upfilesurls.com/XC1j?token=eyJpdiI6Ik1FSXJROWExYmdsdEVzWkY1dFFwTEE9PSIsInZhbHVlIjoiZE44dVk2YnA3eHFJUVJHeWF3dVBpZz09IiwibWFjIjoiYzQ3ZDUyNzM0NzM2YTI0NTkxM2I1MWM3YzVkNWFjOTgzMWU5OWNiYzZmOTU3NDRmNmFkMDQxOTFlNDRmODhlYyIsInRhZyI6IiJ9
104.26.9.138302 Found 69 kB URL User Request GET HTTP/2 upfilesurls.com/XC1j?token=eyJpdiI6Ik1FSXJROWExYmdsdEVzWkY1dFFwTEE9PSIsInZhbHVlIjoiZE44dVk2YnA3eHFJUVJHeWF3dVBpZz09IiwibWFjIjoiYzQ3ZDUyNzM0NzM2YTI0NTkxM2I1MWM3YzVkNWFjOTgzMWU5OWNiYzZmOTU3NDRmNmFkMDQxOTFlNDRmODhlYyIsInRhZyI6IiJ9
IP 104.26.9.138:443
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
Hash c2d3fb6cab2960928c7d4a55249940e1
610a431c000285b8bc5653d5de5673938f6a5f15
2dc9e542219228bc9b777a6294dd57ab2c24d6f216c5134edc55b18faa380663
GET /XC1j?token=eyJpdiI6Ik1FSXJROWExYmdsdEVzWkY1dFFwTEE9PSIsInZhbHVlIjoiZE44dVk2YnA3eHFJUVJHeWF3dVBpZz09IiwibWFjIjoiYzQ3ZDUyNzM0NzM2YTI0NTkxM2I1MWM3YzVkNWFjOTgzMWU5OWNiYzZmOTU3NDRmNmFkMDQxOTFlNDRmODhlYyIsInRhZyI6IiJ9 HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 02 Dec 2023 22:22:58 GMT
content-type: text/html; charset=UTF-8
location: https://upfilesurls.com/XC1j
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6IlhWREpQOGx0cU9hVmNRK1pqdVlVS1E9PSIsInZhbHVlIjoieXNLcmZDT2NNaUNXc1NOMjV6US9tZUtmMHpEaHg3ZjdVQzZ1Mjl6RUdsQVBaNjZkaFBUS1VGN3BqbDl6RHJmU1Npb2hxUFE0NGZwdHE1MktCQThWaWZLbU43TG1ta2xCR3lpTXpzVE16QmFlKzRqOHRnV2g5bG9ZK1Azd2xiWTkiLCJtYWMiOiI4NzA2OTI2NjJhNmQyNjIzMTI3OWQ0YTc1ZWVlYmRkMWFhMzZiNzBmM2VlODIyODU3Mjk1ZGI3YWRjODYwZDc3IiwidGFnIjoiIn0%3D; expires=Sat, 09-Dec-2023 22:22:58 GMT; Max-Age=604800; path=/; samesite=lax
upfiles_session=eyJpdiI6ImxQcVFFZjBydnNkekw5SkdPcnRQUnc9PSIsInZhbHVlIjoiNTZ3VnUveTFHNEJVdm9uaWRPbGY0K2I2aDN3RGdIZys2TGVaOGdUSlFEME1tVFhteEl4aXBKMHBJcnlrR05idkd6WjVkbG5HY2Jmb29MTEUyM0RkTWFiNzRBMFNEMHhQUmZ1RXo0UUFzNyttNmo2dHFZakpMcTdHeFBybzhIMFciLCJtYWMiOiJkOTIxZWZlNzIzMmU1OTYxOTNkMTQ0YmIxYWQ5ZmJiNmNmZjk2ZmZhNzI0YThlODllMWE2NTY2ODJjZDIyZGY2IiwidGFnIjoiIn0%3D; expires=Sat, 09-Dec-2023 22:22:58 GMT; Max-Age=604800; path=/; httponly; samesite=lax
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y%2FUC0iyJbYQTUM%2F5ONTsvBlJhhZIfjAs8EGAeRU1lgSBmkjRRwkW4oKNYJUhUfrP51xgEQ0mkSaySKiCyj1J0WbNukQGaq5lLAMdl26zViWivPU%2B3R0oFEAUe0mlxg79ug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c0fad80b69-OSL
X-Firefox-Spdy: h2
cschyogh.com/1clkn/34742
23.109.150.203200 OK 26 B IP 23.109.150.203:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerLet's Encrypt
Subjectcschyogh.com
Fingerprint41:44:0C:14:E9:F0:56:DF:20:70:F6:D1:C1:CB:6E:3E:7B:D0:33:AE
ValidityWed, 04 Oct 2023 23:46:38 GMT - Tue, 02 Jan 2024 23:46:37 GMT
File type ASCII text, with no line terminators
Hash 9082dc37e5e8046929da411544ad071a
41e0e3963ed94e59e8a2f115994c382712411537
b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
GET /1clkn/34742 HTTP/1.1
Host: cschyogh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 02 Dec 2023 22:22:59 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Sun, 03-Dec-2023 22:22:59 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sun, 03-Dec-2023 22:22:59 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
142.250.74.131200 OK 47 kB URL GET HTTP/2 fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP 142.250.74.131:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0\012- data
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 12:15:57 GMT
expires: Thu, 28 Nov 2024 12:15:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 295623
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
142.250.74.131200 OK 47 kB URL GET HTTP/2 fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP 142.250.74.131:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0\012- data
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 12:15:57 GMT
expires: Thu, 28 Nov 2024 12:15:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 295623
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
upfilesurls.com/css/frontend.css?id=2396ffb76e738e465b53
104.26.9.138200 OK 64 kB URL GET HTTP/2 upfilesurls.com/css/frontend.css?id=2396ffb76e738e465b53
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash cf7148de68c4ff76f21e2200b67fd8c4
ace4770fa2d643e676bccca417f7880c8a6565dd
e51161fcc5b2c4b90c3381e517152eb275d52a6c288954e502479d7421386240
GET /css/frontend.css?id=2396ffb76e738e465b53 HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:22:59 GMT
content-type: text/css
cache-control: max-age=31536000
cf-bgj: minify
etag: W/"63a354a4-3f918"
last-modified: Wed, 21 Dec 2022 18:47:00 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 816024
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RLswFVvve53bJvwf8Z8pLcNLAaLnrNldxHL3U9pWgAsbRkz9%2B41Aw6bAMxa6u%2BL%2FAr1yZuVzt85zS76Bq%2F3%2B0zuSxDHzOGnM44XarpL27qH5BfVTheediwCil2hLCUEOwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c66ded0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.131:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 23:43:03 GMT
expires: Tue, 26 Nov 2024 23:43:03 GMT
cache-control: public, max-age=31536000
age: 427197
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dv663fc06d35i.cloudfront.net/?dcfvd=1010617
143.204.42.88200 OK 103 kB URL GET HTTP/2 dv663fc06d35i.cloudfront.net/?dcfvd=1010617
IP 143.204.42.88:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Size 103 kB (102721 bytes)
Hash c72184d2f71c075f79f828f329f953e8
36e92fe9d63d975a09b58c75138e402eac3ffa8a
21905012028782cfbb50cfbf01084e6878aa7f318537f5511f87bf252bccf990
GET /?dcfvd=1010617 HTTP/1.1
Host: dv663fc06d35i.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 102721
date: Sat, 02 Dec 2023 22:22:59 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Bv9ofQOoBS3AAqk80IlZMfpZRim0HaGD6EWoiYKskYv4jv7CnVwABg==
X-Firefox-Spdy: h2
upfilesurls.com/images/arrow-down.png?c98e5283a69cb508d054d30256af43c6
104.26.9.138200 OK 208 B URL GET HTTP/2 upfilesurls.com/images/arrow-down.png?c98e5283a69cb508d054d30256af43c6
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type PNG image data, 6 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 31f073499665afb237f3294219d2d7c6
c1ada0510e31f661dab66203c15a3d6c8f5468d0
59b7ad6d6f457b624e25d22959edc7c83af2ac52edba32fd6648c97af0d1780c
GET /images/arrow-down.png?c98e5283a69cb508d054d30256af43c6 HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/css/frontend.css?id=2396ffb76e738e465b53
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D; ab=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: image/png
content-length: 208
last-modified: Fri, 08 Apr 2022 10:55:45 GMT
etag: "625014b1-d0"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 490950
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ildVkQNmtLr%2FIt0EoY2p4Y6JfpbwrfmA2Pj%2BCVdWHN2QGAcwgSzikbhu06iw06SFcwBnhluu8YwRFYv%2FCd9CjZFd2%2Fx4CUlMZu4UIv7z3%2BBWFCEiQ%2BIst989VhGj8VxyfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8cc58c70b69-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
142.250.74.131200 OK 47 kB URL GET HTTP/2 fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP 142.250.74.131:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 46704, version 1.0\012- data
Hash 30a274cd01b6eeb0b082c918b0697f1e
393311bde26b99a4ad935fa55bad1dce7994388b
88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 12:15:57 GMT
expires: Thu, 28 Nov 2024 12:15:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
age: 295623
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.131:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:07 GMT
expires: Fri, 29 Nov 2024 04:53:07 GMT
cache-control: public, max-age=31536000
age: 235793
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ldrenandthe.org/aGFFZ1dHXiYUag0pDB8ELi8ONhYEWR8MbiAgDV4wOwo2LTJaMGMTPgxcdFdmWFd0UHEYCCFaZk4SMQYjHRJ4VnEBDyMIak4XeFZ5W1VrVGNGUWMSallHMRc2D1x0QSccFSlaZl9RdFJiXVZ9UmJcWA
172.67.194.104204 No Content 0 B URL GET HTTP/2 ldrenandthe.org/aGFFZ1dHXiYUag0pDB8ELi8ONhYEWR8MbiAgDV4wOwo2LTJaMGMTPgxcdFdmWFd0UHEYCCFaZk4SMQYjHRJ4VnEBDyMIak4XeFZ5W1VrVGNGUWMSallHMRc2D1x0QSccFSlaZl9RdFJiXVZ9UmJcWA
IP 172.67.194.104:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aGFFZ1dHXiYUag0pDB8ELi8ONhYEWR8MbiAgDV4wOwo2LTJaMGMTPgxcdFdmWFd0UHEYCCFaZk4SMQYjHRJ4VnEBDyMIak4XeFZ5W1VrVGNGUWMSallHMRc2D1x0QSccFSlaZl9RdFJiXVZ9UmJcWA HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 22:23:00 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T7bkxboVkAwUCiuRPQO7KPcxwYjTmO4QHvI7gW7FhxYUlI7%2FPtpi86p6p%2BxNWpVyHPO1m8SR2eMUn5lKCn0vIpmST4fn52vdNW2002hXh9jFxrNcSSFm%2BB4Geuee%2FsdL0K8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8cbfc5356ba-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ldrenandthe.org/Rm44ZGlpUVsXVBAEeVALDiRQJSg+D2kzMA4qbjYrJBl9KjEtIx4QACJTAV1fcF4JQhkvCgVVTzUaWRAcNVMJQgAoCFdZTzBTCUpackALUEd2SE1ZWGAaSAUOe18eFB0yAgVVXnZfDVFccVYNUV5y
172.67.194.104204 No Content 0 B URL GET HTTP/2 ldrenandthe.org/Rm44ZGlpUVsXVBAEeVALDiRQJSg+D2kzMA4qbjYrJBl9KjEtIx4QACJTAV1fcF4JQhkvCgVVTzUaWRAcNVMJQgAoCFdZTzBTCUpackALUEd2SE1ZWGAaSAUOe18eFB0yAgVVXnZfDVFccVYNUV5y
IP 172.67.194.104:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Rm44ZGlpUVsXVBAEeVALDiRQJSg+D2kzMA4qbjYrJBl9KjEtIx4QACJTAV1fcF4JQhkvCgVVTzUaWRAcNVMJQgAoCFdZTzBTCUpackALUEd2SE1ZWGAaSAUOe18eFB0yAgVVXnZfDVFccVYNUV5y HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 22:23:00 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FTa3Z5bZ7CZJ1uCP8lzUmWYZv%2FYMEls0hTeawsrpHDQyeuoWJS0GhGq9jKuAQHo2wcFom9oABnPUdOZRoEcJaQG%2FdNdDUopU88b9XaV0axMHAN1jDbuSiA2yYbufMjNEGqE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8cc1c6156ba-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lingrethertantin.com/b3BnN2UOEgRaWg5NBREQHRxaElcpVVVxARlGUQQDDEBRU1ZaGUlUCQAFA1EXAB4TGQsKBEIFI1YiVFMcNgoAXCItByF1HyIVIVtRLRYMcSA6BwtfLT41KmEPCzsgczcdPDUDVCkmImMhBxMLVgJfMyByMyIgNXk1OghTRSMHByJ1MiojL3YkKRQLcjEtQRcBNF4hP2QmCBMzTzMsIDUHIS1AV14nFyYhYzY1Oy9AHSw8D0QALhhWBig6FCl0IiU2NlwRPzwPXDIrNV8HMAQyM2EPISM2cSglFFZbJj0XFHEwBDIzYxxbKjVxBgsUI2E9OiEAElcpITIaPygzEGE2PjYpfCg5OiV+AgNDNlsdOzUwfSM+FzVTLy0HA2UCADI1Yi88My9TIj4cLlMBOhMydA4AGSJlVQ04P2IdPkEqeQQ6FDJxAjlCQV0WAB4XCg84Iw1eIhkZM04AKSItQg8
108.157.214.77200 OK 1.2 kB URL GET HTTP/2 lingrethertantin.com/b3BnN2UOEgRaWg5NBREQHRxaElcpVVVxARlGUQQDDEBRU1ZaGUlUCQAFA1EXAB4TGQsKBEIFI1YiVFMcNgoAXCItByF1HyIVIVtRLRYMcSA6BwtfLT41KmEPCzsgczcdPDUDVCkmImMhBxMLVgJfMyByMyIgNXk1OghTRSMHByJ1MiojL3YkKRQLcjEtQRcBNF4hP2QmCBMzTzMsIDUHIS1AV14nFyYhYzY1Oy9AHSw8D0QALhhWBig6FCl0IiU2NlwRPzwPXDIrNV8HMAQyM2EPISM2cSglFFZbJj0XFHEwBDIzYxxbKjVxBgsUI2E9OiEAElcpITIaPygzEGE2PjYpfCg5OiV+AgNDNlsdOzUwfSM+FzVTLy0HA2UCADI1Yi88My9TIj4cLlMBOhMydA4AGSJlVQ04P2IdPkEqeQQ6FDJxAjlCQV0WAB4XCg84Iw1eIhkZM04AKSItQg8
IP 108.157.214.77:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3050), with no line terminators
Hash ad5b0228ea6d7bd0d1ac5b22e6dd0c04
31bae862e70405e75fe99c6a3a78fceb192715df
abcc65cd9608b3f9f894af014f4f3f41feeb6380389a847acf8c6b8185346925
GET /b3BnN2UOEgRaWg5NBREQHRxaElcpVVVxARlGUQQDDEBRU1ZaGUlUCQAFA1EXAB4TGQsKBEIFI1YiVFMcNgoAXCItByF1HyIVIVtRLRYMcSA6BwtfLT41KmEPCzsgczcdPDUDVCkmImMhBxMLVgJfMyByMyIgNXk1OghTRSMHByJ1MiojL3YkKRQLcjEtQRcBNF4hP2QmCBMzTzMsIDUHIS1AV14nFyYhYzY1Oy9AHSw8D0QALhhWBig6FCl0IiU2NlwRPzwPXDIrNV8HMAQyM2EPISM2cSglFFZbJj0XFHEwBDIzYxxbKjVxBgsUI2E9OiEAElcpITIaPygzEGE2PjYpfCg5OiV+AgNDNlsdOzUwfSM+FzVTLy0HA2UCADI1Yi88My9TIj4cLlMBOhMydA4AGSJlVQ04P2IdPkEqeQQ6FDJxAjlCQV0WAB4XCg84Iw1eIhkZM04AKSItQg8 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1198
date: Sat, 02 Dec 2023 22:23:00 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: 12Di46E7uLJ-0sqcI8n9Za5aKLRPiZ1fZCPxCNXIvmComAWpSSY1Qw==
X-Firefox-Spdy: h2
lingrethertantin.com/SkZiQWwrJAEsUyt7AGcZOCpfZF4MY1AHCDxwVHIKKXZUJV9/L0wiACUzBiceJSgWbwIvMkdzKnskUSUoGCoBDCsJdgUgLjkjKHIYJx5SGxYpATgYORktUw4tDw4EKCUvEFJ1GgkUKzMqHRMbDT0+DQFzLX0CCioHL3UnCisZBFUbByERKDg+OxFTBF8ELAUEPyATWg09HwEoOyEzDhoDAAc8OBIrIzFaEQsHJCssIiYNNwsYLigoJT54NRoRCw8SLgUpIRUJFxYBBSwKPhIIURtcDA44LzkcFQkXFgcSVgM9EiIIGy97FQEZNTwRNw8BLhQ0Cj4Say9xJR82JwACLig1LQAwJFELCBg/MysiCxc7GwIbFDoUCDMiDyUJGHUoKzYcfjAKBhs/IRMLfR9QFBwYKCw7CRx/MA8CPitEKx8lKBJ8CAN+Wy0jDwIA
108.157.214.77200 OK 1.2 kB URL GET HTTP/2 lingrethertantin.com/SkZiQWwrJAEsUyt7AGcZOCpfZF4MY1AHCDxwVHIKKXZUJV9/L0wiACUzBiceJSgWbwIvMkdzKnskUSUoGCoBDCsJdgUgLjkjKHIYJx5SGxYpATgYORktUw4tDw4EKCUvEFJ1GgkUKzMqHRMbDT0+DQFzLX0CCioHL3UnCisZBFUbByERKDg+OxFTBF8ELAUEPyATWg09HwEoOyEzDhoDAAc8OBIrIzFaEQsHJCssIiYNNwsYLigoJT54NRoRCw8SLgUpIRUJFxYBBSwKPhIIURtcDA44LzkcFQkXFgcSVgM9EiIIGy97FQEZNTwRNw8BLhQ0Cj4Say9xJR82JwACLig1LQAwJFELCBg/MysiCxc7GwIbFDoUCDMiDyUJGHUoKzYcfjAKBhs/IRMLfR9QFBwYKCw7CRx/MA8CPitEKx8lKBJ8CAN+Wy0jDwIA
IP 108.157.214.77:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3035), with no line terminators
Hash 0ee942a673a640e72ca849ac58088045
7eef1b209e1f09b192cb2eaf7aeb165600950400
e04f3368dba9717421e73bfcc292b406f83cfc9880445026d46773688455e8d5
GET /SkZiQWwrJAEsUyt7AGcZOCpfZF4MY1AHCDxwVHIKKXZUJV9/L0wiACUzBiceJSgWbwIvMkdzKnskUSUoGCoBDCsJdgUgLjkjKHIYJx5SGxYpATgYORktUw4tDw4EKCUvEFJ1GgkUKzMqHRMbDT0+DQFzLX0CCioHL3UnCisZBFUbByERKDg+OxFTBF8ELAUEPyATWg09HwEoOyEzDhoDAAc8OBIrIzFaEQsHJCssIiYNNwsYLigoJT54NRoRCw8SLgUpIRUJFxYBBSwKPhIIURtcDA44LzkcFQkXFgcSVgM9EiIIGy97FQEZNTwRNw8BLhQ0Cj4Say9xJR82JwACLig1LQAwJFELCBg/MysiCxc7GwIbFDoUCDMiDyUJGHUoKzYcfjAKBhs/IRMLfR9QFBwYKCw7CRx/MA8CPitEKx8lKBJ8CAN+Wy0jDwIA HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1187
date: Sat, 02 Dec 2023 22:23:00 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: m2ahfdQbfIc0P55dZLI2MlPzaX4Kkt71bbDGVQsgIkxtlXXoTGscoA==
X-Firefox-Spdy: h2
live.demand.supply/e/e.js?e=ll&d=484&cs=c&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 0 B URL HEAD HTTP/3 live.demand.supply/e/e.js?e=ll&d=484&cs=c&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?e=ll&d=484&cs=c&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
etag: "4de2110991f3807e8b4a19c48c14f2d1-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HEQ11YQH5NDF00RQZ2ZRCY60
cf-cache-status: HIT
age: 922052
accept-ranges: bytes
set-cookie: __cf_bm=8eBPmyyOUesyDOFB5HCkSmGghQJQBv5VrSNy8nco4EQ-1701555780-0-AXXrH5idCuETk80ECr1zDGzZsUnz/YsbmTRlIwitdBu6delOph0CpjEkxWRk1/rLbxko7E3qmqQVCaS2JpExR7Y=; path=/; expires=Sat, 02-Dec-23 22:53:00 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8ccec6bb523-OSL
alt-svc: h3=":443"; ma=86400
live.demand.supply/ds.2.html
104.16.134.22200 OK 3.5 kB URL GET HTTP/3 live.demand.supply/ds.2.html
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6d93563087b24f71a2de50d213d1a6a6
3084afce8b8bb33ba5f5c4ac4e7ebb153c552deb
bdd1579c84daab8cdd1e5a4f71b546c9eaa6a76418f83e0215c573523614c309
GET /ds.2.html HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=2592000,immutable,stale-if-error=604800
strict-transport-security: max-age=31536000
timing-allow-origin: *
x-nf-request-id: 01HFP9N9C4P8K47VBZVVEWGYZG
cf-cache-status: HIT
age: 922052
set-cookie: __cf_bm=emZJwG.twIjcUl0sQCqcql3K0pi6dG.bTMG4_qkw3hY-1701555780-0-AdDwbgf9WCoOlGtnuKMZQM7dc0B8KFQfVpGL4ul78J6FdNrrEdOxt9PR5C60LI1P8W6Ecipjia7vtfaNsIufLfw=; path=/; expires=Sat, 02-Dec-23 22:53:00 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8cdbcdfb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
datatechone.com/log/add?cid=099bff94-57af-4b2b-a42c-300c65c51697
37.48.68.71200 OK 2 B URL POST HTTP/1.1 datatechone.com/log/add?cid=099bff94-57af-4b2b-a42c-300c65c51697
IP 37.48.68.71:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://upfilesurls.com/XC1j
Certificate IssuerSectigo Limited
Subjectdatatechone.com
Fingerprint8E:B7:22:E4:97:95:3C:60:FC:7C:41:39:A6:B7:B7:E2:48:B2:D0:18
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=099bff94-57af-4b2b-a42c-300c65c51697 HTTP/1.1
Host: datatechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1376
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sat, 02 Dec 2023 22:23:00 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: https://upfilesurls.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
dv663fc06d35i.cloudfront.net/9R3dyYzgkGBwFBzMeFl4BfkFEUwlhHQEMVjdKGDRrLR41FVETDhclag0CGEVMPRNPUx4rFhwEBWESHAAFdlETB1p6Q1QXSCgcTxVCPR0DB00iBxVFTSZKHwxCLhseAh11MUdNCGJFQktPLhkWDE80UkBTVjNSQFMJd1lCRgsFUkBTTy4ZRFcddDVXUQg/QU-ZGCwVSQFNKMVJBIgl3QlxTEWJFQgRdJBwdRgoBRUJSCHdGQlIddUcUCkoiER0bHXUxQ1MNaUdUFgV2
143.204.42.88 620 B URL dv663fc06d35i.cloudfront.net/9R3dyYzgkGBwFBzMeFl4BfkFEUwlhHQEMVjdKGDRrLR41FVETDhclag0CGEVMPRNPUx4rFhwEBWESHAAFdlETB1p6Q1QXSCgcTxVCPR0DB00iBxVFTSZKHwxCLhseAh11MUdNCGJFQktPLhkWDE80UkBTVjNSQFMJd1lCRgsFUkBTTy4ZRFcddDVXUQg/QU-ZGCwVSQFNKMVJBIgl3QlxTEWJFQgRdJBwdRgoBRUJSCHdGQlIddUcUCkoiER0bHXUxQ1MNaUdUFgV2
IP 143.204.42.88:0
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (856), with no line terminators
Hash 2032ea435ac0f38f36e073513f7a1740
6189a34cbcd524561edaec9c85c9437cf744961a
c413b33ff3242bb86efb58125764756fd8534bf1d72c70ea9add385e69d4b8c2
GET /9R3dyYzgkGBwFBzMeFl4BfkFEUwlhHQEMVjdKGDRrLR41FVETDhclag0CGEVMPRNPUx4rFhwEBWESHAAFdlETB1p6Q1QXSCgcTxVCPR0DB00iBxVFTSZKHwxCLhseAh11MUdNCGJFQktPLhkWDE80UkBTVjNSQFMJd1lCRgsFUkBTTy4ZRFcddDVXUQg/QU-ZGCwVSQFNKMVJBIgl3QlxTEWJFQgRdJBwdRgoBRUJSCHdGQlIddUcUCkoiER0bHXUxQ1MNaUdUFgV2 HTTP/1.1
Host: dv663fc06d35i.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingrethertantin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 620
date: Sat, 02 Dec 2023 22:23:01 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cNpXD62WI3H8h6xQd2qIaKDyglTemZaL5MmlYdUqGgbfa1kqFYdHcg==
X-Firefox-Spdy: h2
upfilesurls.com/cdn-cgi/challenge-platform/h/b/jsd/r/82f6f8c1eb520b69
104.26.9.138200 OK 81 kB URL POST HTTP/2 upfilesurls.com/cdn-cgi/challenge-platform/h/b/jsd/r/82f6f8c1eb520b69
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
Hash 53bf098a7f92f0dedeb58415266504f5
4804e0f13e80e9a51a5624131d8a3d9fbd4d3cb5
1e79073513d1549d0eed2bbd6f389bb5dd2f1063fd41308ce3f6eb40d0872050
POST /cdn-cgi/challenge-platform/h/b/jsd/r/82f6f8c1eb520b69 HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12187
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D; ab=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=qwo4AiKmj8p2sqwBXcl153A9Gft9L2vVHNQg7lrsGmM-1701555780-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701555780; path=/; expires=Sun, 01-Dec-24 22:23:00 GMT; domain=.upfilesurls.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vXM9%2FTqksvTmWcVCmV07fNZ7H82ATFodGVTj%2FqSN%2BFQDhIu%2B3sfGsH4rx3webVAy17yWxU36YVmISDA6B6myadIgmkRek6CY3J%2BOyjrIfstq%2BvhMzKIw8JGZU4vDMkYodw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8cf1a690b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
dv663fc06d35i.cloudfront.net/1b3dDRlcMGC0gaBseJ3tmX0ZzcGZYUSk1OAEHfiIeV04vCRIrFWUyLQtKc2A7Dhkke3EKGSB7ZkkWJyRqW1E3NjgESjU8LQUGJzMyHxBlMzZSGiw8PgMbImNlKUJtdnJdR2sxPgETLDEkSkVzKCNKRXN3Z0FHZnUVSkVzMT4BQXdjZC1ScXYvWUNmdRVKRX-M0IUpEAndnWllzb3JdRyQjNAQYZnQRXUdydmdeR3JjZV8RKjQyCRg7Y2UpRnNzeV9RNntm
143.204.42.88 529 B URL dv663fc06d35i.cloudfront.net/1b3dDRlcMGC0gaBseJ3tmX0ZzcGZYUSk1OAEHfiIeV04vCRIrFWUyLQtKc2A7Dhkke3EKGSB7ZkkWJyRqW1E3NjgESjU8LQUGJzMyHxBlMzZSGiw8PgMbImNlKUJtdnJdR2sxPgETLDEkSkVzKCNKRXN3Z0FHZnUVSkVzMT4BQXdjZC1ScXYvWUNmdRVKRX-M0IUpEAndnWllzb3JdRyQjNAQYZnQRXUdydmdeR3JjZV8RKjQyCRg7Y2UpRnNzeV9RNntm
IP 143.204.42.88:0
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (733), with no line terminators
Hash cd2164a43ef14517e4e6ed14b2d71cea
82b2aebc13190aa0872d8200ee3f63d30b577cce
f8fff56611118b55142992461a4345f5603b80d79905e5707a1e204e7a45062f
GET /1b3dDRlcMGC0gaBseJ3tmX0ZzcGZYUSk1OAEHfiIeV04vCRIrFWUyLQtKc2A7Dhkke3EKGSB7ZkkWJyRqW1E3NjgESjU8LQUGJzMyHxBlMzZSGiw8PgMbImNlKUJtdnJdR2sxPgETLDEkSkVzKCNKRXN3Z0FHZnUVSkVzMT4BQXdjZC1ScXYvWUNmdRVKRX-M0IUpEAndnWllzb3JdRyQjNAQYZnQRXUdydmdeR3JjZV8RKjQyCRg7Y2UpRnNzeV9RNntm HTTP/1.1
Host: dv663fc06d35i.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lingrethertantin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 529
date: Sat, 02 Dec 2023 22:23:01 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7WmfGjLIRTqVO_wRPEPl3ti9HGOSdWMcgGc1mBa_sq8C4tCWS97nyg==
X-Firefox-Spdy: h2
live.demand.supply/e/e.js?r=upfilesurls.com_fluid_lb%2Bsq_firstpageafterbutton_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 0 B URL HEAD HTTP/3 live.demand.supply/e/e.js?r=upfilesurls.com_fluid_lb%2Bsq_firstpageafterbutton_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=upfilesurls.com_fluid_lb%2Bsq_firstpageafterbutton_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
etag: "4de2110991f3807e8b4a19c48c14f2d1-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HEQ11YQH5NDF00RQZ2ZRCY60
cf-cache-status: HIT
age: 922053
accept-ranges: bytes
set-cookie: __cf_bm=J8sV6g4Wq.ZOIy7eUE7C0OPCRwsZ8fIEvpA_oRIP0Eg-1701555781-0-ATbigaZPZ0xY0A5y5ORGCvcysLWlTJOlgwTM+6C8bSnwXZVoOqfqPMqzGhum7SrcQK6ZfCsebtPkAfmTXeQadYw=; path=/; expires=Sat, 02-Dec-23 22:53:01 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d10f6bb523-OSL
alt-svc: h3=":443"; ma=86400
live.demand.supply/e/e.js?r=upfilesurls.com_fluid_sq_firstpageaftertitle_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 0 B URL HEAD HTTP/3 live.demand.supply/e/e.js?r=upfilesurls.com_fluid_sq_firstpageaftertitle_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=upfilesurls.com_fluid_sq_firstpageaftertitle_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
etag: "4de2110991f3807e8b4a19c48c14f2d1-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HEQ11YQH5NDF00RQZ2ZRCY60
cf-cache-status: HIT
age: 922053
accept-ranges: bytes
set-cookie: __cf_bm=sANBbChxup7RaYPo_83CaNqyZJhvjVgMbejYxI0F6n0-1701555781-0-AVLFPXMb0OWhTLj7N6+equ98i+2WzvI4RHywZ+dBrr04HaPWz0mlwyk8EYhXEW5G2HU3YnEgCRzYatnP3AWbFiw=; path=/; expires=Sat, 02-Dec-23 22:53:01 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d19fc1b523-OSL
alt-svc: h3=":443"; ma=86400
live.demand.supply/e/e.js?r=upfilesurls.com_fluid_lb%2Bsq_firstpagebeforetitle_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 0 B URL HEAD HTTP/3 live.demand.supply/e/e.js?r=upfilesurls.com_fluid_lb%2Bsq_firstpagebeforetitle_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=upfilesurls.com_fluid_lb%2Bsq_firstpagebeforetitle_1&e=empdr&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
etag: "4de2110991f3807e8b4a19c48c14f2d1-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HEQ11YQH5NDF00RQZ2ZRCY60
cf-cache-status: HIT
age: 922053
accept-ranges: bytes
set-cookie: __cf_bm=S3LwGEsQX8hh6TP_Gnd_NLgGBrrXQZ9pjhIBn.R_QAw-1701555781-0-Afw+9YjZJL7ghKdRybZGNh/1i8mRJgme4iIHcJqhbgSHxsEf/SnoxfT3+SYnl/O/og/+PaNsWn1KNodkxdGPRbA=; path=/; expires=Sat, 02-Dec-23 22:53:01 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d19fbfb523-OSL
alt-svc: h3=":443"; ma=86400
dv663fc06d35i.cloudfront.net/?dcfvd=1010617
143.204.42.88200 OK 103 kB URL GET HTTP/2 dv663fc06d35i.cloudfront.net/?dcfvd=1010617
IP 143.204.42.88:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15945)
Size 103 kB (102721 bytes)
Hash 6855fb3b69fa40e70b9ccfcede1b0f40
bed0ecad146399a6ce27a8a683666a5be1be3607
20b1d5b80a39a9814d631a698ded91c51a3a9e336db0dd901bcbaf118fe69491
GET /?dcfvd=1010617 HTTP/1.1
Host: dv663fc06d35i.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 102721
date: Sat, 02 Dec 2023 22:23:01 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://upfilesurls.com
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JLDtTN_1P_Uq6BCPZtRwHHB4ylpW1x8e6IWxHYUIcBudnf9pEDr3ew==
X-Firefox-Spdy: h2
upfilesurls.com/favicon.ico
104.26.9.138200 OK 1.1 kB URL GET HTTP/2 upfilesurls.com/favicon.ico
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit colormap, non-interlaced, 32 bits/pixel\012- data
Hash ba3a9d1041ae9a7a655f9632756b1e92
fbb065d1df15871da0b7df14ca22041a729dda88
180c85c0caca07f8411a77e2392751d979f74982f0ed7062a0093b322924f38f
GET /favicon.ico HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D; ab=1; cf_clearance=qwo4AiKmj8p2sqwBXcl153A9Gft9L2vVHNQg7lrsGmM-1701555780-0-1-730ca2d2.57dbd4fb.240dfd32-0.2.1701555780; _ga_75C4L64NEB=GS1.1.1701555786.1.0.1701555786.0.0.0; _ga=GA1.1.692539503.1701555786
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: image/x-icon
last-modified: Fri, 08 Apr 2022 10:55:45 GMT
vary: Accept-Encoding
etag: W/"625014b1-5b8"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 6901
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=32njFs1Qlyi3Um6k%2FuBlGAb8AxtslkPxCy8Ya0%2BK8T%2BgaqlvIPQZspHxtJO9FoQjv%2B5RXVZT5eApZkdFSMpqBSMhpcVy63zVUUTGoroDgXbvCKmUck%2BmzRLCp%2F2YDamINQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8d24c280b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=Roboto:wght@400;500;700;900&display=swap
142.250.74.106200 OK 963 B URL GET HTTP/2 fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=Roboto:wght@400;500;700;900&display=swap
IP 142.250.74.106:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 46d5857babcdc79465067d5bc6f0516b
a08ea148fdc854daab89bdc95d05379979485024
0f9f9de833d585905809ec4e207ddc9b42190d5660f30c54b25a8c6deb3612df
GET /css2?family=Inter:wght@400;500;600;700&family=Roboto:wght@400;500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 02 Dec 2023 22:22:59 GMT
date: Sat, 02 Dec 2023 22:22:59 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lingrethertantin.com/utx?cb=Fhl95XoN7O5L&top=upfilesurls.com&tid=1010617
108.157.214.77204 No Content 0 B URL GET HTTP/2 lingrethertantin.com/utx?cb=Fhl95XoN7O5L&top=upfilesurls.com&tid=1010617
IP 108.157.214.77:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=Fhl95XoN7O5L&top=upfilesurls.com&tid=1010617 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 22:23:01 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://upfilesurls.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 02 Dec 2023 22:24:01 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: cbEGs6si4F6_zNjkjg1hnQvosUWj80QvLs6ybbh-ee_9m6VkZOZP7w==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.150.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 142.250.150.84:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:Q548Qv8ZplR-PegtvRj8-QkwZ0atNA:9nbDCCM1uxifXqAp; Expires=Mon, 01-Dec-2025 22:23:01 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 22:23:01 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1_-s6RYb0c9fYHdm8XFphteBo-J8g0TK1O2ZchjV6amq3I5MIXd1sBQiZku1aQH6BBD0e3jQ
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-UQLpxKJFNhO938-8_Gdm2g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.150.84302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 142.250.150.84:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:BMidPdprCpQo0qFyqkRH_BQxiGiRCQ:dgaphQxXjiUhsrT4; Expires=Mon, 01-Dec-2025 22:23:01 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 22:23:01 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3m55zbBxobgCXJNQvi_npzzPdcLlhHYsmutFBcQVdePcXXowFmq9jAdjMotEqRCdXEwLE60A
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-odWssP9X2HdlUUrGuXZRTw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
104.26.9.138200 OK 35 kB URL User Request GET HTTP/2 IP 104.26.9.138:443
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (58751)
Hash 2d3a50bc6d6936dd94f955a57c2cf0fc
c387468200e396023ae69f79fb527ac4e70f558a
b0d86428669bd6273295f19cb0308a938fa7c5e7a9f1c04262f8a8663d0f57ba
GET /XC1j HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlhWREpQOGx0cU9hVmNRK1pqdVlVS1E9PSIsInZhbHVlIjoieXNLcmZDT2NNaUNXc1NOMjV6US9tZUtmMHpEaHg3ZjdVQzZ1Mjl6RUdsQVBaNjZkaFBUS1VGN3BqbDl6RHJmU1Npb2hxUFE0NGZwdHE1MktCQThWaWZLbU43TG1ta2xCR3lpTXpzVE16QmFlKzRqOHRnV2g5bG9ZK1Azd2xiWTkiLCJtYWMiOiI4NzA2OTI2NjJhNmQyNjIzMTI3OWQ0YTc1ZWVlYmRkMWFhMzZiNzBmM2VlODIyODU3Mjk1ZGI3YWRjODYwZDc3IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImxQcVFFZjBydnNkekw5SkdPcnRQUnc9PSIsInZhbHVlIjoiNTZ3VnUveTFHNEJVdm9uaWRPbGY0K2I2aDN3RGdIZys2TGVaOGdUSlFEME1tVFhteEl4aXBKMHBJcnlrR05idkd6WjVkbG5HY2Jmb29MTEUyM0RkTWFiNzRBMFNEMHhQUmZ1RXo0UUFzNyttNmo2dHFZakpMcTdHeFBybzhIMFciLCJtYWMiOiJkOTIxZWZlNzIzMmU1OTYxOTNkMTQ0YmIxYWQ5ZmJiNmNmZjk2ZmZhNzI0YThlODllMWE2NTY2ODJjZDIyZGY2IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:22:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; expires=Sat, 09-Dec-2023 22:22:59 GMT; Max-Age=604800; path=/; samesite=lax
upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D; expires=Sat, 09-Dec-2023 22:22:59 GMT; Max-Age=604800; path=/; httponly; samesite=lax
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=umGkeNbUO5FXq%2BAWQuPm90BrqPCl%2Fu9t9iNN6TayMAY35PpF995eiJ4foSD3ouD1Sq5kAhQnZx30Y%2BfG%2BY4724bqbeajkTKDM%2B7RGoyFLZaNcEkSbQh9X6TKqQKFlZ8amg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c1eb520b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3m55zbBxobgCXJNQvi_npzzPdcLlhHYsmutFBcQVdePcXXowFmq9jAdjMotEqRCdXEwLE60A
142.250.150.84302 Found 408 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3m55zbBxobgCXJNQvi_npzzPdcLlhHYsmutFBcQVdePcXXowFmq9jAdjMotEqRCdXEwLE60A
IP 142.250.150.84:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (399)
Hash 033c8f52d34bc5ffe87911627e2df7b9
86d5b45cce54cc52a8781dd5cad7079f4b495793
75c05bbb3b3eac9149a68ac8345f1b98893bfd24194d2eb009acc52f0aaa60d4
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=ASKXGp3m55zbBxobgCXJNQvi_npzzPdcLlhHYsmutFBcQVdePcXXowFmq9jAdjMotEqRCdXEwLE60A HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:a3hT37wiMkQ2GLptF_Hphr6WdEzmmA:sSNte_tY5ZGsb42t;Path=/;Expires=Mon, 01-Dec-2025 22:23:01 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 22:23:01 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2VKVbxuS9BXPLpgX2yKVv2afKTIVCo7BUJF-F2rt46afaykxBIz4iduiVqyc3jUZFa3VBjqQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1376328443%3A1701555781740686&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-dvcGJIyDMgucfZF6vOAEzA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 408
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1_-s6RYb0c9fYHdm8XFphteBo-J8g0TK1O2ZchjV6amq3I5MIXd1sBQiZku1aQH6BBD0e3jQ
142.250.150.84302 Found 405 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1_-s6RYb0c9fYHdm8XFphteBo-J8g0TK1O2ZchjV6amq3I5MIXd1sBQiZku1aQH6BBD0e3jQ
IP 142.250.150.84:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (395)
Hash b90f1b7a64e1b11924aba8df9dc56a01
e31913b334770e6721f79077a5ee69ccdf84503f
8b359fd7c46582175346841051cbf881fc98c727edc7faa9cbe8cb5b54d535b3
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=ASKXGp1_-s6RYb0c9fYHdm8XFphteBo-J8g0TK1O2ZchjV6amq3I5MIXd1sBQiZku1aQH6BBD0e3jQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:2Xj_i7OyYc_hufU82QbfqOcXX48zrw:o65-rSIkaT5ntuZx;Path=/;Expires=Mon, 01-Dec-2025 22:23:01 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 22:23:01 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2EuxqamZSzZTD9kDlc0AadzQ3EuqPncUehSNCf-b-My4jjTpSAzKxhJcVa-eHRVnYmdrdKIw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2013867544%3A1701555781738972&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-gWqk5vQUyXgNp62T8dAcPw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
142.250.74.35200 OK 191 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 02 Dec 2023 11:33:07 GMT
expires: Sun, 01 Dec 2024 11:33:07 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 38995
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.2200 OK 0 B URL HEAD HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP 142.250.74.2:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint6C:2A:75:F2:3F:EF:4F:43:B1:8D:C3:B7:E9:2E:4A:EF:40:6A:FC:92
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 02 Dec 2023 22:23:02 GMT
expires: Sat, 02 Dec 2023 22:23:02 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 947950115538181581
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 52612
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
upfilesurls.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
104.26.9.138200 OK 7.4 kB URL GET HTTP/2 upfilesurls.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type ASCII text, with very long lines (7366), with no line terminators
Hash 2c0f25e7016a89466506284ed5d5784a
08c759c99602a4b3bf62981cc4737500d60c21fc
51a4e6e87a228e62867b300a81adb949f719410f5dd0eadc042ffcf8961249d9
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D; ab=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XWM6%2FvfYfVOj9MplBfAmCfuSnfFoerRn6BAvxzLb48o%2B8gptPbiN9ucAb1PAxxgYugG6P0b1S57F65VASeBygUSibriVXacPeiIaKTotBcW0ch0JEi67xGqNQBU4AhMwTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8cde9cd0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
188.114.97.1200 OK 102 kB IP 188.114.97.1:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://upfilesurls.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 2637
last-modified: Sat, 02 Dec 2023 21:39:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4CIU4Xf1JfdNrgKSignWwK0aqDnSRQ%2BHjTNNfQmiCf847%2FnypD50CCp4Dkn9aXmMgs3TnWYDfdKwV00fZl4azUAQPjnsb1dhhdUUNc3zbV%2Fhc%2B41e0y1%2Fx4gmuAulaDR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d2dca856b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lingrethertantin.com/utx?cb=rJmzGGo7amvp&top=upfilesurls.com&tid=996601
108.157.214.77204 No Content 0 B URL GET HTTP/2 lingrethertantin.com/utx?cb=rJmzGGo7amvp&top=upfilesurls.com&tid=996601
IP 108.157.214.77:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerAmazon
Subjectlingrethertantin.com
Fingerprint05:43:5F:62:44:4A:F8:16:0D:0E:1F:DC:05:AA:39:FF:6E:4C:56:B8
ValidityMon, 27 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=rJmzGGo7amvp&top=upfilesurls.com&tid=996601 HTTP/1.1
Host: lingrethertantin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 02 Dec 2023 22:23:01 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://upfilesurls.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 02 Dec 2023 22:24:01 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: yOPLTuu9p6pyoKDv_fbUEn1bI_KHqYzJzjS6xilPCync2L5m471MWg==
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2VKVbxuS9BXPLpgX2yKVv2afKTIVCo7BUJF-F2rt46afaykxBIz4iduiVqyc3jUZFa3VBjqQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1376328443%3A1701555781740686&theme=glif
142.250.150.84403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2VKVbxuS9BXPLpgX2yKVv2afKTIVCo7BUJF-F2rt46afaykxBIz4iduiVqyc3jUZFa3VBjqQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1376328443%3A1701555781740686&theme=glif
IP 142.250.150.84:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2VKVbxuS9BXPLpgX2yKVv2afKTIVCo7BUJF-F2rt46afaykxBIz4iduiVqyc3jUZFa3VBjqQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1376328443%3A1701555781740686&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 22:23:01 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-yBF0uLLoJJpYex5eHteVCw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
live.demand.supply/p4/v17-21-0/dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 984 B URL GET HTTP/3 live.demand.supply/p4/v17-21-0/dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (1122), with no line terminators
Hash 184b621cc1ab7ffdef4a29d2a129378c
10bb6ef49394f949aeddfe26015580ebfc0f2e5b
85f5c950c6aa0e947bdde430dec7fd2626a82f6db8097a193b8f2e97b0462669
GET /p4/v17-21-0/dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Cookie: demandSupplyTi=9cd720b5-5aac-40d7-9763-3043a53c58c8; __cf_bm=evN.7cId5uJcX_2ZQp4huvSLPLpK8JraAorn96hazJc-1701555780-0-Aa36YDRCQynz0JHXZ3wU7ecVZvaI8NfHbja7Bo6WGv1DCpkLwent5GphM0BwUaA+i/lWjMFRgBJrjj75CbDKVHw=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: text/javascript
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8cd784656b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
upfilesurls.com/img/menu.svg
104.26.9.138200 OK 1.8 kB URL GET HTTP/2 upfilesurls.com/img/menu.svg
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1993), with no line terminators
Hash 384fec65fc108518c176b62a88b40a1f
d6c42c0b2dbdfef2d8468fc91f6c5611596075ef
00e2d83eb75a29fcfbf8e8373352d2e566d143764ddc05d982f46c85bb58517f
GET /img/menu.svg HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:22:59 GMT
content-type: image/svg+xml
last-modified: Tue, 24 Jan 2023 16:39:42 GMT
vary: Accept-Encoding
etag: W/"63d009ce-72e"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 672820
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pQXfOgc%2F5C%2BYYEqG1mDpcevLzeBlxDHNe1ECFgLV5LhWSJVevRmWVoqWPQSXvjtGxoMtmbXorw1PGPECScLJ17IwDJUrXLeVowQARG%2BCthVlM02cdbphT2xb%2FrlzZIIEgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c66df50b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2EuxqamZSzZTD9kDlc0AadzQ3EuqPncUehSNCf-b-My4jjTpSAzKxhJcVa-eHRVnYmdrdKIw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2013867544%3A1701555781738972&theme=glif
142.250.150.84403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2EuxqamZSzZTD9kDlc0AadzQ3EuqPncUehSNCf-b-My4jjTpSAzKxhJcVa-eHRVnYmdrdKIw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2013867544%3A1701555781738972&theme=glif
IP 142.250.150.84:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=ASKXGp2EuxqamZSzZTD9kDlc0AadzQ3EuqPncUehSNCf-b-My4jjTpSAzKxhJcVa-eHRVnYmdrdKIw&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2013867544%3A1701555781738972&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 02 Dec 2023 22:23:01 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-871cIlLQ0hE71IcFlCObtg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
upfilesurls.com/js/ads.js
104.26.9.138200 OK 1.5 kB URL GET HTTP/2 upfilesurls.com/js/ads.js
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type ASCII text, with very long lines (1551), with no line terminators
Hash 18062be5f40e561d47292c4c3e16e968
a527704208e4e365d0119360f6dd5fb1ce8eb3c8
63e619bf91f115635c5f302e9352cca845a7c498eaef9c2fee9b50a16001be37
GET /js/ads.js HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:22:59 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=31536000
cf-bgj: minify
etag: W/"63baab19-608"
last-modified: Sun, 08 Jan 2023 11:38:01 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 918649
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KEgAlPt8CZdgruJMC3Lw25oGYwtEhX22dYSFnH6CuD3FwPZT8kcPrEd17p4pjz%2FS3vVCfxAgVpIl56Kdb7R8SUX23vIdc9bINo4ZaIsmAuz2Z%2FPesZfqvRW%2F6FHg5tcAqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c68e060b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
142.250.74.131200 OK 921 B URL GET HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit
IP 142.250.74.131:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectmisc.google.com
Fingerprint60:EB:F2:B5:46:D7:39:12:3D:8C:D5:9A:EC:14:D4:9C:47:0F:DE:DE
ValidityMon, 23 Oct 2023 11:19:58 GMT - Mon, 15 Jan 2024 11:19:57 GMT
File type ASCII text, with very long lines (921), with no line terminators
Hash 5b6f08f1e0f0284cf893616838da61f3
b267f92b338a62dc38640f2ef7c6c33ab129e962
04accf2271af1d069333bfbe89d2002c5e92cfd66b7fd41a31e71616cdd47b28
GET /recaptcha/api.js?onload=onloadRecaptchaCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Sat, 02 Dec 2023 22:23:01 GMT
date: Sat, 02 Dec 2023 22:23:01 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
upfilesurls.com/img/plane.svg
104.26.9.138200 OK 684 B URL GET HTTP/2 upfilesurls.com/img/plane.svg
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (701), with no line terminators
Hash 8e7c41bde9bc90def2171d239eb22f04
853c0fbf7ca55b313af83201d95d6f6f3d3225ba
9bc4e093793a06ba14d0505710aad5254212125573342fa92c228f873d05bfea
GET /img/plane.svg HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:22:59 GMT
content-type: image/svg+xml
last-modified: Fri, 13 Jan 2023 13:29:35 GMT
vary: Accept-Encoding
etag: W/"63c15cbf-2ac"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 246714
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z7XBaN08iJvZLaMsqQAYWvc%2BquifgWOvcY2gJyS4Era2eJP%2B67c0H6gsOLQwcOWM9KdUwGTwSQfKZ0A2uUs2tEWPxten1bWHWpKiyc3tk2T5ZxtZbYeVtbfEicXaUk1jIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c67dff0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/
188.114.97.1200 OK 27 B IP 188.114.97.1:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a49c67315ad09a9cc033217182377be3
273413cbbb081f75c4f12328b5cc4a1b27ca8fd0
6ba4c2d128709f9a32fbdfd8bace5154c2c4d17f54d504bf6db1ce45d7dffc9d
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: text/plain
set-cookie: csu=1395653328331185@1@1701555781; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://upfilesurls.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AoehGVh7kzlGxzo%2F3LnrMXKHWrKOIdadRgfsg0zRi9IWg%2B1JjwdD7XyrhCMZxjLEpdA38P2gYKPe6b5WLto83UHwBcsR5P1sD0oQme9KmRrV86Dm1ue982%2FYxEsayRTd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8d30cbe56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
live.demand.supply/impl.v17.23.1.js
104.16.134.22200 OK 88 kB URL GET HTTP/3 live.demand.supply/impl.v17.23.1.js
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (23263)
Hash a126ddea54aa780835368bf1e6519b03
9e882f4aea3df64224789b0f57a28c541e9b52cd
21f113cdf5618b645145c239293ad9fd2bac75d71c17377e89636ef4fe52b8ba
GET /impl.v17.23.1.js HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Cookie: demandSupplyTi=9cd720b5-5aac-40d7-9763-3043a53c58c8; __cf_bm=evN.7cId5uJcX_2ZQp4huvSLPLpK8JraAorn96hazJc-1701555780-0-Aa36YDRCQynz0JHXZ3wU7ecVZvaI8NfHbja7Bo6WGv1DCpkLwent5GphM0BwUaA+i/lWjMFRgBJrjj75CbDKVHw=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=2592000,immutable,stale-if-error=604800
cache-status: "Netlify Edge"; fwd=miss
cf-bgj: minify
cf-polished: origSize=88200
etag: W/"8aec9afb152593f3439ffcbf395458c2-ssl-df"
strict-transport-security: max-age=31536000
timing-allow-origin: *
vary: Accept-Encoding
x-nf-request-id: 01HGKAX7FS486RAMYC2BFDPGHN
cf-cache-status: HIT
age: 99740
server: cloudflare
cf-ray: 82f6f8ccfff656b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pogothere.xyz/
188.114.97.1200 OK 27 B IP 188.114.97.1:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash aa072f63f763f2e0bc4080dda608484c
0c86b49e940c5710a5627911696c44227a3f05a8
a2c3adbf7bb2d35f6e3601c09e361c931843ab8bdf6d186947acdacafca42bbf
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: text/plain
set-cookie: csu=1129168752871615@1@1701555781; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://upfilesurls.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MGposuA33hvAJgVk5SlZDN54BioQsZ3EFXY1qrd1xnR4ODSUZRDzMn%2FLIVeEUO2hyk9FQW1ZmKWHEuHTX9crJtrFBRuQXytcrogHzl3GAS2Ur3L52L2mGufhzQkVlf2A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8d2fcba56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
188.114.96.1200 OK 19 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 188.114.96.1:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (18335)
Hash 8ec0c661780569e42736cfc20e4c69d7
0d857c9b9813975179cf323a344c934bcae598c6
38831e62c2e99f2f64b0352f13ef7daaa7c97e31dac314bb52caa89a6a7f58f5
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:46 GMT
etag: W/"64f987a2-4a29"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M6Iu0AeqMJbbLsaP8e%2BYg9D0ZHen5GlzvelcjK3MctAlAbdEMJHFjOhuCvbPtm2qZgPcvGsVL%2FfVwjh1FdFj%2BORXxFjARqxIW3Rhpno%2BsKFeyj%2BWh%2FOrtnso4Ae8By5ekQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8c9ab2256cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
live.demand.supply/x/e.js?ce=fs&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 0 B URL HEAD HTTP/3 live.demand.supply/x/e.js?ce=fs&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /x/e.js?ce=fs&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
etag: "901b70ae40b5b064aef6259e869a717e-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HEWCA4FYGBGVP04DSNK46G58
cf-cache-status: HIT
age: 928110
accept-ranges: bytes
set-cookie: __cf_bm=hBRhXkGYtfCk2BPOLJKmlQYx1jc8kgor85l5o9c.8E4-1701555780-0-AVT9OPAybpuXeJ/SzQZumKvgCC/OX/jgCsgJcEZnLvyAL2PdDTYsxhXHfg2aXApB6XtLTVk9qp+oCEW0WoVEDGk=; path=/; expires=Sat, 02-Dec-23 22:53:00 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8ce0d15b523-OSL
alt-svc: h3=":443"; ma=86400
live.demand.supply/up.js
104.16.134.22200 OK 5.1 kB IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (5294), with no line terminators
Hash 9e893d974326bfc30f54159c24634555
9393e865e5dfec354cc2df46223ad5c6e6f4ce66
3949e05880532e38745bcdb7fed063785da9951ee43a910d90cdaaebf25af94b
GET /up.js HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:00 GMT
content-type: application/javascript; charset=UTF-8
cf-ray: 82f6f8c9bfd40b59-OSL
cf-cache-status: HIT
age: 860
cache-control: max-age=1200,must-revalidate,stale-while-revalidate=3600
etag: W/"51603a94d6ed1afd2227b0ac012f84b2-ssl-df"
link: <https://live.demand.supply/impl.v17.23.1.js>; rel=preload; as=script,<https://live.demand.supply/p4/v17-21-0/dXBmaWxlc3VybHMuY29tLw==>; rel=preload; as=script
strict-transport-security: max-age=31536000
vary: Accept-Encoding
cache-status: "Netlify Edge"; fwd=stale
cf-bgj: minify
cf-polished: origSize=4807
timing-allow-origin: *
x-nf-request-id: 01HGKB9FVVYY9S9NG0DCXFQ0G1
set-cookie: demandSupplyTi=9cd720b5-5aac-40d7-9763-3043a53c58c8; demandSupplyTc = null; demandSupplyTcI = null; SameSite=None; Secure; Max-Age=63072000
__cf_bm=evN.7cId5uJcX_2ZQp4huvSLPLpK8JraAorn96hazJc-1701555780-0-Aa36YDRCQynz0JHXZ3wU7ecVZvaI8NfHbja7Bo6WGv1DCpkLwent5GphM0BwUaA+i/lWjMFRgBJrjj75CbDKVHw=; path=/; expires=Sat, 02-Dec-23 22:53:00 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-75C4L64NEB&l=dataLayer&cx=c
142.250.74.168200 OK 229 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-75C4L64NEB&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Size 229 kB (229433 bytes)
Hash c6b8dbe9d157e9ab276bdf2dac2d1586
059ab7d653bfac572ccfb050b5719f5860760252
f525d34daa6250d55845141d5baf12cb571ec76ebd1ba07214c5fe2ebcde6dfe
GET /gtag/js?id=G-75C4L64NEB&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 02 Dec 2023 22:23:01 GMT
expires: Sat, 02 Dec 2023 22:23:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81231
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
live.demand.supply/e/e.js?r=upfilesurls.com_auto_interstitial_desktop&sn=1&ific=true&e=iar2&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 0 B URL HEAD HTTP/3 live.demand.supply/e/e.js?r=upfilesurls.com_auto_interstitial_desktop&sn=1&ific=true&e=iar2&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /e/e.js?r=upfilesurls.com_auto_interstitial_desktop&sn=1&ific=true&e=iar2&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: live.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: application/javascript; charset=UTF-8
content-length: 1
access-control-allow-origin: *
cache-control: s-maxage=2592000,stale-if-error=604800
cf-bgj: minify
cf-polished: origSize=2
etag: "4de2110991f3807e8b4a19c48c14f2d1-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HEQ11YQH5NDF00RQZ2ZRCY60
cf-cache-status: HIT
age: 922053
accept-ranges: bytes
set-cookie: __cf_bm=.eaj9tXnUYam6PrmlW5OaS32WrLYlq56JfMg3NIKOPE-1701555781-0-AeOCZWzk5mZo1oNV+/jYXWRUESDBjDd6cVgBSVjLBlmnx6iPjx+ysiNnzu6lru5//UnbaTFoYeay/8pUMJxhGOM=; path=/; expires=Sat, 02-Dec-23 22:53:01 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d2c885b523-OSL
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=UA-197252557-1
142.250.74.168200 OK 191 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-197252557-1
IP 142.250.74.168:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Size 191 kB (190753 bytes)
Hash ab69dc8bade023be11c6ed8237bbcfd4
97d11b21fd2c969005930922ead08112c6b5f3ce
1bc090ab59138b11cafcc1a8d8b24b7887d5552bf26a09536faaf906b05e8a5e
GET /gtag/js?id=UA-197252557-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 02 Dec 2023 22:22:59 GMT
expires: Sat, 02 Dec 2023 22:22:59 GMT
cache-control: private, max-age=900
last-modified: Sat, 02 Dec 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69024
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.demand.supply/v17-21-0/a/upfilesurls.com_fluid_sq_firstpageaftertitle_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 384 B URL GET HTTP/3 api.demand.supply/v17-21-0/a/upfilesurls.com_fluid_sq_firstpageaftertitle_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (454), with no line terminators
Hash a4894659a363b7494b15587042971219
8015a0df17b5b3624c2bb5ed0cb1a4fc5f11d143
2dfe053894b6f2426ab4a6472238c0c3b2efb50b546a6a6bd541494c8ef86c58
GET /v17-21-0/a/upfilesurls.com_fluid_sq_firstpageaftertitle_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: api.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
etag: W/"180-SDVUHLZoHsy5G7tRIWVKd1d2DGY"
cf-cache-status: HIT
age: 3975
set-cookie: __cf_bm=eoeOpjxznR5UwiSQGFV3p2sjVDxi4tZsgO8oPwbOZNE-1701555781-0-AQ2hnjR4QePj8DGCjiJI+43TNC9eRRb4EqlCbn1HaNJ01VrsvojZvRnqR1nJ7PU0cruASK1HmGaj6FENlBNfxJA=; path=/; expires=Sat, 02-Dec-23 22:53:01 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d01ed3b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ldrenandthe.org/popunder.gif
172.67.194.104200 OK 35 B URL GET HTTP/3 ldrenandthe.org/popunder.gif
IP 172.67.194.104:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectldrenandthe.org
FingerprintB1:E1:DF:C0:4E:E7:2F:9B:70:DF:D1:CA:75:2B:47:98:1B:CC:5F:BB
ValidityWed, 29 Nov 2023 06:03:19 GMT - Tue, 27 Feb 2024 06:03:18 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: ldrenandthe.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 113851
last-modified: Fri, 01 Dec 2023 14:45:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ODF1j%2BqHTRsFL%2FICsUa2zZwiOfKHq1QlrCu5%2FaTBlhUmiRs6VbFEh6WGjbTg4z2b26snhCtG8Jw%2Bun1aOVSrmn7VHS9izLbB47suWIJhUM36oMXSUT3L8sFfEuPtNYXhiek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d3bbc8b524-OSL
alt-svc: h3=":443"; ma=86400
upfilesurls.com/js/frontend.js?id=88f283c744d8a6e43cfb
104.26.9.138200 OK 981 kB URL GET HTTP/2 upfilesurls.com/js/frontend.js?id=88f283c744d8a6e43cfb
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
Size 981 kB (980828 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/frontend.js?id=88f283c744d8a6e43cfb HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:22:59 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=980842
etag: W/"63baab19-ef76a"
last-modified: Sun, 08 Jan 2023 11:38:01 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 399826
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mWwDGYucLdX4JH7923IQzANHKNSmu%2BbQxAzQqo4vFHBohrCUsyvkRtyaWDC1e%2FeYSlMagRnA4FN4W21qDpOiaLnQNO50T%2F9xm5VYBWOXpwbyjCyE4GRMJMIkcLzK2yZNTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c68e080b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
188.114.97.1200 OK 102 kB IP 188.114.97.1:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upfilesurls.com/
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://upfilesurls.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 2637
last-modified: Sat, 02 Dec 2023 21:39:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bKKeYyHOEzBvcd5hqDaw4M88%2FZpkL3F8uWq1XVxgLi6zSJcCUUGO4dXwdfGDDQ0fG1ZXm1NDxFgOgIbPL%2BqzMml5y0bx0kpjQCdh%2FY6N99iFiEuVekm4uZh18AQ0qePa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d2dca756b9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
upfilesurls.com/img/logo.svg
104.26.9.138200 OK 22 kB URL GET HTTP/2 upfilesurls.com/img/logo.svg
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1361)
Hash 1e28749acbd90e7e99a883c1890327cd
638b4525d3f0ed776db136ca1025a8961f46c9e0
d526da1f4d4af45cefd2a0d140abec2beddc3150d13c47d3de893eaa278a369d
GET /img/logo.svg HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:22:59 GMT
content-type: image/svg+xml
last-modified: Fri, 08 Apr 2022 10:55:45 GMT
vary: Accept-Encoding
etag: W/"625014b1-56e8"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 399826
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v8Vpe0dxF9nW9xJbDOVfvlAb6yUnfOkp%2BaFI3j0hljGsU0OHMeMpT6zeYAaGCyBoC49QsKTmnBBLXE%2FWrxbmhaXCaMXcrJQXYQXio7Y7blEz%2BZ6osPVcxX7FYpv1hLaG%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c66df00b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.131:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:52:12 GMT
expires: Thu, 28 Nov 2024 21:52:12 GMT
cache-control: public, max-age=31536000
age: 261048
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
upfilesurls.com/img/faqs-image.svg
104.26.9.138200 OK 38 kB URL GET HTTP/2 upfilesurls.com/img/faqs-image.svg
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4190)
Hash a60b7216905928c625ae9592044476cd
e70c5be728c7bd1198100337487aafe126834ca3
9a717285429d468fadc4d25179fc6feb49e6335f3af1675fb6be1cb50e7e8322
GET /img/faqs-image.svg HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/XC1j
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 22:22:59 GMT
content-type: image/svg+xml
last-modified: Fri, 13 Jan 2023 13:29:35 GMT
vary: Accept-Encoding
etag: W/"63c15cbf-95fb"
cache-control: max-age=2592000
cf-cache-status: HIT
age: 816024
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JIEvcnc4dPQu7%2BkJQ8FPBYM5ZJAUN0q287HZs8CMRMsgNhmJ0Og3iCsZ7u94s6O9PaPIrUE7GgnHrpd5Du5zxjxHsP%2BUkPGVNY1ccqHy%2BXX2ZsBDKii2VcpB4rVxNph%2FPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8c66dfa0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
upfilesurls.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
104.26.9.138302 Found 7.4 kB URL GET HTTP/2 upfilesurls.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 104.26.9.138:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerGoogle Trust Services LLC
Subjectupfilesurls.com
FingerprintC4:06:EA:F3:4B:AA:F0:43:B3:17:05:E3:66:A4:76:2C:54:9D:91:CF
ValidityMon, 20 Nov 2023 19:51:53 GMT - Sun, 18 Feb 2024 19:51:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: upfilesurls.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjR0ZVFoRzVnQndhK25EU25USmRZQXc9PSIsInZhbHVlIjoiKzRFY0h2LzY0NTJPYWRxWWlaSlM0czU4MUN4ZTFnb1ZiL0kyTHJOSmtpNUgyWDQ4b1VHalJYaUFpUUlnYWZaZDd0dmNUbE1XRldwVFhMeWRWV3JOejNEc2xqRXk3ZGY3aXoxSmVQY05zRndXb0NHMGQ1R3VQN3lMd1ZvNHdPcisiLCJtYWMiOiI2M2QzMzg2NmM2MmQ1MmI0NTMyOWM3OGMxMjFkM2FjZjc5NzBlZGMyOWM0MjRlYWIzZmJmZjc3YjJiNWZjMzU2IiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6Inl3WlBtZjRNTDFVVHp2emRnQjJEbWc9PSIsInZhbHVlIjoidUovbHJnMGk3NGM3Tkd2OWl3N0dzZ3ZpYkpiTGVRbFBIUjRGMmlhaUQ3ejRUMThVM0hhMTdyVEpDalh0VVloemNMTldzMFJUSFRqcFpHakJONkh2NTZaL1MrYXdrUU02RXI0NkVHaWFoZGsxOGxYTHQ0cTlyQVdKRUp0OVB2RVkiLCJtYWMiOiJhZDVkMDBjNmRiYTcyYjhkMzQxZmY0NDk3ODVkNDc3Y2NhZGZjNGZiNDg0NzhiODAyMjIwZTk1ZTUxZjI3ZTk2IiwidGFnIjoiIn0%3D; ab=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 02 Dec 2023 22:23:00 GMT
cache-control: max-age=300, public
vary: accept-encoding
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=spLG1WlCn1%2FJjpzSeGSxXg7JgpC8R59MRoPPaSAS1jDytlc4D3%2Bl0CjWKKS%2B0y5VW0bTvKfR392dSM1fPowmIzRE9EzET0XuvYCP%2B%2FqV2IHgm65mpj6FGKg5NpaEItMDGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f6f8cca8f60b69-OSL
X-Firefox-Spdy: h2
api.demand.supply/v17-21-0/a/upfilesurls.com_fluid_lb+sq_firstpagebeforetitle_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 384 B URL GET HTTP/3 api.demand.supply/v17-21-0/a/upfilesurls.com_fluid_lb+sq_firstpagebeforetitle_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (454), with no line terminators
Hash e648c3ec5d02fbb21b272f7a2510d631
00f258f5882494d226941418b15cf35ab0ff2c09
3ad136f3c290a5f90967a40b31d1dd54420c37eddad240497ab6046e56bd4f1c
GET /v17-21-0/a/upfilesurls.com_fluid_lb+sq_firstpagebeforetitle_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: api.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
etag: W/"180-/HxcY3Bjgub8ioYkePq8iAfehto"
cf-cache-status: HIT
age: 3529
set-cookie: __cf_bm=ni9GodQfzMBVK15iEmtGpx7NEPb4GMOmAAyoZ9kR6VI-1701555781-0-Adt+mXfC9vnTEFHJkjZQbc57Mr+2A8rgzN4mavAlCfUlRrvH+9A+tbO1tP8ULMzOZshnn7LF2K56JeafJEqH+XQ=; path=/; expires=Sat, 02-Dec-23 22:53:01 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d01ed0b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
api.demand.supply/v17-21-0/a/upfilesurls.com_fluid_lb+sq_firstpageafterbutton_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
104.16.134.22200 OK 384 B URL GET HTTP/3 api.demand.supply/v17-21-0/a/upfilesurls.com_fluid_lb+sq_firstpageafterbutton_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo=
IP 104.16.134.22:443
Requested by https://upfilesurls.com/XC1j
Certificate IssuerCloudflare, Inc.
Subjectdemand.supply
Fingerprint49:8A:4B:67:AE:8B:FD:9E:3E:B3:93:78:24:C6:5A:6A:8C:3C:A5:F4
ValiditySun, 19 Feb 2023 00:00:00 GMT - Mon, 19 Feb 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (454), with no line terminators
Hash bd2374b0396099be7db01fb419011998
f24d62b6d45d42223f088259e57e9c315879f2e5
4c0b4f80b4ae9f07f32ed395dac4224891dd0046a93efa26ec061f42b2983592
GET /v17-21-0/a/upfilesurls.com_fluid_lb+sq_firstpageafterbutton_1?&dsReferer=dXBmaWxlc3VybHMuY29tL1hDMWo= HTTP/1.1
Host: api.demand.supply
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upfilesurls.com
DNT: 1
Connection: keep-alive
Referer: https://upfilesurls.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 02 Dec 2023 22:23:01 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: max-age=3600, s-maxage=7200, stale-while-revalidate=3600, stale-if-error=84600
etag: W/"180-mOSwZYnT+gRPF6z4t1XTaLrRGgs"
cf-cache-status: HIT
age: 3975
set-cookie: __cf_bm=4O59HYvfdp36pvxPUeYT1RNlEoB_Sy8UM69JlfSqM18-1701555781-0-AYm2M5ZDyPgaaN4J04BErUFs3tpUs9F4oFyxAmkLUtpLC9AY67/WOKh006ZLSW8/GC6LoqIedsqh/E0+UK5jsVk=; path=/; expires=Sat, 02-Dec-23 22:53:01 GMT; domain=.demand.supply; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f6f8d01ed4b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400