| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashdedd67c0946c5577f4afe8ce915d496e 13c7575ca041681cc467ada3cbcc8ac16d02a005 52d626e12edd115d218ff4e43f4fb3e9690effc7caaa9cfb673cd52a8c33728c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "52D626E12EDD115D218FF4E43F4FB3E9690EFFC7CAAA9CFB673CD52A8C33728C"
Last-Modified: Thu, 05 Sep 2024 21:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11566
Expires: Sat, 07 Sep 2024 07:24:48 GMT
Date: Sat, 07 Sep 2024 04:12:02 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash44e59b3087913a4d72a31bf4fe2c7307 920b782a3818f89ff9819b6cc799454ed7e0d8b2 1d8952e4b53e5d1d98e92c2b9f9a566e3402098428318527c96e470dcd8413e3
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1D8952E4B53E5D1D98E92C2B9F9A566E3402098428318527C96E470DCD8413E3"
Last-Modified: Thu, 05 Sep 2024 02:40:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21393
Expires: Sat, 07 Sep 2024 10:08:35 GMT
Date: Sat, 07 Sep 2024 04:12:02 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash60ab18bb1e8dadb29ada046753dbc185 3d30d0b2ba9061fbd90500510f6f514476a1413f 50ed93ddadd4c6c89fbf4bfa5bc29814434ab19ed98c11f4b558b68b570d49f2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "50ED93DDADD4C6C89FBF4BFA5BC29814434AB19ED98C11F4B558B68B570D49F2"
Last-Modified: Thu, 05 Sep 2024 00:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9965
Expires: Sat, 07 Sep 2024 06:58:07 GMT
Date: Sat, 07 Sep 2024 04:12:02 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash82ed4f353a1fcebb658989118dd4c1fd 38d42f944ef791a35cc533c5ae1de179914fd2fb bad9cc283cd0ba6e1667ea32a79c9f5249de21d9facf6d394b8e239763fbbd64
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BAD9CC283CD0BA6E1667EA32A79C9F5249DE21D9FACF6D394B8E239763FBBD64"
Last-Modified: Thu, 05 Sep 2024 02:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6493
Expires: Sat, 07 Sep 2024 06:00:15 GMT
Date: Sat, 07 Sep 2024 04:12:02 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash671f1028acb179b5ebb80735bb2ebb67 c538067f2b5654ceaac8fa6139ce69a5593bfe7d 6b3a32b0876d605a30290830bd74e993b27d75769d77a52f927a04418461bf22
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6B3A32B0876D605A30290830BD74E993B27D75769D77A52F927A04418461BF22"
Last-Modified: Thu, 05 Sep 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10317
Expires: Sat, 07 Sep 2024 07:03:59 GMT
Date: Sat, 07 Sep 2024 04:12:02 GMT
Connection: keep-alive
|
|
| megaup.net/themes/flow/images/main_logo_inverted.png |  91.209.70.182 | 200 OK | 7.1 kB |
URL GET HTTP/2megaup.net/themes/flow/images/main_logo_inverted.png IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typePNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced Hash5d15526be10b904a6b48d1af04a10cc3 c09b6874359ac6d71db95593618a9acb55baa984 894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/images/loading_small.gif | 91.209.70.182 | 200 OK | 184 kB |
URL GET HTTP/2megaup.net/themes/flow/images/loading_small.gif IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeGIF image data, version 89a, 64 x 64 Size184 kB (184355 bytes) Hashb0dd5b3af9c4c0644d7bddee83716209 30002468d0266b893b3559b8d0d260c6cbf0ad7c 2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d
GET /themes/flow/images/loading_small.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: image/gif
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 |  142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hash08e5bce0bacebe8fb72d50d26a11c7bd 79fa03f55d76a53b5b969e991368b310802c431f 186c05411a5124e3b4b69e54573a698c35768de153b6d3b702abf2875b460db2
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Sep 2024 04:12:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=UA-108868042-1 | 142.250.74.168 | 200 OK | 78 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-108868042-1 IP142.250.74.168:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintE1:54:98:CD:9D:7A:BD:80:E1:F7:F7:9E:4A:C0:BA:A2:F1:F0:5D:C0 ValidityMon, 12 Aug 2024 06:33:44 GMT - Mon, 04 Nov 2024 06:33:43 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashc5e4bb7d14cec0f1a48777493c0fe888 b9fce101b10fb3a2972594a5ed9487e8bc7ce765 10c52b7c34f036488509f2d85f1e1bb08e1a033e98ca428486c1d9a250f036d3
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 07 Sep 2024 04:12:03 GMT
expires: Sat, 07 Sep 2024 04:12:03 GMT
cache-control: private, max-age=900
last-modified: Sat, 07 Sep 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77608
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css | 91.209.70.182 | 200 OK | 8.1 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashed12cc46f06e67ca636a1ad8a717a7fd 570b3588ff8e186929233b93a6ecb0d7a76adbcb aed2be655d20468968674662b26c808a995b7288e82168ada025531738e766ba
GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-ce4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/fonts/raleway.woff | 91.209.70.182 | 200 OK | 32 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/fonts/raleway.woff IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31836, version 1.1 Hash4514fa5a5b3d1e0b14aa32a7d068124a e634977bfabc20ed15fe7ed03d3876cf68834b93 5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: font/woff
content-length: 31836
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c5c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff | 91.209.70.182 | 200 OK | 31 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31344, version 1.1 Hash21f79e4c0fbe54a555170aa70bb4c8b7 9d4aaf2016cd21f16bc45089a48de84dba951fa7 2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: font/woff
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery-ui.js | 91.209.70.182 | 200 OK | 108 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery-ui.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (840) Size108 kB (108521 bytes) Hashec9758d9508e2fd22ddbdc6d5a28f214 0ed7df6cc32be8f9687cda3cd6e109e5de44339e ba0103f765802f299bc7dca5c35d9a00359a0abb10cac136f43caf9c0bf98b7c
GET /themes/flow/js/jquery-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6a684"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff | 91.209.70.182 | 200 OK | 32 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31980, version 1.1 Hash99ac81a158028ac2023fb3350d2497e7 f08c12c91ab29282a616c3ba8e533f49b5b433ca 92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d
GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: font/woff
content-length: 31980
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7cec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/custom/custom.js | 91.209.70.182 | 200 OK | 1.4 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/custom/custom.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash2d40e9899d9667475ee4a7d5d9731311 6e3b230480bc36ce2e9b0622a48af5924535a72b a72e6ce7c10983fcd6773f0db77f049b7a85039d3e7212a12ad56fbb8d70a6e6
GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1420"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff | 91.209.70.182 | 200 OK | 21 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 20972, version 1.0 Hashcad75e2dacc6794c4e6b14727d4a989d 694d04c8f643df4100c23efc1463ac9f4e732f60 ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887
GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: font/woff
content-length: 20972
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-51ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/dDFlYWNbDgYSXhBmKwsARAgiNFI+fQMKLSNmVStRJQABNDJHVkMVChAMXVZVRwBdRxMdVVhTWlJCEQAXAUJYUEUdXwMOXlJHWFBNRB9TUU1AFxBcUlJFFQAESQBDERcAXVhQVEYEU1lRRwNWVlVN | 172.67.193.133 | 204 No Content | 0 B |
URL GET HTTP/2ropeanresultanc.com/dDFlYWNbDgYSXhBmKwsARAgiNFI+fQMKLSNmVStRJQABNDJHVkMVChAMXVZVRwBdRxMdVVhTWlJCEQAXAUJYUEUdXwMOXlJHWFBNRB9TUU1AFxBcUlJFFQAESQBDERcAXVhQVEYEU1lRRwNWVlVN IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dDFlYWNbDgYSXhBmKwsARAgiNFI+fQMKLSNmVStRJQABNDJHVkMVChAMXVZVRwBdRxMdVVhTWlJCEQAXAUJYUEUdXwMOXlJHWFBNRB9TUU1AFxBcUlJFFQAESQBDERcAXVhQVEYEU1lRRwNWVlVN HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 07 Sep 2024 04:12:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V6nuAHktsiI3VrNawjzLHYdajX5hA2czMFPxW2ijl8nrJ2fMVp64klSU%2FkGFehY5m3Gd30tXcPFjzaZTjqSe8Kf7NpASNGcmzInraEPS5BcelEBqtgWntn%2BKoKk42ClkGq1gOSNp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbbc1e2356c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| klpgmansuchcesu.com/TEdDQ3gtJSAuRy16IWUNPit+ZkoKYnEFHH4weiAcOX93Oxt4IjJtGyAoNicePigtN1YiIjdmSgoEInIuJBFxNDEDIHs7LTR/ewEvPCUbFCodJXIzNgYVDjo7IB53ATwNCQsqLhwIEigeLzAwKDk7Ei8bPAUAEy46FB1yJDoBAxoRNyYrLRQwCR4GFz4vHXMsMAIGezQtGXc0BwIeFRQtNQ0KNHYvFRIgKTANFmZxOhQEFgQ7CCAQDg94Jg0rIjQAEjMXCAMkFDkmLA0NEyAdBnIqeR8GdhYZH3sWLyEVBhk7eQgZcj17BRIWHwsfCSYvNXYZGiwCIxoWVR4sDyhNIhIQFhkYKhokGiA3BRktJD4bLws1BQcSMA4PARc9GnIhGT4KKRsVDCcVBBUbCBM0FzUrKAYPLR4rCC8yJhNxJzMEKisSXiY0LC0IcSIpFk16d3cpHRsBFRFKdQ | 3.164.230.25 | 200 OK | 1.2 kB |
URL GET HTTP/2klpgmansuchcesu.com/TEdDQ3gtJSAuRy16IWUNPit+ZkoKYnEFHH4weiAcOX93Oxt4IjJtGyAoNicePigtN1YiIjdmSgoEInIuJBFxNDEDIHs7LTR/ewEvPCUbFCodJXIzNgYVDjo7IB53ATwNCQsqLhwIEigeLzAwKDk7Ei8bPAUAEy46FB1yJDoBAxoRNyYrLRQwCR4GFz4vHXMsMAIGezQtGXc0BwIeFRQtNQ0KNHYvFRIgKTANFmZxOhQEFgQ7CCAQDg94Jg0rIjQAEjMXCAMkFDkmLA0NEyAdBnIqeR8GdhYZH3sWLyEVBhk7eQgZcj17BRIWHwsfCSYvNXYZGiwCIxoWVR4sDyhNIhIQFhkYKhokGiA3BRktJD4bLws1BQcSMA4PARc9GnIhGT4KKRsVDCcVBBUbCBM0FzUrKAYPLR4rCC8yJhNxJzMEKisSXiY0LC0IcSIpFk16d3cpHRsBFRFKdQ IP3.164.230.25:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerAmazon Subjectklpgmansuchcesu.com Fingerprint64:5D:C2:51:05:73:AE:C1:E4:43:7B:B5:B9:95:F6:40:54:04:0F:55 ValidityMon, 19 Aug 2024 00:00:00 GMT - Wed, 17 Sep 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3046), with no line terminators Hash04caa48be1b72710aed242e7cac14b95 bee860774ff8319514de37846993192a909440cd d2eaf4cc5122bf689445149293fc730c45bc39a671f2ca955fdc3bcf0826dd8c
GET /TEdDQ3gtJSAuRy16IWUNPit+ZkoKYnEFHH4weiAcOX93Oxt4IjJtGyAoNicePigtN1YiIjdmSgoEInIuJBFxNDEDIHs7LTR/ewEvPCUbFCodJXIzNgYVDjo7IB53ATwNCQsqLhwIEigeLzAwKDk7Ei8bPAUAEy46FB1yJDoBAxoRNyYrLRQwCR4GFz4vHXMsMAIGezQtGXc0BwIeFRQtNQ0KNHYvFRIgKTANFmZxOhQEFgQ7CCAQDg94Jg0rIjQAEjMXCAMkFDkmLA0NEyAdBnIqeR8GdhYZH3sWLyEVBhk7eQgZcj17BRIWHwsfCSYvNXYZGiwCIxoWVR4sDyhNIhIQFhkYKhokGiA3BRktJD4bLws1BQcSMA4PARc9GnIhGT4KKRsVDCcVBBUbCBM0FzUrKAYPLR4rCC8yJhNxJzMEKisSXiY0LC0IcSIpFk16d3cpHRsBFRFKdQ HTTP/1.1
Host: klpgmansuchcesu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1199
date: Sat, 07 Sep 2024 04:12:03 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 eaa28e975df2c0299f68b819ffdbde98.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: n8K-3mlLYPTVsDdvrPiTx0X_fVjIgYcH8xADozymYj1Of9Fust0d1A==
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/S01OR0Zkci00ex0mPi0iJhsiIQAZBRYQf38YJQ0RESMiExJ6OmgzLy9wdnVzcnx/YTYiKXN0dG0+OiYyPj5zdXZ7emguKC0ic3VgPXB+aX9lf2BxYD5wf2EyOywpendtPTozKnZ8eXVzfXV8dHR4endx | 172.67.193.133 | 204 No Content | 0 B |
URL GET HTTP/2ropeanresultanc.com/S01OR0Zkci00ex0mPi0iJhsiIQAZBRYQf38YJQ0RESMiExJ6OmgzLy9wdnVzcnx/YTYiKXN0dG0+OiYyPj5zdXZ7emguKC0ic3VgPXB+aX9lf2BxYD5wf2EyOywpendtPTozKnZ8eXVzfXV8dHR4endx IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /S01OR0Zkci00ex0mPi0iJhsiIQAZBRYQf38YJQ0RESMiExJ6OmgzLy9wdnVzcnx/YTYiKXN0dG0+OiYyPj5zdXZ7emguKC0ic3VgPXB+aX9lf2BxYD5wf2EyOywpendtPTozKnZ8eXVzfXV8dHR4endx HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 07 Sep 2024 04:12:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LSsmA%2F41rpvubxAaHUnLybGDLgOKf7cAtLIIxu%2BR%2BbjF9jtkrH8DxJ7w2qLoodMOiI5Y30QhR%2BgZyETurnSfy91EHt9ElxA5l16vTVqGktLn%2BvCEy9c8HblXjSHmZwhFkwBWesWA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbbc1e2656c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/b1VNSXhAai46RToCIXsaJwc9HC0pNxkePgoBfCU+NhMLDiBfDGs9EQtodH1BV2N5bwgGMXB4QEkmOSgMGiZweF4GOysmRUkjcHhWX3t/Z01JIHB4XhslLC5FXnM9PQwDaHx+SlpjdXtLXWZ1eEo | 172.67.193.133 | 204 No Content | 0 B |
URL GET HTTP/2ropeanresultanc.com/b1VNSXhAai46RToCIXsaJwc9HC0pNxkePgoBfCU+NhMLDiBfDGs9EQtodH1BV2N5bwgGMXB4QEkmOSgMGiZweF4GOysmRUkjcHhWX3t/Z01JIHB4XhslLC5FXnM9PQwDaHx+SlpjdXtLXWZ1eEo IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b1VNSXhAai46RToCIXsaJwc9HC0pNxkePgoBfCU+NhMLDiBfDGs9EQtodH1BV2N5bwgGMXB4QEkmOSgMGiZweF4GOysmRUkjcHhWX3t/Z01JIHB4XhslLC5FXnM9PQwDaHx+SlpjdXtLXWZ1eEo HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 07 Sep 2024 04:12:04 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NqjJRUiOeNj0S3FFdki5dX4bP2kctOQJ0VW7gWKbPbRgsPI36V8Jxb6UUxLsY%2Fi8v8rM4L6BR8qOQtYGXkS5tEoaMf9GUTS%2B0nk%2F7gRXCyW01BAm8nPLzAEk7A1VrNU7o0YIJ3TP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbbc4e3456c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| klpgmansuchcesu.com/aHNUbGEJETcBXglONkoUGh9pSVMuVmYqBVoEbQ8FHUtgFAJcFiVCAgQcIQgHGhw6GE8GFiBJUy4eBhYvHikCJQowMhEoAzw9NS9QAB83PQUNJgMiCTkLZC0vIAMxLwYhCRkHLyowLg8bLiIBOzE7HxA5CTklFi0OXTEXKTY5Jj8+Kis+GzRRJVZmLisEQx07KTkaDD0ZMSpmKjIrBDAaAhAmNio1WAAQBFE4PgccICsENwYrLSEeKSUmRQwLIA48LRgHLBgWCyA5KRY6OQxCFVwCDCpnNTYwMDBfBTk+ECglHwoHXBEwKj5ULT8nJAcCECk3JlIMQhUUTFgnMF8zESU4IlkMCyQnN1o6MzoGHzwEOygqOAIICAwUGgo3LzlmKg1ZJRovVCowMyFYOAsOCChaBywkN1E3Hl8OK1U+Hw4GA2kdJitKAg0SOQE | 3.164.230.25 | 200 OK | 1.2 kB |
URL GET HTTP/2klpgmansuchcesu.com/aHNUbGEJETcBXglONkoUGh9pSVMuVmYqBVoEbQ8FHUtgFAJcFiVCAgQcIQgHGhw6GE8GFiBJUy4eBhYvHikCJQowMhEoAzw9NS9QAB83PQUNJgMiCTkLZC0vIAMxLwYhCRkHLyowLg8bLiIBOzE7HxA5CTklFi0OXTEXKTY5Jj8+Kis+GzRRJVZmLisEQx07KTkaDD0ZMSpmKjIrBDAaAhAmNio1WAAQBFE4PgccICsENwYrLSEeKSUmRQwLIA48LRgHLBgWCyA5KRY6OQxCFVwCDCpnNTYwMDBfBTk+ECglHwoHXBEwKj5ULT8nJAcCECk3JlIMQhUUTFgnMF8zESU4IlkMCyQnN1o6MzoGHzwEOygqOAIICAwUGgo3LzlmKg1ZJRovVCowMyFYOAsOCChaBywkN1E3Hl8OK1U+Hw4GA2kdJitKAg0SOQE IP3.164.230.25:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerAmazon Subjectklpgmansuchcesu.com Fingerprint64:5D:C2:51:05:73:AE:C1:E4:43:7B:B5:B9:95:F6:40:54:04:0F:55 ValidityMon, 19 Aug 2024 00:00:00 GMT - Wed, 17 Sep 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3032), with no line terminators Hashe83bc133be7383c171fa875d12637193 5a811bed371cb01db567b8a0304269bb40b0b43c 9a41a39ab15d02d2d6abf9cac8dde6060b9e554ec35cde47eff04356639ff4c6
GET /aHNUbGEJETcBXglONkoUGh9pSVMuVmYqBVoEbQ8FHUtgFAJcFiVCAgQcIQgHGhw6GE8GFiBJUy4eBhYvHikCJQowMhEoAzw9NS9QAB83PQUNJgMiCTkLZC0vIAMxLwYhCRkHLyowLg8bLiIBOzE7HxA5CTklFi0OXTEXKTY5Jj8+Kis+GzRRJVZmLisEQx07KTkaDD0ZMSpmKjIrBDAaAhAmNio1WAAQBFE4PgccICsENwYrLSEeKSUmRQwLIA48LRgHLBgWCyA5KRY6OQxCFVwCDCpnNTYwMDBfBTk+ECglHwoHXBEwKj5ULT8nJAcCECk3JlIMQhUUTFgnMF8zESU4IlkMCyQnN1o6MzoGHzwEOygqOAIICAwUGgo3LzlmKg1ZJRovVCowMyFYOAsOCChaBywkN1E3Hl8OK1U+Hw4GA2kdJitKAg0SOQE HTTP/1.1
Host: klpgmansuchcesu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1186
date: Sat, 07 Sep 2024 04:12:03 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 eaa28e975df2c0299f68b819ffdbde98.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: TAoK9PxYJkT34smPEvViyBmXkBYvFIeKotaO0fu5aifpthP48BphQw==
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/dEZLbHVbeSgfSCJ3OyEnGQAhDhsAdxw7Lx4gEzohLgE/XBYYH20YHBB7fFpBRXJ6SgUdInZdUwcyKhgAB3t6ShwaICRRUwJ7ekJGQGh4WltAYD5RRFIyOw0SSXdtHAEAKnZdQkZzfVRHR3R4VEFF | 172.67.193.133 | 204 No Content | 0 B |
URL GET HTTP/2ropeanresultanc.com/dEZLbHVbeSgfSCJ3OyEnGQAhDhsAdxw7Lx4gEzohLgE/XBYYH20YHBB7fFpBRXJ6SgUdInZdUwcyKhgAB3t6ShwaICRRUwJ7ekJGQGh4WltAYD5RRFIyOw0SSXdtHAEAKnZdQkZzfVRHR3R4VEFF IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dEZLbHVbeSgfSCJ3OyEnGQAhDhsAdxw7Lx4gEzohLgE/XBYYH20YHBB7fFpBRXJ6SgUdInZdUwcyKhgAB3t6ShwaICRRUwJ7ekJGQGh4WltAYD5RRFIyOw0SSXdtHAEAKnZdQkZzfVRHR3R4VEFF HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 07 Sep 2024 04:12:04 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2BIulGPzpO5vmhwSNFlcR6%2BlkeMTWQVEa4yBiKqdNJuE2QHG2IkS9oIsb5Q4lhhOiHYUQOb0nPbkuAzGC9uKf7ONjxrBjmBa5bvcD1D6mprB1782QLJr%2BdPcuqkiTVNvdrlr7x7z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbbc6e4556c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ |  104.21.68.94 | 200 OK | 532 B |
IP104.21.68.94:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
File typeASCII text, with no line terminators Hash9896035eab98cbc9273b645bd75f649b 63e467b2e1bab95f224a76e921472e503472ae9c 8f7795f39711e64ee8b70223c93857e82a141d4e0e483e96c903b70d49baba32
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Sep 2024 04:12:04 GMT
content-type: text/plain
set-cookie: csu=1638271083444830@1@1725682324; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OM%2BYH%2FHHhyKQROz3VhC8BMnTaQuB3AF4XF6Mp7BeQI%2BA0qNNkGdroMwrVtyd7jgCqdooipw7vIMtTgBNhdTbBs5e%2BmJ8nPSokY3EAJSlvavrXh0qV0YVbeGMbi19sBSGhD1hriU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbbc69cf56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 93 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintE1:54:98:CD:9D:7A:BD:80:E1:F7:F7:9E:4A:C0:BA:A2:F1:F0:5D:C0 ValidityMon, 12 Aug 2024 06:33:44 GMT - Mon, 04 Nov 2024 06:33:43 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hash72564abb7be02c1bf22da0b4120348c7 33e89b8a789650fba932b5d1f7501b9781e1cbf8 4634086892ee3ad03bec965763243a0bba2ec49706b3d07d88c71b4c2fed6f80
GET /gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 07 Sep 2024 04:12:04 GMT
expires: Sat, 07 Sep 2024 04:12:04 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 93226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png | 91.209.70.182 | 200 OK | 951 B |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typePNG image data, 114 x 114, 8-bit colormap, non-interlaced Hash76852bc6b2c028db97322a74e85bd020 ed52fb4de0d51f93277bbaae42fa80ba5f92c31e 8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884
GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:04 GMT
content-type: image/png
content-length: 951
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-3b7"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/clipboardjs/clipboard.min.js | 91.209.70.182 | 200 OK | 3.6 kB |
URL GET HTTP/2megaup.net/themes/flow/js/clipboardjs/clipboard.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8746) Hash55db0ff82a3b6b247844ae0d07d85fc6 9bc5c7dc92ef0b31d212a66bbdff591e484f427c 404b016f5c9a369726eec56a280c93478da17a52ed0f1fee116838330772ec70
GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2296"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js | 91.209.70.182 | 200 OK | 2.0 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash72e348954c20cc27df3e9d9bd3a4905f e50ad79ab0949f7e40e8d0dc4ed38476220f79f0 9c9f251d98edd1208a6c45aee90ff4011ed964e87e8bb622ae7a45249f1dae43
GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1099"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashdda8dbcc04cba4875b76334d774e1c3f 4783bc3ad7a7d4ff6ab5ea957a895f2cf72fb4c1 d238520b4620750fb7cb2033464a7f9a8ad1be294f2f18db78cff341897ff0ee
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Sep 2024 04:12:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 472 B |
IP142.250.74.131:0
Hashdda8dbcc04cba4875b76334d774e1c3f 4783bc3ad7a7d4ff6ab5ea957a895f2cf72fb4c1 d238520b4620750fb7cb2033464a7f9a8ad1be294f2f18db78cff341897ff0ee
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Sep 2024 04:12:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail | 64.233.161.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail IP64.233.161.84:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintFF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53 ValidityMon, 12 Aug 2024 07:19:44 GMT - Mon, 04 Nov 2024 07:19:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:xAkuCF-xDQ_MCHVy4UO6L0vc--6tuA:dHKB90njDrag75Ib; Expires=Mon, 07-Sep-2026 04:12:04 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Sep 2024 04:12:04 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3qGuz922miSCnUM8gsJuJu5fmRcM8MLzV7U-tXBcBGos0K_TpgWfLPHAOm-qY1ZfoBT-CwWZg
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-akAB8BYcmzuj3c_cuhYXgg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| theharityhild.buzz/cW9SUmUKTSElOgQdPnBfUwcmJhUCVX19CBQIMycVXwE3JkoCGHw4FlNDcCEIF01oY0lTHD8kR0tNZnxWU0NwJgQWMDs2R0tNamFXR1xhcElTHCcwOhgLYHBfUwlqYVYSX2YwSEcKYjBIRQswYkhIW2plSBdZNzcAEgoxMQYSCnAv | 34.195.224.242 | 200 OK | 32 kB |
URL GET HTTP/2theharityhild.buzz/cW9SUmUKTSElOgQdPnBfUwcmJhUCVX19CBQIMycVXwE3JkoCGHw4FlNDcCEIF01oY0lTHD8kR0tNZnxWU0NwJgQWMDs2R0tNamFXR1xhcElTHCcwOhgLYHBfUwlqYVYSX2YwSEcKYjBIRQswYkhIW2plSBdZNzcAEgoxMQYSCnAv IP34.195.224.242:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerLet's Encrypt Subjecttheharityhild.buzz FingerprintE1:00:0E:E0:78:B0:4D:D5:3D:EC:44:B6:BA:3D:0E:1D:32:6F:0C:32 ValidityThu, 08 Aug 2024 10:14:31 GMT - Wed, 06 Nov 2024 10:14:30 GMT
Hashf0be8bfc8c6cedec19a0b44e8616b0c6 f0977bc52fe9d739471527122f1d815a9c6478c1 48fe60fdaee7af7daf8ab25205c557cfd65861bc3a40a7e694dac41912dca4f2
GET /cW9SUmUKTSElOgQdPnBfUwcmJhUCVX19CBQIMycVXwE3JkoCGHw4FlNDcCEIF01oY0lTHD8kR0tNZnxWU0NwJgQWMDs2R0tNamFXR1xhcElTHCcwOhgLYHBfUwlqYVYSX2YwSEcKYjBIRQswYkhIW2plSBdZNzcAEgoxMQYSCnAv HTTP/1.1
Host: theharityhild.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 2ad24c80f089aa433e8956771d5e3141=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"f912-K5dmWaa5y1YPcx2aPB8/sNxnz8M"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube | 64.233.161.84 | 302 Found | 0 B |
URL GET HTTP/2accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube IP64.233.161.84:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintFF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53 ValidityMon, 12 Aug 2024 07:19:44 GMT - Mon, 04 Nov 2024 07:19:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:ubjZ5qcTk1IOoumW8QMjkppYRUvLcw:kRVNt3yeUKeRp9i0; Expires=Mon, 07-Sep-2026 04:12:04 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Sep 2024 04:12:04 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3olEyCI7gePI02UZALL6sr4u1CJhD-3Rq9DXBkkFFbHge_InVSOgdZhpgZ5ScIg5LUPhRPFqg
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-7L4frB4sZ0D_shcMLLzP0g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3qGuz922miSCnUM8gsJuJu5fmRcM8MLzV7U-tXBcBGos0K_TpgWfLPHAOm-qY1ZfoBT-CwWZg | 64.233.161.84 | 302 Found | 422 B |
URL GET HTTP/2accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3qGuz922miSCnUM8gsJuJu5fmRcM8MLzV7U-tXBcBGos0K_TpgWfLPHAOm-qY1ZfoBT-CwWZg IP64.233.161.84:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectaccounts.google.com FingerprintFF:C5:DA:5A:24:6E:9C:B7:EB:4E:04:0B:B3:01:2E:05:BA:5B:53:53 ValidityMon, 12 Aug 2024 07:19:44 GMT - Mon, 04 Nov 2024 07:19:43 GMT
File typeHTML document, ASCII text, with very long lines (390) Hashed3c683a5a8b2e5f4b2c3693c2762b12 fbe4388513884cee67d223d0751550864b3b01a8 d957df4763b4fdf0e97a84e977e06179b9d00e3e561bd73afcbf80b1eeadf176
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=Ab5oB3qGuz922miSCnUM8gsJuJu5fmRcM8MLzV7U-tXBcBGos0K_TpgWfLPHAOm-qY1ZfoBT-CwWZg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:b1qNyn30uDwtBoqL-wXUHBGbijsmtQ:_zASMSmDYAhIOJHJ;Path=/;Expires=Mon, 07-Sep-2026 04:12:04 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Sep 2024 04:12:04 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3rnfuIpVkHP4Obe_Q0TFXIkqq7gvqjTEfFUD7MpuJ7BZA6zcKwAQBq9f3kvBRRBHTaMCXUm_A&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1309635309%3A1725682324814242&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-eM_PkejNoQsn5QwIKu1VDA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 422
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash0d39c19f1abe5adaf9c26db19f2c3ca0 2e16325573c6095b2231f12aa26a66f95c681463 6c1bedc2f8b4a22bcda75937ebfa573386fb8ab63785ff59678a8a70b1559711
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Sep 2024 04:12:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ropeanresultanc.com/R1BJYlRobyoRaSM6ByA3AxIPIAwdEgonbAUzDDMQFTcLGgcWO28WPSNtcVBhfmF4RCQuNHRRZmEjPQMgMiN0UGR3Z28LOiE/dFByMW15TG1pYmdUcjJteFRnf2J+U2R/Y31WYH9jeUQgNzEuX2VhID0WOHphflBhcWh7UWZzZ3Bb | 172.67.193.133 | 204 No Content | 0 B |
URL POST HTTP/3ropeanresultanc.com/R1BJYlRobyoRaSM6ByA3AxIPIAwdEgonbAUzDDMQFTcLGgcWO28WPSNtcVBhfmF4RCQuNHRRZmEjPQMgMiN0UGR3Z28LOiE/dFByMW15TG1pYmdUcjJteFRnf2J+U2R/Y31WYH9jeUQgNzEuX2VhID0WOHphflBhcWh7UWZzZ3Bb IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /R1BJYlRobyoRaSM6ByA3AxIPIAwdEgonbAUzDDMQFTcLGgcWO28WPSNtcVBhfmF4RCQuNHRRZmEjPQMgMiN0UGR3Z28LOiE/dFByMW15TG1pYmdUcjJteFRnf2J+U2R/Y31WYH9jeUQgNzEuX2VhID0WOHphflBhcWh7UWZzZ3Bb HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Sat, 07 Sep 2024 04:12:04 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=85bSSaeV6PdHgQROZrvW73I4TjGGwsPgnRwfDgPZ23BfpjP%2BRBYDFCVbW5wemA45xba5ALDehL686ctisviu26bQUtxKHargS8jNJxDg6GagT389zlAn0FMFJcZibK8y70mgQKii"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbc209e556af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| getrunkhomuto.info/multi?cs=aWFCWklaUXNieF9UemtwX1V1an4&abt=0&red=1&sm=76&k=download%20file%20gamesmega&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1638271083444830&agec=1725682324&fs=1&mbkb=173.01038062283737&ref=https%3A%2F%2Fmegaup.net%2F3mp%2FGamesMega-PUL-RF.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_N6Ck=1725682324795&crc=1 | 143.204.55.8 | 200 OK | 1.8 kB |
URL GET HTTP/2getrunkhomuto.info/multi?cs=aWFCWklaUXNieF9UemtwX1V1an4&abt=0&red=1&sm=76&k=download%20file%20gamesmega&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1638271083444830&agec=1725682324&fs=1&mbkb=173.01038062283737&ref=https%3A%2F%2Fmegaup.net%2F3mp%2FGamesMega-PUL-RF.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_N6Ck=1725682324795&crc=1 IP143.204.55.8:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerAmazon Subjectgetrunkhomuto.info Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (3763), with no line terminators Hashd5f580b1262b5d5e8dff6b18f3a6e0c5 61d1e6062e7b92994b0a907e3ad71b28154a4f43 d8df4a6658aa0a12fc220cb546048e038a16d0e48a87bf1b77edda994747e47d
GET /multi?cs=aWFCWklaUXNieF9UemtwX1V1an4&abt=0&red=1&sm=76&k=download%20file%20gamesmega&v=1.0.60.4&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1638271083444830&agec=1725682324&fs=1&mbkb=173.01038062283737&ref=https%3A%2F%2Fmegaup.net%2F3mp%2FGamesMega-PUL-RF.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_N6Ck=1725682324795&crc=1 HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
content-length: 1833
date: Sat, 07 Sep 2024 04:12:04 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=37fd7022-f296-4551-bb03-6188351c4425
csu=1638271083444830
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kbAcIguxd9wsN2vU3svxvezKdtda4cSyC4greoybOky5Wd9V_1NDSQ==
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff | 91.209.70.182 | 200 OK | 32 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31568, version 1.1 Hashe0c4ac0e73196bd0469c5c33304b7773 bb071565f82907d117b0732dca8013409162c67d ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af
GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1; _ga_Z9TE2LW16Q=GS1.1.1725682324.1.0.1725682324.0.0.0; _ga=GA1.1.1127947358.1725682325
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:05 GMT
content-type: font/woff
content-length: 31568
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7b50"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3olEyCI7gePI02UZALL6sr4u1CJhD-3Rq9DXBkkFFbHge_InVSOgdZhpgZ5ScIg5LUPhRPFqg | 64.233.161.84 | 302 Found | 423 B |
URL GET HTTP/3accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3olEyCI7gePI02UZALL6sr4u1CJhD-3Rq9DXBkkFFbHge_InVSOgdZhpgZ5ScIg5LUPhRPFqg IP64.233.161.84:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint97:72:B0:50:D3:11:5A:F7:A4:3E:14:43:9B:9B:DA:05:44:40:58:1C ValidityMon, 12 Aug 2024 06:33:49 GMT - Mon, 04 Nov 2024 06:33:48 GMT
File typeHTML document, ASCII text, with very long lines (393) Hash79a142dbc4040a8b373a9790b9e7e9a7 b0f156d1d4e44416c487d4c6f8e7cc33b1302097 746851a9a50bc9fec0bdb4cb792a30c0ffbe34899953a9ee1ae843839350134a
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=Ab5oB3olEyCI7gePI02UZALL6sr4u1CJhD-3Rq9DXBkkFFbHge_InVSOgdZhpgZ5ScIg5LUPhRPFqg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:QZZ_LXOIc_0XholmdDGNrS0T4pMdSw:pxwxJ91zkUnWAHdA;Path=/;Expires=Mon, 07-Sep-2026 04:12:05 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Sep 2024 04:12:05 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3oyUsTd_mXZZL4qaqcdF9davzHqwPmSkIAScDDtMKt9DshRfkZAviNx0fWCXOTm-4janG9K&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1239260111%3A1725682325184522&ddm=0
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-IKCwA1O3In7q2hQz-Fyivg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 423
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico | 91.209.70.182 | 200 OK | 2.4 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashe95c130b43ef6c32b9c9459aff5706c1 51b8b0d3ae3eabd9c31e65098acfa9ba18e9bb30 6c3dde0843949903d807800c8d6706e357fd762d29885946bacac881d4abfb35
GET /themes/flow/frontend_assets/images/icons/favicon/favicon.ico HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:04 GMT
content-type: image/x-icon
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-47e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashea403308c300143f98ac3665bb7b6668 563c2e409c0126ebf52562536c4e53a074e00d41 61acd8fbe3789dab363e83e4dc9f618fa076c469a7860716d1116c7613bb6cbb
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "61ACD8FBE3789DAB363E83E4DC9F618FA076C469A7860716D1116C7613BB6CBB"
Last-Modified: Thu, 05 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10803
Expires: Sat, 07 Sep 2024 07:12:08 GMT
Date: Sat, 07 Sep 2024 04:12:05 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashea403308c300143f98ac3665bb7b6668 563c2e409c0126ebf52562536c4e53a074e00d41 61acd8fbe3789dab363e83e4dc9f618fa076c469a7860716d1116c7613bb6cbb
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "61ACD8FBE3789DAB363E83E4DC9F618FA076C469A7860716D1116C7613BB6CBB"
Last-Modified: Thu, 05 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10803
Expires: Sat, 07 Sep 2024 07:12:08 GMT
Date: Sat, 07 Sep 2024 04:12:05 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashea403308c300143f98ac3665bb7b6668 563c2e409c0126ebf52562536c4e53a074e00d41 61acd8fbe3789dab363e83e4dc9f618fa076c469a7860716d1116c7613bb6cbb
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "61ACD8FBE3789DAB363E83E4DC9F618FA076C469A7860716D1116C7613BB6CBB"
Last-Modified: Thu, 05 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10803
Expires: Sat, 07 Sep 2024 07:12:08 GMT
Date: Sat, 07 Sep 2024 04:12:05 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashea403308c300143f98ac3665bb7b6668 563c2e409c0126ebf52562536c4e53a074e00d41 61acd8fbe3789dab363e83e4dc9f618fa076c469a7860716d1116c7613bb6cbb
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "61ACD8FBE3789DAB363E83E4DC9F618FA076C469A7860716D1116C7613BB6CBB"
Last-Modified: Thu, 05 Sep 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10786
Expires: Sat, 07 Sep 2024 07:11:51 GMT
Date: Sat, 07 Sep 2024 04:12:05 GMT
Connection: keep-alive
|
|
| megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff | 91.209.70.182 | 200 OK | 32 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 31900, version 1.1 Hash1b285c8e5b7445a8e434b2cdf036bab2 c97d4772fbb5c5637d466b5f991bc7ec28830b32 09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825
GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1; _ga_Z9TE2LW16Q=GS1.1.1725682324.1.0.1725682324.0.0.0; _ga=GA1.1.1127947358.1725682325
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:06 GMT
content-type: font/woff
content-length: 31900
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c9c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/cWVLbWFeWigeXBAjCSc1Ji8pNw9EXRwBJxgAAwEzJiIFWAU3Fm0ZCBVYc19USFR6SxEYAXZeU1cWPwwVBBZ2X1FBUG0EDxcKdl9RQVN7XVBCV25aIhkRPx0SVFYKSFM3QHkrGRwJZQwFAgA5GxUVBDJDAh4Ibl8nBQ0+AAMfBCIBREIjIkhSNRYSAFEpDHIIOEMCFF1EQ1M7SFI1VHxfVEddeV5TREt5X1FJVH5IU0cMJgoVVFYPBAIeC25aIkdRclpTQDp+XVFJVH9bREYmfF5RSFZyW1ZAUXJYV0ZTc15UVxN2XU9IS3lDV1cQdlxXQl15WlBBXXhZVUVdeF1HBRUqClxAQzsZFR1YelpTRFNzX1JDUn9cVQ | 172.67.193.133 | 204 No Content | 0 B |
URL POST HTTP/3ropeanresultanc.com/cWVLbWFeWigeXBAjCSc1Ji8pNw9EXRwBJxgAAwEzJiIFWAU3Fm0ZCBVYc19USFR6SxEYAXZeU1cWPwwVBBZ2X1FBUG0EDxcKdl9RQVN7XVBCV25aIhkRPx0SVFYKSFM3QHkrGRwJZQwFAgA5GxUVBDJDAh4Ibl8nBQ0+AAMfBCIBREIjIkhSNRYSAFEpDHIIOEMCFF1EQ1M7SFI1VHxfVEddeV5TREt5X1FJVH5IU0cMJgoVVFYPBAIeC25aIkdRclpTQDp+XVFJVH9bREYmfF5RSFZyW1ZAUXJYV0ZTc15UVxN2XU9IS3lDV1cQdlxXQl15WlBBXXhZVUVdeF1HBRUqClxAQzsZFR1YelpTRFNzX1JDUn9cVQ IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cWVLbWFeWigeXBAjCSc1Ji8pNw9EXRwBJxgAAwEzJiIFWAU3Fm0ZCBVYc19USFR6SxEYAXZeU1cWPwwVBBZ2X1FBUG0EDxcKdl9RQVN7XVBCV25aIhkRPx0SVFYKSFM3QHkrGRwJZQwFAgA5GxUVBDJDAh4Ibl8nBQ0+AAMfBCIBREIjIkhSNRYSAFEpDHIIOEMCFF1EQ1M7SFI1VHxfVEddeV5TREt5X1FJVH5IU0cMJgoVVFYPBAIeC25aIkdRclpTQDp+XVFJVH9bREYmfF5RSFZyW1ZAUXJYV0ZTc15UVxN2XU9IS3lDV1cQdlxXQl15WlBBXXhZVUVdeF1HBRUqClxAQzsZFR1YelpTRFNzX1JDUn9cVQ HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Sat, 07 Sep 2024 04:12:07 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j5p69HtiexWpXptfNF1goVvmL6xrzs4okPgOWfAvbyeBwvUQXAhiEU8rkVClk07D2iGHHVah5XgMLlqtm24j0AFWSoiN6JeLQZq3JLSDxhbusQezuRk6CVDK9a1kEGc7nFZqv6Vb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbd258ff56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash44d164e37b1e8effea6985906cc6e535 fe33b173071c5f183e958575b49680cae034a1cf c17b96a86877f32f8fd768aec624c88245fec6d3125f90c1cd66566820816a4b
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C17B96A86877F32F8FD768AEC624C88245FEC6D3125F90C1CD66566820816A4B"
Last-Modified: Thu, 05 Sep 2024 03:13:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=111
Expires: Sat, 07 Sep 2024 04:13:58 GMT
Date: Sat, 07 Sep 2024 04:12:07 GMT
Connection: keep-alive
|
|
| xml.adservtday.com/thumbnail?i=sYm0Xi9eY2g_0&p=1725682325.220815&imgt=icon | 198.134.116.29 | | 0 B |
URL GET xml.adservtday.com/thumbnail?i=sYm0Xi9eY2g_0&p=1725682325.220815&imgt=icon IP198.134.116.29:0 ASN#27257 WEBAIR-INTERNET
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=sYm0Xi9eY2g_0&p=1725682325.220815&imgt=icon HTTP/1.1
Host: xml.adservtday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 07 Sep 2024 04:12:07 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://static.servingserved.com/n337/ad/250x250_hqCCg8Cm.png
|
|
| static.servingserved.com/n337/ad/250x250_hqCCg8Cm.png | 95.101.11.43 | 200 OK | 30 kB |
URL GET HTTP/1.1static.servingserved.com/n337/ad/250x250_hqCCg8Cm.png IP95.101.11.43:443 ASN#20940 Akamai International B.V.
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerLet's Encrypt Subjectstatic.servingserved.com Fingerprint2F:48:90:8D:E8:9A:AC:5E:8B:3E:BE:CB:2C:F6:6C:83:64:F5:BA:7C ValidityFri, 02 Aug 2024 17:32:20 GMT - Thu, 31 Oct 2024 17:32:19 GMT
File typePNG image data, 250 x 250, 8-bit colormap, non-interlaced Hash1133d3aaa0866ea57a5b44ecccd3283b 96417ace0d02687e054a2fba6c9cb197162eb0ea 62aee0fd8036247bfc2fca571d6e6328621f8639e4d939807cb555111f6bd039
GET /n337/ad/250x250_hqCCg8Cm.png HTTP/1.1
Host: static.servingserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 29780
Last-Modified: Tue, 11 Apr 2023 13:58:09 GMT
ETag: "64356771-7454"
Accept-Ranges: bytes
Cache-Control: max-age=72702
Expires: Sun, 08 Sep 2024 00:23:49 GMT
Date: Sat, 07 Sep 2024 04:12:07 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
|
|
| ukankingwithea.com/asd100.bin | 104.21.68.94 | 200 OK | 102 kB |
URL GET HTTP/2ukankingwithea.com/asd100.bin IP104.21.68.94:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint1E:50:56:01:B8:4D:0D:64:A3:5D:F9:E4:4A:5D:AE:8D:5E:FC:FB:FC ValidityThu, 05 Sep 2024 11:45:15 GMT - Wed, 04 Dec 2024 11:45:14 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 07 Sep 2024 04:12:04 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sat, 07 Sep 2024 04:12:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FsX7%2BdeBqEH%2Fhxs8CN%2F97GkTGOpN6BmWdJy62WgEwunzgHRZSUGphmMPn6F6h0akT22IffX%2B5US%2BnqG9aQ%2FJpyktH76LbQRcD9%2FZlca%2FG1UJTD7PyysgpsNsRWgjJdBQ5hfKuRI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8bf3dbbc69cd56ba-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash4043c49a6e4e4305a381a507f2d2ed5a 886e58aa823a8f70f7bec49df0063d7df86de3eb 3da8c4456ecd0d61cc7234d03d967e333330359b47c56efe047766ebd207de74
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3DA8C4456ECD0D61CC7234D03D967E333330359B47C56EFE047766EBD207DE74"
Last-Modified: Thu, 05 Sep 2024 12:10:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1312
Expires: Sat, 07 Sep 2024 04:34:03 GMT
Date: Sat, 07 Sep 2024 04:12:11 GMT
Connection: keep-alive
|
|
| cdn.amnew.net/files/66d86362ef85b_2024_09_04_01_40_50_image.webp |  5.200.15.240 | 200 OK | 3.2 kB |
URL GET HTTP/2cdn.amnew.net/files/66d86362ef85b_2024_09_04_01_40_50_image.webp IP5.200.15.240:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerLet's Encrypt Subject*.amnew.net FingerprintEC:2C:91:13:48:B1:B1:FB:73:70:D3:36:24:24:58:0A:80:F8:A3:D6 ValidityMon, 02 Sep 2024 23:05:07 GMT - Sun, 01 Dec 2024 23:05:06 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp Hasha6b722a215e4a6f2106cae691703402d 3819757dee7951b1f0d1ef99a8d4982340c9b946 0ec9fefc906569bb316654a8ef909027a4cb8ccd2b075a64fdd00c9763552191
GET /files/66d86362ef85b_2024_09_04_01_40_50_image.webp HTTP/1.1
Host: cdn.amnew.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
content-length: 3208
last-modified: Wed, 04 Sep 2024 13:40:52 GMT
etag: "a6b722a215e4a6f2106cae691703402d"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/retina/retina.js | 91.209.70.182 | 200 OK | 1.3 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/retina/retina.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1353), with no line terminators Hash63539576529cb2ba2cf10de877f1e8cc 78cf75b3bc45e3da2e5753c4d47582957b222e1c f3bf2760a81cfb66c729ad39451b437da09f7e0a04fe93ffc34e23194d813619
GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-52e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/custom.css | 91.209.70.182 | 200 OK | 14 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/custom.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeassembler source, ASCII text, with CRLF line terminators Hash5c6cc304ddf594371c91e46020c2dec5 5b8d133530fe6092bcd642ab20c028dd869ab45d cb11ef787fc18b87a0420239ee788379f6218b79ac81fa012ecad676ae1cb144
GET /themes/flow/frontend_assets/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3577"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/responsive.css | 91.209.70.182 | 200 OK | 3.7 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/responsive.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (3795), with no line terminators Hash984d21bc996f9907b59b8e80308d1d33 6d00958737d36f4d07a0920a303d230dad004a43 94ca9c89c3f698aa1a6247d089d9d866002358183a4e8376eba5452cb5182f1f
GET /themes/flow/frontend_assets/css/responsive.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-e56"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js | 91.209.70.182 | 200 OK | 2.4 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2449), with no line terminators Hash7b61bf63f1c5a5854b24046257705068 dcac61a8cbb82440b4b09f3d391c0800eba6ee89 15eb8a14ded6c8eaf1e4f528a77c02be72e8e3d743e44b259dc8036ef26864fb
GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-981"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css | 91.209.70.182 | 200 OK | 36 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-8d4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/stylesheet.css | 91.209.70.182 | 200 OK | 28 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/stylesheet.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash8568ee885222fb5ef651a99221bfd347 0dc1b30d1a58c3cdafab8b38da04f3fc2462ee46 3b35d09fae892be2b76a67f47bbbcbe289b05a2850e02295f70f9c2e537d927a
GET /themes/flow/frontend_assets/css/stylesheet.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6c82"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js | 91.209.70.182 | 200 OK | 15 kB |
URL GET HTTP/2megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1288) Hashd31e0426a59b32581835680633809ea3 98caf983b9349fcf2a32d6512f998ea9a557a90e c7fe89a030ea54a29616f0a473366e07d109dfb775f2afa050c2de82e3606fba
GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3bd2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css | 91.209.70.182 | 200 OK | 18 kB |
URL GET HTTP/2megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45f5"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css | 91.209.70.182 | 200 OK | 339 B |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (375), with no line terminators Hashe60adfdae6f5cf19011dbe4154390a71 e91fc65490f58b7072d25b8edeed4b213e72ad96 0633957c46201ad0d4143ecfcb0c12d9c400a8edadb2670026573d8f8c2ba2f2
GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-153"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/global.js | 91.209.70.182 | 200 OK | 3.4 kB |
URL GET HTTP/2megaup.net/themes/flow/js/global.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (3612), with no line terminators Hashe44702657a9e124a9ba6ba57e941d9e8 cbfc48ed2d804918f7f97c4f1ed6ea2a4780151b 39b318c989a0ac479bbf9196494fb1bec96cd1e54186051f5ba6225877acfd83
GET /themes/flow/js/global.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-d59"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| undefined/TGo2UkgtCFU/dy1XVHQ9PgYLd3oKTwQULH4dDzEsOVICKit4D0d8KyAFQzYuPgVYJmYiD0J3egoGYTkSfCRdJX0HOEYDKzVeQBcJOFpXGgYCKAVjcAINbAYDIQlEFx4JHnooEi09dTk9FSgDFAE2OwQBEBkAVzsFHjN+AzgBKWAXCQgCURMNOwVsYRIfPV9ieAU/XQMDGDtaARkoG3krARspBTpwAQ1kCAJ+CUwVJAUaZhFwLT9POnABEmMeARg/DhoeIw15YAYLCX4+eCgGcxcuBCMTYAoeO1IiKR04ZBAAO1h6KjgIJH5reB4vA2IqDgZ1EyUgGnQUZQkvUBEvOz9nBwYVWXQzCiE8E2AOKC9kAAMYAUIVMAJPBBAABDhzEHs0G1JiGQQLYTp6CQYOd3oOOk8TKhgHWj0JCVp3CyU8DXcDPHVMXCEnIhoLESd8D1MEcD8cZyAELg | 0.0.0.0 | | 0 B |
URL GET undefined/TGo2UkgtCFU/dy1XVHQ9PgYLd3oKTwQULH4dDzEsOVICKit4D0d8KyAFQzYuPgVYJmYiD0J3egoGYTkSfCRdJX0HOEYDKzVeQBcJOFpXGgYCKAVjcAINbAYDIQlEFx4JHnooEi09dTk9FSgDFAE2OwQBEBkAVzsFHjN+AzgBKWAXCQgCURMNOwVsYRIfPV9ieAU/XQMDGDtaARkoG3krARspBTpwAQ1kCAJ+CUwVJAUaZhFwLT9POnABEmMeARg/DhoeIw15YAYLCX4+eCgGcxcuBCMTYAoeO1IiKR04ZBAAO1h6KjgIJH5reB4vA2IqDgZ1EyUgGnQUZQkvUBEvOz9nBwYVWXQzCiE8E2AOKC9kAAMYAUIVMAJPBBAABDhzEHs0G1JiGQQLYTp6CQYOd3oOOk8TKhgHWj0JCVp3CyU8DXcDPHVMXCEnIhoLESd8D1MEcD8cZyAELg IP0.0.0.0:0
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /TGo2UkgtCFU/dy1XVHQ9PgYLd3oKTwQULH4dDzEsOVICKit4D0d8KyAFQzYuPgVYJmYiD0J3egoGYTkSfCRdJX0HOEYDKzVeQBcJOFpXGgYCKAVjcAINbAYDIQlEFx4JHnooEi09dTk9FSgDFAE2OwQBEBkAVzsFHjN+AzgBKWAXCQgCURMNOwVsYRIfPV9ieAU/XQMDGDtaARkoG3krARspBTpwAQ1kCAJ+CUwVJAUaZhFwLT9POnABEmMeARg/DhoeIw15YAYLCX4+eCgGcxcuBCMTYAoeO1IiKR04ZBAAO1h6KjgIJH5reB4vA2IqDgZ1EyUgGnQUZQkvUBEvOz9nBwYVWXQzCiE8E2AOKC9kAAMYAUIVMAJPBBAABDhzEHs0G1JiGQQLYTp6CQYOd3oOOk8TKhgHWj0JCVp3CyU8DXcDPHVMXCEnIhoLESd8D1MEcD8cZyAELg HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| getrunkhomuto.info/floater?cs=ZEdjeGRXcVRJXF11UkxXVHRTQV0&abt=0&red=1&sm=83&k=download%20file%20gamesmega&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1638271083444830&agec=1725682324&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=173.01038062283737&ref=https%3A%2F%2Fmegaup.net%2F3mp%2FGamesMega-PUL-RF.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_a9mX=1725682324801&crc=1 | 143.204.55.8 | 200 OK | 3.4 kB |
URL GET HTTP/2getrunkhomuto.info/floater?cs=ZEdjeGRXcVRJXF11UkxXVHRTQV0&abt=0&red=1&sm=83&k=download%20file%20gamesmega&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1638271083444830&agec=1725682324&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=173.01038062283737&ref=https%3A%2F%2Fmegaup.net%2F3mp%2FGamesMega-PUL-RF.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_a9mX=1725682324801&crc=1 IP143.204.55.8:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerAmazon Subjectgetrunkhomuto.info Fingerprint07:6C:15:28:EC:56:65:DE:8C:55:1C:BF:A5:DB:7B:96:8F:38:56:0E ValidityMon, 01 Apr 2024 00:00:00 GMT - Wed, 30 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (3410), with no line terminators Hash5aefc3eb2154ab9540a2b81cc4158380 076e12f65f1aa4cbbc7c5aeec21d368c363ec477 934cb9640166287092de1f4decf4643b1ea35f9553a2b067c21a2b3a0ea88f6f
GET /floater?cs=ZEdjeGRXcVRJXF11UkxXVHRTQV0&abt=0&red=1&sm=83&k=download%20file%20gamesmega&v=0.9.2.6&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1638271083444830&agec=1725682324&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=173.01038062283737&ref=https%3A%2F%2Fmegaup.net%2F3mp%2FGamesMega-PUL-RF.zip&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=oi1_&_a9mX=1725682324801&crc=1 HTTP/1.1
Host: getrunkhomuto.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2113
date: Sat, 07 Sep 2024 04:12:05 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=e22ee2db-ceec-4552-b8e2-fe979138bfab
csu=1638271083444830
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GM6EYv-YDBYpxVEo-0CpHiWElQ0zuDbK6WZad8HrsEJO07Fk-E5Hkg==
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/colors/flow.css | 91.209.70.182 | 200 OK | 2.7 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/colors/flow.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (3023), with no line terminators Hash9adec578563e5d2ce244e42529bd6a0c 2d9d05a9914fff69e279803400fa089638ad30ea f9247eaf086df740e94ede1041b462994eb50899b273c70572a72f09048d1ce6
GET /themes/flow/frontend_assets/css/colors/flow.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-a83"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery.fileupload.js | 91.209.70.182 | 200 OK | 56 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery.fileupload.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashb85ba9fdc07788f5208002e4588c1e2a f4a5b283e901f573f1237b6a096da4c295e8a65b f809de94a782db6c7c5bc85db8bc8f6b05b1a473f736080b3ea8377fd6ed35cc
GET /themes/flow/js/jquery.fileupload.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-dbd4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/bnNPOXhBTCxKRQ1DekAtOhsOXD04FA58CFYifWw0P0B+ehkvNmlNEQpOdwtNV0J+HwgHF3IKSkgAO1gMGwByCF4HHSlWRUgFcglWV119F05IBnIIXhoDLl5FX1U/TQwCTn4OSltFdwtLXEB4AEk | 172.67.193.133 | 204 No Content | 0 B |
URL GET HTTP/2ropeanresultanc.com/bnNPOXhBTCxKRQ1DekAtOhsOXD04FA58CFYifWw0P0B+ehkvNmlNEQpOdwtNV0J+HwgHF3IKSkgAO1gMGwByCF4HHSlWRUgFcglWV119F05IBnIIXhoDLl5FX1U/TQwCTn4OSltFdwtLXEB4AEk IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bnNPOXhBTCxKRQ1DekAtOhsOXD04FA58CFYifWw0P0B+ehkvNmlNEQpOdwtNV0J+HwgHF3IKSkgAO1gMGwByCF4HHSlWRUgFcglWV119F05IBnIIXhoDLl5FX1U/TQwCTn4OSltFdwtLXEB4AEk HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 07 Sep 2024 04:12:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2F2Bsbbb4JAGDwPY%2FFHQd29o5iZGrAnHy8ffZsRshrb5X%2Fgk73pw9LXFCZJNUzDgaz22GNy5FxHKUaprliafC1mM%2FzB1vILWkVmfqtPIS2DUNqtG0wrieDhEOJlyk0D%2BYGXr9Gba"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbbbfe2056c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/bzNhcU1ADAICcD5dJz8AOVsZI34YegA5CyxVICM9CwM3Rg9dQEcFJAsOVkd8XgtXVz0GV1xAaxxHAAU4HA5QVyQBVQ5MaxkOUF9+Wx1SR2NbFRRMfElHERAqUgJHATkbX1xAel0GV0l/XAFSRnle | 172.67.193.133 | 204 No Content | 0 B |
URL GET HTTP/2ropeanresultanc.com/bzNhcU1ADAICcD5dJz8AOVsZI34YegA5CyxVICM9CwM3Rg9dQEcFJAsOVkd8XgtXVz0GV1xAaxxHAAU4HA5QVyQBVQ5MaxkOUF9+Wx1SR2NbFRRMfElHERAqUgJHATkbX1xAel0GV0l/XAFSRnle IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bzNhcU1ADAICcD5dJz8AOVsZI34YegA5CyxVICM9CwM3Rg9dQEcFJAsOVkd8XgtXVz0GV1xAaxxHAAU4HA5QVyQBVQ5MaxkOUF9+Wx1SR2NbFRRMfElHERAqUgJHATkbX1xAel0GV0l/XAFSRnle HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 07 Sep 2024 04:12:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RaJSx9zkCLZbKKsy3QJC2u3%2B5Uhd4tcqe5pBP1D4ktzn8ZR7uqeum9aG7OBa6Wj0EEcsG73XCCnAHSCV9JMY6Vlw6bsDKGB72%2Fz8KH8LExKjAUE4V0DJnYktBLXF4lYLQf64%2B0Io"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbbbfe1e56c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js | 91.209.70.182 | 200 OK | 1.8 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1946), with no line terminators Hash28bfbd66415c5e20a0d8ce1ee03bd87c 144fa15fb0a7090117e6f4ef33d9f465241e5459 6eb7ee7937139b13785d0befc27eb61cffbae32d066959c6370829209c0c4e46
GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css | 91.209.70.182 | 200 OK | 2.8 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/isotope/isotope-style.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (3129), with no line terminators Hash51c9993916aaff91429614ae79394a6b 51383b05a8ada15406d7eff96fc706c47cfb581b 7c418339961aab6dec877ed3760307367e9deea17a1fbd175e611c215e48634f
GET /themes/flow/frontend_assets/css/isotope/isotope-style.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-af3"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/UWZwME1+WRNDcAchBEEoOzweaBtgKjRdfAsxQAQLCyAYURwmXlZEJDVbSAJ4aFdBFj04Ak0Df3cVBFE5JBVNAn1hU1ZZIzcJTQJ9YVBAAHxhV1UHDjkSBEA+dFUxFX8XQ0J2LjUIXlEgPwMHHiM0ElUCCzcPHFU+dFQ2Bns1XkYDe2MDFgh4MzlCAH9lOUAJEmFSLwB8DlJAb3hhORldLDYDXkcoMxZVBw4/ExxcaGYlRwN9aFVJBnpgUkkFe2ZQSAN4dxBNAGNoSEIee3cTTQF7Yl5CB3xhXkMEeWVeQwBrJRYRV3BgQABEOT1bQQd/ZFBIAn5iV0MJfg | 172.67.193.133 | 204 No Content | 0 B |
URL POST HTTP/3ropeanresultanc.com/UWZwME1+WRNDcAchBEEoOzweaBtgKjRdfAsxQAQLCyAYURwmXlZEJDVbSAJ4aFdBFj04Ak0Df3cVBFE5JBVNAn1hU1ZZIzcJTQJ9YVBAAHxhV1UHDjkSBEA+dFUxFX8XQ0J2LjUIXlEgPwMHHiM0ElUCCzcPHFU+dFQ2Bns1XkYDe2MDFgh4MzlCAH9lOUAJEmFSLwB8DlJAb3hhORldLDYDXkcoMxZVBw4/ExxcaGYlRwN9aFVJBnpgUkkFe2ZQSAN4dxBNAGNoSEIee3cTTQF7Yl5CB3xhXkMEeWVeQwBrJRYRV3BgQABEOT1bQQd/ZFBIAn5iV0MJfg IP172.67.193.133:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /UWZwME1+WRNDcAchBEEoOzweaBtgKjRdfAsxQAQLCyAYURwmXlZEJDVbSAJ4aFdBFj04Ak0Df3cVBFE5JBVNAn1hU1ZZIzcJTQJ9YVBAAHxhV1UHDjkSBEA+dFUxFX8XQ0J2LjUIXlEgPwMHHiM0ElUCCzcPHFU+dFQ2Bns1XkYDe2MDFgh4MzlCAH9lOUAJEmFSLwB8DlJAb3hhORldLDYDXkcoMxZVBw4/ExxcaGYlRwN9aFVJBnpgUkkFe2ZQSAN4dxBNAGNoSEIee3cTTQF7Yl5CB3xhXkMEeWVeQwBrJRYRV3BgQABEOT1bQQd/ZFBIAn5iV0MJfg HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 07 Sep 2024 04:12:11 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xeHc8LgEeaLOhosX8LpOx%2FrnymXGAyrkes%2ByqzvPcLhbJSfSSYAJKwvpDW0llzT0OuA7Smj08UKzwzh%2BbWp4F3yqlcz9totyvFoB%2BS%2BzrzKjwmXp5PFDZVymmKTDOBLoQzL2GGT3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8bf3dbeb4cb456af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js | 91.209.70.182 | 200 OK | 198 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (464), with CRLF line terminators Size198 kB (197554 bytes) Hash35045d45f7d1dde1f90457c5d73700c5 a7fcee0ab1da615e828e51967c474ae91d768569 d72616e59f2ba832c54a0e734cdf0a79cb8730f81a07b5de43864c15a240e221
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery.fileupload-ui.js | 91.209.70.182 | 200 OK | 25 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery.fileupload-ui.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash6d74ec0b03e02825fef8093d64629489 de746f1c7aeb0927541e1d55bdea4672bb47aa73 5d4a5378ed9f8bf68dbfb6246761e6d44e2b11fa626d8b4f8d1d6a779f037cd2
GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-61ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery.fileupload-validate.js | 91.209.70.182 | 200 OK | 4.1 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery.fileupload-validate.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4192), with no line terminators Hash4ad5c2f2ed0230271d44a12b09ea1361 2070df63b71eda62f5a90b091595ef67595273b7 84047dced279f3c811d4cb54e6a5dc9310569b51eba58aec89f03ced7bfadafc
GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-fea"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/styles/file-upload.css | 91.209.70.182 | 200 OK | 8.7 kB |
URL GET HTTP/2megaup.net/themes/flow/styles/file-upload.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeassembler source, ASCII text, with very long lines (9188), with no line terminators Hashe6aa00105765c90499065e7b4953475e c214db0a0c9ceda57bef567789961817554e01c9 33af7cdbf9e003d6a268f344b7d9fd8fc39d19b0a412b9eaa4487d509a4a54b1
GET /themes/flow/styles/file-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| undefined/Vzd5TWU2VRogWjYKG2sQJVtEaFcREksLAWVAQC4BIg9NNQZjUghjBjtYDCkDJVgXOUs5Ug1oVxFvLiAGYnoUBFAUcR0YPQQDNhU0blYbGyAcdkg9XREHDRUnEFQyFSMCczU1Bg9vOC4QBmE3DyEDZiEPLQJdGCozJFM9IgcaYBE6LhUDEhQkFXI1JVQzc0gHXRQGES4nAFM7FSMgdSN8PDFiDhRRAFBJGCM+WDAYAm9mNAw3AmYoFFERWwkLNxQPPg8jb3kwDFABbx4DQGVxLxVdH2M+PSYUQDMGLDtuMAtUEm4oKhYUcxMALwNyCQUEEVM7DgkGcSwcSGdvLB8NFHQOBDQbcjAGBmZDCh40PFUrfw0PbxUuJxpmHi4kFGUWGxIwdCwgEQ90Oyk0NlA/HDQWVEEOIBJvLA8dMnMBNTYxdTAIJCAREz4KOUdECiRnVSwLPRZhKA8vE3Qgfw | 0.0.0.0 | | 0 B |
URL GET undefined/Vzd5TWU2VRogWjYKG2sQJVtEaFcREksLAWVAQC4BIg9NNQZjUghjBjtYDCkDJVgXOUs5Ug1oVxFvLiAGYnoUBFAUcR0YPQQDNhU0blYbGyAcdkg9XREHDRUnEFQyFSMCczU1Bg9vOC4QBmE3DyEDZiEPLQJdGCozJFM9IgcaYBE6LhUDEhQkFXI1JVQzc0gHXRQGES4nAFM7FSMgdSN8PDFiDhRRAFBJGCM+WDAYAm9mNAw3AmYoFFERWwkLNxQPPg8jb3kwDFABbx4DQGVxLxVdH2M+PSYUQDMGLDtuMAtUEm4oKhYUcxMALwNyCQUEEVM7DgkGcSwcSGdvLB8NFHQOBDQbcjAGBmZDCh40PFUrfw0PbxUuJxpmHi4kFGUWGxIwdCwgEQ90Oyk0NlA/HDQWVEEOIBJvLA8dMnMBNTYxdTAIJCAREz4KOUdECiRnVSwLPRZhKA8vE3Qgfw IP0.0.0.0:0
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Vzd5TWU2VRogWjYKG2sQJVtEaFcREksLAWVAQC4BIg9NNQZjUghjBjtYDCkDJVgXOUs5Ug1oVxFvLiAGYnoUBFAUcR0YPQQDNhU0blYbGyAcdkg9XREHDRUnEFQyFSMCczU1Bg9vOC4QBmE3DyEDZiEPLQJdGCozJFM9IgcaYBE6LhUDEhQkFXI1JVQzc0gHXRQGES4nAFM7FSMgdSN8PDFiDhRRAFBJGCM+WDAYAm9mNAw3AmYoFFERWwkLNxQPPg8jb3kwDFABbx4DQGVxLxVdH2M+PSYUQDMGLDtuMAtUEm4oKhYUcxMALwNyCQUEEVM7DgkGcSwcSGdvLB8NFHQOBDQbcjAGBmZDCh40PFUrfw0PbxUuJxpmHi4kFGUWGxIwdCwgEQ90Oyk0NlA/HDQWVEEOIBJvLA8dMnMBNTYxdTAIJCAREz4KOUdECiRnVSwLPRZhKA8vE3Qgfw HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3rnfuIpVkHP4Obe_Q0TFXIkqq7gvqjTEfFUD7MpuJ7BZA6zcKwAQBq9f3kvBRRBHTaMCXUm_A&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1309635309%3A1725682324814242&ddm=0 | 64.233.161.84 | 403 Forbidden | 0 B |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3rnfuIpVkHP4Obe_Q0TFXIkqq7gvqjTEfFUD7MpuJ7BZA6zcKwAQBq9f3kvBRRBHTaMCXUm_A&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1309635309%3A1725682324814242&ddm=0 IP64.233.161.84:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint97:72:B0:50:D3:11:5A:F7:A4:3E:14:43:9B:9B:DA:05:44:40:58:1C ValidityMon, 12 Aug 2024 06:33:49 GMT - Mon, 04 Nov 2024 06:33:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3rnfuIpVkHP4Obe_Q0TFXIkqq7gvqjTEfFUD7MpuJ7BZA6zcKwAQBq9f3kvBRRBHTaMCXUm_A&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1309635309%3A1725682324814242&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Sep 2024 04:12:05 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce--Ph1isHJHowBEFms252aTw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.clR4MTyL-is.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/3mp/GamesMega-PUL-RF.zip | 91.209.70.182 | 200 OK | 925 kB |
URL User Request GET HTTP/2megaup.net/3mp/GamesMega-PUL-RF.zip IP91.209.70.182:443
CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
Size925 kB (924770 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3mp/GamesMega-PUL-RF.zip HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:02 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=r904s3ignvptgflgbcdifn5nm1; expires=Sun, 08-Sep-2024 04:12:02 GMT; Max-Age=86400; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ropeanresultanc.com/popunder.gif | 0.0.0.0 | | 0 B |
URL GET ropeanresultanc.com/popunder.gif IP0.0.0.0:0
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subjectropeanresultanc.com Fingerprint80:A6:14:30:D5:16:71:74:AA:E2:36:69:43:84:93:F5:72:73:43:9B ValidityFri, 06 Sep 2024 05:56:02 GMT - Thu, 05 Dec 2024 05:56:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /popunder.gif HTTP/1.1
Host: ropeanresultanc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 07 Sep 2024 04:12:04 GMT
content-type: image/gif
content-length: 58
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
content-encoding: gzip
cf-cache-status: HIT
age: 132828
last-modified: Thu, 05 Sep 2024 15:18:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UpquOd1OVDU1zlZNdI3bH9Q%2Bhbr5RQ0mjWNgHA4xhhBYPZvak8h%2F4%2Ffhds75Fl9kknNuKMlqTaFovS0g0GhJocZfP2m0HBggUEvYpJnZ1o0TnsQ0h3jVyQEPW5hrW9dgdMB2PZX4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8bf3dbc1d9d456af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js | 91.209.70.182 | 200 OK | 29 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (28941) Hashba847811448ef90d98d272aeccef2a95 5814e91bb6276f4de8b7951c965f2f190a03978d 898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1
GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js | 91.209.70.182 | 200 OK | 5.4 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6528), with no line terminators Hash86379ef62388dc773f0c909c8678823c 5eff5eeda891aeb71ef023ab40006f5e9be33642 4152201489950049e566388267c82b03eda1810018354b17055593f250d1e658
GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1547"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3oyUsTd_mXZZL4qaqcdF9davzHqwPmSkIAScDDtMKt9DshRfkZAviNx0fWCXOTm-4janG9K&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1239260111%3A1725682325184522&ddm=0 | 64.233.161.84 | 403 Forbidden | 0 B |
URL GET HTTP/3accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3oyUsTd_mXZZL4qaqcdF9davzHqwPmSkIAScDDtMKt9DshRfkZAviNx0fWCXOTm-4janG9K&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1239260111%3A1725682325184522&ddm=0 IP64.233.161.84:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint97:72:B0:50:D3:11:5A:F7:A4:3E:14:43:9B:9B:DA:05:44:40:58:1C ValidityMon, 12 Aug 2024 06:33:49 GMT - Mon, 04 Nov 2024 06:33:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=Ab5oB3oyUsTd_mXZZL4qaqcdF9davzHqwPmSkIAScDDtMKt9DshRfkZAviNx0fWCXOTm-4janG9K&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1239260111%3A1725682325184522&ddm=0 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 07 Sep 2024 04:12:05 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-bf1ez2vsExqRfWjyPtcwOQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.clR4MTyL-is.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js | 91.209.70.182 | 200 OK | 85 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (23470) Hash04426bc66c09c8881b5b329310e903e9 ff7f2f64ed5938023a91050e27f22f77becba78c ebf4e570b96d611fa540bb8745ba518a1005d50c4589a2c2cf3a60a97151a184
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14cc1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js | 91.209.70.182 | 200 OK | 16 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (15714), with CRLF line terminators Hash38c5167c8052d0c73892c3742b16e903 213ef9210b4a5c4e73a242e832a08f4abef69a74 743b919a337dfbb6d1e8648d0793532d47f8af48059e17f7e32ae8738c7614a7
GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3ead"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| undefined/dWlVb04UCzYCcRRUN0k7BwVoSnwzTGcpKkcebAwqAFFhFy1BDCRBLRkGIAsoBwY7G2AbDCFKfDMgAFwYNj04ADkyACIAGCYKNiUgOz0PXzZDDBNafzc9FB0KMl0MJTceJR8IGAYgFFcgIBAyVgwhWRMJNh4nEhh+My0EIn43DgwBCTIZASEkJCY3BBgeIDIcdzAHbAAKD1kCCX1MJBgHCxIKZFp/NCobFQwPHgUkNzwuGAMMAioTVncnPjFXGRsaGwx9TDkMKyobDxMAa0cvHSw5Qiw7NQYWAw88FCYZZQolTA4bXSpNPjwqCi9aZR0vHicmCSU7WwdcYzwZERUPECUCGxczPDEWKEQZPz0GP0xnKRpHLxMlDRYwGwcDASc+ViY4WiFbHDInASF9OwtzBT0aByVSGRIhLSgNHA4mKycHUA | 0.0.0.0 | | 0 B |
URL GET undefined/dWlVb04UCzYCcRRUN0k7BwVoSnwzTGcpKkcebAwqAFFhFy1BDCRBLRkGIAsoBwY7G2AbDCFKfDMgAFwYNj04ADkyACIAGCYKNiUgOz0PXzZDDBNafzc9FB0KMl0MJTceJR8IGAYgFFcgIBAyVgwhWRMJNh4nEhh+My0EIn43DgwBCTIZASEkJCY3BBgeIDIcdzAHbAAKD1kCCX1MJBgHCxIKZFp/NCobFQwPHgUkNzwuGAMMAioTVncnPjFXGRsaGwx9TDkMKyobDxMAa0cvHSw5Qiw7NQYWAw88FCYZZQolTA4bXSpNPjwqCi9aZR0vHicmCSU7WwdcYzwZERUPECUCGxczPDEWKEQZPz0GP0xnKRpHLxMlDRYwGwcDASc+ViY4WiFbHDInASF9OwtzBT0aByVSGRIhLSgNHA4mKycHUA IP0.0.0.0:0
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /dWlVb04UCzYCcRRUN0k7BwVoSnwzTGcpKkcebAwqAFFhFy1BDCRBLRkGIAsoBwY7G2AbDCFKfDMgAFwYNj04ADkyACIAGCYKNiUgOz0PXzZDDBNafzc9FB0KMl0MJTceJR8IGAYgFFcgIBAyVgwhWRMJNh4nEhh+My0EIn43DgwBCTIZASEkJCY3BBgeIDIcdzAHbAAKD1kCCX1MJBgHCxIKZFp/NCobFQwPHgUkNzwuGAMMAioTVncnPjFXGRsaGwx9TDkMKyobDxMAa0cvHSw5Qiw7NQYWAw88FCYZZQolTA4bXSpNPjwqCi9aZR0vHicmCSU7WwdcYzwZERUPECUCGxczPDEWKEQZPz0GP0xnKRpHLxMlDRYwGwcDASc+ViY4WiFbHDInASF9OwtzBT0aByVSGRIhLSgNHA4mKycHUA HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js | 91.209.70.182 | 200 OK | 7.4 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7733), with no line terminators Hashaaaac23173da082efba2d6874d01cf03 b14b1cd1e6bf4cf4a324182e4ee3fe3ec370b896 85ede8080213e13bdc68570d742105289541dfc11847ea8cab78c5575bac71e9
GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery.iframe-transport.js | 91.209.70.182 | 200 OK | 9.3 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery.iframe-transport.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (9459), with no line terminators Hashe703222aaa30359454a64b070b20b7a5 bbe0de722f2f9eb912ba3fc0d960e35b3ef58b4e 917390ec2f9d9d63aaa67ee2078e601f84538945732e4a89d3be346728f80fca
GET /themes/flow/js/jquery.iframe-transport.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2427"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery-1.11.0.min.js | 91.209.70.182 | 200 OK | 96 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery-1.11.0.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32341) Hash8fc25e27d42774aeae6edbc0a18b72aa b66ed708717bf0b4a005a4d0113af8843ef3b8ff b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682
GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1787d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/canvas-to-blob.min.js | 91.209.70.182 | 200 OK | 1.0 kB |
URL GET HTTP/2megaup.net/themes/flow/js/canvas-to-blob.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1052), with no line terminators Hasha6496a71738d7a150a3e065ee0e12fe3 5312d1558e59026ae5f14cb04f8bc87248f23826 7700f942a6370cef00334962637f3de505a110832c554efdaab8aa645b10359d
GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-408"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js | 91.209.70.182 | 200 OK | 1.5 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1485), with no line terminators Hash81e829f6440dd7da485221dc6c313a11 b6530a173b945abda1e8bae3da825189ffd9efc3 d526eb464ff9722d6639269b69f241cb5816452149e5a89acd866fbcda382102
GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-5c6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css | 91.209.70.182 | 200 OK | 48 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash6678bbbf8814eac6d7f987ad2a32111a aa9021d4f27c58d5ffe5a8545c20b47232d7d0cb 9b36949876f75f2961b55a066b1f9695ec8c3772771d700e951736b1fba45cbe
GET /themes/flow/frontend_assets/css/animations/animate.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-bc86"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css | 91.209.70.182 | 200 OK | 118 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeassembler source, ASCII text, with very long lines (540), with CRLF line terminators Size118 kB (117787 bytes) Hash26bfa8a47d74b90e1fc4632710026e85 2993c7f968fb5e5be8d256d5c7271fe64c87326d 69c6352bd7a8de550563a81b40dab2234fa30ff0ae9e90a8b5c896dea033ca3b
GET /themes/flow/frontend_assets/css/bootstrap/bootstrap.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cc1b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery.dataTables.min.js | 91.209.70.182 | 200 OK | 70 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery.dataTables.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (768) Hash737f853e9fd6a31d62f5028e88663c9f cf144f2ab49f53a69fbfe10d3588fc23437d2736 6c3ca64b7acfdd29b3ca6f1b9b46696369abd462d4546182085c347f72211841
GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-10fe4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery.fileupload-process.js | 91.209.70.182 | 200 OK | 5.3 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery.fileupload-process.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5466), with no line terminators Hash84f8554400d04b9a321a8f255455db13 2769a1ca8116367636343875b340505939ceff71 43958ee1d314b9876d5cd635dfd55f2b14aaacb83ee73ee276c1a96120d6dfd0
GET /themes/flow/js/jquery.fileupload-process.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/sw.js | 91.209.70.182 | 200 OK | 103 kB |
IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size103 kB (103036 bytes) Hash9ee51131e416458b88d6da4e6e6959ca a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4 db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:15:31 GMT
vary: Accept-Encoding
etag: W/"63a1dfa3-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css | 91.209.70.182 | 200 OK | 23 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (305), with CRLF line terminators Hashf8398a4ad2442f1943b62d93f89249b6 280150fc79d01a95808b1c16ca8749e8d8cda85e 7c10acbcb15a2f181df3ad0d009a44f892e406bbfc8f94df12f8a47a71b696e5
GET /themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-59d6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/load-image.min.js | 91.209.70.182 | 200 OK | 2.5 kB |
URL GET HTTP/2megaup.net/themes/flow/js/load-image.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2582), with no line terminators Hasha695bcdeef4ab1f27d01d2175ab9ddcd 442e6298bf7092455528a2b81e721aaf7a72ef09 ac92521ad4d3d0191d63ce8dda671b9e78c7c7e1d5f0b3fb2cf5424461f3f315
GET /themes/flow/js/load-image.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-9f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery.fileupload-resize.js | 91.209.70.182 | 200 OK | 8.1 kB |
URL GET HTTP/2megaup.net/themes/flow/js/jquery.fileupload-resize.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (8281), with no line terminators Hashfe90ec8075308aa0695b41a01faa8d7c 9ef0157a99a6efd2a8672b699dbf4225d8fa67ad 782f2530cd4df35901bcdba4dab3cd8769f7cebfcfa96cec776cbcdc10d66062
GET /themes/flow/js/jquery.fileupload-resize.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1f7f"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/js/gauge.min.js | 91.209.70.182 | 200 OK | 18 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/js/gauge.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1259) Hashaafe893df6f86140460a76d58dcecfe2 fe1a74890dc8f040f5f681041663b96d983163f6 2d9574ce1b6890bd6ccf1ef3d04fe1328f35c5bbced7b6b331459119ef4fe480
GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45b8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/js/jquery.tmpl.min.js | 91.209.70.182 | 200 OK | 971 B |
URL GET HTTP/2megaup.net/themes/flow/js/jquery.tmpl.min.js IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1068), with no line terminators Hash089e1431cd0ddbbacc07175c48de0f15 65898769225f99ca698658bd7a4c3aa623dc82d4 dcd0212b5e453a6411aeef7b4302e0be890be6462d8197cac028f185c2f174fb
GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/3mp/GamesMega-PUL-RF.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
| megaup.net/themes/flow/frontend_assets/css/fonts.css | 91.209.70.182 | 200 OK | 1.7 kB |
URL GET HTTP/2megaup.net/themes/flow/frontend_assets/css/fonts.css IP91.209.70.182:443
Requested byhttps://megaup.net/3mp/GamesMega-PUL-RF.zip CertificateIssuerSectigo Limited Subject*.megaup.net Fingerprint87:12:86:1C:E3:CE:6F:75:2C:26:9D:CD:B7:92:23:0F:CA:D5:15:1A ValidityThu, 05 Oct 2023 00:00:00 GMT - Mon, 04 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (1734), with no line terminators Hash4d22ff28e999a5c332705be886a5984b 8f458405367020346f614bbe41d21da151fdfa87 65e973e0ec1ed64f42a2ad48e4d02a34c9db54a7340761d86c53149a508e9b32
GET /themes/flow/frontend_assets/css/fonts.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=r904s3ignvptgflgbcdifn5nm1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 07 Sep 2024 04:12:03 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-690"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
|
|
0.0.0.0