megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
301 Moved Permanently 162 B URL HTTP/1.1 megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 30 Sep 2022 00:18:34 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
X-Download-Options: noopen
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4699
Expires: Fri, 30 Sep 2022 01:36:53 GMT
Date: Fri, 30 Sep 2022 00:18:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 30 Sep 2022 00:16:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: d7En9N3YZiUT-FOtzSU-PRgJCJ5i7kvijGvOBfWUqiChV9ATuu95bQ==
Age: 150
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0dQZcMHnNIASIa4dOBgrRYzfsqztZrUT2rn7lb519SgJROKbQ7zC4w==
age: 67807
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 55fc559ae8097427d7a66ec558f569a4
e1258370408ae50c859ec874ff7c260e3c850846
1df3b994d416e1ee8ee3494fc298862c80d5b3ea01d4d41ee4e05b80c7f48918
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 Sep 2022 00:18:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 23:25:47 GMT
Expires: Mon, 03 Oct 2022 23:25:46 GMT
Etag: "e1258370408ae50c859ec874ff7c260e3c850846"
Cache-Control: max-age=341831,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7528c837ccecb509-OSL
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
megaup.net/themes/flow/images/main_logo_inverted.png
200 OK 7.1 kB URL HTTP/2 megaup.net/themes/flow/images/main_logo_inverted.png
IP
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/images/loading_small.gif
200 OK 184 kB URL HTTP/2 megaup.net/themes/flow/images/loading_small.gif
IP
File type GIF image data, version 89a, 64 x 64\012- data
Size 184 kB (184355 bytes)
Hash b0dd5b3af9c4c0644d7bddee83716209
30002468d0266b893b3559b8d0d260c6cbf0ad7c
2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d
GET /themes/flow/images/loading_small.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: image/gif
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
200 OK 189 kB URL HTTP/2 dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
IP
File type Unicode text, UTF-8 text, with very long lines (15945)
Size 189 kB (188831 bytes)
Hash c5f5c98601847691a2e70553ad6dbfdf
a52fc8b52e24ad680bef58ee0f88a3337d5236a1
8a0c4868b4a47cca94e499ca0f86cad8282e8d1507bf7faee64042b6ba83cc18
GET /?kzmmd=761186 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 188831
date: Fri, 30 Sep 2022 00:16:28 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Jae4j8BRUKywoswC6xrsKSQvautZD8an8-ebwqDiwfufbiOCeKpQ6w==
age: 127
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
200 OK 8.5 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
IP
File type ASCII text, with very long lines (28941)
Hash aac67a6f763ce693e3742748e2d57fbe
348fa662e44130c699fe286fa754a00066e47f02
4655d835d29265215249b7eb4606280b0c9d7171dc50fb212cabae152ffd191a
GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/custom/custom.js
200 OK 1.9 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/custom/custom.js
IP
File type ASCII text, with CRLF line terminators
Hash 7df9fc136c11501f4035aaa1f673a7aa
b304d9cb0c0185fb09540e9779e2cc53c372423f
9853fd6e316466cc5777d82dc4d50289fa3512e626cb2c174647122b5932ab21
GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1420"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
200 OK 1.7 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
IP
File type ASCII text, with very long lines (2241), with CRLF line terminators
Hash 805bfea0f367906bad64df7cde393675
28a632e2104a9cb7038f590c51ad305090121946
2400cc689d2d4b266f7a44c2ad06a3524ee9b899d77c32f406f366151991b5e9
GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-981"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK 25 B URL HTTP/1.1 altowriestwispy.com/tysaSHG1FMaM/18410
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Sep 2022 00:18:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK 26 B URL HTTP/1.1 keydawnawe.com/gwZ1U5hjA8ii/32575
IP
File type ASCII text, with no line terminators
Hash 4e5d65669f8dcd928dad06adf883f025
d771713d758c3348dd7e5b38bb40c7935399ae46
0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Sep 2022 00:18:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6ac97060c75238244bfa94c6c6f63e40
9a640270fe62b82a8d971472f28a150e23f3a0c2
f7c0b8dc16c4a08e73772eadf8303a509768acf9d70f132c1c1db899534d4bab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 00:18:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 29 Sep 2022 23:29:33 GMT
Expires: Thu, 29 Sep 2022 23:45:49 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t3TnIW3kOhtKiqyCZ-OI1LOrjevefJIqAJtamk2AbAt62qbJD6IR4w==
Age: 2942
megaup.net/themes/flow/frontend_assets/js/gauge.min.js
200 OK 38 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/gauge.min.js
IP
File type ASCII text, with very long lines (1259)
Hash 5658679cce993e72f77daf2f874563d2
4bf5258fdf560a3785549f3f9f2db627d3c495a4
9e4a0efbce850dd4c313c94a6a5fb8170ad74cc824c6c085e744835b579f4abd
GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45b8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
200 OK 31 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
IP
File type Web Open Font Format, TrueType, length 31344, version 1.1\012- data
Hash 21f79e4c0fbe54a555170aa70bb4c8b7
9d4aaf2016cd21f16bc45089a48de84dba951fa7
2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: font/woff
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
200 OK 38 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
IP
Hash 5133eada8d15c38ad5baec64f6ba960c
9ea1f7d75df4ae038548094729fbb64d93d2e66d
5bdc059c559e41be44a239b0f4cd002e8ba7fcc04c554bc8f75d1660d1813439
GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1099"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/retina/retina.js
200 OK 22 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/retina/retina.js
IP
File type ASCII text, with very long lines (1249)
Hash e8845a617b2dab4eb99a02fe3522880f
2f8484e73426f24aab41977757bb416513f187bf
794f56757dd294589120beab937ea2a369c47d690a64111f4bfc86fb49b9a5e5
GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-52e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK 25 B URL HTTP/1.1 altowriestwispy.com/tysaSHG1FMaM/18410
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Sep 2022 00:18:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash c7ac9e29595749072622837820f8d808
191d4449aae47380468d57045d45cef96f6db384
bdb8c13be73e6d521c8a00aecfa51db277d908562bf1d31c675055f08868f215
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BDB8C13BE73E6D521C8A00AECFA51DB277D908562BF1D31C675055F08868F215"
Last-Modified: Thu, 29 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18775
Expires: Fri, 30 Sep 2022 05:31:30 GMT
Date: Fri, 30 Sep 2022 00:18:35 GMT
Connection: keep-alive
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK 26 B URL HTTP/1.1 keydawnawe.com/gwZ1U5hjA8ii/32575
IP
File type ASCII text, with no line terminators
Hash 4e5d65669f8dcd928dad06adf883f025
d771713d758c3348dd7e5b38bb40c7935399ae46
0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Sep 2022 00:18:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ehasnoconve.xyz/OHdPVjNZFSw7DFlKLXBGShtycwF+Un0QV1UaNT1VXE99IVJBGWE1X1cCKzBBVxk7eF1dA2pkdX0SGAx2Yi8eN3BrGAsFRAgnBhBbfCN+HAJtIhkwd3wUBBFUVBUBF0QdRQ0eS08EHwJXejo2EGt8IxoDalAyAB5lTEceLlRhNAwYam0fOB95CR8JDkRbEA1mX3YmCxdlfw8FNH1pEBwQcnVOCRdqXjQiH2J+Ih4aeEBPKxBiVxseE2odRQkDAUghGgNHbxUNZ3VrMgFleQkxAwBaXzoIMURdLhkydnkhei98Uz0BBwBbGRoDR285Jxhhax4rb2YJBwUCARUxFwRxDDMFIQdaLwkHcG5HHR9lViUaBHZQMys6ZmsyDQdbeQ88FGILLiUCZgE+KxN+eiUJMkpuIisfZVY1GQcDASArAEt7IxkTFVIEIDhDBQcmHFVCHxcVC20SfS9/Sg
200 OK 1.2 kB URL HTTP/2 ehasnoconve.xyz/OHdPVjNZFSw7DFlKLXBGShtycwF+Un0QV1UaNT1VXE99IVJBGWE1X1cCKzBBVxk7eF1dA2pkdX0SGAx2Yi8eN3BrGAsFRAgnBhBbfCN+HAJtIhkwd3wUBBFUVBUBF0QdRQ0eS08EHwJXejo2EGt8IxoDalAyAB5lTEceLlRhNAwYam0fOB95CR8JDkRbEA1mX3YmCxdlfw8FNH1pEBwQcnVOCRdqXjQiH2J+Ih4aeEBPKxBiVxseE2odRQkDAUghGgNHbxUNZ3VrMgFleQkxAwBaXzoIMURdLhkydnkhei98Uz0BBwBbGRoDR285Jxhhax4rb2YJBwUCARUxFwRxDDMFIQdaLwkHcG5HHR9lViUaBHZQMys6ZmsyDQdbeQ88FGILLiUCZgE+KxN+eiUJMkpuIisfZVY1GQcDASArAEt7IxkTFVIEIDhDBQcmHFVCHxcVC20SfS9/Sg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3044), with no line terminators
Hash 4b88ae40b29fced7cd29a5c5fe3e1dab
276dfdb8ba652ce0bb59b34ecbe3d4f2f3a6c094
98d4ae8808cc12f6894167166c93864948281c2cf042ff2ec81cf9759347cc54
GET /OHdPVjNZFSw7DFlKLXBGShtycwF+Un0QV1UaNT1VXE99IVJBGWE1X1cCKzBBVxk7eF1dA2pkdX0SGAx2Yi8eN3BrGAsFRAgnBhBbfCN+HAJtIhkwd3wUBBFUVBUBF0QdRQ0eS08EHwJXejo2EGt8IxoDalAyAB5lTEceLlRhNAwYam0fOB95CR8JDkRbEA1mX3YmCxdlfw8FNH1pEBwQcnVOCRdqXjQiH2J+Ih4aeEBPKxBiVxseE2odRQkDAUghGgNHbxUNZ3VrMgFleQkxAwBaXzoIMURdLhkydnkhei98Uz0BBwBbGRoDR285Jxhhax4rb2YJBwUCARUxFwRxDDMFIQdaLwkHcG5HHR9lViUaBHZQMys6ZmsyDQdbeQ88FGILLiUCZgE+KxN+eiUJMkpuIisfZVY1GQcDASArAEt7IxkTFVIEIDhDBQcmHFVCHxcVC20SfS9/Sg HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1195
date: Fri, 30 Sep 2022 00:18:35 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0Kuok8O45Vtj3A66oDRoOsGUQm5mcm3rBwlaeTuTnyZvDcrBxD3fxA==
X-Firefox-Spdy: h2
ehasnoconve.xyz/ZXAya1IEElEGbQRNUE0nFxwPTmAjVQAtNggdSAA0AUgAHDMcHhwIPgoFVg0gCh5GRTwABBdZFFIVdw9kBzddCRknIXk9AxIFegcUMSR6XhEyHAcOHjQbdikTDUZxLzU0NEgiCz0KRTwxNyZ5IzUsGmBaKig2cTIHJkFWDhsNIWI9YgkYdRw1LCJqJTEiIUYtGQ0lZSoqNAJ1Wz48IFwhBz01CyA2VDlnPGIJGWE4ZzUjXAgFJyFjJQJUSVc8NSdVAC0GIT5RPxUvOn4Aay4URQwzMUBBLANUAHc4FVAWagc9AzlaABonJgNaAiNFUzgKATtqPSIvKVlGOgY0cC5jLQddLRMiOnsgPis/Uz4iLjgCPWAxNkoxAT0UfTMUVD9WWyYzKHcTJUMaQQQ8FU1APygSBVBYBAtGXQ
200 OK 1.2 kB URL HTTP/2 ehasnoconve.xyz/ZXAya1IEElEGbQRNUE0nFxwPTmAjVQAtNggdSAA0AUgAHDMcHhwIPgoFVg0gCh5GRTwABBdZFFIVdw9kBzddCRknIXk9AxIFegcUMSR6XhEyHAcOHjQbdikTDUZxLzU0NEgiCz0KRTwxNyZ5IzUsGmBaKig2cTIHJkFWDhsNIWI9YgkYdRw1LCJqJTEiIUYtGQ0lZSoqNAJ1Wz48IFwhBz01CyA2VDlnPGIJGWE4ZzUjXAgFJyFjJQJUSVc8NSdVAC0GIT5RPxUvOn4Aay4URQwzMUBBLANUAHc4FVAWagc9AzlaABonJgNaAiNFUzgKATtqPSIvKVlGOgY0cC5jLQddLRMiOnsgPis/Uz4iLjgCPWAxNkoxAT0UfTMUVD9WWyYzKHcTJUMaQQQ8FU1APygSBVBYBAtGXQ
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3013), with no line terminators
Hash b954e058313d98eec06b7b80e615d1f2
b4840ee79cb1679edd6c54cc2a9999fdc2ae5f58
f9a0263f3e50848099fed65ed9bc7116a0dcfef67c0d412b871d9fae80f9bdb6
GET /ZXAya1IEElEGbQRNUE0nFxwPTmAjVQAtNggdSAA0AUgAHDMcHhwIPgoFVg0gCh5GRTwABBdZFFIVdw9kBzddCRknIXk9AxIFegcUMSR6XhEyHAcOHjQbdikTDUZxLzU0NEgiCz0KRTwxNyZ5IzUsGmBaKig2cTIHJkFWDhsNIWI9YgkYdRw1LCJqJTEiIUYtGQ0lZSoqNAJ1Wz48IFwhBz01CyA2VDlnPGIJGWE4ZzUjXAgFJyFjJQJUSVc8NSdVAC0GIT5RPxUvOn4Aay4URQwzMUBBLANUAHc4FVAWagc9AzlaABonJgNaAiNFUzgKATtqPSIvKVlGOgY0cC5jLQddLRMiOnsgPis/Uz4iLjgCPWAxNkoxAT0UfTMUVD9WWyYzKHcTJUMaQQQ8FU1APygSBVBYBAtGXQ HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1170
date: Fri, 30 Sep 2022 00:18:35 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WgSstAB5qxiTi078NRq63YvmtkrnwAkIGuMylOCxa60Kj2EZTtrRVw==
X-Firefox-Spdy: h2
ehasnoconve.xyz/RllEdDMnOycZDCdkJlJGNDV5UQEAfHYyVys0Ph9VImF2A1I/N2oXXyksIBJBKTcwWl0jLWFGdXcPEjpEEQ8jRmMEbWFGdRwgAUJ1AQsjLV4QHSUzcTwWFTkBCDASAXsHNjM6cCkLDQxqIj0VJVkWHiweZSwMcTtJFBciDgNxFAFFXCAzFUd2Kws3F0olGAoefSkQLEQWdB8KIHI3GBcHFnQbCyxmABYDIQcWGCsDfQIyPSJkNTwdPAIHPwMEXyMuLBtSHhsjOV0+KB4gCxwXPURHIjIOBHoBaCg4AX8qJzNyPz8DBF8PCB5MUj4LNSZdIjYiPGkFOBBMRAsbaQcBIA4nImIrNTQuZAgbJSNfMQARNRZ0HwknUHQfLi1UJR4BRmoBbHMtAh8qHiNhKggDBEMcDiA1UStsKC1YKi8mM3pgMzcbXTZkKCdbJyAlDn0O
200 OK 1.2 kB URL HTTP/2 ehasnoconve.xyz/RllEdDMnOycZDCdkJlJGNDV5UQEAfHYyVys0Ph9VImF2A1I/N2oXXyksIBJBKTcwWl0jLWFGdXcPEjpEEQ8jRmMEbWFGdRwgAUJ1AQsjLV4QHSUzcTwWFTkBCDASAXsHNjM6cCkLDQxqIj0VJVkWHiweZSwMcTtJFBciDgNxFAFFXCAzFUd2Kws3F0olGAoefSkQLEQWdB8KIHI3GBcHFnQbCyxmABYDIQcWGCsDfQIyPSJkNTwdPAIHPwMEXyMuLBtSHhsjOV0+KB4gCxwXPURHIjIOBHoBaCg4AX8qJzNyPz8DBF8PCB5MUj4LNSZdIjYiPGkFOBBMRAsbaQcBIA4nImIrNTQuZAgbJSNfMQARNRZ0HwknUHQfLi1UJR4BRmoBbHMtAh8qHiNhKggDBEMcDiA1UStsKC1YKi8mM3pgMzcbXTZkKCdbJyAlDn0O
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3030), with no line terminators
Hash 72aa89f3c510dbf1fbd2bc1be6ad3143
cc072986ef7de0f157f0afc5bef95db09871f6b9
f788972c1e52a7ad961b5a2f6bbef9e4be69c3489750ddaa1ab0745221f043a6
GET /RllEdDMnOycZDCdkJlJGNDV5UQEAfHYyVys0Ph9VImF2A1I/N2oXXyksIBJBKTcwWl0jLWFGdXcPEjpEEQ8jRmMEbWFGdRwgAUJ1AQsjLV4QHSUzcTwWFTkBCDASAXsHNjM6cCkLDQxqIj0VJVkWHiweZSwMcTtJFBciDgNxFAFFXCAzFUd2Kws3F0olGAoefSkQLEQWdB8KIHI3GBcHFnQbCyxmABYDIQcWGCsDfQIyPSJkNTwdPAIHPwMEXyMuLBtSHhsjOV0+KB4gCxwXPURHIjIOBHoBaCg4AX8qJzNyPz8DBF8PCB5MUj4LNSZdIjYiPGkFOBBMRAsbaQcBIA4nImIrNTQuZAgbJSNfMQARNRZ0HwknUHQfLi1UJR4BRmoBbHMtAh8qHiNhKggDBEMcDiA1UStsKC1YKi8mM3pgMzcbXTZkKCdbJyAlDn0O HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1183
date: Fri, 30 Sep 2022 00:18:35 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3qe8uhHxDI7PX8GG7yQg95vJCT9q_9bDcLdf4iS8U52XsjKMTL2mlQ==
X-Firefox-Spdy: h2
ehasnoconve.xyz/WEdaYWM5JTkMXDl6OEcWKitnRFEeYmgnBzUqIAoFPH9oFgIhKXQCDzcyPgcRNykuTw09M39TJT0jHDM0O3YPOSwiIAwABBl+FwpWLBU3JxUJKggyMzESOS4UCjcdJQRgBR40MBI+DCQtMRJtLhQNHhc3NjADMCMRCXQXOC0MIA8AJRE/FSMhNxUCKFAePT4rOhAGEisxK2JoJwIvHm0kJx0wHQsQCgoSICQWAjFULAksYiYnP3QMDAAhHgIJJzsCAAoFPzMxMzseKxc5IR8dHg4CFzAfEgBoATYlJCAgFiYtGSQNNBs7AgAKKRkRLTMbDjEIORcdIQJMLRodCCwbFhU9VzYPHgswNA4BACY5Gx0PNxsCAhcbKwseICc3Nwo5NjJpJR8rVQIrDwYwDxE9MFECAQAmKRweMSsIAncqCzIfCnwLEDcpKlwtEy4qACcMN2oDEBApKy0E
200 OK 1.2 kB URL HTTP/2 ehasnoconve.xyz/WEdaYWM5JTkMXDl6OEcWKitnRFEeYmgnBzUqIAoFPH9oFgIhKXQCDzcyPgcRNykuTw09M39TJT0jHDM0O3YPOSwiIAwABBl+FwpWLBU3JxUJKggyMzESOS4UCjcdJQRgBR40MBI+DCQtMRJtLhQNHhc3NjADMCMRCXQXOC0MIA8AJRE/FSMhNxUCKFAePT4rOhAGEisxK2JoJwIvHm0kJx0wHQsQCgoSICQWAjFULAksYiYnP3QMDAAhHgIJJzsCAAoFPzMxMzseKxc5IR8dHg4CFzAfEgBoATYlJCAgFiYtGSQNNBs7AgAKKRkRLTMbDjEIORcdIQJMLRodCCwbFhU9VzYPHgswNA4BACY5Gx0PNxsCAhcbKwseICc3Nwo5NjJpJR8rVQIrDwYwDxE9MFECAQAmKRweMSsIAncqCzIfCnwLEDcpKlwtEy4qACcMN2oDEBApKy0E
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3045), with no line terminators
Hash 36be8caf77c3ba363fb36597ff53c7ae
f0029ee4dee9e8ee2e40f42fcacabbe6722d2601
bfda147bde9633768484a668c5c4790e35b251d0fa683b2e05fedd1a54950e53
GET /WEdaYWM5JTkMXDl6OEcWKitnRFEeYmgnBzUqIAoFPH9oFgIhKXQCDzcyPgcRNykuTw09M39TJT0jHDM0O3YPOSwiIAwABBl+FwpWLBU3JxUJKggyMzESOS4UCjcdJQRgBR40MBI+DCQtMRJtLhQNHhc3NjADMCMRCXQXOC0MIA8AJRE/FSMhNxUCKFAePT4rOhAGEisxK2JoJwIvHm0kJx0wHQsQCgoSICQWAjFULAksYiYnP3QMDAAhHgIJJzsCAAoFPzMxMzseKxc5IR8dHg4CFzAfEgBoATYlJCAgFiYtGSQNNBs7AgAKKRkRLTMbDjEIORcdIQJMLRodCCwbFhU9VzYPHgswNA4BACY5Gx0PNxsCAhcbKwseICc3Nwo5NjJpJR8rVQIrDwYwDxE9MFECAQAmKRweMSsIAncqCzIfCnwLEDcpKlwtEy4qACcMN2oDEBApKy0E HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1197
date: Fri, 30 Sep 2022 00:18:35 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tKopWGpi0_dH-aKIiytJokG2-SB6bmdWE21YYn2nmnvV3LCfIJ2-mw==
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK 1.2 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
Hash ed59b9c015aadcb1b491039c617de4b6
8e611e87429e2bf8f7e95d1aae1952baec871d42
c8808e23e42610b5fe92afebfe6adba89d9b68034474886b48c29a5c3678903d
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 30 Sep 2022 00:18:35 GMT
expires: Fri, 30 Sep 2022 00:18:35 GMT
cache-control: private, max-age=900
last-modified: Fri, 30 Sep 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42379
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f09cb223e3dc028c58cf32c2274c3766
ca7f1663a1200941986e786353ed2f3ff50bd0b2
9b89a5534b1a84f0a86f150dc7f1f699bb972f7b8e151b29c02454dd939066ca
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4798
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 00:18:35 GMT
Last-Modified: Thu, 29 Sep 2022 22:58:37 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
megaup.net/imageads/015.gif
200 OK 203 kB URL HTTP/2 megaup.net/imageads/015.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Size 203 kB (202552 bytes)
Hash 4f9249f90e64b33cc7267b44ab4bc8ca
e58be21d069e6bbd7c70c080c7fd42f321143359
e451aaaad4cc4961c34ead949c6c12ba315592c1e42a9377ddd4077292de7f2c
GET /imageads/015.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: image/gif
content-length: 202552
last-modified: Mon, 08 Mar 2021 17:23:52 GMT
vary: Accept-Encoding
etag: "60465da8-31738"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 897686a552686e20ba40004fd8bd9431
80d42895a0333edee5c7c870ec2523c931247ffd
f766b7ca62bd9af820752ac0cd5b526d292aefe3757350638b7005a0eccc1b4e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6595
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 00:18:35 GMT
Last-Modified: Thu, 29 Sep 2022 22:28:40 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279
ocsp.sectigo.com/
200 OK 281 B IP
Hash 76d1f6267026a53ba2e40c12aff0c2c8
9909ca4abe48a9eeca2da7e5cd7db89a05c76fb0
915114bd4ebe358031f5f2aef414fea695d66012a6069d339e6997cb2263d38b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 Sep 2022 00:18:35 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 09:53:49 GMT
Expires: Tue, 04 Oct 2022 09:53:48 GMT
Etag: "9909ca4abe48a9eeca2da7e5cd7db89a05c76fb0"
Cache-Control: max-age=379512,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7528c83d8fd9b509-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 159b79ad1ea6b5775e183f7cec043b4e
7defc3d25de90faf616497445c285e020627ba6c
805c0543d34ebb9710b2aa73d0cb38358831c630e7361fc38079b0c6ede4c3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "805C0543D34EBB9710B2AA73D0CB38358831C630E7361FC38079B0C6EDE4C3D1"
Last-Modified: Thu, 29 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2126
Expires: Fri, 30 Sep 2022 00:54:01 GMT
Date: Fri, 30 Sep 2022 00:18:35 GMT
Connection: keep-alive
platform.bidgear.com/media/img/b15.png
200 OK 649 B URL HTTP/2 platform.bidgear.com/media/img/b15.png
IP
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash d832fb80c97ff291b952757bb98240d2
63732e61a0784ed68fde494f83e4686a5c4bf7fa
7b35c11af8accdb40a14303dd3ae2762a97d2527933c56b6c9be6da2d0d11943
GET /media/img/b15.png HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: image/png
content-length: 649
last-modified: Mon, 25 Jul 2022 09:43:33 GMT
etag: "62de65c5-289"
expires: Sun, 23 Oct 2022 09:44:55 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 570802
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8uGtr6mFsFn%2FGZ0AdDr%2FlEPjRkzix9q8X8ZQmrqcuiMrn9h5y0V1d2ugEwOW2nrOqT2VRPY%2F8DDZDy9%2BC9fJhpeqLFfg9gOl1%2BhnbXdYe5if1Q8NHFpyzaMSL7e%2FUySbBn7r%2Bm%2FS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7528c83e2833b4ed-OSL
X-Firefox-Spdy: h2
a.exdynsrv.com/ad-provider.js
200 OK 24 kB URL HTTP/1.1 a.exdynsrv.com/ad-provider.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 81ef2e5397caa335947731e7e737f5c3
6a05a4b2d22c13ad2692170510bc8685b16002bf
cec22380c4f1438b29077d202d0396a6ad32b41761ed51d968f1bfbdf2423378
GET /ad-provider.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226336355cc97d03.007697141037680698%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%226336355cc97d03.007697141037680698%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.0199%22%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 30 Sep 2022 00:18:35 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 23727
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"d944899a6eb421496e94cbddc42"
X-HW: 1664497115.dop215.sk1.t,1664497115.cds065.sk1.shn,1664497115.dop215.sk1.t,1664497115.cds246.sk1.c
Access-Control-Allow-Origin: *, *
dmmzkfd82wayn.cloudfront.net/1VVNwWVg2PB4/ZyE6FGRgYmVDaGBzOQM2NiVuHAowNCoRIxYddQQjPGhjVjU5OzRNfz07ME1ofjQ3EmRscycANjNoIh0/NTAqASs+OXUFOGU4PAowNDkyVWseYH1AfGplewhoaXBgMnxqZT8ZNy0tdkJpIG1lL29scGAyfGplIQZ8axRqRndofHZCaT8wMB-s2fWcVQmlpZWNBaWlwYUA/MSc2FjYgcGE2YG57Y1YsZWRlQGppZWdAbm5lYklvbGI
200 OK 452 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/1VVNwWVg2PB4/ZyE6FGRgYmVDaGBzOQM2NiVuHAowNCoRIxYddQQjPGhjVjU5OzRNfz07ME1ofjQ3EmRscycANjNoIh0/NTAqASs+OXUFOGU4PAowNDkyVWseYH1AfGplewhoaXBgMnxqZT8ZNy0tdkJpIG1lL29scGAyfGplIQZ8axRqRndofHZCaT8wMB-s2fWcVQmlpZWNBaWlwYUA/MSc2FjYgcGE2YG57Y1YsZWRlQGppZWdAbm5lYklvbGI
IP
File type ASCII text, with very long lines (589), with no line terminators
Hash 008da698358ff306fc530a48cb3dc3fe
36878a09f47b66fe11739631c08587bbdb294634
92e5c888f69f96e1faa3984fce3a61227cdcd96ff67d646f258a797a656128d3
GET /1VVNwWVg2PB4/ZyE6FGRgYmVDaGBzOQM2NiVuHAowNCoRIxYddQQjPGhjVjU5OzRNfz07ME1ofjQ3EmRscycANjNoIh0/NTAqASs+OXUFOGU4PAowNDkyVWseYH1AfGplewhoaXBgMnxqZT8ZNy0tdkJpIG1lL29scGAyfGplIQZ8axRqRndofHZCaT8wMB-s2fWcVQmlpZWNBaWlwYUA/MSc2FjYgcGE2YG57Y1YsZWRlQGppZWdAbm5lYklvbGI HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ehasnoconve.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 452
date: Fri, 30 Sep 2022 00:18:35 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6OxNEeYxNnyKjKxRxPxqbvQNjrELob2Ut3eD9YYk0wmheNN1IdO-Kg==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/edFRWc1UXOzgVagA9Mk5tRmFvQmRSPiUcOwRpGDg8BDUSJyVENiU7OwUYMVUhDjBrQ3MYNTgUaFIxOBBoRXI3FzdJYHAHJRs/awY7EDEwGjsRMHAGNEk5OQk8GDg3VmcyYXhDcEZkfgtkRXFlMXBGZDoaOwEsc0FlDGxgLGNAcWUxcEZkJAVwRxVvRXtEfX-NBZRMxNRg6UWYQQWVFZGZCZUVxZEMzHSYzFToMcWQ1bEJ6ZlUgSWVgQ2ZFZGJDYkJkZ0pjQGM
200 OK 363 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/edFRWc1UXOzgVagA9Mk5tRmFvQmRSPiUcOwRpGDg8BDUSJyVENiU7OwUYMVUhDjBrQ3MYNTgUaFIxOBBoRXI3FzdJYHAHJRs/awY7EDEwGjsRMHAGNEk5OQk8GDg3VmcyYXhDcEZkfgtkRXFlMXBGZDoaOwEsc0FlDGxgLGNAcWUxcEZkJAVwRxVvRXtEfX-NBZRMxNRg6UWYQQWVFZGZCZUVxZEMzHSYzFToMcWQ1bEJ6ZlUgSWVgQ2ZFZGJDYkJkZ0pjQGM
IP
File type ASCII text, with very long lines (456), with no line terminators
Hash 189cae05f2023e6e931cffac0f3f589e
4f4823b7fad5a4d29bb4cccb5d5ade68493515f0
f3becb5da772ebf719171344409e9bac00d32e48ece1c02df881a7ad58099a3b
GET /edFRWc1UXOzgVagA9Mk5tRmFvQmRSPiUcOwRpGDg8BDUSJyVENiU7OwUYMVUhDjBrQ3MYNTgUaFIxOBBoRXI3FzdJYHAHJRs/awY7EDEwGjsRMHAGNEk5OQk8GDg3VmcyYXhDcEZkfgtkRXFlMXBGZDoaOwEsc0FlDGxgLGNAcWUxcEZkJAVwRxVvRXtEfX-NBZRMxNRg6UWYQQWVFZGZCZUVxZEMzHSYzFToMcWQ1bEJ6ZlUgSWVgQ2ZFZGJDYkJkZ0pjQGM HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ehasnoconve.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 363
date: Fri, 30 Sep 2022 00:18:35 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: c2AJr2gwoC12AL9N3xIEuzd2rkzrAyvBjX6euHl5TUZLguT_7ZdMyw==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/7eEd6bGobKBQKVQwuHlFTTH5CWl5eLQkDBAh6CDgQDzIYXzwWcRVKHgIjR1xMFCYUC1deIhQPV0lhGwgIRXNcGQtFKhUWAxQrG0lYPnJUXE9Kd1IUW0liSS5PSncWBQQNP19eWgB/TDNcTGJJLk9KdwgaT0sGQ1pESG5fXlofIhkHBV11PF5aSXdKXVpJYk-hcDBE1HwoFAGJIKlNOaUpKH0V2TFxZSXdOXF1Od0tVXExw
200 OK 186 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/7eEd6bGobKBQKVQwuHlFTTH5CWl5eLQkDBAh6CDgQDzIYXzwWcRVKHgIjR1xMFCYUC1deIhQPV0lhGwgIRXNcGQtFKhUWAxQrG0lYPnJUXE9Kd1IUW0liSS5PSncWBQQNP19eWgB/TDNcTGJJLk9KdwgaT0sGQ1pESG5fXlofIhkHBV11PF5aSXdKXVpJYk-hcDBE1HwoFAGJIKlNOaUpKH0V2TFxZSXdOXF1Od0tVXExw
IP
File type ASCII text, with no line terminators
Hash 8a0f4bc775ec5d119389f34671002611
3e3832a5c42396345bafd68e5e72e548e77601d4
1548b362446d6460451d456279da42e79121cd982d8e61b70f3e58b6d16fefb7
GET /7eEd6bGobKBQKVQwuHlFTTH5CWl5eLQkDBAh6CDgQDzIYXzwWcRVKHgIjR1xMFCYUC1deIhQPV0lhGwgIRXNcGQtFKhUWAxQrG0lYPnJUXE9Kd1IUW0liSS5PSncWBQQNP19eWgB/TDNcTGJJLk9KdwgaT0sGQ1pESG5fXlofIhkHBV11PF5aSXdKXVpJYk-hcDBE1HwoFAGJIKlNOaUpKH0V2TFxZSXdOXF1Od0tVXExw HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ehasnoconve.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 186
date: Fri, 30 Sep 2022 00:18:35 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sH-DjoOuHOgA1zIUJG2D8jm5Q7K8gggNKj4_YhEQosy0Sx6YoXkNAw==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/rWFMwZWI7PF4DXSw6VFhVbmIBXVR+OUMKDChuRRcPIQpcDykTdUQfBmVjFgkDNjQNQwc2MA1URDk3UlhWfidACgllIl0DDz0qQRcENHVFBF81PEoMDjQyFVckbX0AQFBoe0hUU31gckBQaD9ZCxcgdgJVGmBlb1NWfWByQFBoIUZAURlqBktScXYCVQU9MF-sKR2oVAlVTaGMBVVN9YQADCyo2VgoafWF2XFR2YxYQX2llAFZTaGcAUlRoYglTVm8
200 OK 596 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/rWFMwZWI7PF4DXSw6VFhVbmIBXVR+OUMKDChuRRcPIQpcDykTdUQfBmVjFgkDNjQNQwc2MA1URDk3UlhWfidACgllIl0DDz0qQRcENHVFBF81PEoMDjQyFVckbX0AQFBoe0hUU31gckBQaD9ZCxcgdgJVGmBlb1NWfWByQFBoIUZAURlqBktScXYCVQU9MF-sKR2oVAlVTaGMBVVN9YQADCyo2VgoafWF2XFR2YxYQX2llAFZTaGcAUlRoYglTVm8
IP
File type ASCII text, with very long lines (825), with no line terminators
Hash cb7ed46bcc5f778a55c1e49aafeeffb1
d2f206298ac04787adbe4171ef6186b4112170db
341113226b64d6c25c5ad84e69c734e62bdf1cb3ee6b4f816020fad12624b3fc
GET /rWFMwZWI7PF4DXSw6VFhVbmIBXVR+OUMKDChuRRcPIQpcDykTdUQfBmVjFgkDNjQNQwc2MA1URDk3UlhWfidACgllIl0DDz0qQRcENHVFBF81PEoMDjQyFVckbX0AQFBoe0hUU31gckBQaD9ZCxcgdgJVGmBlb1NWfWByQFBoIUZAURlqBktScXYCVQU9MF-sKR2oVAlVTaGMBVVN9YQADCyo2VgoafWF2XFR2YxYQX2llAFZTaGcAUlRoYglTVm8 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ehasnoconve.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 596
date: Fri, 30 Sep 2022 00:18:35 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ascGGDI_XU6h6bTQWnycdX3Z7nUG4xHp_ULCNcYql9LMagwJV6r_ag==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/EeWZEZXQaCSoDSw0PIFhDT1J1UUVfDDcKGglbNAw+HxwsPTdBMyFXDTUUYhEOHVt0QxgYCCNYUhwIJ1hFXwcgB0lNQDAVGxJbNQgSFAM9FAYfCmIQFUQLKx8dFQolQEY/U2pVUUtWbB1FSEN3J1FLVigMGgweYVdEAV5yOkJNQ3cnUUtWNhNRSid9U1pJT2-FXRB4DJw4bXFQCV0RIVnRUREhDdlUSEBQhAxsBQ3YjTU9IdEMBRFdyVUdIVnBVQ09WdVxCTVE
200 OK 585 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/EeWZEZXQaCSoDSw0PIFhDT1J1UUVfDDcKGglbNAw+HxwsPTdBMyFXDTUUYhEOHVt0QxgYCCNYUhwIJ1hFXwcgB0lNQDAVGxJbNQgSFAM9FAYfCmIQFUQLKx8dFQolQEY/U2pVUUtWbB1FSEN3J1FLVigMGgweYVdEAV5yOkJNQ3cnUUtWNhNRSid9U1pJT2-FXRB4DJw4bXFQCV0RIVnRUREhDdlUSEBQhAxsBQ3YjTU9IdEMBRFdyVUdIVnBVQ09WdVxCTVE
IP
File type ASCII text, with very long lines (827), with no line terminators
Hash a564483f9325e062968efc3c81bddaba
f18c02bd6f9c78ab0f7dd3fcb9699d1c44205f54
f97af6886a59da90d77ca909b15dddf978618f0b4f3642079bcbe72bb259192c
GET /EeWZEZXQaCSoDSw0PIFhDT1J1UUVfDDcKGglbNAw+HxwsPTdBMyFXDTUUYhEOHVt0QxgYCCNYUhwIJ1hFXwcgB0lNQDAVGxJbNQgSFAM9FAYfCmIQFUQLKx8dFQolQEY/U2pVUUtWbB1FSEN3J1FLVigMGgweYVdEAV5yOkJNQ3cnUUtWNhNRSid9U1pJT2-FXRB4DJw4bXFQCV0RIVnRUREhDdlUSEBQhAxsBQ3YjTU9IdEMBRFdyVUdIVnBVQ09WdVxCTVE HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ehasnoconve.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 585
date: Fri, 30 Sep 2022 00:18:35 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 70lUWRck5RwnSLvznP1Decb0s8s4RHM_jGBCs18od5PD76LUcXsukA==
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
200 OK 951 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
IP
File type PNG image data, 114 x 114, 8-bit colormap, non-interlaced\012- data
Hash 76852bc6b2c028db97322a74e85bd020
ed52fb4de0d51f93277bbaae42fa80ba5f92c31e
8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884
GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: image/png
content-length: 951
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-3b7"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1664497112631
200 OK 1.8 kB URL HTTP/2 platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1664497112631
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (4445), with no line terminators
Hash b5d2630e80861091918ebc3f4766a42d
a532bbf54e30e9ff204bb2233141b3d98d794d82
730a725255ddda0e807aefd829e0fbc1af8a0fa7b15a0e7a0230707fcebd07aa
GET /async.php?domainid=5593&sizeid=12&zoneid=6192&k=1664497112631 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FK8TGQClD6lAo35gOp0NjAC%2B%2F21likL8NXeDy6nbMSZ8V21QijrR3d9UV08NLk5MblDnI4p9jo1cY5YjSWDatgUkXGv0snZGjKDDYsk1%2BPLOfu6ctogF5zTA233L4U%2Ft5v2IqQjM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7528c83d4fa6b4ed-OSL
content-encoding: br
X-Firefox-Spdy: h2
imp9.bidgear.com/rec?t=1&z=6192&uuid=d18284db826b4b9497195a906c435f98&p=28&g=NO&token=4a44335432&tbg=1664497115
200 OK 599 B URL HTTP/2 imp9.bidgear.com/rec?t=1&z=6192&uuid=d18284db826b4b9497195a906c435f98&p=28&g=NO&token=4a44335432&tbg=1664497115
IP
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6192&uuid=d18284db826b4b9497195a906c435f98&p=28&g=NO&token=4a44335432&tbg=1664497115 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ozDup51zmfMXhQuYTr2v0TpFlMTwASNlf7EsDbNpuHu0Fb6Gn8PzSGH8ZFaXx%2FFHxrhMhJjv%2Bw3Y4eLqCkEHtgc6AmCmuwPztHx5kbnYNjQ3w22Il%2B5telXhsNyCBn3lzQE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7528c83e2831b4ed-OSL
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
200 OK 21 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
IP
File type ASCII text, with CRLF line terminators
Hash 38520f1d402b052cdebdcd3f9a42e306
30ab78ea2e8bb2d9cbc094914ade94797038e035
0a10eb784ac578b060699f2ea1aec6e7814a1150a7fc6218bce5399c431cd7f9
GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1547"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/417182/300x250?region=eu-central-1
200 OK 122 kB URL HTTP/2 static.a-ads.com/a-ads-banners/417182/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, baseline, precision 8, 300x250, components 3\012- data
Size 122 kB (122532 bytes)
Hash 44ea4a041bdc7fcbbc2dbc62d44c9390
c4f285bd04685f648ab30b7712d71aeffe64c056
9d5ce7db3cd92b0ca35a57715d9e6f1f4a4de76e129bfb151fb3594407b946d7
GET /a-ads-banners/417182/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: image/jpeg
content-length: 122532
x-amz-id-2: m3yzC0KUH2F7XST2c4ZAzmmlWWY/Jz8tQk2oSc+ZEbRkLq6ntJh7WSD3KzKelAoYxCYhZBabBRo=
x-amz-request-id: NDJM6TF67VBFB77Y
x-amz-replication-status: COMPLETED
last-modified: Thu, 22 Sep 2022 15:19:22 GMT
etag: "44ea4a041bdc7fcbbc2dbc62d44c9390"
cache-control: max-age=315360000
x-amz-version-id: Cl40JyH9N1Y18GZTSeNCNJ0M28vQYy4s
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bdd6cc32fbdb5603995e45c2cba3bd60
3e5338633410c2714fa9c44ef5528c9a4cfa59c9
103af480989f65c65190deee9d9af15a94b98d040858b50647e694e628cfef4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4789
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 00:18:35 GMT
Last-Modified: Thu, 29 Sep 2022 22:58:47 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ebb0e967f0fc1336702c06db04f14e92
6a943161f391bb6da370ca4d0937bf884155434c
6d8773833fc4e73a3bb17aac15bf1e0279fa3e702b27fde10fd39b683ac6fa50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 00:18:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Thu, 29 Sep 2022 22:41:09 GMT
expires: Fri, 30 Sep 2022 00:41:09 GMT
cache-control: public, max-age=7200
age: 5847
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ebb0e967f0fc1336702c06db04f14e92
6a943161f391bb6da370ca4d0937bf884155434c
6d8773833fc4e73a3bb17aac15bf1e0279fa3e702b27fde10fd39b683ac6fa50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 00:18:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ehasnoconve.xyz/utx?cb=ag1naOofbhX9&top=megaup.net&tid=825911
204 No Content 0 B URL HTTP/2 ehasnoconve.xyz/utx?cb=ag1naOofbhX9&top=megaup.net&tid=825911
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=ag1naOofbhX9&top=megaup.net&tid=825911 HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 30 Sep 2022 00:18:36 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 30 Sep 2022 00:19:36 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wfWZcrov2ogaqnORoQgfT3SJ8PgfxptEQVK7tBle3JfrE7WsM81eXg==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 396 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (383)
Hash 1b3a7d97287789fce978c9d0cd46d59d
541dd189c26260b9ec1bb982adafc8d7c3864de0
371272a080145a84939f89324f254b003e370e2083b3aaaed7faea71e79687a5
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 30 Sep 2022 00:18:36 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1291205036%3A1664497116037749&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWoRobLVIXfvtFn5F0tiY7QDRYj63YGJdN8u9RNjJW_cVclW908T1OAhYr6RaY4XJCSV_qrd
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-s2vUMZpM6k4sqxN4ouE8Bg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 396
server: GSE
set-cookie: __Host-GAPS=1:jRY3Rb2N8f-izB7YN2dxGbU7OG2LMw:XhASGFhU4SR1FdWJ;Path=/;Expires=Sun, 29-Sep-2024 00:18:36 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j97&a=713018933&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&ul=en-us&de=UTF-8&dt=Knights_of_Messiah_UNRATED-DINOByTES.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAUABAAAAAC~&jid=2134893534&gjid=960080300&cid=1844656983.1664496986&tid=UA-108868042-1&_gid=1375286482.1664496986&_r=1>m=2ou9s0&z=929178947
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j97&a=713018933&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&ul=en-us&de=UTF-8&dt=Knights_of_Messiah_UNRATED-DINOByTES.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAUABAAAAAC~&jid=2134893534&gjid=960080300&cid=1844656983.1664496986&tid=UA-108868042-1&_gid=1375286482.1664496986&_r=1>m=2ou9s0&z=929178947
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j97&a=713018933&t=pageview&_s=1&dl=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&ul=en-us&de=UTF-8&dt=Knights_of_Messiah_UNRATED-DINOByTES.rar%20-%20MegaUp&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAUABAAAAAC~&jid=2134893534&gjid=960080300&cid=1844656983.1664496986&tid=UA-108868042-1&_gid=1375286482.1664496986&_r=1>m=2ou9s0&z=929178947 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain
Content-Length: 0
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://megaup.net
date: Fri, 30 Sep 2022 00:18:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ehasnoconve.xyz/utx?cb=d8zu2nbXlIqN&top=megaup.net&tid=876318
204 No Content 0 B URL HTTP/2 ehasnoconve.xyz/utx?cb=d8zu2nbXlIqN&top=megaup.net&tid=876318
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=d8zu2nbXlIqN&top=megaup.net&tid=876318 HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 30 Sep 2022 00:18:36 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 30 Sep 2022 00:19:36 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZQIzLUDqaWFiAOMtC9-MiaglGZAZpWSJs9mvQQVRCbv_glNARyis4Q==
X-Firefox-Spdy: h2
ehasnoconve.xyz/utx?cb=xXFyrbbOtdhP&top=megaup.net&tid=761186
204 No Content 0 B URL HTTP/2 ehasnoconve.xyz/utx?cb=xXFyrbbOtdhP&top=megaup.net&tid=761186
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=xXFyrbbOtdhP&top=megaup.net&tid=761186 HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 30 Sep 2022 00:18:36 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 30 Sep 2022 00:19:36 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: C6z_8If657fYuUNqxuK2O5OWg6lbBmBGK3k3lZ8pFKGE241lZRg2uQ==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bdd6cc32fbdb5603995e45c2cba3bd60
3e5338633410c2714fa9c44ef5528c9a4cfa59c9
103af480989f65c65190deee9d9af15a94b98d040858b50647e694e628cfef4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4790
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 00:18:36 GMT
Last-Modified: Thu, 29 Sep 2022 22:58:47 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ehasnoconve.xyz/utx?cb=ca4zPcUbNUCL&top=megaup.net&tid=764141
204 No Content 0 B URL HTTP/2 ehasnoconve.xyz/utx?cb=ca4zPcUbNUCL&top=megaup.net&tid=764141
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=ca4zPcUbNUCL&top=megaup.net&tid=764141 HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 30 Sep 2022 00:18:36 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 30 Sep 2022 00:19:36 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2ozYtSk8hZ3xQ656kja5jq4ODVjy8HidCdKugqRjidET65ylbnKdwA==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 391 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (378)
Hash 30a5b9d42fc9d1b97fa0704243a63e2d
194e46531c574a74426e46f4a0bbfa6b46e180fd
107c8e327006c508706575b218d1685288dec735f539d854959acb1a6b914271
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 30 Sep 2022 00:18:36 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S1695500792%3A1664497116165345&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQDHYWr8alPO0fj9DPylCHuGlfBWi-wBjLwxapfiL14XWde0fPIVQCFiJI-7ZLQn1EyYIelTgdOF
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: script-src 'nonce-uFOAHEZNju118CSjC3QJ8A' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 391
server: GSE
set-cookie: __Host-GAPS=1:QmL1GSfNDRbDrqV0nTDeM9T-NCtMJw:jeLr21HEqCJekTDf;Path=/;Expires=Sun, 29-Sep-2024 00:18:36 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
syndication.exdynsrv.com/v1/api.php
200 OK 2.4 kB URL HTTP/1.1 syndication.exdynsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (5235), with no line terminators
Hash 1149fe077efe903b9db1e96e9e270ffc
806d0c82f1825e1a71db94f2324dbac1eefab5ba
17169b2b18754c5ec735dfb45934ec36d98d7358bef641d58ba47990fac4ac00
POST /v1/api.php HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 303
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226336355cc97d03.007697141037680698%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%226336355cc97d03.007697141037680698%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Sep 2022 00:18:36 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7f6c1bbbde940ad17ceda150b7b1664d
7273da22f182d9540784068537cc678ec27800d3
4d8a6cd94e298a71543331248750230237a56a67cef251c7a204291612dbb569
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 00:18:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OW0oEQQy8iheYppJOujv77beC4gHaefjlIriCQh3enllcTJGQRyUpheqEmDTuFCdpp1wYkgLJNIkbHx6faML39a1/faTzeqG7GApLBKwxsjUtNCsmrdBF6Boag1E9O0o1ijMTA+rZbM8SAFFhA1+e7w+XAQVH3F9SG8ci8b3vYVlmVMhmW7cKl9e+rNC21Nklou7E/xJxRYLU2M/+NZjFsppyklthHAYe4/75c57JG/0qln5cyBQzHCql5lq3HG5Fa5Yu69zLahFzi/BfRki/dVQBAAA=
200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA01OW0oEQQy8iheYppJOujv77beC4gHaefjlIriCQh3enllcTJGQRyUpheqEmDTuFCdpp1wYkgLJNIkbHx6faML39a1/faTzeqG7GApLBKwxsjUtNCsmrdBF6Boag1E9O0o1ijMTA+rZbM8SAFFhA1+e7w+XAQVH3F9SG8ci8b3vYVlmVMhmW7cKl9e+rNC21Nklou7E/xJxRYLU2M/+NZjFsppyklthHAYe4/75c57JG/0qln5cyBQzHCql5lq3HG5Fa5Yu69zLahFzi/BfRki/dVQBAAA=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA01OW0oEQQy8iheYppJOujv77beC4gHaefjlIriCQh3enllcTJGQRyUpheqEmDTuFCdpp1wYkgLJNIkbHx6faML39a1/faTzeqG7GApLBKwxsjUtNCsmrdBF6Boag1E9O0o1ijMTA+rZbM8SAFFhA1+e7w+XAQVH3F9SG8ci8b3vYVlmVMhmW7cKl9e+rNC21Nklou7E/xJxRYLU2M/+NZjFsppyklthHAYe4/75c57JG/0qln5cyBQzHCql5lq3HG5Fa5Yu69zLahFzi/BfRki/dVQBAAA= HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226336355cc97d03.007697141037680698%22%3B%7D; __upt=%7B%22v%22%3A1%2C%22id%22%3A%226336355cc97d03.007697141037680698%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.0199%22%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Sep 2022 00:18:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%226336355cc97d03.007697141037680698%22%3B%7D; expires=Sun, 29 Sep 2024 00:18:36 GMT; path=; domain=.exdynsrv.com; Secure; SameSite=none
__upt=%7B%22v%22%3A1%2C%22id%22%3A%226336355cc97d03.007697141037680698%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.029701%22%7D; expires=Sun, 29 Sep 2024 00:18:36 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/551406/bf45fdb4f306fadbd08d76fb08ee9617adecc6c5.jpg
200 OK 19 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/551406/bf45fdb4f306fadbd08d76fb08ee9617adecc6c5.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a22bae949b684bf348010f5764820bb1
bf45fdb4f306fadbd08d76fb08ee9617adecc6c5
4b07c49f760a589f755c58fe79044b80bda6a9b959117951be72671510702f35
GET /library/551406/bf45fdb4f306fadbd08d76fb08ee9617adecc6c5.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 30 Sep 2022 00:18:36 GMT
content-type: image/jpeg
content-length: 18723
last-modified: Wed, 08 Jun 2022 05:29:20 GMT
etag: "62a033b0-4923"
expires: Fri, 30 Jun 2023 11:15:26 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688305384
server: CDN77-Turbo
x-77-nzt: AblMCRRQ4E3/dOp1AA
x-77-nzt-ray: CugvRDFGv2k
x-cache: HIT
x-age: 7727732
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ehasnoconve.xyz/utx?tid=832633&top=megaup.net&cb=iDZRUsjuWVMO
204 No Content 0 B URL HTTP/2 ehasnoconve.xyz/utx?tid=832633&top=megaup.net&cb=iDZRUsjuWVMO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?tid=832633&top=megaup.net&cb=iDZRUsjuWVMO HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 30 Sep 2022 00:18:36 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Fri, 30 Sep 2022 00:19:36 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TqgC8lR4uoh6-n1zF4c4OTcTIrkSu0Su_5YudDiZFujUxbgEBiLvWw==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e4a3f37d232cce6981e436907c64e5d2
393d270f4ae85c938f4953baf072a69af2259450
d292395af55aee3fb6f3d0a9d96ff31293fac450290339fc6917dbe67c72e4b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D292395AF55AEE3FB6F3D0A9D96FF31293FAC450290339FC6917DBE67C72E4B5"
Last-Modified: Thu, 29 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4053
Expires: Fri, 30 Sep 2022 01:26:09 GMT
Date: Fri, 30 Sep 2022 00:18:36 GMT
Connection: keep-alive
sultingcoe.buzz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Content-Length: 384
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
ehasnoconve.xyz/multi?cs=S3ZFMkNzRHwGcn1Edwt0c0VxB3U&abt=0&red=1&sm=76&k=download%20file%20knights%20messiah%20unrated%20dinobytes&v=1.0.60.0&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1603104076019647&agec=1664496989&fs=1&mbkb=130.718954248366&ref=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_EMeh=1664497113303&crc=1
200 OK 1.5 kB URL HTTP/2 ehasnoconve.xyz/multi?cs=S3ZFMkNzRHwGcn1Edwt0c0VxB3U&abt=0&red=1&sm=76&k=download%20file%20knights%20messiah%20unrated%20dinobytes&v=1.0.60.0&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1603104076019647&agec=1664496989&fs=1&mbkb=130.718954248366&ref=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_EMeh=1664497113303&crc=1
IP
File type ASCII text, with very long lines (3203), with no line terminators
Hash b2ff6bde63d8666fc3af921466151bc5
6af49568d6f17d3047fe4c4cd7c287f081b74c0b
a782f7ae9d565d39db661c5aca62fc0e038c7306c4d254de86bdb830dc984b26
GET /multi?cs=S3ZFMkNzRHwGcn1Edwt0c0VxB3U&abt=0&red=1&sm=76&k=download%20file%20knights%20messiah%20unrated%20dinobytes&v=1.0.60.0&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=1603104076019647&agec=1664496989&fs=1&mbkb=130.718954248366&ref=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&_EMeh=1664497113303&crc=1 HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1521
date: Fri, 30 Sep 2022 00:18:36 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=36d59176-694e-4053-b20e-017f00d6f752
csu=1603104076019647
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0MOIQs7yRqD27jVgYk_vU_4WAfW5OFBJVlvNeHclGzADn7nH9gfUTg==
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
200 OK 32 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
IP
File type Web Open Font Format, TrueType, length 31568, version 1.1\012- data
Hash e0c4ac0e73196bd0469c5c33304b7773
bb071565f82907d117b0732dca8013409162c67d
ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af
GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986; _gat_gtag_UA_108868042_1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:36 GMT
content-type: font/woff
content-length: 31568
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7b50"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
sultingcoe.buzz/MjZKdGZpFHJHVAQFeVZKEBRmVgAGUnNBV1dSZ0dWAg9nQF4FUGdMAAQDZ0xXUA8rQ1FXB38XABAaaBIDAAQsF18DGy4QB1cbfhVQVhtzQVULG3JHXlBVeEFeBlN%2EREQeFDkDRB4UOQEKRl8kEwVdU2QWE0hMaFhEAwZkQUQeUCsYFVcaLBUKQVNmEgdeRS8p
200 OK 13 kB URL HTTP/2 sultingcoe.buzz/MjZKdGZpFHJHVAQFeVZKEBRmVgAGUnNBV1dSZ0dWAg9nQF4FUGdMAAQDZ0xXUA8rQ1FXB38XABAaaBIDAAQsF18DGy4QB1cbfhVQVhtzQVULG3JHXlBVeEFeBlN%2EREQeFDkDRB4UOQEKRl8kEwVdU2QWE0hMaFhEAwZkQUQeUCsYFVcaLBUKQVNmEgdeRS8p
IP
File type ASCII text, with very long lines (33861), with no line terminators
Hash 5191d1db9bafdf453228d2a555f57814
16d99593755a6088637ba92419c4ccea9afb8d75
3e24681247239705ed48718824479e3557375dba66d45f2aef117136a664b65b
GET /MjZKdGZpFHJHVAQFeVZKEBRmVgAGUnNBV1dSZ0dWAg9nQF4FUGdMAAQDZ0xXUA8rQ1FXB38XABAaaBIDAAQsF18DGy4QB1cbfhVQVhtzQVULG3JHXlBVeEFeBlN%2EREQeFDkDRB4UOQEKRl8kEwVdU2QWE0hMaFhEAwZkQUQeUCsYFVcaLBUKQVNmEgdeRS8p HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: f3c2693c9b4e5bf35c61aeb2c7d6c160=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8445-2czOkNCuADXNJTOkQf2AijfqP3I"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
sultingcoe.buzz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: sultingcoe.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://megaup.net
Content-Length: 356
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
ehasnoconve.xyz/floater?cs=M1JVUzgKYWBjDAJiY2UBAWBhZwo&abt=0&red=1&sm=83&k=download%20file%20knights%20messiah%20unrated%20dinobytes&v=0.8.10.0&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1603104076019647&agec=1664496989&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=130.718954248366&ref=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=td5_oi1_&_OZrB=1664497113298&crc=1
200 OK 4.4 kB URL HTTP/2 ehasnoconve.xyz/floater?cs=M1JVUzgKYWBjDAJiY2UBAWBhZwo&abt=0&red=1&sm=83&k=download%20file%20knights%20messiah%20unrated%20dinobytes&v=0.8.10.0&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1603104076019647&agec=1664496989&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=130.718954248366&ref=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=td5_oi1_&_OZrB=1664497113298&crc=1
IP
File type ASCII text, with very long lines (7146), with no line terminators
Hash a4d807ca7b93793b99ca550e22ced2c6
8cd62b772620418bb99cbe29267cbe967af51393
feffdf6e90367dd6f6dc8447f135100da5f14d0f76fa6d90883ddfe90c815fe8
GET /floater?cs=M1JVUzgKYWBjDAJiY2UBAWBhZwo&abt=0&red=1&sm=83&k=download%20file%20knights%20messiah%20unrated%20dinobytes&v=0.8.10.0&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=1603104076019647&agec=1664496989&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=130.718954248366&ref=https%3A%2F%2Fmegaup.net%2F1Lkb2%2FKnights_of_Messiah_UNRATED-DINOByTES.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A96.0)%20gecko%2F20100101%20firefox%2F96.0&tzd=0&uloc=&if=0&aa=td5_oi1_&_OZrB=1664497113298&crc=1 HTTP/1.1
Host: ehasnoconve.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 4395
date: Fri, 30 Sep 2022 00:18:36 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=327d6ac1-b32c-48f5-a797-3790b2060345
csu=1603104076019647
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RRhd2mWYCb4s2-CzFsX0pY618X8GZWqGW2T5opGEoH12g2Sw9owbSg==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4796
Expires: Fri, 30 Sep 2022 01:38:33 GMT
Date: Fri, 30 Sep 2022 00:18:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4796
Expires: Fri, 30 Sep 2022 01:38:33 GMT
Date: Fri, 30 Sep 2022 00:18:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4796
Expires: Fri, 30 Sep 2022 01:38:33 GMT
Date: Fri, 30 Sep 2022 00:18:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4796
Expires: Fri, 30 Sep 2022 01:38:33 GMT
Date: Fri, 30 Sep 2022 00:18:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7bc5be5-0598-46a3-b67a-30ec66bd23d2.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7bc5be5-0598-46a3-b67a-30ec66bd23d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5858d2fba8c58d52f1a53eeb904acc8
c1276cd74ef85d1a4cd552b4aab6dbe30d8ba6ea
6ecba53aa6b68d16212476d1ee9eb3a57e26e7b4fad8388afbdcf180b6c8ae13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7bc5be5-0598-46a3-b67a-30ec66bd23d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12478
x-amzn-requestid: 79d581a3-2f1b-4bb8-ba7c-78b504dea641
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdZaEnMIAMFyqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f6f-41a5416832f295fa1ce55a17;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:39 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: atEfOEwYtqy4kgHo9EseMvl5GQwNFZKEgNOf4v3ZGsTnbHQV3zNqlA==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:47:06 GMT
age: 9091
etag: "c1276cd74ef85d1a4cd552b4aab6dbe30d8ba6ea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a7660f52ff0ccc2805e4186bfaeb86f3
64012d0a87c77d8409fa1be7d8d29124a81e3206
c4c2c65c2f830c5820dd019ada07607e31d338b824e2d66f7b4449c1026e123b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6058
x-amzn-requestid: 5895a9dc-4ec5-41cb-b0fa-b3f47677affe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPda6H8toAMFz7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f78-0941b5457484dc0c534333e2;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1Raa8DphZfTmcxIv1z70MMHpeboGmlsoY7k24hpc4GvYqAv4x2NGZQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:05:17 GMT
age: 8000
etag: "64012d0a87c77d8409fa1be7d8d29124a81e3206"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11594ce7500d8776bfd5162b17f87d72
72603efba82d649ce5a7a0ca45dc830c0d9ef012
511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14073
x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnpEsJoAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gP4V4fq53Z5BFfjDlx1LCR9AhUPTq0qusBaOY_UEXjJjM6SByqDgXg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:42:04 GMT
age: 9393
etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2449b320-e517-4241-b0f6-96786331ba6a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2449b320-e517-4241-b0f6-96786331ba6a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13d4e2dbae75f2029d80396e4c8117a3
c5846663f31f7fbced777f0499caac638cc3c28b
ac0fb122c4f6857e9268faeacb387fcb1b1fb87cdfedb163574d3df451cf0447
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2449b320-e517-4241-b0f6-96786331ba6a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11881
x-amzn-requestid: 4a49c2e9-a894-44df-b9a6-d02a9edc38a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPd5QHvbIAMF5uw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6336103b-127426cc20c4d17713c2df6f;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:38:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MTAjo2QX69HPqJoco4O5yhUsTyCQ7M29-TOAHaUdA4XykJJnyR62bQ==
via: 1.1 7256fedee68a59a508800e0dda035348.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:47:06 GMT
etag: "c5846663f31f7fbced777f0499caac638cc3c28b"
content-type: image/jpeg
age: 9091
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d906d66-cd90-4963-827e-8d0564c0f787.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d906d66-cd90-4963-827e-8d0564c0f787.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13a12db696bc2bf6a6ea2f48f4c1428e
3481dce8ab711111fc8863d88bee1a887cfd43ac
6dae6c9e5de4146e1f528a36a1795225c9731385f13927fc001fb3f9842fe8f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d906d66-cd90-4963-827e-8d0564c0f787.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5106
x-amzn-requestid: a906507c-8820-489c-9978-7d0fd026c862
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPd5PE0MIAMF3DA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6336103a-49eb3879088f17bc01d177c7;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: aeTAqh8D5whTHS3seyOUj7QCNaITUh2ekHG8vNWZlpSeAnqPuFzmcQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:46:34 GMT
age: 9123
etag: "3481dce8ab711111fc8863d88bee1a887cfd43ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39d9370f63a9d19ea9c05fa1926ce1d0
f15bb6564adddb9a3bb9949321482e65714c047a
cf9353ff328f1afced61c19b48b2add29f4a212bd97cb4d874d5e7747850b3e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5094
x-amzn-requestid: 49ace90a-85a0-45ea-8c0d-6a498fb89042
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPd60Eo9oAMFtkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63361045-6b8a1c42300d4d6024186bfd;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:38:13 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: RlSYyyYERUy_dGxSBuCqq7KOrtHEhq02w2Clbo5flJYC4NBmY-Pphg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:15:16 GMT
age: 7401
etag: "f15bb6564adddb9a3bb9949321482e65714c047a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c2cf16a56ada1eeb2f819bbf2ae6681
de2703afe34ddb1acb6155a9616807f6c532a673
56e01de10140bdd0ea07a83ea8acf8999435074c98c24309f36de419335bf975
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56E01DE10140BDD0EA07A83EA8ACF8999435074C98C24309F36DE419335BF975"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6233
Expires: Fri, 30 Sep 2022 02:02:32 GMT
Date: Fri, 30 Sep 2022 00:18:39 GMT
Connection: keep-alive
agagraveleran.com/icon?ctx=Zbfd80JAx0qfbWW0GvEv3Gagmbm0DNFELr5JL9gsz5iBciLmPlRWFDHp8lmmyCEvLiJKFJhk8el0Mnh3ZC2-3_XXidhPI_5yjyC5jO3mVxEwsoOR7F9cEE--ZtOwQsazKxVB7mW8TuzhPNyRoQ9NZrl-7N3KjQ4Fff6pumIbW4GcCTSQ3-XBDcC0dVwUNtBkm9p5YtbQFdkzEits_aq83-j6dOyBKBCvnw-_DizBw1PtOSL3WWsez8-ACtyLozyquMus60pY9eIjm_DKGDT3bY73zu3riVBA&z=3317464
301 Moved Permanently 0 B URL HTTP/1.1 agagraveleran.com/icon?ctx=Zbfd80JAx0qfbWW0GvEv3Gagmbm0DNFELr5JL9gsz5iBciLmPlRWFDHp8lmmyCEvLiJKFJhk8el0Mnh3ZC2-3_XXidhPI_5yjyC5jO3mVxEwsoOR7F9cEE--ZtOwQsazKxVB7mW8TuzhPNyRoQ9NZrl-7N3KjQ4Fff6pumIbW4GcCTSQ3-XBDcC0dVwUNtBkm9p5YtbQFdkzEits_aq83-j6dOyBKBCvnw-_DizBw1PtOSL3WWsez8-ACtyLozyquMus60pY9eIjm_DKGDT3bY73zu3riVBA&z=3317464
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /icon?ctx=Zbfd80JAx0qfbWW0GvEv3Gagmbm0DNFELr5JL9gsz5iBciLmPlRWFDHp8lmmyCEvLiJKFJhk8el0Mnh3ZC2-3_XXidhPI_5yjyC5jO3mVxEwsoOR7F9cEE--ZtOwQsazKxVB7mW8TuzhPNyRoQ9NZrl-7N3KjQ4Fff6pumIbW4GcCTSQ3-XBDcC0dVwUNtBkm9p5YtbQFdkzEits_aq83-j6dOyBKBCvnw-_DizBw1PtOSL3WWsez8-ACtyLozyquMus60pY9eIjm_DKGDT3bY73zu3riVBA&z=3317464 HTTP/1.1
Host: agagraveleran.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 30 Sep 2022 00:18:39 GMT
Content-Length: 0
Connection: keep-alive
Location: https://outsimiseara.com/www/images/7a555faea541a27da9de79a0e67abf9b.jpeg
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 38357efb70feb4f21536e7ccb87b17fb
ca3273e83cf1c584562e1d53e88fc4c22c4b973a
43f4369b756addc572425f84d47e06d1bb6e8acd86a79800602f174546835303
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "43F4369B756ADDC572425F84D47E06D1BB6E8ACD86A79800602F174546835303"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5413
Expires: Fri, 30 Sep 2022 01:48:52 GMT
Date: Fri, 30 Sep 2022 00:18:39 GMT
Connection: keep-alive
outsimiseara.com/www/images/7a555faea541a27da9de79a0e67abf9b.jpeg
200 OK 23 kB URL HTTP/2 outsimiseara.com/www/images/7a555faea541a27da9de79a0e67abf9b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 7a555faea541a27da9de79a0e67abf9b
c6650bdf11a8badb1f4ea8eff3003928c5df877f
170b360c4605bbcc8939aa230ff5bb5d274bb6163e50cf47c6e00d3284e4c01e
GET /www/images/7a555faea541a27da9de79a0e67abf9b.jpeg HTTP/1.1
Host: outsimiseara.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 30 Sep 2022 00:18:39 GMT
content-type: image/jpeg
content-length: 23018
cache-control: max-age=86400
cf-bgj: h2pri
etag: "5e240fa2-59ea"
expires: Fri, 30 Sep 2022 10:07:54 GMT
last-modified: Sun, 19 Jan 2020 08:13:22 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 51045
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7528c8537d86b4f4-OSL
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff
200 OK 32 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff
IP
File type Web Open Font Format, TrueType, length 31900, version 1.1\012- data
Hash 1b285c8e5b7445a8e434b2cdf036bab2
c97d4772fbb5c5637d466b5f991bc7ec28830b32
09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825
GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986; _gat_gtag_UA_108868042_1=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:41 GMT
content-type: font/woff
content-length: 31900
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c9c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash df64df007023f12c0848c1355bd57f3f
96f13756b28fa6c966d7a60a3be4db15ade74d88
1552dd87219ecc5288503f38c81df759ed9945f514c2dd66715a6d1f0e033012
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1552DD87219ECC5288503F38C81DF759ED9945F514C2DD66715A6D1F0E033012"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6639
Expires: Fri, 30 Sep 2022 02:09:22 GMT
Date: Fri, 30 Sep 2022 00:18:43 GMT
Connection: keep-alive
hypoterian.com/ie?v=4&c=6vAgGV9GCE8d97JW0U7eiSU7eBHSjC6-3NUDOuM2Xyq_ek2O7F2Hxc0XvR9HpO5hxQQpuFSvHjrr3dEsLPg1sYFTfcU_-J0sAtwAUdC4NGDG_ymKNzHhwY-NW-9sQdFuZmKBjgQJZ379z7_UIcjGORakC1OJmX69Vu_K2RJh6UGRniuRZH9kRCEvNBHN3t7hQjwNKDyN2lVLTGIxBdzEatVktLLKk7DDr3gZgQYfxz4nSe4n8aiUU3VbM9U76cKyyVpqM1Slm13cHzuVg8QSaXKNvKFDG1puLF4HOOwo5C6mJ5kDqaLAd8HlWc3BQjoSOZL6Ru0iGDXZs3eYL_gIApvox70Q0FVEQnQpkO8RayFjeQ4w-8Q_FleAQ1N7XToEZCKyYVS6mYeuBZ2fL4s3kJe89tOT9JRBfLbXrKTsdxJ9jskhVJeAuQ==&v1=79&v2=65870
301 Moved Permanently 0 B URL HTTP/1.1 hypoterian.com/ie?v=4&c=6vAgGV9GCE8d97JW0U7eiSU7eBHSjC6-3NUDOuM2Xyq_ek2O7F2Hxc0XvR9HpO5hxQQpuFSvHjrr3dEsLPg1sYFTfcU_-J0sAtwAUdC4NGDG_ymKNzHhwY-NW-9sQdFuZmKBjgQJZ379z7_UIcjGORakC1OJmX69Vu_K2RJh6UGRniuRZH9kRCEvNBHN3t7hQjwNKDyN2lVLTGIxBdzEatVktLLKk7DDr3gZgQYfxz4nSe4n8aiUU3VbM9U76cKyyVpqM1Slm13cHzuVg8QSaXKNvKFDG1puLF4HOOwo5C6mJ5kDqaLAd8HlWc3BQjoSOZL6Ru0iGDXZs3eYL_gIApvox70Q0FVEQnQpkO8RayFjeQ4w-8Q_FleAQ1N7XToEZCKyYVS6mYeuBZ2fL4s3kJe89tOT9JRBfLbXrKTsdxJ9jskhVJeAuQ==&v1=79&v2=65870
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=6vAgGV9GCE8d97JW0U7eiSU7eBHSjC6-3NUDOuM2Xyq_ek2O7F2Hxc0XvR9HpO5hxQQpuFSvHjrr3dEsLPg1sYFTfcU_-J0sAtwAUdC4NGDG_ymKNzHhwY-NW-9sQdFuZmKBjgQJZ379z7_UIcjGORakC1OJmX69Vu_K2RJh6UGRniuRZH9kRCEvNBHN3t7hQjwNKDyN2lVLTGIxBdzEatVktLLKk7DDr3gZgQYfxz4nSe4n8aiUU3VbM9U76cKyyVpqM1Slm13cHzuVg8QSaXKNvKFDG1puLF4HOOwo5C6mJ5kDqaLAd8HlWc3BQjoSOZL6Ru0iGDXZs3eYL_gIApvox70Q0FVEQnQpkO8RayFjeQ4w-8Q_FleAQ1N7XToEZCKyYVS6mYeuBZ2fL4s3kJe89tOT9JRBfLbXrKTsdxJ9jskhVJeAuQ==&v1=79&v2=65870 HTTP/1.1
Host: hypoterian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Fri, 30 Sep 2022 00:18:42 GMT
content-length: 0
location: https://img.vmmcdn.com/get/54109197/158561_icon.png
x-app-id: 13
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ad12b6889753054ae1286f49f153a05b
1f10a6d9e013eac8a5b26c03cb2de74798a816a9
6ad1f4986a5128a2685afef3967406293c0ec6708d2c9e910b08bd18f104c3fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AD1F4986A5128A2685AFEF3967406293C0EC6708D2C9E910B08BD18F104C3FB"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18809
Expires: Fri, 30 Sep 2022 05:32:12 GMT
Date: Fri, 30 Sep 2022 00:18:43 GMT
Connection: keep-alive
img.vmmcdn.com/get/54109197/158561_icon.png
200 OK 94 kB URL HTTP/2 img.vmmcdn.com/get/54109197/158561_icon.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash dd457921c104a33b0390b2bbd7867151
21e95c3698651fbbff76e72177aefe5477a5fa82
b53bb5780a2f3181ce8e83e9344ddc67fc39925ddbe2879cd2fb72a2dc3aa816
GET /get/54109197/158561_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.1
date: Fri, 30 Sep 2022 00:18:43 GMT
content-type: image/png
content-length: 93502
last-modified: Mon, 26 Sep 2022 14:32:00 GMT
cache-control: public, max-age=604800
etag: "6331b7e0-16d3e"
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload.js
IP
GET /themes/flow/js/jquery.fileupload.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-dbd4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
IP
GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/responsive.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/responsive.css
IP
GET /themes/flow/frontend_assets/css/responsive.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-e56"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/load-image.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/load-image.min.js
IP
GET /themes/flow/js/load-image.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-9f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-process.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-process.js
IP
GET /themes/flow/js/jquery.fileupload-process.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
IP
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14cc1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
societingna.info/dmtKRDcNSTkzaAMZJmYNVAM%2BMEcFUWVrWhMMKzFHWAUvMBgFHGQuRFRHaDdaEElwdRtUHysjaB8PaH4VTlh4cgRFSWZmRAMJFS1TRElwZlFCD3NxBhMPZ3cHRlJncA9BDWd8UUBeZ3wGFFIrcwATWn8nUVQW
200 OK 0 B URL HTTP/2 societingna.info/dmtKRDcNSTkzaAMZJmYNVAM%2BMEcFUWVrWhMMKzFHWAUvMBgFHGQuRFRHaDdaEElwdRtUHysjaB8PaH4VTlh4cgRFSWZmRAMJFS1TRElwZlFCD3NxBhMPZ3cHRlJncA9BDWd8UUBeZ3wGFFIrcwATWn8nUVQW
IP
Analyzer Verdict Alert fortinet Malware
GET /dmtKRDcNSTkzaAMZJmYNVAM%2BMEcFUWVrWhMMKzFHWAUvMBgFHGQuRFRHaDdaEElwdRtUHysjaB8PaH4VTlh4cgRFSWZmRAMJFS1TRElwZlFCD3NxBhMPZ3cHRlJncA9BDWd8UUBeZ3wGFFIrcwATWn8nUVQW HTTP/1.1
Host: societingna.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 2613902cd370464dc353bbcfb5ccca58=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"e0f8-BEey698+YB6ve1EQsgqDjGPBabI"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
IP
GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2296"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
ad.a-ads.com/1811811?size=300x250
200 OK 0 B URL HTTP/2 ad.a-ads.com/1811811?size=300x250
IP
ASN #24940 Hetzner Online GmbH
GET /1811811?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://megaup.net/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.tmpl.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.tmpl.min.js
IP
GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-resize.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-resize.js
IP
GET /themes/flow/js/jquery.fileupload-resize.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1f7f"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-ui.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-ui.js
IP
GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-61ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
IP
GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3bd2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/sw.js?SHFiSzcTU1p4BX5CUWkbalNOaVF8FVt%2BBi0VT3gHeEhPfw9%2EF09zUX5ET3MGKkgDfAAtQFcoUWpdQC1SekMEKA55XAYvVi1cVioBLFxbfgRxXFp4DyoSUH4PfBRXexVkUxE8FWRTET5bPBgMLFQnFEwpQjILQGcVeUFMfhVkFwMnRC1dBCpbOxROLVYkAgcW
200 OK 0 B URL HTTP/2 megaup.net/sw.js?SHFiSzcTU1p4BX5CUWkbalNOaVF8FVt%2BBi0VT3gHeEhPfw9%2EF09zUX5ET3MGKkgDfAAtQFcoUWpdQC1SekMEKA55XAYvVi1cVioBLFxbfgRxXFp4DyoSUH4PfBRXexVkUxE8FWRTET5bPBgMLFQnFEwpQjILQGcVeUFMfhVkFwMnRC1dBCpbOxROLVYkAgcW
IP
GET /sw.js?SHFiSzcTU1p4BX5CUWkbalNOaVF8FVt%2BBi0VT3gHeEhPfw9%2EF09zUX5ET3MGKkgDfAAtQFcoUWpdQC1SekMEKA55XAYvVi1cVioBLFxbfgRxXFp4DyoSUH4PfBRXexVkUxE8FWRTET5bPBgMLFQnFEwpQjILQGcVeUFMfhVkFwMnRC1dBCpbOxROLVYkAgcW HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986; _gat_gtag_UA_108868042_1=1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:36 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:52 GMT
vary: Accept-Encoding
etag: W/"60758f38-12fe6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css
IP
GET /themes/flow/frontend_assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-59d6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/file-upload.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/styles/file-upload.css
IP
GET /themes/flow/styles/file-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/sw.js
200 OK 0 B IP
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:52 GMT
vary: Accept-Encoding
etag: W/"60758f38-12fe6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery-1.11.0.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery-1.11.0.min.js
IP
GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1787d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery-ui.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery-ui.js
IP
GET /themes/flow/js/jquery-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-6a684"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.iframe-transport.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.iframe-transport.js
IP
GET /themes/flow/js/jquery.iframe-transport.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2427"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/animations/animate.min.css
IP
GET /themes/flow/frontend_assets/css/animations/animate.min.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-bc86"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
IP
GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-153"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
IP
GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45f5"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-validate.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-validate.js
IP
GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-fea"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
IP
GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3ead"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
200 OK 0 B URL HTTP/2 megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
IP
GET /1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:34 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/custom.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/custom.css
IP
GET /themes/flow/frontend_assets/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3577"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/colors/flow.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/colors/flow.css
IP
GET /themes/flow/frontend_assets/css/colors/flow.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-a83"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/canvas-to-blob.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/canvas-to-blob.min.js
IP
GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-408"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/global.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/global.js
IP
GET /themes/flow/js/global.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-d59"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
IP
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
IP
GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.dataTables.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.dataTables.min.js
IP
GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-10fe4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
IP
GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-5c6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
IP
GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-ce4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico
IP
GET /themes/flow/frontend_assets/images/icons/favicon/favicon.ico HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/1Lkb2/Knights_of_Messiah_UNRATED-DINOByTES.rar
Connection: keep-alive
Cookie: filehosting=04k1cida588fglet3m8a8iead3; _ga=GA1.2.1844656983.1664496986; _gid=GA1.2.1375286482.1664496986
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 00:18:35 GMT
content-type: image/x-icon
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-47e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
200 OK 0 B URL HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: BBQmJllyerkM2ynam16UkGnVE/b56aGPKaX2yCrrGDtZ6Y067I0K9dI0azrc7A+1QGl/UH85Pk8srAGC/D7Atw==
date: Fri, 30 Sep 2022 00:18:36 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
91.209.70.182
23.36.76.226
143.204.55.37
157.90.94.146
104.18.32.68
23.109.82.168
139.45.195.6
185.76.9.24