da4737e7390a5dd4e3
423a003654df8af95bd07698a5c6372cf178a26ee84d3cd1660fc972b36b9f8d
GET /v3/go.asp?payload=%7B%22mtoken%22%3A%2291.90.42.154%22%2C%22adtype%22%3A%22sticky%22%2C%22adformat%22%3A%22stickybottom%22%2C%22pubid%22%3A%22f21629f80d751907d93079a5076d4249%22%2C%22adunitid%22%3A%2228061%22%2C%22topurl%22%3A%22https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar%22%2C%22docref%22%3A%22%22%2C%22auction%22%3A%222g9g5zks041%22%2C%22pubsubid%22%3Anull%2C%22index%22%3A%221%22%2C%22ishidden%22%3Afalse%2C%22istopwindow%22%3Atrue%2C%22isscrollable%22%3Atrue%2C%22dayofweek%22%3A5%2C%22hourofday%22%3A6%2C%22clang%22%3A%22en-US%22%2C%22docdir%22%3A%22LTR%22%2C%22cdims%22%3A%5B1280%2C898%5D%2C%22ddims%22%3A%5B1280%2C898%5D%2C%22sbars%22%3A%5B0%2C0%5D%2C%22endpoint%22%3A%22https%3A%2F%2Ftags.h12-media.com%22%2C%22coords%22%3A%5B643%2C434%5D%2C%22pwidth%22%3A%5B100%2C0%2C1170%2C1280%5D%2C%22pheight%22%3A%5Bnull%2C0%2C256%2C286%2C421%2C466%2C706%5D%2C%22maxwidth%22%3A1280%2C%22maxheight%22%3A898%7D&rnd=0.25557070802338444 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store,no-cache,max-age=0,private
content-type: application/x-javascript; Charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: 7thMile=60d6d592%2D115b%2D4b6e%2D9ac0%2D630f990654f0; Max-Age=5000000; Domain=.h12-media.com; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
access-control-allow-origin:
srg-x: x-.176
x-powered-by: ARR/3.0
date: Fri, 31 Mar 2023 06:49:09 GMT
content-length: 24964
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery-1.11.0.min.js
200 OK 35 kB URL HTTP/2 megaup.net/themes/flow/js/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 29323a1691b8cc199cf35341ec6f66b2
d91f0b1c4e28d9851d50ffbe6abaeccce3eba8a4
fb6123dfef17fb1bc79da56bccb74f2c8c68330c6afe058731f469a8a1ce3e3b
GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1787d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
adsco.re/p
200 OK 131 B IP
File type ASCII text, with no line terminators
Hash 525471eac8c1215c049d0be88087f294
0ed9048fbfa74659e760fad33850998ceec0d0a8
4bd41600d60b935ea06c07c989d5251c57b7affc3c4ae94bc788db8364bc7af4
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Length: 2023
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 794f6160d20ce9628b3cedc2720a5c75
1115b11f802a40af578cdfb4b7d22b160a2af2ce
fa0c63aac0718c33af2fc1902a77f63b90a99b4514ada2a86337031cc3ae1ceb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FA0C63AAC0718C33AF2FC1902A77F63B90A99B4514ADA2A86337031CC3AE1CEB"
Last-Modified: Wed, 29 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4993
Expires: Fri, 31 Mar 2023 08:12:22 GMT
Date: Fri, 31 Mar 2023 06:49:09 GMT
Connection: keep-alive
engine.4dsply.com/verify?sig=BAYAZCaCZQFkJoJlgAGBAcAAIH_oFBInhg0FttvwtXZHg7Cev9vOPFTLbzOYT5dWQTErwQAgLBCarbmmRNi5akdp9ma8ER13d1miNCw6Qn7FgcOFTrs
200 OK 17 B URL HTTP/2 engine.4dsply.com/verify?sig=BAYAZCaCZQFkJoJlgAGBAcAAIH_oFBInhg0FttvwtXZHg7Cev9vOPFTLbzOYT5dWQTErwQAgLBCarbmmRNi5akdp9ma8ER13d1miNCw6Qn7FgcOFTrs
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f9bf086d73f8b7cc483324aedb224ed0
be03b282679354a90df7b59b4c92da6e8caeaccc
39ca3c85734717cf31f55ab2e7d04d8ad2438a3bd9f6f46fae350d12506b4699
GET /verify?sig=BAYAZCaCZQFkJoJlgAGBAcAAIH_oFBInhg0FttvwtXZHg7Cev9vOPFTLbzOYT5dWQTErwQAgLBCarbmmRNi5akdp9ma8ER13d1miNCw6Qn7FgcOFTrs HTTP/1.1
Host: engine.4dsply.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:09 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
cache-control: no-cache
access-control-allow-headers: Content-Type
access-control-allow-methods: GET
x-adscore-status: bot
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b06a69d5a60b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 29 B IP
File type ASCII text, with no line terminators
Hash 0b18430646d3da7688b86509bf9c83c8
ad2fe9364cbc31210cf6504cb28e8214d992a947
acc6a5dec81f81a4ee070d9975d15a3142c9eef927162d21078b61b0110242d2
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: text/plain
set-cookie: csu=1863184695803394@1@1680245348; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9QJ%2B2sSoXCoMzlRsqJW1mPUNLr29mYqD9MgpoHJvYn3Yvfg6U2IvTdDn06rYHyz1zdubuPGYnqjUsWcwNkNykZODP7CQVPf3i0es5hS9HvelmwdlZ6Ce8YHaG9H3F%2FdH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a69399d12408-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fd41791459946ba644ff2f22494b3b08
7480722a95bf3f5443c77c045d00ddbd6817f582
2d293fba01134d71b876970477e6a3649860cf9ad0e59315394966ffacde9895
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2D293FBA01134D71B876970477E6A3649860CF9AD0E59315394966FFACDE9895"
Last-Modified: Thu, 30 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14218
Expires: Fri, 31 Mar 2023 10:46:08 GMT
Date: Fri, 31 Mar 2023 06:49:10 GMT
Connection: keep-alive
bidder.h12-media.com/prebid/default.asp?payload=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8_P3CZ_0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb-WFEfVRfWLLNeueNhgrprxpKpnvV-Az-FE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd-rLnviYP-ntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5_-ykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE-vft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc-rVsXw4Pgr7VNdvv-R7Ty5xnfwgUo3n5Gw02KcAss10
200 OK 3.1 kB URL HTTP/2 bidder.h12-media.com/prebid/default.asp?payload=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8_P3CZ_0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb-WFEfVRfWLLNeueNhgrprxpKpnvV-Az-FE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd-rLnviYP-ntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5_-ykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE-vft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc-rVsXw4Pgr7VNdvv-R7Ty5xnfwgUo3n5Gw02KcAss10
IP
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (3050), with no line terminators
Hash 837c7a90871d539827c87c5cdcc74658
3f62bf573af0d7b0ad6261f2f3b7b45173ddda40
391006667b4096c8e16113fc2c44fb41a3d982fb5c9742479ad1d1e1a4cd9765
POST /prebid/default.asp?payload=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8_P3CZ_0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb-WFEfVRfWLLNeueNhgrprxpKpnvV-Az-FE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd-rLnviYP-ntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5_-ykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE-vft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc-rVsXw4Pgr7VNdvv-R7Ty5xnfwgUo3n5Gw02KcAss10 HTTP/1.1
Host: bidder.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1142
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Cookie: 7thMile=60d6d592%2D115b%2D4b6e%2D9ac0%2D630f990654f0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store,no-cache,max-age=0,private
content-type: application/json; Charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: 7thMile=22f3022b%2D8472%2D4561%2Dbbaf%2De3d53c89c5b7; Max-Age=5000000; Domain=.h12-media.com; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
srg-x: x-.188
procadsent: 0.0312
x-powered-by: ASP.NET, ARR/3.0
date: Fri, 31 Mar 2023 06:49:10 GMT
content-length: 3073
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 256 kB IP
Size 256 kB (255622 bytes)
Hash 825e6978b7207d2eb8d3bfe9138bea3a
c1a56a9d816a7d4ad34a0c42754313c10c88b057
46c3efd33258d762161c3f451ffd7e444c80d48b3374aabd02b702791d153ba5
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1515
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: max-age=0, private, must-revalidate
date: Fri, 31 Mar 2023 06:49:10 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
set-cookie: X-Contour-Session-Affinity="9e1b516a1d7a60df"; Path=/; HttpOnly
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 314 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash dbdbaf18597d885c3615068e728dd0ec
32263a37bd38997558bfb893b6d67d6992c02e09
e0f16fae643fb5a5b27d064aac48c6e48977261e65ec8725017003c71cf14c9a
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:10 GMT
Content-Type: application/ocsp-response
Content-Length: 314
Connection: keep-alive
Last-Modified: Tue, 28 Mar 2023 17:15:14 GMT
Expires: Tue, 04 Apr 2023 17:15:13 GMT
Etag: "32263a37bd38997558bfb893b6d67d6992c02e09"
Cache-Control: max-age=382562,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7b06a6a1b89bb512-OSL
ghb.adtelligent.com/v2/auction/
200 OK 1.1 kB URL HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP
File type JSON data\012- , ASCII text, with very long lines (3091), with no line terminators
Hash 168c5cc26f0d72ab09eab14659ea7d55
e7b0cc000cf2170f4dcac9d8add45ecc8a79c733
66100d2832db9efa41d2abe9480cb3c0824c2e5c96e173240afcdd25399a79a8
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 842
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Fri, 31 Mar 2023 06:49:09 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 1098
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
tags.h12-media.com/rtb/?pname=hb_result_v3&impdata=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8%5FP3CZ%5F0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb%2DWFEfVRfWLLNeueNhgrprxpKpnvV%2DAz%2DFE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd%2DrLnviYP%2Dntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5%5F%2DykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE%2Dvft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc%2DrVsXw4Pgr7VNdvv%2DR7Ty5xnfwgUo3n5Gw02KcAss10&size=970x90&wp=0%2E00001&bd=OBT&d=1
200 OK 145 B URL HTTP/2 tags.h12-media.com/rtb/?pname=hb_result_v3&impdata=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8%5FP3CZ%5F0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb%2DWFEfVRfWLLNeueNhgrprxpKpnvV%2DAz%2DFE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd%2DrLnviYP%2Dntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5%5F%2DykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE%2Dvft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc%2DrVsXw4Pgr7VNdvv%2DR7Ty5xnfwgUo3n5Gw02KcAss10&size=970x90&wp=0%2E00001&bd=OBT&d=1
IP
File type ASCII text, with no line terminators
Hash 7ed96945d942f7b2b6e8e42cdb5d8652
57bc32892c212b7aef47825c70af1e504b0b697b
b77d72cd756d30cb7838af0700cf1e6854df46596bb08c3ed2b60aa49db084a5
GET /rtb/?pname=hb_result_v3&impdata=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8%5FP3CZ%5F0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb%2DWFEfVRfWLLNeueNhgrprxpKpnvV%2DAz%2DFE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd%2DrLnviYP%2Dntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5%5F%2DykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE%2Dvft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc%2DrVsXw4Pgr7VNdvv%2DR7Ty5xnfwgUo3n5Gw02KcAss10&size=970x90&wp=0%2E00001&bd=OBT&d=1 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Cookie: 7thMile=22f3022b%2D8472%2D4561%2Dbbaf%2De3d53c89c5b7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store,no-cache,max-age=0,private
content-type: application/x-javascript; Charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
srg-x: x-.187
x-powered-by: ARR/3.0
date: Fri, 31 Mar 2023 06:49:10 GMT
content-length: 145
X-Firefox-Spdy: h2
widgets.outbrain.com/outbrain.js
200 OK 72 kB URL HTTP/2 widgets.outbrain.com/outbrain.js
IP
File type ASCII text, with very long lines (1610)
Hash ab183a0a7fdfe7c58bb5460e0795f04f
1de49abf1403d60d0db2a44fe87f77c54d936ada
7ee7da86f8ecc93bf1ce58071cb70dd266dc5c19dbdf5f7f08e66c1a73b22605
GET /outbrain.js HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 72296
x-traceid: c8a0ad0104d8948ab590d8db112b65b
etag: "13-RfWCJFN6w10LTTqXCMiMczkMP/k"
last-modified: Tue, 28 Mar 2023 09:20:26 GMT
cache-control: max-age=14500
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 31 Mar 2023 06:49:11 GMT
edge-cache-tag: widget-cheetah
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
200 OK 43 B URL HTTP/2 widget-pixels.outbrain.com/widget/detect/px.gif?ch=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /widget/detect/px.gif?ch=1 HTTP/1.1
Host: widget-pixels.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 43
content-type: image/gif
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3:1601475749.911431"
last-modified: Wed, 30 Sep 2020 14:22:29 GMT
server: AkamaiNetStorage
cache-control: max-age=2592000
expires: Sun, 30 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
tags.h12-media.com/rtb/?pname=hb_result_v3&impdata=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8%5FP3CZ%5F0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb%2DWFEfVRfWLLNeueNhgrprxpKpnvV%2DAz%2DFE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd%2DrLnviYP%2Dntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5%5F%2DykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE%2Dvft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc%2DrVsXw4Pgr7VNdvv%2DR7Ty5xnfwgUo3n5Gw02KcAss10&size=970x90&wp=0%2E00001&bd=OBT&d=1
200 OK 144 B URL HTTP/2 tags.h12-media.com/rtb/?pname=hb_result_v3&impdata=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8%5FP3CZ%5F0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb%2DWFEfVRfWLLNeueNhgrprxpKpnvV%2DAz%2DFE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd%2DrLnviYP%2Dntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5%5F%2DykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE%2Dvft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc%2DrVsXw4Pgr7VNdvv%2DR7Ty5xnfwgUo3n5Gw02KcAss10&size=970x90&wp=0%2E00001&bd=OBT&d=1
IP
File type ASCII text, with no line terminators
Hash d45013d657142c297ef663156e1ef6ff
6f849481151f70f36ed3ce025573945893db0c9d
a754969f42738801be2ef332742b3fea538bba504a263a80faabf7bb75fddb8a
GET /rtb/?pname=hb_result_v3&impdata=6NgpxRIOZqG5ewJKiOeR9FdK3oyK7HMtK9SCNoDT9NR4n1qwc7KMlf9vfuQhBpzek8FptyC7o3zC0gQW0lXNAmEbGkaMKaNgi8%5FP3CZ%5F0se20WSXwqP6aNU7P5gHaque6mCPY9xHlHdQGNKxw4h7PldamsWoYXBavusikodJzLPnnOWvIDdUPdAzb%2DWFEfVRfWLLNeueNhgrprxpKpnvV%2DAz%2DFE0POPgPX5b71RL3QGPJHYQBZ0QpwciVzYH2QKoINLW1Sd%2DrLnviYP%2Dntvt6adzXjcyskAyG68vypteYbkHCc4KAzPsoXG9d5%5F%2DykVFINpacZYq01yod8wtL900fOAC7ZatdS6G1CTb0W5ftXNnbPYR9CFsE%2Dvft4M6egKIRrgtXmerpZTDLRmwsJBnUkxc%2DrVsXw4Pgr7VNdvv%2DR7Ty5xnfwgUo3n5Gw02KcAss10&size=970x90&wp=0%2E00001&bd=OBT&d=1 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Cookie: 7thMile=22f3022b%2D8472%2D4561%2Dbbaf%2De3d53c89c5b7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-store,no-cache,max-age=0,private
content-type: application/x-javascript; Charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
srg-x: x-.179
x-powered-by: ARR/3.0
date: Fri, 31 Mar 2023 06:49:10 GMT
content-length: 144
X-Firefox-Spdy: h2
tcheck.outbrainimg.com/tcheck/check/bWVnYXVwLm5ldA==
200 OK 16 B URL HTTP/1.1 tcheck.outbrainimg.com/tcheck/check/bWVnYXVwLm5ldA==
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ce08a60aa308225db15c98edf4ae2447
bacf25489bad0312aa2f37fc735fa7e57b2d7306
929701ed632814943e3df803ddd9e3f179ccf889c0ad7b7f3392bd8d109b174f
GET /tcheck/check/bWVnYXVwLm5ldA== HTTP/1.1
Host: tcheck.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 16
X-TraceId: 39ebd092bfaeb4bfa60cc7dd2a701043
ETag: W/"10-us8lSJutAxKqLzf8c1+n5XstcwY"
Cache-Control: max-age=32033
Expires: Fri, 31 Mar 2023 15:43:04 GMT
Date: Fri, 31 Mar 2023 06:49:11 GMT
Connection: keep-alive
Access-Control-Max-Age: 43200
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *
odb.outbrain.com/utils/platforms?contentUrl=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&idx=0&rand=74885&widgetJSId=AR_2&va=true&et=true&format=html&rtbEnabled=true&adblck=false&abwl=false&extid=1679894&pubImpId=59976193b6e1208&px=0&py=0&vpd=0&cnsntv2=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=970&activeTab=true&ab=0&wl=0&settings=true&recs=true&key=H12ME1OGI4M4PLMMGPJ01MHAC&version=2010244&sig=5n6QErio&apv=false&&osLang=en-US&winW=970&winH=90&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&iframe=true&chs=1&ogn=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar
200 OK 12 kB URL HTTP/2 odb.outbrain.com/utils/platforms?contentUrl=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&idx=0&rand=74885&widgetJSId=AR_2&va=true&et=true&format=html&rtbEnabled=true&adblck=false&abwl=false&extid=1679894&pubImpId=59976193b6e1208&px=0&py=0&vpd=0&cnsntv2=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=970&activeTab=true&ab=0&wl=0&settings=true&recs=true&key=H12ME1OGI4M4PLMMGPJ01MHAC&version=2010244&sig=5n6QErio&apv=false&&osLang=en-US&winW=970&winH=90&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&iframe=true&chs=1&ogn=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar
IP
File type Unicode text, UTF-8 text, with very long lines (47711), with no line terminators
Hash 50b8d441224a3685c3f02c9b42d14ad1
04193ba94d6a033ac8f2a7214783739ea0b11947
af9ee9c98eeaa820cc06822d0bcc27e3245be4f9c553bc2842702354008c6a8f
GET /utils/platforms?contentUrl=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar&idx=0&rand=74885&widgetJSId=AR_2&va=true&et=true&format=html&rtbEnabled=true&adblck=false&abwl=false&extid=1679894&pubImpId=59976193b6e1208&px=0&py=0&vpd=0&cnsntv2=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cw=970&activeTab=true&ab=0&wl=0&settings=true&recs=true&key=H12ME1OGI4M4PLMMGPJ01MHAC&version=2010244&sig=5n6QErio&apv=false&&osLang=en-US&winW=970&winH=90&scrW=1280&scrH=1024&dpr=1&secured=true&cmpStat=0&ccpaStat=0&iframe=true&chs=1&ogn=https%3A%2F%2Fmegaup.net%2F2xvqp%2FNun.Massacre.Definitive.Edition.rar HTTP/1.1
Host: odb.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache
pragma: no-cache
p3p: policyref="http://www.outbrain.com/w3c/p3p.xml",CP="NOI NID CURa DEVa TAIa PSAa PSDa OUR IND UNI"
set-cookie: recs_cc81d9902f8b44d8f63ed0027a540804=0B5128412044A4902139065ACD1; Max-Age=60; Expires=Fri, 31 Mar 2023 06:50:11 GMT; Path=/; Domain=outbrain.com
obsessionid-p178258=3b8add3d-e9e8-d97c-0000-0187366d63c3|0|1; Max-Age=1800; Expires=Fri, 31 Mar 2023 07:19:11 GMT; Path=/; Domain=outbrain.com
obuid=43709f7f-38a0-497b-9090-77615286026f; Max-Age=7776000; Expires=Thu, 29 Jun 2023 06:49:11 GMT; Path=/; Domain=outbrain.com
x-traceid: 0232cec6253fb4a5539da81d47b9f2da
content-encoding: br
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Fri, 31 Mar 2023 06:49:11 GMT
x-served-by: cache-lga21961-LGA, cache-hel1410029-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1680245351.307573,VS0,VE217
vary: Accept-Encoding, User-Agent
traffic-path: NYDC1, LGA, HEL, Europe1
content-length: 12361
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/externals/cookie/put.html
200 OK 416 B URL HTTP/2 widgets.outbrain.com/nanoWidget/externals/cookie/put.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c0311cf15c21ddda054005e92fad3f9e
5276eceeb0576cbee82010f611dfd6fd305991f9
4f3b933077b738b503f7543ffc82fa0a061f0fe7d0ff1470865fde561a324bcc
GET /nanoWidget/externals/cookie/put.html HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "c0311cf15c21ddda054005e92fad3f9e:1679997887.217072"
last-modified: Tue, 28 Mar 2023 09:17:03 GMT
server: AkamaiNetStorage
content-length: 416
cache-control: max-age=604800
expires: Fri, 07 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/externals/obUserFrame/test.html?lsd=43709f7f-38a0-497b-9090-77615286026f
200 OK 686 B URL HTTP/2 widgets.outbrain.com/nanoWidget/externals/obUserFrame/test.html?lsd=43709f7f-38a0-497b-9090-77615286026f
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5b97ec90c55f5357b412825e5e67525a
7dd2ad14245380a730735d18b06346dcbb7aa254
ee4237548288e67df37898219464bc7bd57bf2eb4238a627dcbbb15815090037
GET /nanoWidget/externals/obUserFrame/test.html?lsd=43709f7f-38a0-497b-9090-77615286026f HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "1e015194a0e596827cb8971f884eb43c:1679997890.05285"
last-modified: Tue, 28 Mar 2023 09:17:03 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Fri, 07 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
content-length: 686
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/Close.svg
200 OK 765 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/Close.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (635)
Hash f740f788e2e26736856f7a3a12457a63
d0ec57a47f6a40f23011dd93219873a5eaee96e2
c2c92cde33538b1187bedea3d0b6d5141e4222eba8092476339aa080cee759ac
GET /images/widgetIcons/Close.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "f740f788e2e26736856f7a3a12457a63:1673369390.457553"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 765
cache-control: max-age=2592000
expires: Sun, 30 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/achoice.svg
200 OK 990 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/achoice.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (990), with no line terminators
Hash 5ab8e16b5f46213840bcd403e349419c
f03f6dc8e2206a94119af76f9a3b3c835390cae7
9ba56f5ffa579747efde1d2a429b325a9fb7220d30f4268e4a44ecbe4a9bf034
GET /images/widgetIcons/achoice.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "5ab8e16b5f46213840bcd403e349419c:1673369393.880194"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 990
cache-control: max-age=2592000
expires: Sun, 30 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/widgetOBUserSync/obUserSync.html
200 OK 6.1 kB URL HTTP/2 widgets.outbrain.com/widgetOBUserSync/obUserSync.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (19460)
Hash a0deb47fce706a3510d91dc6bc095f9b
ae9e49270f51dc7001a645befe31735a294cb064
7ad2fddee52f08e29670d8480bd03e93454797497e3eea2faec69e2900967af5
GET /widgetOBUserSync/obUserSync.html HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "aaa80e35f63de779238a27102307cdae:1679991752.353208"
last-modified: Tue, 28 Mar 2023 08:16:46 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Fri, 07 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
content-length: 6068
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/2010244/module/userZapping.js?e=1
200 OK 7.1 kB URL HTTP/2 widgets.outbrain.com/nanoWidget/2010244/module/userZapping.js?e=1
IP
File type ASCII text, with very long lines (14642)
Hash a441f47389afcb4d4a2aa73cfaa06bdd
7225900ae5d790c4cc192402fec9f3134db5dd4d
0adeef22d13c9370db8547393913eddf60b0fbc085f0a62c4d853dae9d989627
GET /nanoWidget/2010244/module/userZapping.js?e=1 HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b8b418abf7a4799a9ee5e62ef475713b:1679997809.627056"
last-modified: Tue, 28 Mar 2023 09:19:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=604800
expires: Fri, 07 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
content-length: 7104
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/nanoWidget/externals/cookie/test.html
200 OK 610 B URL HTTP/2 widgets.outbrain.com/nanoWidget/externals/cookie/test.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 48053d50141031b1511dbd30f9a31288
06966364d22a02a4ed89c18c38d6ddfc6de254c6
6139e1fc0d3709eebbe2b18510cf24361b9f8a538c3529a73c282bafe6c78474
GET /nanoWidget/externals/cookie/test.html HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widgets.outbrain.com/nanoWidget/externals/cookie/put.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "48053d50141031b1511dbd30f9a31288:1679997887.904184"
last-modified: Tue, 28 Mar 2023 09:17:03 GMT
server: AkamaiNetStorage
content-length: 610
cache-control: max-age=604800
expires: Fri, 07 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
images.outbrainimg.com/transform/v3/eyJpdSI6Ijk2NTkwNzdhOTdmOTdiZTkyNjdkYWVjNzk4MmM0ZmE5NWZhM2UyMjI1NmQ2ZjBmN2U1ZDU2NzU2NGU4ZjcyMGYiLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp
200 OK 7.0 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6Ijk2NTkwNzdhOTdmOTdiZTkyNjdkYWVjNzk4MmM0ZmE5NWZhM2UyMjI1NmQ2ZjBmN2U1ZDU2NzU2NGU4ZjcyMGYiLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fc6e9ba6a8c288cbe55ad1bacac71855
1ba4eb143931a1cb7e95ba6bed9c505809b0c1db
a6b6c9513451b010c7cd5d726106bb29a73a16cebdc7ecb4c3828b2ce845317c
GET /transform/v3/eyJpdSI6Ijk2NTkwNzdhOTdmOTdiZTkyNjdkYWVjNzk4MmM0ZmE5NWZhM2UyMjI1NmQ2ZjBmN2U1ZDU2NzU2NGU4ZjcyMGYiLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 7008
last-modified: Thu, 30 Mar 2023 05:54:22 GMT
x-traceid: 436ff9eac23cde43b0471584a6c62bd0
cache-control: max-age=2376461
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
images.outbrainimg.com/transform/v3/eyJpdSI6ImZiMzY4NThjZWE1NDUxMmE2MzhjNTgwM2JhY2FlYzU3MDY0MzAxODdmODc4OTc4ZjNkZWFmMmY3YWNhOTVkZDciLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp
200 OK 8.2 kB URL HTTP/2 images.outbrainimg.com/transform/v3/eyJpdSI6ImZiMzY4NThjZWE1NDUxMmE2MzhjNTgwM2JhY2FlYzU3MDY0MzAxODdmODc4OTc4ZjNkZWFmMmY3YWNhOTVkZDciLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c446af78185551c1449f75ec0e98141e
c6594268163d0793aa229bee7286218c4722265f
b64443f9851e2c1bd22363433a60eb917bb4e4434f776cf4b7a3e145aeb68ee4
GET /transform/v3/eyJpdSI6ImZiMzY4NThjZWE1NDUxMmE2MzhjNTgwM2JhY2FlYzU3MDY0MzAxODdmODc4OTc4ZjNkZWFmMmY3YWNhOTVkZDciLCJ3IjoyMDAsImgiOjEwMCwiZCI6MS4wLCJjcyI6MCwiZiI6NH0.webp HTTP/1.1
Host: images.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 8202
last-modified: Tue, 07 Mar 2023 09:29:23 GMT
x-traceid: 73ec30e49404b5177259518964fef669
cache-control: max-age=1213639
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
timing-allow-origin: *, *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/icon-vi.svg
200 OK 182 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/icon-vi.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash c065312fdb5e02c1399f2622776530df
785d98e9025f7b5cd7e2bd4f80098e44cda01ebf
b9e07d8e5143b4764aeebb012b1b020f60eb1cdca44ed1bc22ba9bc85f3af5eb
GET /images/widgetIcons/icon-vi.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "91990280dce13a095a0da3a6b2fc6816:1673369403.63584"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 182
cache-control: max-age=2592000
expires: Sun, 30 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/ChevronRight.svg
200 OK 524 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/ChevronRight.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (422)
Hash c1dc41410784b37a37e29a21baf9aa1f
9b1a4b46b77322f217c3395e32bbb177199c327c
f8d6148b07b2251c53a2605a003b1d29babb8154c5abd0bde0f7e8a800f2dfd9
GET /images/widgetIcons/ChevronRight.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "c1dc41410784b37a37e29a21baf9aa1f:1673369389.756676"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 524
cache-control: max-age=2592000
expires: Sun, 30 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
widgets.outbrain.com/images/widgetIcons/icon-x-white.svg
200 OK 559 B URL HTTP/2 widgets.outbrain.com/images/widgetIcons/icon-x-white.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (363)
Hash 854eb39a3d94a8ec9977261db0c8acc8
ef852997961f946b34e996504912b0606e4c6593
06ffd9e17bd41822b9a7b982a8ff486fafa54f7781baacb6ef3507ae7f9b36b5
GET /images/widgetIcons/icon-x-white.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "854eb39a3d94a8ec9977261db0c8acc8:1673369404.25082"
last-modified: Tue, 10 Jan 2023 16:40:08 GMT
server: AkamaiNetStorage
content-length: 559
cache-control: max-age=2592000
expires: Sun, 30 Apr 2023 06:49:11 GMT
date: Fri, 31 Mar 2023 06:49:11 GMT
access-control-request-headers: X-OB-STG,X-OB-PRD
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
bookadil.com/winnotice?sid=H4sIAAAAAAAC%2F1RTz4scRRSuifEQPCl6EHIYbwoy2z2%2FtscQgjGJLq67SxLZm1Bd1b37nJ6qpqp7enZBXBQkJxn1YI613%2F5CXcX8ARLp9SIDQuYiK7r%2FgqIQPMpMxow%2B6H4%2Fvkfx1XtffbSbnzEPOT9de0tvU5LwhVbNq764TkrqwlZXbld9r%2BZdqq6TajcvVQeTn%2Bm%2F4nutmvdS9fVIdPVC3fM9z%2Ff86g0yUawHC1MUlB53%2FFrHqzXrNb%2FVxMA42LwCyyuQ%2FTP2DEiOn9z88R5IlFC9b69Ftpvp9OXrvTzhmTboy6O3VVfpQqE3D2NTQayOZt3QdszY3XPQ6mjGGrq%2FP2GNkMas8rOPUB3NqCHsHzxiFyaIFEL5FIp%2BiSgpQbyE0B%2BC5AMGCImVVaje4Yo2Bd96hPIJOmbnH%2F4FKsbs%2FG%2FPQvW%2BuZrQoHpLJ3lGWlkMYgcalKCNEml%2BgmybgYoTiOwDkPyJLTxchurtr9pEg6Sb3p6oBMUlkmgIbhnyyUcMeVxBnlbQk6dV3urEnrcYh3GjETSFEI2GEK2gLVuy0QxiD7mY0BsiS4cQyRDC7CA1O%2BjSECb%2FGGRL5NyBUofUHgb1Vsf3EYnRlb%2FZ1MDptBq3GlG82A7b9UZzUS56cT3w%2FUgGAa97XAQCIY2uXH7v%2Fhvvjz5FQgwRH93%2FY3aAVQ4qd3vKkIOJRmxme0ZmoyuPuzYdrGSwGUNfOhQRQ2EZCs5QEEORMRR9dyATW7fuUCY2D%2F2Zr898w%2B3pbMMd6GwjUmw3PWNPT3fzp3gH3ei0GnuiHsSdZqMeNDudMJDNxUY7aEvhyyBqBhKW%2Fp0A2XPgtoJtGrPnfv0d6UQ28jOE%2FAQ2OYGgF8Dzi%2BCFA9902FYOUh%2BHWne5pKQmdA9pdgHZVmU3OWPPT3m0797532iFcUiNw7v0A8NGcmfvpi7Y%2Fk1dWHZvNc2oR9t8op9bGc%2BiJ758M9oqtJFL1%2Bzwi1fFBJiEx7cjmy1zJUltWPbVVZIyMje0ERH7bsmuR%2BFabjev5kbl6fLaazeWeqmJrCWtSnB6cP1zCBqzC5%2F8Mn0ZF7%2B%2BDDIlTO7Qyx%2BvCqRLiHQHNp3XrGYwyTwPU4Yid3umHs6LEzEk852Dhw72P3k4j3ft97DkkFn2DwAAAP%2F%2FAQAA%2F%2F9rIe%2BjgwQAAA%3D%3D&ap=${AUCTION_PRICE}&l=3577992&sub3=1680245348&pid=91283&sub2=icon&auid=f53ef76b62347d70f2811ed88a20ac8c&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
307 Temporary Redirect 0 B URL HTTP/2 bookadil.com/winnotice?sid=H4sIAAAAAAAC%2F1RTz4scRRSuifEQPCl6EHIYbwoy2z2%2FtscQgjGJLq67SxLZm1Bd1b37nJ6qpqp7enZBXBQkJxn1YI613%2F5CXcX8ARLp9SIDQuYiK7r%2FgqIQPMpMxow%2B6H4%2Fvkfx1XtffbSbnzEPOT9de0tvU5LwhVbNq764TkrqwlZXbld9r%2BZdqq6TajcvVQeTn%2Bm%2F4nutmvdS9fVIdPVC3fM9z%2Ff86g0yUawHC1MUlB53%2FFrHqzXrNb%2FVxMA42LwCyyuQ%2FTP2DEiOn9z88R5IlFC9b69Ftpvp9OXrvTzhmTboy6O3VVfpQqE3D2NTQayOZt3QdszY3XPQ6mjGGrq%2FP2GNkMas8rOPUB3NqCHsHzxiFyaIFEL5FIp%2BiSgpQbyE0B%2BC5AMGCImVVaje4Yo2Bd96hPIJOmbnH%2F4FKsbs%2FG%2FPQvW%2BuZrQoHpLJ3lGWlkMYgcalKCNEml%2BgmybgYoTiOwDkPyJLTxchurtr9pEg6Sb3p6oBMUlkmgIbhnyyUcMeVxBnlbQk6dV3urEnrcYh3GjETSFEI2GEK2gLVuy0QxiD7mY0BsiS4cQyRDC7CA1O%2BjSECb%2FGGRL5NyBUofUHgb1Vsf3EYnRlb%2FZ1MDptBq3GlG82A7b9UZzUS56cT3w%2FUgGAa97XAQCIY2uXH7v%2Fhvvjz5FQgwRH93%2FY3aAVQ4qd3vKkIOJRmxme0ZmoyuPuzYdrGSwGUNfOhQRQ2EZCs5QEEORMRR9dyATW7fuUCY2D%2F2Zr898w%2B3pbMMd6GwjUmw3PWNPT3fzp3gH3ei0GnuiHsSdZqMeNDudMJDNxUY7aEvhyyBqBhKW%2Fp0A2XPgtoJtGrPnfv0d6UQ28jOE%2FAQ2OYGgF8Dzi%2BCFA9902FYOUh%2BHWne5pKQmdA9pdgHZVmU3OWPPT3m0797532iFcUiNw7v0A8NGcmfvpi7Y%2Fk1dWHZvNc2oR9t8op9bGc%2BiJ758M9oqtJFL1%2Bzwi1fFBJiEx7cjmy1zJUltWPbVVZIyMje0ERH7bsmuR%2BFabjev5kbl6fLaazeWeqmJrCWtSnB6cP1zCBqzC5%2F8Mn0ZF7%2B%2BDDIlTO7Qyx%2BvCqRLiHQHNp3XrGYwyTwPU4Yid3umHs6LEzEk852Dhw72P3k4j3ft97DkkFn2DwAAAP%2F%2FAQAA%2F%2F9rIe%2BjgwQAAA%3D%3D&ap=${AUCTION_PRICE}&l=3577992&sub3=1680245348&pid=91283&sub2=icon&auid=f53ef76b62347d70f2811ed88a20ac8c&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /winnotice?sid=H4sIAAAAAAAC%2F1RTz4scRRSuifEQPCl6EHIYbwoy2z2%2FtscQgjGJLq67SxLZm1Bd1b37nJ6qpqp7enZBXBQkJxn1YI613%2F5CXcX8ARLp9SIDQuYiK7r%2FgqIQPMpMxow%2B6H4%2Fvkfx1XtffbSbnzEPOT9de0tvU5LwhVbNq764TkrqwlZXbld9r%2BZdqq6TajcvVQeTn%2Bm%2F4nutmvdS9fVIdPVC3fM9z%2Ff86g0yUawHC1MUlB53%2FFrHqzXrNb%2FVxMA42LwCyyuQ%2FTP2DEiOn9z88R5IlFC9b69Ftpvp9OXrvTzhmTboy6O3VVfpQqE3D2NTQayOZt3QdszY3XPQ6mjGGrq%2FP2GNkMas8rOPUB3NqCHsHzxiFyaIFEL5FIp%2BiSgpQbyE0B%2BC5AMGCImVVaje4Yo2Bd96hPIJOmbnH%2F4FKsbs%2FG%2FPQvW%2BuZrQoHpLJ3lGWlkMYgcalKCNEml%2BgmybgYoTiOwDkPyJLTxchurtr9pEg6Sb3p6oBMUlkmgIbhnyyUcMeVxBnlbQk6dV3urEnrcYh3GjETSFEI2GEK2gLVuy0QxiD7mY0BsiS4cQyRDC7CA1O%2BjSECb%2FGGRL5NyBUofUHgb1Vsf3EYnRlb%2FZ1MDptBq3GlG82A7b9UZzUS56cT3w%2FUgGAa97XAQCIY2uXH7v%2Fhvvjz5FQgwRH93%2FY3aAVQ4qd3vKkIOJRmxme0ZmoyuPuzYdrGSwGUNfOhQRQ2EZCs5QEEORMRR9dyATW7fuUCY2D%2F2Zr898w%2B3pbMMd6GwjUmw3PWNPT3fzp3gH3ei0GnuiHsSdZqMeNDudMJDNxUY7aEvhyyBqBhKW%2Fp0A2XPgtoJtGrPnfv0d6UQ28jOE%2FAQ2OYGgF8Dzi%2BCFA9902FYOUh%2BHWne5pKQmdA9pdgHZVmU3OWPPT3m0797532iFcUiNw7v0A8NGcmfvpi7Y%2Fk1dWHZvNc2oR9t8op9bGc%2BiJ758M9oqtJFL1%2Bzwi1fFBJiEx7cjmy1zJUltWPbVVZIyMje0ERH7bsmuR%2BFabjev5kbl6fLaazeWeqmJrCWtSnB6cP1zCBqzC5%2F8Mn0ZF7%2B%2BDDIlTO7Qyx%2BvCqRLiHQHNp3XrGYwyTwPU4Yid3umHs6LEzEk852Dhw72P3k4j3ft97DkkFn2DwAAAP%2F%2FAQAA%2F%2F9rIe%2BjgwQAAA%3D%3D&ap=${AUCTION_PRICE}&l=3577992&sub3=1680245348&pid=91283&sub2=icon&auid=f53ef76b62347d70f2811ed88a20ac8c&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg HTTP/1.1
Host: bookadil.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
date: Fri, 31 Mar 2023 06:49:11 GMT
content-length: 0
location: https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
x-request-id: 8a610b4a44ac1da37676401c3612723d
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tWYXJrQ%2BDzaYtEqFS3ziiRVUWmzRL6fDg00OGzMATR5sDrzViUZtf0lkeT%2BWJ1aPaItrs8jIofR7aHEgxBWHaBENemop1PTYlG6nkw57Ax9qUAKAD2JmSzuB2MAuMy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b06a6a75e8cb4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3b855e7ee510fc57849b70ad5796c546
00b430b578a2c77decf6fd116def22aa2de7de97
d6151067b6e25139d5f2a1586ff16d6374c2d1c9c0c233c395a1ba125009d247
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 431
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 06:49:11 GMT
Etag: "64263bff-1d7"
Last-Modified: Fri, 31 Mar 2023 06:42:00 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4cf7868e5b65e9acd9c2b988da5eea93
c8979219d5cde75ee3c3c809afcdbe4b63011941
82f42e96cdc35b31a02579665bf6d669ccc95f66921574f4b3ecd7b963a44954
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82F42E96CDC35B31A02579665BF6D669CCC95F66921574F4B3ECD7B963A44954"
Last-Modified: Thu, 30 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14445
Expires: Fri, 31 Mar 2023 10:49:56 GMT
Date: Fri, 31 Mar 2023 06:49:11 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
200 OK 33 kB URL HTTP/2 cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:05:18 19:19:17], baseline, precision 8, 200x200, components 3\012- data
Hash 70cf8250da1a25a7b445231428af7828
a849d338423d2919949340838c768bba90b9081c
b7060bc46dc459a00d4124523a26f0cbf31fba31d41fccae9f82bedaf22c1186
GET /cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:11 GMT
content-type: image/jpeg
content-length: 33103
server: nginx/1.17.6
last-modified: Tue, 09 Jun 2020 11:44:50 GMT
etag: "5edf7632-814f"
expires: Sun, 02 Apr 2023 06:49:11 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
mcdp-nydc1.outbrain.com/l?token=76edb2e6b92669f23847f56999a2a6b2_178258_1680245351464&tm=440&eT=0&widgetWidth=970&widgetHeight=90&widgetX=0&widgetY=0&wRV=2010244&pVis=1&lsd=43709f7f-38a0-497b-9090-77615286026f&eIdx=&cnsntV2=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cheq=0&rtt=311&oo=false&lo=1433&odbreq=1623&odbres=1934&mvreq=1623&mvres=1934&to=1680245349536&umv=1&ll=0&chs=2&ab=0&wl=0
200 OK 2 B URL HTTP/1.1 mcdp-nydc1.outbrain.com/l?token=76edb2e6b92669f23847f56999a2a6b2_178258_1680245351464&tm=440&eT=0&widgetWidth=970&widgetHeight=90&widgetX=0&widgetY=0&wRV=2010244&pVis=1&lsd=43709f7f-38a0-497b-9090-77615286026f&eIdx=&cnsntV2=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cheq=0&rtt=311&oo=false&lo=1433&odbreq=1623&odbres=1934&mvreq=1623&mvres=1934&to=1680245349536&umv=1&ll=0&chs=2&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
GET /l?token=76edb2e6b92669f23847f56999a2a6b2_178258_1680245351464&tm=440&eT=0&widgetWidth=970&widgetHeight=90&widgetX=0&widgetY=0&wRV=2010244&pVis=1&lsd=43709f7f-38a0-497b-9090-77615286026f&eIdx=&cnsntV2=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&cheq=0&rtt=311&oo=false&lo=1433&odbreq=1623&odbres=1934&mvreq=1623&mvres=1934&to=1680245349536&umv=1&ll=0&chs=2&ab=0&wl=0 HTTP/1.1
Host: mcdp-nydc1.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:11 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 2
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: content-range
X-TraceId: 55bc5dfaec6c0b782f60535770aff3d5
log.outbrainimg.com/loggerServices/widgetGlobalEvent?rId=76edb2e6b92669f23847f56999a2a6b2&pvId=76edb2e6b92669f23847f56999a2a6b2&sid=8662499&pid=178258&idx=0&wId=101&pad=2&org=0&tm=493&eT=3&cnsnt=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&wRV=2010244&pVis=1&lsd=43709f7f-38a0-497b-9090-77615286026f&eIdx=0&oo=false&ab=0&wl=0
200 OK 4 B URL HTTP/1.1 log.outbrainimg.com/loggerServices/widgetGlobalEvent?rId=76edb2e6b92669f23847f56999a2a6b2&pvId=76edb2e6b92669f23847f56999a2a6b2&sid=8662499&pid=178258&idx=0&wId=101&pad=2&org=0&tm=493&eT=3&cnsnt=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&wRV=2010244&pVis=1&lsd=43709f7f-38a0-497b-9090-77615286026f&eIdx=0&oo=false&ab=0&wl=0
IP
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
GET /loggerServices/widgetGlobalEvent?rId=76edb2e6b92669f23847f56999a2a6b2&pvId=76edb2e6b92669f23847f56999a2a6b2&sid=8662499&pid=178258&idx=0&wId=101&pad=2&org=0&tm=493&eT=3&cnsnt=CPpgRf-PpgRf-BBACBENCFCsAP_AAH_AACiQImtf_X__bX9j-_5_f_t0eY1P9_r3v-QzjhfNt-8F3L_W_L0X42E7NF36pq4KuR4Eu3LBIQNlHMHUTUmwaokVrzHsak2cpyNKJ7LEmnMZO2dYGHtPn9lDuYKY7_5___fz3j-v_t_-39T378X_3_d5_2---vCfV599jLv9____39nP___9v-_9_____-CIYBJhqXkAXYljgybRpVCiBGFYSFQCgAooBhaIrABwcFOysAn1BCwAQCoCMCIEGIKMGAQACAQBIREBIAWCARAEQCAAEAKMBCAAiYBBYAWBgEAAoBoWIAUAAgSEGRwVHKYEBEi0UEtlYglBXsaYQBllgBQKIyKgARKEACwMhIWDmOAJAS4WSBZihfIAAAAA.YAAAAAAAAAAA&wRV=2010244&pVis=1&lsd=43709f7f-38a0-497b-9090-77615286026f&eIdx=0&oo=false&ab=0&wl=0 HTTP/1.1
Host: log.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:12 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 4
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST
X-TraceId: 243b6283cbe4ac77c0b8159d7d2218f7
log.outbrainimg.com/api/loggerBatch/log-viewability
200 OK 4 B URL HTTP/1.1 log.outbrainimg.com/api/loggerBatch/log-viewability
IP
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
POST /api/loggerBatch/log-viewability HTTP/1.1
Host: log.outbrainimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 685
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 06:49:14 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 4
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST
X-TraceId: 7c32e3b4cf76af65bf42cecc1fdb5bcb
megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff
200 OK 32 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff
IP
File type Web Open Font Format, TrueType, length 31900, version 1.1\012- data
Hash 1b285c8e5b7445a8e434b2cdf036bab2
c97d4772fbb5c5637d466b5f991bc7ec28830b32
09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825
GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7; _ga=GA1.2.1073024686.1680245348; _gid=GA1.2.2087791335.1680245348; _gat_gtag_UA_108868042_1=1; a=v2P9Gq3Kr8UNdOeqZZaqnU1TIF68tZWT; token_QlJAAAAAAAAArRMIRsGBk-hpXXMDyS9EWV8qBEI=BAYAZCaCZQFkJoJlgAGBAcAAIH_oFBInhg0FttvwtXZHg7Cev9vOPFTLbzOYT5dWQTErwQAgLBCarbmmRNi5akdp9ma8ER13d1miNCw6Qn7FgcOFTrs; _pbjs_userid_consent_data=333512586984270; _pubcid=7f8c8dc3-eae8-49a7-ae35-072d18ecda40
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:14 GMT
content-type: font/woff
content-length: 31900
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c9c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 66ec03f062a9726679fff119fedad79d
f18f2e19ff1ed3d31634062dc195d6ec706dec84
3b7ac9ba3e2aad0c49e868468981d2904a850405900182361581206af8d71481
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3B7AC9BA3E2AAD0C49E868468981D2904A850405900182361581206AF8D71481"
Last-Modified: Wed, 29 Mar 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9136
Expires: Fri, 31 Mar 2023 09:21:31 GMT
Date: Fri, 31 Mar 2023 06:49:15 GMT
Connection: keep-alive
imgspics.com/ie?v=4&c=7ZppO4RYSamaD4hgmVZSn0nY3I2k1jBWvHwUZ3u4PHCctVtIZmh8bAxGNkuulRHWYwn7xAM-pCuA0z-msfwiMBfDEkfnWhofr4sJ1E4OcRd4BGT7LF4KBWH5h5QHTlp0NeO5Am3UW8RSCroJWVo55dTkisBoHCp2L2Ayn7nqsXNqJPwMqFoczT1lvUf_AVhflxqpx7MGZDSGpFMiEoOc6g3NH8wRE683stnqYDsldqGyG0caxEUWBKq5WWd_upa-6fbMBsPfUrM9XaifMEvcjTE6sUvOlP7mp5tZfi4vPz5YbAI3UlVOKj9A0Dw-xenmOLl3AeisPkWd97yZVuAWxtHB5XtmVl9LkGxNr40IP0j_YrDVx-8GrLGOg_YJdvUiRGjEKlkEIQa7xdzor6Dc_FmYKjtqzZj3tus7Q0e26zs=&v1=79&v2=68678
301 Moved Permanently 0 B URL HTTP/1.1 imgspics.com/ie?v=4&c=7ZppO4RYSamaD4hgmVZSn0nY3I2k1jBWvHwUZ3u4PHCctVtIZmh8bAxGNkuulRHWYwn7xAM-pCuA0z-msfwiMBfDEkfnWhofr4sJ1E4OcRd4BGT7LF4KBWH5h5QHTlp0NeO5Am3UW8RSCroJWVo55dTkisBoHCp2L2Ayn7nqsXNqJPwMqFoczT1lvUf_AVhflxqpx7MGZDSGpFMiEoOc6g3NH8wRE683stnqYDsldqGyG0caxEUWBKq5WWd_upa-6fbMBsPfUrM9XaifMEvcjTE6sUvOlP7mp5tZfi4vPz5YbAI3UlVOKj9A0Dw-xenmOLl3AeisPkWd97yZVuAWxtHB5XtmVl9LkGxNr40IP0j_YrDVx-8GrLGOg_YJdvUiRGjEKlkEIQa7xdzor6Dc_FmYKjtqzZj3tus7Q0e26zs=&v1=79&v2=68678
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=7ZppO4RYSamaD4hgmVZSn0nY3I2k1jBWvHwUZ3u4PHCctVtIZmh8bAxGNkuulRHWYwn7xAM-pCuA0z-msfwiMBfDEkfnWhofr4sJ1E4OcRd4BGT7LF4KBWH5h5QHTlp0NeO5Am3UW8RSCroJWVo55dTkisBoHCp2L2Ayn7nqsXNqJPwMqFoczT1lvUf_AVhflxqpx7MGZDSGpFMiEoOc6g3NH8wRE683stnqYDsldqGyG0caxEUWBKq5WWd_upa-6fbMBsPfUrM9XaifMEvcjTE6sUvOlP7mp5tZfi4vPz5YbAI3UlVOKj9A0Dw-xenmOLl3AeisPkWd97yZVuAWxtHB5XtmVl9LkGxNr40IP0j_YrDVx-8GrLGOg_YJdvUiRGjEKlkEIQa7xdzor6Dc_FmYKjtqzZj3tus7Q0e26zs=&v1=79&v2=68678 HTTP/1.1
Host: imgspics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Fri, 31 Mar 2023 06:49:14 GMT
content-length: 0
location: https://img.vmmcdn.com/get/7609021/200747_icon.png
x-app-id: 12
megaup.net/themes/flow/frontend_assets/css/custom.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/custom.css
IP
GET /themes/flow/frontend_assets/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3577"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/canvas-to-blob.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/canvas-to-blob.min.js
IP
GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-408"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Fri, 31 Mar 2023 04:46:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v4o%2FR2HcczSnFZ7bGYbNniyYgxOsAkjvWo1SOm70B2juquicXAnVz%2FAdRd8WzB%2BzQ%2FNKFxEF1CBMJ9YzpziK5nqc2sUP3S%2Fiy7d2SSVUhcJn9H5FV7A24jXA9rchLFaG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b06a69399d42408-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
IP
GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2296"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
IP
GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3bd2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 31 Mar 2023 06:49:08 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AQMjQ7ShN63IASJnxR2IUA9WANdVQs2QlmrwgTQXpjYkuE9-QU6b2lk_wYnaLA_0LJuRXPViIV76Qg
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none; report-to="AccountsSigninPassiveLoginHttp"
content-security-policy: script-src 'nonce-xxzbmZ9xgOGTGrec_gzKXw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, require-trusted-types-for 'script';report-uri /cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSigninPassiveLoginHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSigninPassiveLoginHttp/external"}]}, {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-resource-policy: cross-origin
content-type: application/binary
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
set-cookie: __Host-GAPS=1:JyVNoQVpmqR8kOazEJTkDGl6iBiHJw:lMz4VJYrrmw94X49; Expires=Sun, 30-Mar-2025 06:49:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-resize.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-resize.js
IP
GET /themes/flow/js/jquery.fileupload-resize.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1f7f"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
IP
GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.dataTables.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.dataTables.min.js
IP
GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-10fe4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.iframe-transport.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.iframe-transport.js
IP
GET /themes/flow/js/jquery.iframe-transport.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2427"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
IP
GET /themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-8d4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
IP
GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-153"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/sw.js
200 OK 0 B IP
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:15:31 GMT
vary: Accept-Encoding
etag: W/"63a1dfa3-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
IP
GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-5c6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css
IP
GET /themes/flow/frontend_assets/css/isotope/isotope-style.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-af3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
ad.a-ads.com/1811811?size=300x250
200 OK 0 B URL HTTP/2 ad.a-ads.com/1811811?size=300x250
IP
ASN #24940 Hetzner Online GmbH
GET /1811811?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://megaup.net/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Fri, 31 Mar 2023 04:46:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V0dsu3wsFxCxrgIBSJCSi28NsTW94FtTcsrbKMDKdY%2F%2FKFoc5edyouoVmb56yFNKAUJLrlySmbrNeTdpMqm1WDN0EX1E%2BQvHUrP5TkrQwCrD0tkjedyXVZHsDgxKLB%2BR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b06a69399d32408-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/responsive.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/responsive.css
IP
GET /themes/flow/frontend_assets/css/responsive.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-e56"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.tmpl.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.tmpl.min.js
IP
GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-process.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-process.js
IP
GET /themes/flow/js/jquery.fileupload-process.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
IP
GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1547"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery-ui.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery-ui.js
IP
GET /themes/flow/js/jquery-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6a684"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/load-image.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/load-image.min.js
IP
GET /themes/flow/js/load-image.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-9f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
f.h12-media.com/?init=1&rnd=0.05442134676725885
200 OK 0 B URL HTTP/2 f.h12-media.com/?init=1&rnd=0.05442134676725885
IP
GET /?init=1&rnd=0.05442134676725885 HTTP/1.1
Host: f.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: application/json; Charset=UTF-8
cache-control: max-age=3600,private
vary: Accept-Encoding
access-control-allow-origin: *
x-powered-by: ASP.NET, ARR/3.0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yam0%2FEEcih31ZU%2B6kZ2hRAMRJ6IWQSxCQjBO%2B0nkeiXSqOGeX2xBe%2F0qtTkHbmldQjSz0pwp1GfFAmEz%2Fak3DyHav8yPB6e3lT8SThVvLNvnS6W3HY9IC%2BKx0zzi3aqUIE4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a696ca240b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
IP
GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
200 OK 0 B URL HTTP/2 megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
IP
GET /2xvqp/Nun.Massacre.Definitive.Edition.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=pldrh3out17up5lk8195luhme7; expires=Sat, 01-Apr-2023 06:49:07 GMT; Max-Age=86400; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/file-upload.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/styles/file-upload.css
IP
GET /themes/flow/styles/file-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-ui.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-ui.js
IP
GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-61ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/global.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/global.js
IP
GET /themes/flow/js/global.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-d59"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 31 Mar 2023 06:49:08 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AQMjQ7TmMZ9gJMzejVc5DRhpN61e2FLhtMGUy8BnagjILEFPoin1CXXAv-STxILXoVukAbR3l0Ps6Q
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-3FEj2smYToJLtyoTI85ZoA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, require-trusted-types-for 'script';report-uri /cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSigninPassiveLoginHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSigninPassiveLoginHttp/external"}]}, {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy: unsafe-none; report-to="AccountsSigninPassiveLoginHttp"
content-type: application/binary
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
set-cookie: __Host-GAPS=1:fdS-6J2zp7qIjDB8lRfydak7tQB0Lg:dtUw5HFJlldVyh4o; Expires=Sun, 30-Mar-2025 06:49:08 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
200 OK 0 B URL HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: ANXQznKjk93MDNTEP6U9PmFgnwIE3wKX2XDHXyWnQU8dRVCpHnDdYLOxc94F8AiDcNXVLt6EiKQrn8OKrpA+Gg==
date: Fri, 31 Mar 2023 06:49:08 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/gauge.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/gauge.min.js
IP
GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2xvqp/Nun.Massacre.Definitive.Edition.rar
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:07 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45b8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/sw.js?MGQ4T2ZrRgB8VAZXC21KEkYUbQAIVwssVgQGFXkDAAYVewJSVBV2UghTFSlQVQFdLANTB1ssAxJIGnlQAgAIK1FUSVwrUVRJDHpXAUkAeFQFSQB4VQZSXHpeA1ZafkQcRks4RBxGTCcDWAVKJhJJDFEjAh4GTTUcEkgaflYeURpjAFEISypKVgVUPAMcAlkjFVU5
200 OK 0 B URL HTTP/2 megaup.net/sw.js?MGQ4T2ZrRgB8VAZXC21KEkYUbQAIVwssVgQGFXkDAAYVewJSVBV2UghTFSlQVQFdLANTB1ssAxJIGnlQAgAIK1FUSVwrUVRJDHpXAUkAeFQFSQB4VQZSXHpeA1ZafkQcRks4RBxGTCcDWAVKJhJJDFEjAh4GTTUcEkgaflYeURpjAFEISypKVgVUPAMcAlkjFVU5
IP
GET /sw.js?MGQ4T2ZrRgB8VAZXC21KEkYUbQAIVwssVgQGFXkDAAYVewJSVBV2UghTFSlQVQFdLANTB1ssAxJIGnlQAgAIK1FUSVwrUVRJDHpXAUkAeFQFSQB4VQZSXHpeA1ZafkQcRks4RBxGTCcDWAVKJhJJDFEjAh4GTTUcEkgaflYeURpjAFEISypKVgVUPAMcAlkjFVU5 HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: filehosting=pldrh3out17up5lk8195luhme7; _ga=GA1.2.1073024686.1680245348; _gid=GA1.2.2087791335.1680245348; _gat_gtag_UA_108868042_1=1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:15:31 GMT
vary: Accept-Encoding
etag: W/"63a1dfa3-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Fri, 31 Mar 2023 04:46:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qM0J7dln8IlDmhyAqV8BDC1C3uxOawrIx6k0a4hqNXnNUBfT7Wioi4frXsUjpVYIL20%2BaB4bB1LsNvvu%2Fd6apT1N8RvJMJGxQp%2BwdtRmMf1NyeF0Q%2FsvM6BkwaDoTiIE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b06a69399ce2408-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
f.h12-media.com/?init=1&rnd=0.6656803241869939
200 OK 0 B URL HTTP/2 f.h12-media.com/?init=1&rnd=0.6656803241869939
IP
GET /?init=1&rnd=0.6656803241869939 HTTP/1.1
Host: f.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 06:49:08 GMT
content-type: application/json; Charset=UTF-8
cache-control: max-age=3600,private
vary: Accept-Encoding
access-control-allow-origin: *
x-powered-by: ASP.NET, ARR/3.0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BQ9krtc3CWu1GB%2FbnrWb9MKi9dufvFnFXbXVgjVGHbasggfIuFNSXHCR5v7uy%2FDqZHhY%2B7leKbn7uEUBUXOxbPjiXJqgNAli2Y4ncf9fCk092im7f2hKX2jZ6ADN8ockvHg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b06a69588ad0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
91.209.70.182
54.230.111.73
213.239.207.252
95.211.229.247
185.76.9.15
23.38.201.176
104.21.37.32
188.114.97.1
185.239.173.210
151.101.246.132
185.200.116.90