download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
503 Service Temporarily Unavailable 8.1 kB URL HTTP/1.1 download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1177)
Hash a6b6750c02f0f0d0c14b73fabad78a10
9ae1e1d7a72dec11522288cdad3a5006c475857c
3aa7873781d5bf21afa7b15d1b881818b4cb3c813a3cd6f8cbd0536287da7de6
GET /?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 503 Service Temporarily Unavailable
Date: Sat, 26 Nov 2022 12:50:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Frame-Options: SAMEORIGIN
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Referrer-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SzeFph9zHyHqNXDZ1NEVZSE6tkin%2F7VRU%2FeyWPZubPifwmjvnSW9%2FmwPe6Mc0ewNOCh3lTPWsurA5EDYM48Tf3vpVP%2F8Wg5fT7OJIzASELpZgnOloznfUgGE3v7RMV9zK6u8pCS1"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7702c06409760b51-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15394
Expires: Sat, 26 Nov 2022 17:07:18 GMT
Date: Sat, 26 Nov 2022 12:50:44 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4002
Cache-Control: max-age=168426
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:44 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:37:50 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9593
Expires: Sat, 26 Nov 2022 15:30:37 GMT
Date: Sat, 26 Nov 2022 12:50:44 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 12:19:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1891
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Csjl4hIpQ/upiFdfCQ2sOkbCk5JzL2B1CEOcH9AS2KJIdDnlwySSNvRrxdo9LsptIbNvJlXl3EI=
x-amz-request-id: BR4V2YJM4EEBW9JJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 12:44:14 GMT
age: 390
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
download.megaup.net/cdn-cgi/styles/challenges.css
200 OK 2.6 kB URL HTTP/1.1 download.megaup.net/cdn-cgi/styles/challenges.css
IP
File type ASCII text, with very long lines (6294), with no line terminators
Hash ba2d8534d208d2a5b158507e004d7150
ab81307634698ea304a68783fa38937f562009a2
63b366fdbfea7cbec639f9a5f24714a831e171570625def9462d724b5c8fdc59
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:44 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:34:50 GMT
ETag: W/"637ccffa-1896"
Server: cloudflare
CF-RAY: 7702c066bf6db50f-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sat, 26 Nov 2022 14:50:44 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
download.megaup.net/favicon.ico
503 Service Temporarily Unavailable 7.1 kB URL HTTP/1.1 download.megaup.net/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1008)
Hash dd5b1ba44d0daa9c7569c292de3bbd8e
fb6c60199e991acd46ef21eb0179de97f7b04191
b3255fa4c7aa7979696252db14390f659e332daec6d86c66562e6710ec497ff5
GET /favicon.ico HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
Connection: keep-alive
HTTP/1.1 503 Service Temporarily Unavailable
Date: Sat, 26 Nov 2022 12:50:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Frame-Options: SAMEORIGIN
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Referrer-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vy5rxd4PiQjSYXbv1djZBLnGnJX1nndboxz35U218%2Fjh%2FM227Xp6P6n9v5HmHDZW%2BVo6I9iYWiykbkOsERn2PcOCQRHTBXN5BZJcsA%2B%2F8xuafw5c4v4BkwcNDRCp1ivoj%2BZ6L987"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7702c066bcc5b527-OSL
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
download.megaup.net/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=7702c06409760b51
200 OK 42 B URL HTTP/1.1 download.megaup.net/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=7702c06409760b51
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cdn-cgi/images/trace/jsch/js/transparent.gif?ray=7702c06409760b51 HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:45 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:34:50 GMT
ETag: "637ccffa-2a"
Server: cloudflare
CF-RAY: 7702c0674805b50f-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Sat, 26 Nov 2022 14:50:45 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
download.megaup.net/cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7702c06409760b51
200 OK 23 kB URL HTTP/1.1 download.megaup.net/cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7702c06409760b51
IP
File type ASCII text, with very long lines (53136), with no line terminators
Hash 96aacc1e638a5f6addbdcc4f44c85f09
4195daff0e5af45121fd3ef778837f8bc7206993
d6a9944a3c6a8a876f53bc0be49a53b21008dbeb2ab8ca2f83ae6d23fb641726
GET /cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7702c06409760b51 HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB&__cf_chl_rt_tk=RvDFG3_4zn.iQ8Mc9pLVukEQhCp78fHUF2Cmd2tkGvg-1669467044-0-gaNycGzNAxE
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:45 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: max-age=0, must-revalidate
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q6FG1zYA9570f9pGOnui34ApL6ORkw4IugMH4u7QE54kHQnD1yudor3B1KEOqQejBcyc2g7dKz0cKzal5IshMtG9k4%2BkKqYXUJBtldp%2BJ70yvOvkI14fJMEd%2FKpIRx%2BYIvJ4qHje"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7702c0676830b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
download.megaup.net/cdn-cgi/challenge-platform/h/b/flow/ov1/0.7367995341134584:1669464332:r_fWbzYk1gLQimbrcFigyLTFL1OW2Vn1_1IrKvl32lk/7702c06409760b51/616fe8f4b0b9941
200 OK 58 kB URL HTTP/1.1 download.megaup.net/cdn-cgi/challenge-platform/h/b/flow/ov1/0.7367995341134584:1669464332:r_fWbzYk1gLQimbrcFigyLTFL1OW2Vn1_1IrKvl32lk/7702c06409760b51/616fe8f4b0b9941
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 61a6c1870a62738855eab6bf0bc921b7
de244ae6672876a760932b4012ce95fa149bc39b
7c7a03ad0bc15d5a05ae1296ce796d1c39acd2bcde048fc4c3223b4a2371f2bd
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.7367995341134584:1669464332:r_fWbzYk1gLQimbrcFigyLTFL1OW2Vn1_1IrKvl32lk/7702c06409760b51/616fe8f4b0b9941 HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
Content-type: application/x-www-form-urlencoded
CF-Challenge: 616fe8f4b0b9941
Content-Length: 1997
Origin: http://download.megaup.net
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:45 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: al6SwFVU2N21+zYKfKZ8U9VL/ZkpJyIL7wBe/wzYIiu1r/YOURgyPFcUzLeTWOLZB8PDw5+PVYns6QMfKxOYIgldKQKZ83onz8TNhwLwx03NfWnxIIHx/l+MlARxuTrGVPm3YT3WzIei+2gSmmHL/4ZyRBnklqSTNhtTnEroVZX32net4E/RM9Nes4jKxyCSbHKj4nl52GtCeUIrIoOrsi+UQCJXM2gqYmUcZBACLKtRUjGqzG60jZ2MmYOkpK1CClKozFFQ0z4ErV4iN+2hcgmEFoi+85Xpw8DguAx/UPRr9WSjy1snKtEmV5hQERb1$haPDv/ZNc/0TTA0S5MbS2w==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U1qY8FzR0DyBS8NndKzqWruwrBKZ6Hm3Zz5d%2BH4LjJ7uoVnfFfn0Rv4yMqn9pmjza5DeRiESLS84nVe633RDqJdin9Qrp9bTqzaSFsO%2BlwY7kQuiUPLdSRLtI06w7V24ngu1jcxd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7702c068896db50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 12:08:54 GMT
cache-control: public,max-age=3600
age: 2511
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3897
Cache-Control: max-age=163263
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:45 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:11:48 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AwRmss2BMqarF/kQ0T8kYQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Na/DERMQMf/7+H3xUojy9xBENm4=
download.megaup.net/cdn-cgi/challenge-platform/h/b/img/7702c06409760b51/1669467045214/uCD2lAh1VROs7ZA
200 OK 61 B URL HTTP/1.1 download.megaup.net/cdn-cgi/challenge-platform/h/b/img/7702c06409760b51/1669467045214/uCD2lAh1VROs7ZA
IP
File type PNG image data, 83 x 54, 8-bit/color RGB, non-interlaced\012- data
Hash bf69fcd5c6f5d43ac783a59991b8af02
85500d493f3df901878f9f55fa779baafcdc9fee
6844327481e2bc65a6a5b4ce4ed45eb776956c3ea42028777c2bd3d323ba56f3
GET /cdn-cgi/challenge-platform/h/b/img/7702c06409760b51/1669467045214/uCD2lAh1VROs7ZA HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:46 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=piRG2aPDrdEj0yK1IYEAAseWvpW%2B%2FC8gChKieckiiqy13Wp08dk5jwfNw%2B5gdzkzILxj%2Fyv8N80FtgYCCzM55X7KE%2BLD5KWI7wXS%2ByHM3u95qM9yv%2Bkv13ss2E81VUwoRaRvzVUm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7702c06f1a76b50f-OSL
alt-svc: h2=":443"; ma=60
download.megaup.net/cdn-cgi/challenge-platform/h/b/flow/ov1/0.7367995341134584:1669464332:r_fWbzYk1gLQimbrcFigyLTFL1OW2Vn1_1IrKvl32lk/7702c06409760b51/616fe8f4b0b9941
200 OK 1.7 kB URL HTTP/1.1 download.megaup.net/cdn-cgi/challenge-platform/h/b/flow/ov1/0.7367995341134584:1669464332:r_fWbzYk1gLQimbrcFigyLTFL1OW2Vn1_1IrKvl32lk/7702c06409760b51/616fe8f4b0b9941
IP
File type ASCII text, with very long lines (2244), with no line terminators
Hash 5b19c31b33d86bf3db482cd1146abaa1
085ec0b7567c266ff2c3898287dbe59fd5c9df68
e749d26360dbf5c63ce7ccd36488e651df0f83b1ce255df63d3ca54f4961cd9a
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.7367995341134584:1669464332:r_fWbzYk1gLQimbrcFigyLTFL1OW2Vn1_1IrKvl32lk/7702c06409760b51/616fe8f4b0b9941 HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
Content-type: application/x-www-form-urlencoded
CF-Challenge: 616fe8f4b0b9941
Content-Length: 16139
Origin: http://download.megaup.net
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: cf_chl_rc_ni=;Expires=Fri, 25 Nov 2022 12:50:46 GMT;SameSite=Strict
cf_chl_out: SOMvCpGUqECXa8LuRhgoXCLY+ru3mI9BmeQcTjzLfwlaBmlsZsYBe8QPjnK0NX9PvxmTWXPMwn5tIz0zbdvvxQ==$vYYFPBkz7rsRcA4wm0SgYg==
cf_chl_out_s: e/xzB6tMlj7KLB/0vCOkDO5AP9vUCUshhV+UY2Z9Yp+9bKsOYnyrLhpA0Os/y2z3eQPlAB3V1V4oq0rf+o4VJooq0mG8J2wPofk4CwJY5+EdnKP2HEnsMxTscT4JVwIuvbnQAPFWzhHHDRxJBReldA==$eR+P5aElACSRi2hpcfFBTg==
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M4O1mdo5Xmjr8nQdV7kepmqJf1BxwPiS3NgGXd%2B3BrfvsXPBcHlTJTMD6N2vBsyfVG9AbkGt%2B7KaZrwC1WI0ZQo61Xjj0u5BEdTRsJ5S122kbtOiHCJHbRSP3ekUTMNC5QSMpNRb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7702c0707cfdb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
301 Moved Permanently 162 B URL HTTP/1.1 download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
POST /?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB&__cf_chl_tk=RvDFG3_4zn.iQ8Mc9pLVukEQhCp78fHUF2Cmd2tkGvg-1669467044-0-gaNycGzNAxE
Content-Type: application/x-www-form-urlencoded
Content-Length: 2048
Origin: http://download.megaup.net
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 26 Nov 2022 12:50:46 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: cf_clearance=0g5exsKJcRRxdpuQEY3.vmGg32Qq9cgZRIl0d1Ba_Yg-1669467046-0-150; path=/; expires=Sun, 26-Nov-23 12:50:46 GMT; domain=.megaup.net; HttpOnly
Location: https://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer, strict-origin-when-cross-origin
X-Download-Options: noopen
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JIhADmeljVg9%2Bmc3WTBzGr1ph9lwy8VK4LNFfTK8OwhpjJB7NLbweIhh1gFGYTVNMWhd17ghZjOiTQQYX0sX%2FNibTufzUWYn%2FJ6uqrCKc6B9LdBgaqlKPx%2FJbt779HaiAIxgkVtl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7702c070fe3fb50f-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash fc229abe1c2402b57788eb44a3ccd18c
0429eb0daa07e9bd1b300b499ebcafe7b234ba64
01d03f8051d5806673619e73b9ba433ec4b513f186a34b5b7523c8e9bba01b03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 781
Cache-Control: max-age=116946
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:46 GMT
Etag: "63812e6b-117"
Expires: Sun, 27 Nov 2022 21:19:52 GMT
Last-Modified: Fri, 25 Nov 2022 21:06:51 GMT
Server: ECS (amb/6B9D)
X-Cache: HIT
Content-Length: 279
download.megaup.net/cdn-cgi/styles/challenges.css
200 OK 2.6 kB URL HTTP/2 download.megaup.net/cdn-cgi/styles/challenges.css
IP
Hash 2080f6c1c5995ef744362ba648f04a8c
41e33c8ce9c082bd9945f612eb1cb507a7ba5c8b
a8496326269f30076b3683f0ef278e989c6d80cda9b8aa1f587d0a48a518cf78
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:46 GMT
content-type: text/css
last-modified: Tue, 22 Nov 2022 13:34:50 GMT
etag: W/"637ccffa-1896"
server: cloudflare
cf-ray: 7702c0729ec0b4f3-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Sat, 26 Nov 2022 14:50:46 GMT
cache-control: max-age=7200, public
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash fc229abe1c2402b57788eb44a3ccd18c
0429eb0daa07e9bd1b300b499ebcafe7b234ba64
01d03f8051d5806673619e73b9ba433ec4b513f186a34b5b7523c8e9bba01b03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 781
Cache-Control: max-age=116946
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:46 GMT
Etag: "63812e6b-117"
Expires: Sun, 27 Nov 2022 21:19:52 GMT
Last-Modified: Fri, 25 Nov 2022 21:06:51 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18207
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 12:50:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18207
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 12:50:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18207
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 12:50:47 GMT
Connection: keep-alive
download.megaup.net/favicon.ico
503 Service Unavailable 69 kB URL HTTP/2 download.megaup.net/favicon.ico
IP
Hash 9f81c0a3016ed406103005b0c27f142c
4933c070601ed52dfffce3a173c5cb13f3439bc7
2cfacf11fbaf7f57100bca01e28b36f42241bfa71615dcfecc757cabf12926a7
GET /favicon.ico HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 503 Service Unavailable
date: Sat, 26 Nov 2022 12:50:46 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
referrer-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B2gx2JamZVGOQ5jRLeGnrh0hvBGMVdmoWh5fcuPS5h%2BYcQrouK3ODNgmoufGZlD%2BwLDLGyFgBuVFM29YloAdEJTcAkBAEt9eXMKZZKpFaNR8qSVA4SAle0CshOcjTvP6RXYfFXwu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c0729ec2b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18207
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 12:50:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7c216e6-fb54-4285-8656-a1e15990a37a.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7c216e6-fb54-4285-8656-a1e15990a37a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70fae9ac56bb7676177d4252757f0180
bd3027af47f20f4bb9ac36cd9e4493e28e6b041c
1378749f1b28b6c56b8e76418fc5dd59cf608a4e64c1e1067b4f19df10233afc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7c216e6-fb54-4285-8656-a1e15990a37a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8078
x-amzn-requestid: e199b062-09f2-46b8-a8ee-6d7b782f7359
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVC7GT2oAMF5XA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813545-485ea8fd3e785be748834efd;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yJdSAEHw1AFVsBFBSX5G6rqED3Kpi_P69vtTrVVE1vFDtl3XMsyJ4g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:03:54 GMT
age: 53213
etag: "bd3027af47f20f4bb9ac36cd9e4493e28e6b041c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 926df9839ec3d924b563b55d8bccace8
c47a3884465fc02b5c57faa5ffbd986ba29c64c2
a97cd625959aa81bc516024628315b2c6e2ce94f76cd579751a686a6611cc4d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: eede6332-5376-4f9c-83fc-f894430c1f4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWYFFgoAMFhaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-66d7ffc70f7d901420a503da;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -6kE-HDfLIQMtzuaOuArCjtxgpQUgxMrpjcT7pDIdY7CDlJNK1GZWA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:24 GMT
etag: "c47a3884465fc02b5c57faa5ffbd986ba29c64c2"
content-type: image/jpeg
age: 54263
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 07:13:26 GMT
age: 20241
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 54431
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 96437d0cb1ceaffa77124f0dcfeb38cf
3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50
89244601b0a4bc150033e52dc56cf0fbe2846ebba7532c477146258a70783e05
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7799
x-amzn-requestid: 4b3bf619-fb69-4cfe-b8e7-7de4ea127853
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXADFOvoAMFXQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813866-77f561ae3496d84c75541300;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:49:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mxC9qkJyuCX0NOEgkK3Z0LWPpxbTcFIvkrDAJ6KBnMFLHToB50AEFg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:02:20 GMT
age: 53307
etag: "3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17ebe470d040a6ea8c57e9b9d4f4e828
1ac7a410cd4f3709f476c776dd5646dd982dcfa8
d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HgiyaodE2vJx5JL8QfOiTersSAgAwq74gtsPkpHUhnQ3In2vZ-3rbQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:09 GMT
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
content-type: image/jpeg
age: 51458
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 514dd237ee476db55208a50ed503b78e
3a1b3f93078878155d72a6b070e1885cba84ce87
02c0a05d5845a211a70c8088f8b6444503edc4e3837b694e88aac79f183838fb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 11:25:44 GMT
Expires: Fri, 02 Dec 2022 11:25:43 GMT
Etag: "3a1b3f93078878155d72a6b070e1885cba84ce87"
Cache-Control: max-age=512691,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7702c08cdf8fb505-OSL
megaup.net/themes/flow/images/main_logo_inverted.png
200 OK 7.1 kB URL HTTP/2 megaup.net/themes/flow/images/main_logo_inverted.png
IP
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
200 OK 188 kB URL HTTP/2 megaup.net/themes/flow/styles/font-icons/entypo/css/entypo.css
IP
Size 188 kB (187862 bytes)
Hash 70850eef02282a4003d404c1818ad733
22abdb1ca95e0ee7f3c1db28da092d216675df03
d97fc676b0cfcee7d6a2f14f75ae4ec32ca04f5209c5f7b7b7adf32212e5e841
GET /themes/flow/styles/font-icons/entypo/css/entypo.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45f5"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.tmpl.min.js
200 OK 1.1 kB URL HTTP/2 megaup.net/themes/flow/js/jquery.tmpl.min.js
IP
File type ASCII text, with very long lines (971), with no line terminators
Hash da310a53547cd30aa12cd275b750e23b
ab7f65a2d38062ab81920cd72fa560f726ed4331
5adb855b834c7b96019590a84feee071a866795d9eb34a7b9e1bfa30622d8405
GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/load-image.min.js
200 OK 1.6 kB URL HTTP/2 megaup.net/themes/flow/js/load-image.min.js
IP
File type ASCII text, with very long lines (2546), with no line terminators
Hash ed6624b51bbc263e55fbf0826f42ce31
893bc9680f1adcdb0f2a7b4b3cab3c4c1fd9ef1b
8b193b0123e853d1ffacb1ba813edc296aeb3cd8b9f947c6fbfc6c32b3a5bf77
GET /themes/flow/js/load-image.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-9f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-ui.js
200 OK 24 kB URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-ui.js
IP
Hash 45ba5472f101c3b514de37d444a43706
f92ce2e60c963d0ca45fba72200baad90ae318b8
0867f300bd9d67014de693ff2723e07b2955df542b2502d15706615a1a7373e8
GET /themes/flow/js/jquery.fileupload-ui.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-61ef"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/file-upload.css
200 OK 2.1 kB URL HTTP/2 megaup.net/themes/flow/styles/file-upload.css
IP
File type assembler source, ASCII text
Hash 779452a6ff752f805e8547a750b65789
03aa2b30214d5d07b1dd0f67d06c3c6095f36104
31a8c8a07928a0694ee4b072051c8df319ccc529df96af68d9dd97d9359d266a
GET /themes/flow/styles/file-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
File type ASCII text, with very long lines (1921)
Hash 9232d97add3fd2d4eff62cc8c0127447
f9379b2e5f59230c1d802f3b7474a4b3c8389c42
9d7370a3bdd80b4341b5bb0d345d89c4a60c3239253d0916b656c2db01d4b062
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 12:50:51 GMT
expires: Sat, 26 Nov 2022 12:50:51 GMT
cache-control: private, max-age=900
last-modified: Sat, 26 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43611
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK 25 B URL HTTP/1.1 altowriestwispy.com/tysaSHG1FMaM/18410
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 12:50:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Sun, 27-Nov-2022 12:50:51 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Sun, 27-Nov-2022 12:50:51 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
200 OK 32 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
IP
File type Web Open Font Format, TrueType, length 31836, version 1.1\012- data
Hash 4514fa5a5b3d1e0b14aa32a7d068124a
e634977bfabc20ed15fe7ed03d3876cf68834b93
5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: font/woff
content-length: 31836
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c5c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
200 OK 99 kB URL HTTP/2 megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58554), with CRLF, LF line terminators
Hash e2b740d823c29d3ec576c4e86b2b505d
f923300b7b6b0ce61bde8fcde858a40fd36aee80
2cb52c503151e2e53b2eb8ef81231ec5705d7fc3c1cc37870df32687f97bcd89
GET /4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://download.megaup.net/
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: filehosting=j73vfdfdrpu6nddmb15o2256e7; expires=Sun, 27-Nov-2022 12:50:51 GMT; Max-Age=86400; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
200 OK 45 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
IP
File type ASCII text, with CRLF line terminators
Hash aa3033e526f9fddee9dbbeb99f538474
b657f2cb7272f4ee86bd91b0b10263c3b047c66a
7b19633f7bca0d0cd5c8cc344940292d1dec7cfff44651dcbffd18a2ac9a8fbe
GET /themes/flow/frontend_assets/css/All-stylesheets.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-153"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/custom.css
200 OK 30 kB URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/custom.css
IP
File type assembler source, ASCII text, with CRLF line terminators
Hash 0a0c4a98d13e6947405db400bd4705fe
1112e21d896a20409907f65dfb8761b3d016a253
b65104d6a2c1f1750a6d467a8360c46d6f4a065b94f541dd586ada04771a3198
GET /themes/flow/frontend_assets/css/custom.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3577"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
200 OK 189 kB URL HTTP/2 dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
IP
File type Unicode text, UTF-8 text, with very long lines (15945)
Size 189 kB (189385 bytes)
Hash c95e33c887b1da894722ad31517dac8b
11d08176431c1ade1b9bf9e809de9db08bb8c1f9
afbd7b5d0cc16f3174a0af290522ae3d1b0a2e6a4caf2b49d67873c69e58eb85
GET /?kzmmd=761186 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 189385
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OioYRT4pGExnJIUf1F6dlYAGY1vfxl22_GoxPZ_O-8OJVoCdZybSNw==
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 4831d5e92555537513ad4c63c2e39426
741b4861613e04bb1b22a6980b7a8a6955fd0da7
d858beed523fd699997da5717fc1287fcc6ea31eac495d7d719b46010173fe83
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D858BEED523FD699997DA5717FC1287FCC6EA31EAC495D7D719B46010173FE83"
Last-Modified: Fri, 25 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16629
Expires: Sat, 26 Nov 2022 17:28:00 GMT
Date: Sat, 26 Nov 2022 12:50:51 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 4831d5e92555537513ad4c63c2e39426
741b4861613e04bb1b22a6980b7a8a6955fd0da7
d858beed523fd699997da5717fc1287fcc6ea31eac495d7d719b46010173fe83
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D858BEED523FD699997DA5717FC1287FCC6EA31EAC495D7D719B46010173FE83"
Last-Modified: Fri, 25 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16629
Expires: Sat, 26 Nov 2022 17:28:00 GMT
Date: Sat, 26 Nov 2022 12:50:51 GMT
Connection: keep-alive
watchingssu.com/bG5RbjENDDIDDg1TM0hEHgJsSwMqS2MoVQEDKwVXCFZjGVAVAH8NXQMbNQhDAwAlQF8JGnRcdzU3YThmPjoUL3oGCTsqWQ8dHABWKzgJPF8KPzUofRU7IDZJIloBOn84KygWRwo7HDl8PgEENFgfGRADfyopAihDCDwyPnsoCTgqdDkJHi1oITs8IwIlOB8LUjQvKT9gGxswF0UlKQIBViZfHCx4KF87PHAmWh4XQSAtOAUHJiwDPHBeICMvZDZdCwMAKy04HUgnBQg/aCs8YDZJCAkLJmQtO2MaXDUvGAZoKzxgPFYDHAgmdDk7EApLCBkUDFJeQxsJcAUoNjR5OioXOXMALBAsZQ8mOV92KTRiNFgmOxAtBVk3ECNdCFwLXnA6IGE0Xz07BDZkGyIUI3YlFDpXdyorFTQCOSsFNmcbIxAWYkoEIgFfHFM6GFMcB2hWQxkaHT9mJBsF
200 OK 1.2 kB URL HTTP/2 watchingssu.com/bG5RbjENDDIDDg1TM0hEHgJsSwMqS2MoVQEDKwVXCFZjGVAVAH8NXQMbNQhDAwAlQF8JGnRcdzU3YThmPjoUL3oGCTsqWQ8dHABWKzgJPF8KPzUofRU7IDZJIloBOn84KygWRwo7HDl8PgEENFgfGRADfyopAihDCDwyPnsoCTgqdDkJHi1oITs8IwIlOB8LUjQvKT9gGxswF0UlKQIBViZfHCx4KF87PHAmWh4XQSAtOAUHJiwDPHBeICMvZDZdCwMAKy04HUgnBQg/aCs8YDZJCAkLJmQtO2MaXDUvGAZoKzxgPFYDHAgmdDk7EApLCBkUDFJeQxsJcAUoNjR5OioXOXMALBAsZQ8mOV92KTRiNFgmOxAtBVk3ECNdCFwLXnA6IGE0Xz07BDZkGyIUI3YlFDpXdyorFTQCOSsFNmcbIxAWYkoEIgFfHFM6GFMcB2hWQxkaHT9mJBsF
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3050), with no line terminators
Hash b6d0102ce2b759f41f3b0501d98977ff
f0fd8658c429ab485493a2cd586903b3890998e9
e5aebd1231960c53a4577f5b0cfec61391c9a16a053ee8139b8387bbeed4ebca
GET /bG5RbjENDDIDDg1TM0hEHgJsSwMqS2MoVQEDKwVXCFZjGVAVAH8NXQMbNQhDAwAlQF8JGnRcdzU3YThmPjoUL3oGCTsqWQ8dHABWKzgJPF8KPzUofRU7IDZJIloBOn84KygWRwo7HDl8PgEENFgfGRADfyopAihDCDwyPnsoCTgqdDkJHi1oITs8IwIlOB8LUjQvKT9gGxswF0UlKQIBViZfHCx4KF87PHAmWh4XQSAtOAUHJiwDPHBeICMvZDZdCwMAKy04HUgnBQg/aCs8YDZJCAkLJmQtO2MaXDUvGAZoKzxgPFYDHAgmdDk7EApLCBkUDFJeQxsJcAUoNjR5OioXOXMALBAsZQ8mOV92KTRiNFgmOxAtBVk3ECNdCFwLXnA6IGE0Xz07BDZkGyIUI3YlFDpXdyorFTQCOSsFNmcbIxAWYkoEIgFfHFM6GFMcB2hWQxkaHT9mJBsF HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1200
date: Sat, 26 Nov 2022 12:50:51 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZAEdAHAkMA_zNqLdlXQqIqCF1qYpcLoM97W6_KvwXutjbByGjYipFA==
X-Firefox-Spdy: h2
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK 25 B URL HTTP/1.1 altowriestwispy.com/tysaSHG1FMaM/18410
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 12:50:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
watchingssu.com/QWFORFAgAy0pbyBcLGIlMw1zYWIHRHwCNCwMNC82JVl8MzE4D2AnPC4UKiIiLg86aj4kFWt2FiQzfDA6DDQ5LxIAUBYnKgwiDDMocQIIdQEAKRwsERMjKw06JTYPAhkvAid0KScyJT4ZKBkhJToMMwwzKHk4HycTGRg6cgQQOygIYzEAHBIRLisYHggHGyl3EgAGAw06dTMKATM0Kx8vFxYMIT0TLVQtDSpxIgp1YDU4Ii88AyYEdwQtJAweFAAiChIFKywMLBcAUjk0GHE4CiIYGwMaFRYxBQ0oFwBSOTMRJlEGIRcLOAcWAmRTDCAoDzcMEzxxKhtpCQUHChE0EwYHCjQtFRkMYzkUGigVAyo3DRkCJ3s0NBJQHAUIcFIZdRkDBxkOChRQLSgeEFUIHDoTCBkXBQAHBg4WFBktcTUtDmguIy4PPnkzIgp7AgENBDoNHxg
200 OK 1.2 kB URL HTTP/2 watchingssu.com/QWFORFAgAy0pbyBcLGIlMw1zYWIHRHwCNCwMNC82JVl8MzE4D2AnPC4UKiIiLg86aj4kFWt2FiQzfDA6DDQ5LxIAUBYnKgwiDDMocQIIdQEAKRwsERMjKw06JTYPAhkvAid0KScyJT4ZKBkhJToMMwwzKHk4HycTGRg6cgQQOygIYzEAHBIRLisYHggHGyl3EgAGAw06dTMKATM0Kx8vFxYMIT0TLVQtDSpxIgp1YDU4Ii88AyYEdwQtJAweFAAiChIFKywMLBcAUjk0GHE4CiIYGwMaFRYxBQ0oFwBSOTMRJlEGIRcLOAcWAmRTDCAoDzcMEzxxKhtpCQUHChE0EwYHCjQtFRkMYzkUGigVAyo3DRkCJ3s0NBJQHAUIcFIZdRkDBxkOChRQLSgeEFUIHDoTCBkXBQAHBg4WFBktcTUtDmguIy4PPnkzIgp7AgENBDoNHxg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3041), with no line terminators
Hash fdd89e135f8ae62f42822bd770cb90c5
1c5e3a9048666b6ca1b048f97760310d942d5c68
7fac0922dd90f0ae6ad1c9bdf14f77612160d30a0f9968bf727f6acd7c51dbdd
GET /QWFORFAgAy0pbyBcLGIlMw1zYWIHRHwCNCwMNC82JVl8MzE4D2AnPC4UKiIiLg86aj4kFWt2FiQzfDA6DDQ5LxIAUBYnKgwiDDMocQIIdQEAKRwsERMjKw06JTYPAhkvAid0KScyJT4ZKBkhJToMMwwzKHk4HycTGRg6cgQQOygIYzEAHBIRLisYHggHGyl3EgAGAw06dTMKATM0Kx8vFxYMIT0TLVQtDSpxIgp1YDU4Ii88AyYEdwQtJAweFAAiChIFKywMLBcAUjk0GHE4CiIYGwMaFRYxBQ0oFwBSOTMRJlEGIRcLOAcWAmRTDCAoDzcMEzxxKhtpCQUHChE0EwYHCjQtFRkMYzkUGigVAyo3DRkCJ3s0NBJQHAUIcFIZdRkDBxkOChRQLSgeEFUIHDoTCBkXBQAHBg4WFBktcTUtDmguIy4PPnkzIgp7AgENBDoNHxg HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1189
date: Sat, 26 Nov 2022 12:50:51 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: usmJkYdNtu8r0HR0thimfmQoJwnHQRvJOyQJ_drai9TgSrl-SpLtjg==
X-Firefox-Spdy: h2
watchingssu.com/SXN2NkgoERVbdyhOFBA9Ox9LE3oPVkRwLCQeDF0uLUtEQSkwHVhVJCYGElA6Jh0CGCYsB1MEDjA+LlIOEB00ZQ8KADNieBwWP2BxADJGfHAcQzNuAB0qOH4jDzg4ZCcjFx5GehwELF0BMBgleBA9ITtkLxw3M1IiDRswUA0BGzNwHnEmE3AGHiY0eyYRQyduCTMmOHE/PjA9QREfJQ4COgsLJ24JICEQfh59PTp3fComMHx7AzYjUBp7MSdnCiIyOnc/HCsRd3obQz90Dx01PmcvDzQSYzAINTNnABtDP3QJCgQ7ZC8fIBJfCh8yRlVxHzYnYxoIXhJ+GS42MHt4LTcVcxJ4JUcCChEeNGcZDyolfC8iFTBzHQ0mM3cJG0AgYhkIMSVSeQAkIXcdLjE0DwIcHRVdGRg1NVd5AyQkczh5VRxFJycDS0YwGjQbBXk/JiJaOAw5
200 OK 1.2 kB URL HTTP/2 watchingssu.com/SXN2NkgoERVbdyhOFBA9Ox9LE3oPVkRwLCQeDF0uLUtEQSkwHVhVJCYGElA6Jh0CGCYsB1MEDjA+LlIOEB00ZQ8KADNieBwWP2BxADJGfHAcQzNuAB0qOH4jDzg4ZCcjFx5GehwELF0BMBgleBA9ITtkLxw3M1IiDRswUA0BGzNwHnEmE3AGHiY0eyYRQyduCTMmOHE/PjA9QREfJQ4COgsLJ24JICEQfh59PTp3fComMHx7AzYjUBp7MSdnCiIyOnc/HCsRd3obQz90Dx01PmcvDzQSYzAINTNnABtDP3QJCgQ7ZC8fIBJfCh8yRlVxHzYnYxoIXhJ+GS42MHt4LTcVcxJ4JUcCChEeNGcZDyolfC8iFTBzHQ0mM3cJG0AgYhkIMSVSeQAkIXcdLjE0DwIcHRVdGRg1NVd5AyQkczh5VRxFJycDS0YwGjQbBXk/JiJaOAw5
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3044), with no line terminators
Hash 4ccff19287f35eb5b788e821f1262d94
3f3508d62feeafcd3069fca5d7d66f9bce7aad0f
fad13027cf79413686fb206424d72f988003d7c65167cad7dc605bf9445eec6f
GET /SXN2NkgoERVbdyhOFBA9Ox9LE3oPVkRwLCQeDF0uLUtEQSkwHVhVJCYGElA6Jh0CGCYsB1MEDjA+LlIOEB00ZQ8KADNieBwWP2BxADJGfHAcQzNuAB0qOH4jDzg4ZCcjFx5GehwELF0BMBgleBA9ITtkLxw3M1IiDRswUA0BGzNwHnEmE3AGHiY0eyYRQyduCTMmOHE/PjA9QREfJQ4COgsLJ24JICEQfh59PTp3fComMHx7AzYjUBp7MSdnCiIyOnc/HCsRd3obQz90Dx01PmcvDzQSYzAINTNnABtDP3QJCgQ7ZC8fIBJfCh8yRlVxHzYnYxoIXhJ+GS42MHt4LTcVcxJ4JUcCChEeNGcZDyolfC8iFTBzHQ0mM3cJG0AgYhkIMSVSeQAkIXcdLjE0DwIcHRVdGRg1NVd5AyQkczh5VRxFJycDS0YwGjQbBXk/JiJaOAw5 HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1191
date: Sat, 26 Nov 2022 12:50:51 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7IteNCrRBSKTZDU6PkXSOp06JIsNYgTF9_NpdNwc82m7ceJUCLtUsQ==
X-Firefox-Spdy: h2
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK 26 B URL HTTP/1.1 keydawnawe.com/gwZ1U5hjA8ii/32575
IP
File type ASCII text, with no line terminators
Hash 4e5d65669f8dcd928dad06adf883f025
d771713d758c3348dd7e5b38bb40c7935399ae46
0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Nov 2022 12:50:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ceprovidingsesse.com/WEt4dVR3dBsGaRZ7QUMOMxowEwFtLhwkGm4fSSMsGXgMMQE2PF4BPTx2QEdhYXpJUyQxL0VGZn44DBQgLThFRHIxJR4aaX49RUV6YGVJR3pobQ1IZX4/CBQzZXpeBSAsJ0VEYm5yTENjaH5IQmBp
204 No Content 0 B URL HTTP/2 ceprovidingsesse.com/WEt4dVR3dBsGaRZ7QUMOMxowEwFtLhwkGm4fSSMsGXgMMQE2PF4BPTx2QEdhYXpJUyQxL0VGZn44DBQgLThFRHIxJR4aaX49RUV6YGVJR3pobQ1IZX4/CBQzZXpeBSAsJ0VEYm5yTENjaH5IQmBp
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /WEt4dVR3dBsGaRZ7QUMOMxowEwFtLhwkGm4fSSMsGXgMMQE2PF4BPTx2QEdhYXpJUyQxL0VGZn44DBQgLThFRHIxJR4aaX49RUV6YGVJR3pobQ1IZX4/CBQzZXpeBSAsJ0VEYm5yTENjaH5IQmBp HTTP/1.1
Host: ceprovidingsesse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5cOzRSmC8P9Wy2yE84cvh83NbeJR6E4jADuDKRAnXAYpmat6Fyx2kqETrjBXk%2BNZRbABKLfzYq99%2FJaOP%2B42y6lIukTV2zOXYy2%2BSx4dnddAc7PfzcxUNfeie50ZFmXMKAw4SZgUjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c09109f4b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
watchingssu.com/TVhwNjYsOhNbCSxlEhBDPzRNEwQLfUJwUiA1Cl1QKWBCQVc0Nl5VWiItFFBEIjYEGFgoLFUEcCw5NkZXLB4XengZCT9sTjoiIFpgJQA3eF8VNQh5ew4zOHheJTY/Tw5oajJxXwASPHICOhUJfw4DCzEEUA8vGXJxKSkkXGcHFjQHYCs/QAZ5Gw4AYlw+fUJ0dSAOE1B1dRIqZ2N8ETFzBg8cBBMECw8YA1IpHwB4VyEwCXpnCGo0cmM5H0MHVywyIVVQGygBVwclaid+Dz0THgdXLDFAdHghbQVQBz45JGFePB03A1UrahtHUBsoAX10eGEnTkI/DzcHcSw2XXh4LDQXD2Y6Kwp0BXQ3PFtGFDlCRm8sDhhEUHwoH3JcADc0YgIFER4PVwU0HEdUfQIfYl90NidnECcrH1hGcDk3UEQ0CzRQbiQgJFt+IQ
200 OK 1.2 kB URL HTTP/2 watchingssu.com/TVhwNjYsOhNbCSxlEhBDPzRNEwQLfUJwUiA1Cl1QKWBCQVc0Nl5VWiItFFBEIjYEGFgoLFUEcCw5NkZXLB4XengZCT9sTjoiIFpgJQA3eF8VNQh5ew4zOHheJTY/Tw5oajJxXwASPHICOhUJfw4DCzEEUA8vGXJxKSkkXGcHFjQHYCs/QAZ5Gw4AYlw+fUJ0dSAOE1B1dRIqZ2N8ETFzBg8cBBMECw8YA1IpHwB4VyEwCXpnCGo0cmM5H0MHVywyIVVQGygBVwclaid+Dz0THgdXLDFAdHghbQVQBz45JGFePB03A1UrahtHUBsoAX10eGEnTkI/DzcHcSw2XXh4LDQXD2Y6Kwp0BXQ3PFtGFDlCRm8sDhhEUHwoH3JcADc0YgIFER4PVwU0HEdUfQIfYl90NidnECcrH1hGcDk3UEQ0CzRQbiQgJFt+IQ
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3027), with no line terminators
Hash 88ce7e6cc3be8912574a7980a53b0420
cb83a3ddf95d00539cb5c3d274a92db67a38d51a
57f003c5c6741afa996b88b27b663e173dd090729cb05a142d298b6939f84c3b
GET /TVhwNjYsOhNbCSxlEhBDPzRNEwQLfUJwUiA1Cl1QKWBCQVc0Nl5VWiItFFBEIjYEGFgoLFUEcCw5NkZXLB4XengZCT9sTjoiIFpgJQA3eF8VNQh5ew4zOHheJTY/Tw5oajJxXwASPHICOhUJfw4DCzEEUA8vGXJxKSkkXGcHFjQHYCs/QAZ5Gw4AYlw+fUJ0dSAOE1B1dRIqZ2N8ETFzBg8cBBMECw8YA1IpHwB4VyEwCXpnCGo0cmM5H0MHVywyIVVQGygBVwclaid+Dz0THgdXLDFAdHghbQVQBz45JGFePB03A1UrahtHUBsoAX10eGEnTkI/DzcHcSw2XXh4LDQXD2Y6Kwp0BXQ3PFtGFDlCRm8sDhhEUHwoH3JcADc0YgIFER4PVwU0HEdUfQIfYl90NidnECcrH1hGcDk3UEQ0CzRQbiQgJFt+IQ HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1177
date: Sat, 26 Nov 2022 12:50:51 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -EA3X1OscdGcM0p0ATWFs9m3JxKEaU2ijkxUGLvj6ACKc-IA3D5OPw==
X-Firefox-Spdy: h2
ceprovidingsesse.com/UmtJS1h9VCo4ZQgFAxo9Py0bGjUUKB8nFhAyIgUABwA9IQsUMm8/MTZWfn1pY1N/bSg7D3R6fiEfKD8tIVZ4bTE8DSZ2fiRWeGVrZkV6enZjTTx2aXQfOSo/b1pvOywmB3R6bmRSfX1vYl55fGpm
204 No Content 0 B URL HTTP/2 ceprovidingsesse.com/UmtJS1h9VCo4ZQgFAxo9Py0bGjUUKB8nFhAyIgUABwA9IQsUMm8/MTZWfn1pY1N/bSg7D3R6fiEfKD8tIVZ4bTE8DSZ2fiRWeGVrZkV6enZjTTx2aXQfOSo/b1pvOywmB3R6bmRSfX1vYl55fGpm
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UmtJS1h9VCo4ZQgFAxo9Py0bGjUUKB8nFhAyIgUABwA9IQsUMm8/MTZWfn1pY1N/bSg7D3R6fiEfKD8tIVZ4bTE8DSZ2fiRWeGVrZkV6enZjTTx2aXQfOSo/b1pvOywmB3R6bmRSfX1vYl55fGpm HTTP/1.1
Host: ceprovidingsesse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HIHmekr9CTGMmV9v5NTbps0uthKAo6oEobQf1b7l%2Bi1wCY6qBYk%2FumE91Uf6MLThNm739dtUSBglSRUb%2Fou6jGDThUy37Xs1AN2oehbwT9ufU0N2ff7AqsCcsvD0zwp6QUo32b0qvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c09109eeb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ceprovidingsesse.com/bnNFM2FBTCZAXAs3H3w2JjUVcSlbAhd2JCsXKEskPyITAAAFImNHCApOfQRXXUJ9FREHF3gBWEgAMVIVGwB4AkcHHSNcXEgFeAJPXl1zA09fVTAOUEgHNVIGU0JjQxUaH3gCV1hKcQVWXkZ1BFRb
204 No Content 0 B URL HTTP/2 ceprovidingsesse.com/bnNFM2FBTCZAXAs3H3w2JjUVcSlbAhd2JCsXKEskPyITAAAFImNHCApOfQRXXUJ9FREHF3gBWEgAMVIVGwB4AkcHHSNcXEgFeAJPXl1zA09fVTAOUEgHNVIGU0JjQxUaH3gCV1hKcQVWXkZ1BFRb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bnNFM2FBTCZAXAs3H3w2JjUVcSlbAhd2JCsXKEskPyITAAAFImNHCApOfQRXXUJ9FREHF3gBWEgAMVIVGwB4AkcHHSNcXEgFeAJPXl1zA09fVTAOUEgHNVIGU0JjQxUaH3gCV1hKcQVWXkZ1BFRb HTTP/1.1
Host: ceprovidingsesse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QAmmd0R317Qwdu1br%2FY06HZOo9K0Ez4r7bVYFica1LMcIep4j%2Bfo4507EqoHypxyQ5McIQV9k%2BHWuFJNPpkgjQofFwesYcjP7299fi2NB7PS12jCkvk%2FKxGe%2B1GxmuPAsKIHwoKU%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c0911a02b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
watchingssu.com/eHR1aW4ZFhYEURlJF08bChhITFw+UUcvChUZDwIIHExHHg8BGlsKAhcBEQ8cFxoBRwAdAFBbKCsXRD9eHCASOCEQGyErGRtMMCwJKCYiLygpJRk/Pg8XFD8JNhswLDwZPjIwIDkiNCEqPEwNPAItHDEBKz4lRiQ3PjIsPA8+PSQ/BjobJz8gIjIPDSQpJkEhJCoHECs8SAcxAR43MSEKOT0yOz8nOiI8PzwPAj07Ai0xGyspNQNEDTQuMj0qKAsdPTsaGzw2ICYtNQUtIQ82JCoFNh8nLx0xIhgwXC01BS0nEEQXLQUcAycTDRwlIjwjKQMNPjQSWS84LRM5GygCOTg4BDw9JTczKh4yMyEtOiUCLxZNLCMEDQEmAgEtIiEnLC09PgI7BS4RMgANKjFECiIbMSwTLS06Ej4FLRE3BAY+Uh8aARYESA1fGiNGEBoQACwiKhI
200 OK 1.2 kB URL HTTP/2 watchingssu.com/eHR1aW4ZFhYEURlJF08bChhITFw+UUcvChUZDwIIHExHHg8BGlsKAhcBEQ8cFxoBRwAdAFBbKCsXRD9eHCASOCEQGyErGRtMMCwJKCYiLygpJRk/Pg8XFD8JNhswLDwZPjIwIDkiNCEqPEwNPAItHDEBKz4lRiQ3PjIsPA8+PSQ/BjobJz8gIjIPDSQpJkEhJCoHECs8SAcxAR43MSEKOT0yOz8nOiI8PzwPAj07Ai0xGyspNQNEDTQuMj0qKAsdPTsaGzw2ICYtNQUtIQ82JCoFNh8nLx0xIhgwXC01BS0nEEQXLQUcAycTDRwlIjwjKQMNPjQSWS84LRM5GygCOTg4BDw9JTczKh4yMyEtOiUCLxZNLCMEDQEmAgEtIiEnLC09PgI7BS4RMgANKjFECiIbMSwTLS06Ej4FLRE3BAY+Uh8aARYESA1fGiNGEBoQACwiKhI
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3043), with no line terminators
Hash d5ddc457e84caffc00bbc6d1d6c0f1c3
247528972f6622f0f6c4e4ea5e72d414d7db113b
6b3ab7a2b2f546bb486df0f3cd0116fc49f892c3888bfe82b1c2e0e2542b418c
GET /eHR1aW4ZFhYEURlJF08bChhITFw+UUcvChUZDwIIHExHHg8BGlsKAhcBEQ8cFxoBRwAdAFBbKCsXRD9eHCASOCEQGyErGRtMMCwJKCYiLygpJRk/Pg8XFD8JNhswLDwZPjIwIDkiNCEqPEwNPAItHDEBKz4lRiQ3PjIsPA8+PSQ/BjobJz8gIjIPDSQpJkEhJCoHECs8SAcxAR43MSEKOT0yOz8nOiI8PzwPAj07Ai0xGyspNQNEDTQuMj0qKAsdPTsaGzw2ICYtNQUtIQ82JCoFNh8nLx0xIhgwXC01BS0nEEQXLQUcAycTDRwlIjwjKQMNPjQSWS84LRM5GygCOTg4BDw9JTczKh4yMyEtOiUCLxZNLCMEDQEmAgEtIiEnLC09PgI7BS4RMgANKjFECiIbMSwTLS06Ej4FLRE3BAY+Uh8aARYESA1fGiNGEBoQACwiKhI HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1192
date: Sat, 26 Nov 2022 12:50:51 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aaF06AK-qxYp7r0cnyFE0Vw4OtGaDhSehLSSgmRlAt1qhKhvqoOKaQ==
X-Firefox-Spdy: h2
ceprovidingsesse.com/ekJ6UDhVfRkjBRsaMCVZPBAgAVQCGyAWAT0aPCBSIgcKNWAtF1wkUR5/Q2QBQnROdkgTJkdhAFwxDjFMDzFHYR4TLBw/BVw0R2EWSmxIfgpcN0dhHg4yGzcFS2QKJEwWf0tmDkN2TGcIT3JNZg4
204 No Content 0 B URL HTTP/2 ceprovidingsesse.com/ekJ6UDhVfRkjBRsaMCVZPBAgAVQCGyAWAT0aPCBSIgcKNWAtF1wkUR5/Q2QBQnROdkgTJkdhAFwxDjFMDzFHYR4TLBw/BVw0R2EWSmxIfgpcN0dhHg4yGzcFS2QKJEwWf0tmDkN2TGcIT3JNZg4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ekJ6UDhVfRkjBRsaMCVZPBAgAVQCGyAWAT0aPCBSIgcKNWAtF1wkUR5/Q2QBQnROdkgTJkdhAFwxDjFMDzFHYR4TLBw/BVw0R2EWSmxIfgpcN0dhHg4yGzcFS2QKJEwWf0tmDkN2TGcIT3JNZg4 HTTP/1.1
Host: ceprovidingsesse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SwAmiAGAy6qTfY10PAYGDMX4k4DbelXWHL1fPemYRVAbazMxeRw3fgfRNivaLr0uPCjJp4Y7O4RqTtCqoi8qggof4jeTStaevfZZ3szFBf35DTD9jn9Xrb4jOFzE50%2FvXGUreI427g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c0912a17b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 4831d5e92555537513ad4c63c2e39426
741b4861613e04bb1b22a6980b7a8a6955fd0da7
d858beed523fd699997da5717fc1287fcc6ea31eac495d7d719b46010173fe83
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D858BEED523FD699997DA5717FC1287FCC6EA31EAC495D7D719B46010173FE83"
Last-Modified: Fri, 25 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16629
Expires: Sat, 26 Nov 2022 17:28:00 GMT
Date: Sat, 26 Nov 2022 12:50:51 GMT
Connection: keep-alive
ceprovidingsesse.com/S1JnMTNkbQRCDi8VPWlkICoiZ3QFOwFkcR8LCl0GGhQtRFElA0FFWi9vXwMGcmNWF0MiNloCAW0hE1BHPiFaAwN7ZUFYXS09WgMVPW9XHwtlY1UfA20nWgAVPyIGVg56dBdFRydvVgcFcmZRBgN+YlAFBg
204 No Content 0 B URL HTTP/2 ceprovidingsesse.com/S1JnMTNkbQRCDi8VPWlkICoiZ3QFOwFkcR8LCl0GGhQtRFElA0FFWi9vXwMGcmNWF0MiNloCAW0hE1BHPiFaAwN7ZUFYXS09WgMVPW9XHwtlY1UfA20nWgAVPyIGVg56dBdFRydvVgcFcmZRBgN+YlAFBg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /S1JnMTNkbQRCDi8VPWlkICoiZ3QFOwFkcR8LCl0GGhQtRFElA0FFWi9vXwMGcmNWF0MiNloCAW0hE1BHPiFaAwN7ZUFYXS09WgMVPW9XHwtlY1UfA20nWgAVPyIGVg56dBdFRydvVgcFcmZRBgN+YlAFBg HTTP/1.1
Host: ceprovidingsesse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zcDHovoPoPkF14LJciEgZDmZ7Lc6SYrLp%2Fw50HJH3ull7BhEN%2FFu4%2BIHUdhXrJljw%2FXkZbnfe%2FGy7HN%2FZeJQ7HYPHddfs0dEPj4GVby68F%2Ff3fgaFDCnEg4j1aFoHjsW0g7W7qutxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c0913a33b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ceprovidingsesse.com/Q1A2eEtsb1ULdg07cwIvKB1+GwoFE1MfEToSBi4yARhzPBlwBRAMIidtAU5/cmQHXjsqNAtJbTAkVww+MG0HXiItNllFbTVtB1Z4d34FSWVydkNFemUkRhksfmEQCD83PAtJfXVpAk58c2UGT3Ny
204 No Content 0 B URL HTTP/2 ceprovidingsesse.com/Q1A2eEtsb1ULdg07cwIvKB1+GwoFE1MfEToSBi4yARhzPBlwBRAMIidtAU5/cmQHXjsqNAtJbTAkVww+MG0HXiItNllFbTVtB1Z4d34FSWVydkNFemUkRhksfmEQCD83PAtJfXVpAk58c2UGT3Ny
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Q1A2eEtsb1ULdg07cwIvKB1+GwoFE1MfEToSBi4yARhzPBlwBRAMIidtAU5/cmQHXjsqNAtJbTAkVww+MG0HXiItNllFbTVtB1Z4d34FSWVydkNFemUkRhksfmEQCD83PAtJfXVpAk58c2UGT3Ny HTTP/1.1
Host: ceprovidingsesse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ABcddkUTuRXqAZf1zqWTm3YY0Fq%2FY61Yy7f3tkeZX9dlVZtjtVZz1bvNapBASgl5so60VDbWqtq%2F2zxiaNWFMfz0m6jp8NABdP6M9Fz8g5Efz4IBGs%2FjD9RfIqjev%2BZ%2BakxqbBwUCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c0914a3ab4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash fffc0b2cdd90e9f5d68d6a6fdb81cdeb
fa2076003226b52b92888ca52b30e1717b0d0b7b
78cdb52bc1d3554ac53e2de8fbf8fe348f5b4ff2d86208c160474983133d608e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2434
Cache-Control: max-age=146710
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:51 GMT
Etag: "63819c40-117"
Expires: Mon, 28 Nov 2022 05:36:01 GMT
Last-Modified: Sat, 26 Nov 2022 04:55:28 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
megaup.net/imageads/005.gif
200 OK 216 kB URL HTTP/2 megaup.net/imageads/005.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Size 216 kB (216289 bytes)
Hash 5c5bf0825af3dd18a10beb7823a61adc
3bd9d6cee30c45793947a14123413cfcfb75f966
67c74c7464572c528046ee559cdb616fa751c830083c30785f54ad6423fc5dfb
GET /imageads/005.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: image/gif
content-length: 216289
last-modified: Thu, 02 Aug 2018 19:05:08 GMT
vary: Accept-Encoding
etag: "5b6355e4-34ce1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/eR2tjMUwkBA1XczMCBwx0cF1QAHRhARBeIjdWAFInci0yfSkzIixoajMRBwx8YQcCXyt6TQZfL3paRVAoJVZXFzg3BAgMIj4RDEcuJQkGWmoyCl5cIz0CD10tYlklBGJ3TlEBZDACDVUjMBhGA3wpH0YDfHZbTQFpdClGA3wwAg0HeGJYIRR+dxNVBWl0KU-YDfDUdRgINdltWH3xuTlEBKyIICF5pdS1RAX13W1IBfWJZU1clNQ4FXjRiWSUAfHJFUxc5elo
200 OK 455 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/eR2tjMUwkBA1XczMCBwx0cF1QAHRhARBeIjdWAFInci0yfSkzIixoajMRBwx8YQcCXyt6TQZfL3paRVAoJVZXFzg3BAgMIj4RDEcuJQkGWmoyCl5cIz0CD10tYlklBGJ3TlEBZDACDVUjMBhGA3wpH0YDfHZbTQFpdClGA3wwAg0HeGJYIRR+dxNVBWl0KU-YDfDUdRgINdltWH3xuTlEBKyIICF5pdS1RAX13W1IBfWJZU1clNQ4FXjRiWSUAfHJFUxc5elo
IP
File type ASCII text, with very long lines (596), with no line terminators
Hash 00ab096e129a6a0a0b7fc7fd7e8cd548
ce3229c13093e48110d1b214d75ee45686d95abe
148bc3e53b7804cdced10a506ee214e07bce468dd214cceec319057c0b822155
GET /eR2tjMUwkBA1XczMCBwx0cF1QAHRhARBeIjdWAFInci0yfSkzIixoajMRBwx8YQcCXyt6TQZfL3paRVAoJVZXFzg3BAgMIj4RDEcuJQkGWmoyCl5cIz0CD10tYlklBGJ3TlEBZDACDVUjMBhGA3wpH0YDfHZbTQFpdClGA3wwAg0HeGJYIRR+dxNVBWl0KU-YDfDUdRgINdltWH3xuTlEBKyIICF5pdS1RAX13W1IBfWJZU1clNQ4FXjRiWSUAfHJFUxc5elo HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://watchingssu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 455
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n5zQx-8zGAveKY9ep6HUFe4Uc9QhoWDXh-WkMPJ8K03mkJkg0WV34A==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/yMXdFYnBSGCsET0UeIV9IA0J8U0EXHTYNHkFKNRojdhp2UwZkIykSNXtRMRgUDEdjDhFfEHhEFV8UeFNWUBMnX0QXAzUNGwwCKwYVVx4rBxQXAiRfHV4NLA4cUFJ3JEUfR2BQQBkALAwUXgA2R0IBGTFHQgFGdUxAFEQHR0IBACwMRgVSdiBVA0c9VEQURA-dHQgEFM0dDcEZ1V14BXmBQQFYSJgkfFEUDUEAAR3VTQABSd1IWWAUgBB9JUnckQQFCa1JWREp0
200 OK 369 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/yMXdFYnBSGCsET0UeIV9IA0J8U0EXHTYNHkFKNRojdhp2UwZkIykSNXtRMRgUDEdjDhFfEHhEFV8UeFNWUBMnX0QXAzUNGwwCKwYVVx4rBxQXAiRfHV4NLA4cUFJ3JEUfR2BQQBkALAwUXgA2R0IBGTFHQgFGdUxAFEQHR0IBACwMRgVSdiBVA0c9VEQURA-dHQgEFM0dDcEZ1V14BXmBQQFYSJgkfFEUDUEAAR3VTQABSd1IWWAUgBB9JUnckQQFCa1JWREp0
IP
File type ASCII text, with very long lines (474), with no line terminators
Hash d464a034e4df9aa12d65c2e6fa75a999
442ac8a68da5b57c8e63aa805dfb575c02d411e0
117d9588c18b25014cf5a8a918bb2c7f521269096682ad31ef3447462661ee33
GET /yMXdFYnBSGCsET0UeIV9IA0J8U0EXHTYNHkFKNRojdhp2UwZkIykSNXtRMRgUDEdjDhFfEHhEFV8UeFNWUBMnX0QXAzUNGwwCKwYVVx4rBxQXAiRfHV4NLA4cUFJ3JEUfR2BQQBkALAwUXgA2R0IBGTFHQgFGdUxAFEQHR0IBACwMRgVSdiBVA0c9VEQURA-dHQgEFM0dDcEZ1V14BXmBQQFYSJgkfFEUDUEAAR3VTQABSd1IWWAUgBB9JUnckQQFCa1JWREp0 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://watchingssu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 369
date: Sat, 26 Nov 2022 12:50:51 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Zob5i4ApzEVLEBAsEgMedZKBh1TdS2Vdb90j1GJQRkrb2W4NCEMXkQ==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/YY0VWRTEAKjgjDhcsMngGVXRnfQdFLyUqXxN4PTNTEyxvfUMWMRoUZiswAmNFGSFrdRcPJDgiDEUgOCYMUmM3IVNecXAxQQwuaytIGSogJ1MBID1jRAJ4OypLCik6JBRRA2NrAUZ3Zm1GCisyKkYQYGR1XxdgZHUAU2tmYAIhYGR1RgorYHEUUAdzdwEbc2-JgAiFgZHVDFWBlBABTcHh1GEZ3ZiJUAC45YAMld2Z0AVN0ZnQUUXUwLEMGIzk9FFEDZ3UETXVwMAxS
200 OK 601 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/YY0VWRTEAKjgjDhcsMngGVXRnfQdFLyUqXxN4PTNTEyxvfUMWMRoUZiswAmNFGSFrdRcPJDgiDEUgOCYMUmM3IVNecXAxQQwuaytIGSogJ1MBID1jRAJ4OypLCik6JBRRA2NrAUZ3Zm1GCisyKkYQYGR1XxdgZHUAU2tmYAIhYGR1RgorYHEUUAdzdwEbc2-JgAiFgZHVDFWBlBABTcHh1GEZ3ZiJUAC45YAMld2Z0AVN0ZnQUUXUwLEMGIzk9FFEDZ3UETXVwMAxS
IP
File type ASCII text, with very long lines (832), with no line terminators
Hash 43d8e36531f493b0d46ad92db1b2aa98
cdb09dceb3a8d6992019a01a2d2edcf2b289452d
50b4654243b6c3ff675ce6e7b37c780245905c6b6d01c719d5973687caaaa1ac
GET /YY0VWRTEAKjgjDhcsMngGVXRnfQdFLyUqXxN4PTNTEyxvfUMWMRoUZiswAmNFGSFrdRcPJDgiDEUgOCYMUmM3IVNecXAxQQwuaytIGSogJ1MBID1jRAJ4OypLCik6JBRRA2NrAUZ3Zm1GCisyKkYQYGR1XxdgZHUAU2tmYAIhYGR1RgorYHEUUAdzdwEbc2-JgAiFgZHVDFWBlBABTcHh1GEZ3ZiJUAC45YAMld2Z0AVN0ZnQUUXUwLEMGIzk9FFEDZ3UETXVwMAxS HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://watchingssu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 601
date: Sat, 26 Nov 2022 12:50:52 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 02H-Pea7cyEU2Zeoug53T-ckxJ2Y31vam-PBWLhjsCvobPvGAnVs1A==
X-Firefox-Spdy: h2
platform.bidgear.com/media/img/b15.png
200 OK 649 B URL HTTP/2 platform.bidgear.com/media/img/b15.png
IP
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash d832fb80c97ff291b952757bb98240d2
63732e61a0784ed68fde494f83e4686a5c4bf7fa
7b35c11af8accdb40a14303dd3ae2762a97d2527933c56b6c9be6da2d0d11943
GET /media/img/b15.png HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: image/png
content-length: 649
last-modified: Mon, 25 Jul 2022 09:43:43 GMT
etag: "62de65cf-289"
expires: Thu, 22 Dec 2022 09:44:57 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
cf-cache-status: HIT
age: 356735
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8o1FV74YhWMfR%2FAa5lu4UeKX10Cf%2FB%2BFkkUvsvgH38yebBUuRFy7mYqN74B2j9k4ADbc6S5QAPYtgFnzjj0mBX8LSNRsHzuaEzI7T5giTeT4RlK4mJRA4Bhrlz8Qzc9Ts5OJGvLY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c0931e90b505-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b3e771badbfdde30c08bd4e9e8f2475
d42c4f8054b0ae059bcc9636bfb76c64e3c1273a
c24d73da68ba86fedbf25cb52696c600834402dcf723705ad29f896dda558aad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C24D73DA68BA86FEDBF25CB52696C600834402DCF723705AD29F896DDA558AAD"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=427
Expires: Sat, 26 Nov 2022 12:57:59 GMT
Date: Sat, 26 Nov 2022 12:50:52 GMT
Connection: keep-alive
cdn.purpleads.io/video-agent.js?publisherId=3cbb0201d97a2713cdc7b8284a6018c0:12ba07f36ad75faf8474b45232c34095e60db9bba8b910c63bd25a84dbe49b2358fc816c33104b67ff752f6837ddf9f037b306459421d61f484a6dfbf846a003
200 OK 15 kB URL HTTP/2 cdn.purpleads.io/video-agent.js?publisherId=3cbb0201d97a2713cdc7b8284a6018c0:12ba07f36ad75faf8474b45232c34095e60db9bba8b910c63bd25a84dbe49b2358fc816c33104b67ff752f6837ddf9f037b306459421d61f484a6dfbf846a003
IP
File type Unicode text, UTF-8 text, with very long lines (43290), with no line terminators
Hash 7fc0d255881423d2a1fac4caa027bd71
ef65f30cc165b3359e9abae7dcabe14e624a4efc
053acf5077e8aeab1e2277c5f00d9d7936064ca2b1b77e35e25148ea32f07502
GET /video-agent.js?publisherId=3cbb0201d97a2713cdc7b8284a6018c0:12ba07f36ad75faf8474b45232c34095e60db9bba8b910c63bd25a84dbe49b2358fc816c33104b67ff752f6837ddf9f037b306459421d61f484a6dfbf846a003 HTTP/1.1
Host: cdn.purpleads.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 14935
last-modified: Wed, 23 Nov 2022 14:06:42 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 26 Nov 2022 08:42:16 GMT
etag: "7fc0d255881423d2a1fac4caa027bd71"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CirRhfk-svU13G2C4UHtE9clFaaMBEGzFgR7zLG4jKV24dvnbivKzw==
age: 14917
X-Firefox-Spdy: h2
cdn.purpleads.io/agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
200 OK 14 kB URL HTTP/2 cdn.purpleads.io/agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
IP
File type Unicode text, UTF-8 text, with very long lines (55480), with no line terminators
Hash a3bfc94d9e4a8dd2d5b78ad5fa404ae5
e217a54a2287525807532aef1ad9aaff2bba5be1
a2abcf9d6141c7aa9c628e99def49a14b3532ec215015822cdb348cb82da186c
GET /agent.js?publisherId=70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655 HTTP/1.1
Host: cdn.purpleads.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 13848
last-modified: Thu, 24 Nov 2022 08:42:09 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sat, 26 Nov 2022 08:42:15 GMT
etag: "a3bfc94d9e4a8dd2d5b78ad5fa404ae5"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JzneQOnB-lT1ecvpI1B9u8lS56-4SXlQfHPsVXE4ycB-MOrXmFLfcg==
age: 14918
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/Sc1V0dTgQOhoTBwc8EEgPRWFFQQlVPwcaVgNoEERaJGYNAVAHDD8xUlUhDhEFQ3MYFFYUaFIQVhBoRVNZFzdJQR4HJRseBR0sDhpOETcWEFNVIBVIVRwvHRlUEnBGMw1dZVFHCFsiHRtcHCIHUApDOwBQCkNkRFsIVmY2UApDIh0bDkdwRzcdQWUMQwxWZj-ZQCkMnAlALMmREQBZDfFFHCBQwFx5XVmcyRwhCZURECEJwRkVeGicRE1cLcEYzCUNgWkUeBmhF
200 OK 607 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/Sc1V0dTgQOhoTBwc8EEgPRWFFQQlVPwcaVgNoEERaJGYNAVAHDD8xUlUhDhEFQ3MYFFYUaFIQVhBoRVNZFzdJQR4HJRseBR0sDhpOETcWEFNVIBVIVRwvHRlUEnBGMw1dZVFHCFsiHRtcHCIHUApDOwBQCkNkRFsIVmY2UApDIh0bDkdwRzcdQWUMQwxWZj-ZQCkMnAlALMmREQBZDfFFHCBQwFx5XVmcyRwhCZURECEJwRkVeGicRE1cLcEYzCUNgWkUeBmhF
IP
File type ASCII text, with very long lines (829), with no line terminators
Hash 82d3aca4c47a176a9ae5bece040cbf21
aaa57c6d3605a33a7781d1e46f393c0053289122
8fb5374a3f53581871443743f49aa97f6cc5cce813e9ddf234b3bce468dc1d7c
GET /Sc1V0dTgQOhoTBwc8EEgPRWFFQQlVPwcaVgNoEERaJGYNAVAHDD8xUlUhDhEFQ3MYFFYUaFIQVhBoRVNZFzdJQR4HJRseBR0sDhpOETcWEFNVIBVIVRwvHRlUEnBGMw1dZVFHCFsiHRtcHCIHUApDOwBQCkNkRFsIVmY2UApDIh0bDkdwRzcdQWUMQwxWZj-ZQCkMnAlALMmREQBZDfFFHCBQwFx5XVmcyRwhCZURECEJwRkVeGicRE1cLcEYzCUNgWkUeBmhF HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://watchingssu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 607
date: Sat, 26 Nov 2022 12:50:52 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zglRz4K-oH5Qx0-SVpq6eSTj40IGD1vLPzdSjtsf1BMGmk3AFwmiNw==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/aaFpaaFgLNTQOZxwzPlVhXGNiXmxOMCkHNhhnOy8+GiMJLD4wMyI8NSA2fBwiDGdqTjQJND1Vfg00OVVpTjs+CmVcfC8JZQU1IAE0BDt/Wh5ddGpNalhyLQE2DDUtG31aajQcfVpqa1h2WH9pKn1aai0BNl5uf1saTWhqEG5cf2kqfVpqKB59WxtrWG1Gan-NNalg9PwszB39oLmpYa2pYaVhrf1poDjMoDT4HIn9aHllqb0ZoTi9nWQ
200 OK 191 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/aaFpaaFgLNTQOZxwzPlVhXGNiXmxOMCkHNhhnOy8+GiMJLD4wMyI8NSA2fBwiDGdqTjQJND1Vfg00OVVpTjs+CmVcfC8JZQU1IAE0BDt/Wh5ddGpNalhyLQE2DDUtG31aajQcfVpqa1h2WH9pKn1aai0BNl5uf1saTWhqEG5cf2kqfVpqKB59WxtrWG1Gan-NNalg9PwszB39oLmpYa2pYaVhrf1poDjMoDT4HIn9aHllqb0ZoTi9nWQ
IP
File type ASCII text, with no line terminators
Hash c7874473647e33373d81bf98d90ecc6d
3411e5c20fd0c2165753608564ed3a71840f1564
24ac7af4387275cb607addb453ba76d1b6622f6f8f398da095a9a603f329a041
GET /aaFpaaFgLNTQOZxwzPlVhXGNiXmxOMCkHNhhnOy8+GiMJLD4wMyI8NSA2fBwiDGdqTjQJND1Vfg00OVVpTjs+CmVcfC8JZQU1IAE0BDt/Wh5ddGpNalhyLQE2DDUtG31aajQcfVpqa1h2WH9pKn1aai0BNl5uf1saTWhqEG5cf2kqfVpqKB59WxtrWG1Gan-NNalg9PwszB39oLmpYa2pYaVhrf1poDjMoDT4HIn9aHllqb0ZoTi9nWQ HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://watchingssu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 191
date: Sat, 26 Nov 2022 12:50:52 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KXcxmkN4G6YoS5uut4XgXm1eJryQQqxPE1lDS3XcCqLwipPwh6UzLA==
X-Firefox-Spdy: h2
imp9.bidgear.com/rec?t=1&z=6192&uuid=1acd226fa0634a72bb3d14a304178ddb&p=61&g=NO&token=4a44335432&tbg=1669467051
200 OK 599 B URL HTTP/2 imp9.bidgear.com/rec?t=1&z=6192&uuid=1acd226fa0634a72bb3d14a304178ddb&p=61&g=NO&token=4a44335432&tbg=1669467051
IP
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6192&uuid=1acd226fa0634a72bb3d14a304178ddb&p=61&g=NO&token=4a44335432&tbg=1669467051 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X16xFwRbG6cVrfuWPYjPqY%2FdrfCNDx7OrS4jKYS0er%2FhaKJ3H397GOyDjfMVjl7cq5OVR8jBAb7SMvvsxf4yD6C%2B9hTQEv36hRGakWspJINH1LPROhDIaOK0ONRGeCDad9o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c0931e94b505-OSL
X-Firefox-Spdy: h2
cdn.psdn.xyz/prebid-video-7.22.0-2022-10-26.gz.js
200 OK 86 kB URL HTTP/2 cdn.psdn.xyz/prebid-video-7.22.0-2022-10-26.gz.js
IP
File type ASCII text, with very long lines (65020)
Hash 700d1de734b4979c4c3059b613e9d7b1
0a7d2ad10cba258cfc2e0376240852a4ae5f4012
2031fbefbf1b070dcf0ebb746438e628fdd59c7daac6952000ef9056b7294eb6
GET /prebid-video-7.22.0-2022-10-26.gz.js HTTP/1.1
Host: cdn.psdn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-encoding: gzip
content-length: 86507
content-type: application/javascript
last-modified: Wed, 26 Oct 2022 13:24:00 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "700d1de734b4979c4c3059b613e9d7b1"
cache-control: max-age=31536000
x-amz-request-id: tx0000000000001178867eb-00635934f6-34c6886a-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1669467052.dop002.sk1.t,1669467052.cds228.sk1.hn,1669467052.cds218.sk1.c
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
200 OK 951 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
IP
File type PNG image data, 114 x 114, 8-bit colormap, non-interlaced\012- data
Hash 76852bc6b2c028db97322a74e85bd020
ed52fb4de0d51f93277bbaae42fa80ba5f92c31e
8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884
GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: image/png
content-length: 951
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-3b7"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 3f4a7fb0a46243afcdef495930802d62
979a0675885be263f28e6b3cf9a699c8cdd69f04
6428e7f877dc58c23c7ac0d9597d40db3548026b8e5aa5f5c58706841b45bd1c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6428E7F877DC58C23C7AC0D9597D40DB3548026B8E5AA5F5C58706841B45BD1C"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15156
Expires: Sat, 26 Nov 2022 17:03:28 GMT
Date: Sat, 26 Nov 2022 12:50:52 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 407ca8387c360d434a53812c03688310
90e74fa4928adcf8ae410f2eea7956b6ae7f687b
5690f667c20ba6c6daf71668a7c02c6d50383b585521e6f3e7a0ddcf895358d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1138
Cache-Control: max-age=146823
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:52 GMT
Etag: "6381a1c1-1d7"
Expires: Mon, 28 Nov 2022 05:37:55 GMT
Last-Modified: Sat, 26 Nov 2022 05:18:57 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e99fcdc3ed7523948d56cbe1c943fcf3
4b8a3c27fa51771c288a392441d678321d7a3717
60e7c3efee2b4d2fb45d7ddeaee81b3dcd379b3cad9774f51402f09e1dcf9cfc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
watchingssu.com/utx?cb=lBpajZq5l8UY&top=megaup.net&tid=825911
204 No Content 0 B URL HTTP/2 watchingssu.com/utx?cb=lBpajZq5l8UY&top=megaup.net&tid=825911
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=lBpajZq5l8UY&top=megaup.net&tid=825911 HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:52 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 26 Nov 2022 12:51:52 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WnYKLbHdldJqsvPdIMSEn3Amtvep7Z15CXCZ2Hl8v3qoK15K8flVtQ==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e99fcdc3ed7523948d56cbe1c943fcf3
4b8a3c27fa51771c288a392441d678321d7a3717
60e7c3efee2b4d2fb45d7ddeaee81b3dcd379b3cad9774f51402f09e1dcf9cfc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dmmzkfd82wayn.cloudfront.net/
200 OK 73 B URL HTTP/2 dmmzkfd82wayn.cloudfront.net/
IP
File type ASCII text, with no line terminators
Hash de37377b72195a4f064edf7ec8a76676
ed544d5b6a37acad78498099407c648a93316ddb
b3209cc0b1d1b71e85af4e843afe00a3079f3286d52b3fb47e72c6c5c48b8399
GET / HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 73
date: Sat, 26 Nov 2022 12:50:52 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S00KdxATcRjrG_YnV7GEh7avTKjw_KnAiORYmXS2uYRkX-7ZLos5Pg==
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 26 Nov 2022 12:41:08 GMT
expires: Sat, 26 Nov 2022 14:41:08 GMT
cache-control: public, max-age=7200
age: 584
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
societingna.info/dmpndnMNSBQBLAMYC1RJVAITAgMFUEhZHhMNBgMDWAQCAlwFHUkcAFRGRQUeEEhdR19UHgYRLB8ORUxRTllVQEBFSEtUAAMIOB8XREhdVBVCDl5DQhMOSkVDRlNKQktBDEpOFUBfSk5CFFMGQUQTW1IVFVQX
200 OK 23 kB URL HTTP/2 societingna.info/dmpndnMNSBQBLAMYC1RJVAITAgMFUEhZHhMNBgMDWAQCAlwFHUkcAFRGRQUeEEhdR19UHgYRLB8ORUxRTllVQEBFSEtUAAMIOB8XREhdVBVCDl5DQhMOSkVDRlNKQktBDEpOFUBfSk5CFFMGQUQTW1IVFVQX
IP
Hash fc2fe29407643d4e6f112892e0b912bb
a0c8a0d9938744798a48c90fe436ae0626a494fd
5e2fc8986ac866633137461c7ccd6daa44fdedb4f9337180435aa6c9454d98af
Analyzer Verdict Alert fortinet Malware
GET /dmpndnMNSBQBLAMYC1RJVAITAgMFUEhZHhMNBgMDWAQCAlwFHUkcAFRGRQUeEEhdR19UHgYRLB8ORUxRTllVQEBFSEtUAAMIOB8XREhdVBVCDl5DQhMOSkVDRlNKQktBDEpOFUBfSk5CFFMGQUQTW1IVFVQX HTTP/1.1
Host: societingna.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 617176fa495914fc3b6ee27abb9b0f7e=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
etag: W/"e0f0-m/XowGHawjs+GmP9jkn+Y3WETC4"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 398 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (381)
Hash 3b9cbb571c0d1e4564f1deeb01b33eef
d421244120a04efb0924f72b967795abf370885b
cfc11f2963baa001d1bc03bcbfb5c0f6e16a26ddc3cbe85ea77de616331d2cd7
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 26 Nov 2022 12:50:52 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1526494199%3A1669467052357480&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAtSWTjo-Na2x-G-0saKNLZer-obt_fONPg76hqTHb_jVm3DMkyQqlVXbDWIT8WZ567BgDJA5Q
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-enphlXaAeAmh5dNfYGMXpw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 398
server: GSE
set-cookie: __Host-GAPS=1:V87gonKi8T_XiwBDZY2ZEZwFBahCRQ:1YLQOoByTlbAYlgx;Path=/;Expires=Mon, 25-Nov-2024 12:50:52 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
watchingssu.com/utx?cb=5OOWVnEObOjR&top=megaup.net&tid=761186
204 No Content 0 B URL HTTP/2 watchingssu.com/utx?cb=5OOWVnEObOjR&top=megaup.net&tid=761186
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=5OOWVnEObOjR&top=megaup.net&tid=761186 HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:52 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 26 Nov 2022 12:51:52 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vWziN_TA4z97yGbmY5GTNEVllyuCi8pW26w_N379Ht5ZGny40gZVCw==
X-Firefox-Spdy: h2
watchingssu.com/utx?cb=9glH77PYluDE&top=megaup.net&tid=764141
204 No Content 0 B URL HTTP/2 watchingssu.com/utx?cb=9glH77PYluDE&top=megaup.net&tid=764141
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=9glH77PYluDE&top=megaup.net&tid=764141 HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:52 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 26 Nov 2022 12:51:52 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ivMFjtg2uuqMTS09MuQ41Vy_kHfHTVBZzcnxNDDZmNVLZ155QovoRA==
X-Firefox-Spdy: h2
platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1669467050923
200 OK 2.2 kB URL HTTP/2 platform.bidgear.com/async.php?domainid=5593&sizeid=12&zoneid=6192&k=1669467050923
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (5362), with no line terminators
Hash d1fda66ebdf3dfd4be020a1c739e31ed
5ab91a22deb327d555c73fa2d065e7d8e6ae1c0b
13713ac0ff8d0419f0bb0c023e194408a92924608b31c0e83db78c81b7bec5a4
GET /async.php?domainid=5593&sizeid=12&zoneid=6192&k=1669467050923 HTTP/1.1
Host: platform.bidgear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JYQoSDXVYC1BFEx%2F1r%2BRmscG7ChWaHQWT0IsVadFW4FrEhzR8JPxCvBeAg086JrzeGEHMi9xeSxZm18UqDs3aUkafPccbifPDma7h9Lurlue%2Bs6p2Q3LXiN7y2CbMTzlK22qo24o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c0922d78b505-OSL
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 397 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (384)
Hash 213b18235c627d6be3ee4785d11dc9b6
97cc161d1f690889f362ff06daaa48273461044a
855f4006af3e37ee1c45b8654d4ba0771cf32191d2447595bdc6b1b5fcf6c9a2
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 26 Nov 2022 12:50:52 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S1711657166%3A1669467052397471&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=ARgdvAuCo1B4CuLacSFzI8AWJrP6d76UqVlsbfXz0KfdVdnhpC_19WrdQlnqz0HP3Rm6bDGA6SwAwg
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-W-bXiDDCjZEBmMUV01VTxg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 397
server: GSE
set-cookie: __Host-GAPS=1:Nj_nrix46Gt2NS6848sRVZt3YvQ_hQ:WlGenz6WH5-TM8J8;Path=/;Expires=Mon, 25-Nov-2024 12:50:52 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 3f4a7fb0a46243afcdef495930802d62
979a0675885be263f28e6b3cf9a699c8cdd69f04
6428e7f877dc58c23c7ac0d9597d40db3548026b8e5aa5f5c58706841b45bd1c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6428E7F877DC58C23C7AC0D9597D40DB3548026B8E5AA5F5C58706841B45BD1C"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15156
Expires: Sat, 26 Nov 2022 17:03:28 GMT
Date: Sat, 26 Nov 2022 12:50:52 GMT
Connection: keep-alive
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 127 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2791)
Size 127 kB (126568 bytes)
Hash d298ebea71faa19cd8237ddf8c37d550
628f6436cdc4db74ecda4fad134b4499f41ad4cb
f02e9221a17b677d0aa0b76876bd82931f57bf5dd1ff9aa24a1ab945838b0e64
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 126568
date: Sat, 26 Nov 2022 12:50:52 GMT
expires: Sat, 26 Nov 2022 12:50:52 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 500 B IP
File type ASCII text, with no line terminators
Hash a9d623712a0ee2283d9b287248fcd4e6
abf9a1a4b58eb34c2ccbbac8ecabb06154d79393
bd55cd46279e1472c58cbd656a2697972aa299df8eff8ecfe1a9aeda3e15f723
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: text/plain
set-cookie: csu=158754134585022@1@1669467052; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2XZ6pO9LTf6b5el9o3MaAziipB9XYb3iI5SXzI3%2Btya5seZz5IdQfgyhEr9ZuprA9K%2FiCeg8Vj9lXDOSg1MEtu7jwVhCclmn1hAXWy2EpKRSckwFioOOtx4VqucZTMHV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c0951a3bb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 280 B IP
Hash e8b9472a71e60801dfa4d735c72fcd4e
435671e463b241d785fa934cd4200a86a65c9cfa
45e4473cc153ec92b456beab94c06f3acf5a5669ebb9f49ac7553e54f8404ae0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:52 GMT
Content-Type: application/ocsp-response
Content-Length: 280
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 21:53:51 GMT
Expires: Fri, 02 Dec 2022 21:53:50 GMT
Etag: "435671e463b241d785fa934cd4200a86a65c9cfa"
Cache-Control: max-age=550377,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7702c092be21b505-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 407ca8387c360d434a53812c03688310
90e74fa4928adcf8ae410f2eea7956b6ae7f687b
5690f667c20ba6c6daf71668a7c02c6d50383b585521e6f3e7a0ddcf895358d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1138
Cache-Control: max-age=146823
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:52 GMT
Etag: "6381a1c1-1d7"
Expires: Mon, 28 Nov 2022 05:37:55 GMT
Last-Modified: Sat, 26 Nov 2022 05:18:57 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pemainedperio.com/utx?tid=832633&top=megaup.net&cb=UFJz2XTGAxbo
204 No Content 0 B URL HTTP/2 pemainedperio.com/utx?tid=832633&top=megaup.net&cb=UFJz2XTGAxbo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?tid=832633&top=megaup.net&cb=UFJz2XTGAxbo HTTP/1.1
Host: pemainedperio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:52 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 26 Nov 2022 12:51:52 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ahPTsa38iZM-DvmijZJMXOrU7EczrFvECoCo98VCO6jqsmNUVSsfVA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 93bac2f2bcb23390a6dc5d083af553ba
84b6db93502e640a31ba94506e08154986f9508d
7010481bb1529f020c00a4a6924ea4c40291c463ed852ee44e56e90a5ac8b00f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7010481BB1529F020C00A4A6924EA4C40291C463ED852EE44E56E90A5AC8B00F"
Last-Modified: Fri, 25 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1891
Expires: Sat, 26 Nov 2022 13:22:23 GMT
Date: Sat, 26 Nov 2022 12:50:52 GMT
Connection: keep-alive
static.a-ads.com/a-ads-banners/426618/300x250?region=eu-central-1
200 OK 500 kB URL HTTP/2 static.a-ads.com/a-ads-banners/426618/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 300 x 250\012- data
Size 500 kB (499628 bytes)
Hash e4eb2c4ec1794d4e05b77ec20607b881
4abdedcc14882e200a685cfd4240e69c60732aea
4f2c5f4d5efd47fd8d0fc9e0ceca3d637d907a682b748102378c2aa677395efe
GET /a-ads-banners/426618/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: image/gif
content-length: 499628
x-amz-id-2: uiEEd4g6H41YElVZ+fyMAEoJmjCH+9H3y1AerTVN2sEuyRgJDAWiG3oph1+QIdIyRxoWY4oQ6Bw=
x-amz-request-id: 3DDEZNAKFP2SPTHP
x-amz-replication-status: COMPLETED
last-modified: Sun, 20 Nov 2022 16:37:46 GMT
etag: "e4eb2c4ec1794d4e05b77ec20607b881"
cache-control: max-age=315360000
x-amz-version-id: aMmfct8jferkXctt.IjET.eVL2M61OoN
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
6.adsco.re/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://megaup.net
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c097ff0db4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.purpleads.io/x/init?ts=1669467051202
200 OK 68 B URL HTTP/2 api.purpleads.io/x/init?ts=1669467051202
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f28248b8cdef8ef9e4181ef6e9b11742
3e6e5226ddedd8a23980cbec45ddc657e7714f65
587259314084a04755f0dfb2d0f0e9f07bdf03a575352e366e308d2e19cfc70a
OPTIONS /x/init?ts=1669467051202 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type,x-purpleads-version,x-request-url
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD, OPTIONS
access-control-allow-headers: authorization,content-type,x-purpleads-version,x-request-url
x-request-id: 5610272f-d132-4bf1-9fe9-8650ce2c5d2e
X-Firefox-Spdy: h2
4.adsco.re/
200 OK 62 B IP
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
everefor.buzz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: everefor.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Content-Length: 382
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a3a6a266cdfa7c040acda3c23a5569e1
9d0bf24b5c96459501a797803d11bd9664423a26
275796b75944bd1a656817e144a8977f5d2f29198e51283bc776ffdd7006e490
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "275796B75944BD1A656817E144A8977F5D2F29198E51283BC776FFDD7006E490"
Last-Modified: Thu, 24 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16688
Expires: Sat, 26 Nov 2022 17:29:01 GMT
Date: Sat, 26 Nov 2022 12:50:53 GMT
Connection: keep-alive
cdn.psdn.xyz/prebid-7.22.0-2022-10-26.js
200 OK 110 kB URL HTTP/2 cdn.psdn.xyz/prebid-7.22.0-2022-10-26.js
IP
File type ASCII text, with very long lines (64899)
Size 110 kB (110489 bytes)
Hash 57c01fea38b0b55be8f8695b6c4988ff
4032cfd77db4cefcc38aedac4b9bbf9f4c51639e
b9f42206a1196365d65749aa3bececd05e35895c8608e7553d358132987191f9
GET /prebid-7.22.0-2022-10-26.js HTTP/1.1
Host: cdn.psdn.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:53 GMT
content-encoding: gzip
content-length: 110489
content-type: application/javascript
last-modified: Wed, 26 Oct 2022 13:07:08 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "57c01fea38b0b55be8f8695b6c4988ff"
cache-control: max-age=31536000
x-amz-request-id: tx00000000000010ab6e820-006359394f-34c5ae65-nyc3b
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1669467053.dop002.sk1.t,1669467053.cds228.sk1.hn,1669467053.cds204.sk1.c
X-Firefox-Spdy: h2
ad.a-ads.com/1811811?size=300x250
200 OK 50 kB URL HTTP/2 ad.a-ads.com/1811811?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Hash cfbbfc9a170d8ae1d89144944362a2ca
67453981eefa7a5896224c43b9ef5c9b004da10c
da9220b2f2cb50d08bb2f7d4e73c4af59dacbcdb65016809ba74810dfa70b30a
GET /1811811?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://megaup.net/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
tut63na9vipw.n4.adsco.re/
200 OK 29 B URL HTTP/1.1 tut63na9vipw.n4.adsco.re/
IP
Hash 8bd56aa040e69dd17496c14c0f8c92ee
50c826c8aa37806c9fcaeae4c131b4483aa8ea8f
a15716dab3bbd85635ece0afa7a2880e5927f81b0d5e9f2f303dcbbd97dda04e
POST / HTTP/1.1
Host: tut63na9vipw.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:53 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 279 B IP
Hash e7dfbed8fcbc3af75b18984c58495921
7d18e25dcc2c0946bdef22ad4c4b7792bd58f400
88f6cdc94b84184e5947e97cc1d9c3cd5db80372926775282b46eeb22253981d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1278
Cache-Control: max-age=122487
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:53 GMT
Etag: "63814227-117"
Expires: Sun, 27 Nov 2022 22:52:20 GMT
Last-Modified: Fri, 25 Nov 2022 22:31:03 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bddb9af5f2fa6234f5f4bb97d6f22c81
0d4fc5394c0e2bc234674dd5111cf6dcd303c2a2
db75b73bb809a5e70765d3443944631983e5e05f95134ab0e7c2b5ad0e0ea452
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB75B73BB809A5E70765D3443944631983E5E05F95134AB0E7C2B5AD0E0EA452"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2263
Expires: Sat, 26 Nov 2022 13:28:36 GMT
Date: Sat, 26 Nov 2022 12:50:53 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash ef068b0fdcdc28e87edf02dc72e7f176
043ae49494264b6af3ae3547bab69ab4674ab974
d1b0cf2bd78942f098cbc449140afb23345e381add19dd7f745c8efee911d5e1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4396
Cache-Control: max-age=97528
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:53 GMT
Etag: "6380d479-117"
Expires: Sun, 27 Nov 2022 15:56:21 GMT
Last-Modified: Fri, 25 Nov 2022 14:43:05 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
script.4dex.io/localstore.js
304 Not Modified 0 B URL HTTP/2 script.4dex.io/localstore.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Wed, 23 Nov 2022 15:43:18 GMT
If-None-Match: W/"922cffdd75f7192f75231d92684885aa"
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 26 Nov 2022 12:50:53 GMT
cache-control: public, max-age=1800
etag: W/"922cffdd75f7192f75231d92684885aa"
last-modified: Wed, 23 Nov 2022 15:43:18 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 245982
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RPHaYswIiw7tcFtj2G%2FCg%2BSYqM2BNj5i1z3aR1rNyjqVM41bQMFyJ5vh6caBPKZKYBv4Tt%2BnRU1M3thC8IISUgphs%2BTvRC2qtNVnVwyVihF%2Fm7iZ%2Fg0vtWR9u3XRKL9s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c09b5d29b4fd-OSL
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1219
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: max-age=0, private, must-revalidate
date: Sat, 26 Nov 2022 12:50:52 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1094
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: max-age=0, private, must-revalidate
date: Sat, 26 Nov 2022 12:50:52 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9ec0cfcc6bee3bada40130d2cc303f23
e3325aeeac2d71638d53f866c684b05db2151d3b
fc278ad6ffe0d0bfad7da4f37a75790d5ef417d230b204d0bd2e96798a11e479
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 578
Cache-Control: max-age=135487
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:53 GMT
Etag: "638177ab-1d7"
Expires: Mon, 28 Nov 2022 02:29:00 GMT
Last-Modified: Sat, 26 Nov 2022 02:19:23 GMT
Server: ECS (amb/6B9D)
X-Cache: HIT
Content-Length: 471
watchingssu.com/multi?cs=VkZ0NDFhdEQGBG90TAAEb3VNBgQ&abt=0&red=1&sm=76&k=download%20file%20liftoff&v=1.0.60.1&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=994845513449716&agec=1669467052&fs=1&mbkb=68.68131868131869&ref=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&osr=download.megaup.net&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_Orkt=1669467052292&crc=1
200 OK 1.6 kB URL HTTP/2 watchingssu.com/multi?cs=VkZ0NDFhdEQGBG90TAAEb3VNBgQ&abt=0&red=1&sm=76&k=download%20file%20liftoff&v=1.0.60.1&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=994845513449716&agec=1669467052&fs=1&mbkb=68.68131868131869&ref=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&osr=download.megaup.net&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_Orkt=1669467052292&crc=1
IP
Hash 2d533876b48a61475897ef39341c888e
7edabff566b046960f95874b5be709cf31d3e8fa
cbd70a48c62e7f43c358354dd39f2f6e7b840ce97ca2c5f18a2a8393d1e7b671
GET /multi?cs=VkZ0NDFhdEQGBG90TAAEb3VNBgQ&abt=0&red=1&sm=76&k=download%20file%20liftoff&v=1.0.60.1&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&u=994845513449716&agec=1669467052&fs=1&mbkb=68.68131868131869&ref=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&osr=download.megaup.net&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&_Orkt=1669467052292&crc=1 HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1520
date: Sat, 26 Nov 2022 12:50:53 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=40bec3b3-da29-4e42-8568-81a58f9f0239
csu=994845513449716
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vPKD_074NZCguOSbsoyjiQ13qYMpwW-q6PueEQJrhqsYflk_mMzdlg==
X-Firefox-Spdy: h2
everefor.buzz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: everefor.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://megaup.net
Content-Length: 344
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 20c5da471ce767fb3642a1cc356c035c
a87286210eb0d3a669d6ed1f6d44a8230099190f
47a2873a576f6687182320f3cd88864c902860135466b83da57fe56aa01597f6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5799
Cache-Control: max-age=140333
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 12:50:53 GMT
Etag: "63817633-1d7"
Expires: Mon, 28 Nov 2022 03:49:46 GMT
Last-Modified: Sat, 26 Nov 2022 02:13:07 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
mp.4dex.io/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2118
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:53 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin, Accept-Encoding
x-err: Parsing the Prebid Request. org/site not found
x-version: 3.0.0-gcp-ams
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7702c09b8e78fac4-OSL
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
304 Not Modified 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Tue, 22 Nov 2022 09:44:15 GMT
If-None-Match: W/"c56b6332dacf72f135afcd153ae22448"
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 26 Nov 2022 12:50:53 GMT
x-amz-id-2: dOiiTtiPLhGmcsmNBt0jZ1duXkkbJlTuZvRlN+aronrZIFb3Z/0/X80dBYCPZGT3qBvEJe+8wr4=
x-amz-request-id: DC3YQNPP1H3TAVZD
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 22 Nov 2022 09:44:15 GMT
etag: "c56b6332dacf72f135afcd153ae22448"
cache-control: public, max-age=1800
cf-cache-status: HIT
age: 328581
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xJnC7ge5nfFTjolhrUjPafKMY%2F1i5VeQ1QRxfz9xwAJN%2BD1kLXhbu%2B%2BxROgQXuKgheA10%2FueY9hZqSNl9NhEimlGTCp39IHDJhAb3oF%2BSo7c0TyEe3R5fdGai2imZ%2F6j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c09bcf81b523-OSL
X-Firefox-Spdy: h2
mp.4dex.io/prebid
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2000
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:53 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin, Accept-Encoding
x-err: Parsing the Prebid Request. org/site not found
x-version: 3.0.0-gcp-ams
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7702c09b8e77fac4-OSL
X-Firefox-Spdy: h2
b1h-euc1.zemanta.com/api/bidder/prebid/bid/
204 No Content 0 B URL HTTP/1.1 b1h-euc1.zemanta.com/api/bidder/prebid/bid/
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/prebid/bid/ HTTP/1.1
Host: b1h-euc1.zemanta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 552
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
prebid-eu.creativecdn.com/bidder/prebid/bids
204 No Content 0 B URL HTTP/2 prebid-eu.creativecdn.com/bidder/prebid/bids
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /bidder/prebid/bids HTTP/1.1
Host: prebid-eu.creativecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 475
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 26 Nov 2022 12:50:53 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 3600
vary: Origin
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3c49e689c34b9390c24cb4d29c134c88
092b6bc08745ae4842dc56d81e4dc1f5b5b5835c
814bb5c1e2e8579e861849ec6b2889eac79a87da651c433b0773862460fc6f4b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91906
Date: Sat, 26 Nov 2022 12:50:53 GMT
Etag: "6380bc9d-1d7"
Expires: Sun, 27 Nov 2022 14:22:39 GMT
Last-Modified: Fri, 25 Nov 2022 13:01:17 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cCU0vRHDuAzlD_StpTDfLgcsyxnC9KXy-ScQN948HBneXt_mvsJhfg==
Age: 4882
api.purpleads.io/x/v/?ts=1669467052047
200 OK 1.1 kB URL HTTP/2 api.purpleads.io/x/v/?ts=1669467052047
IP
File type gzip compressed data, from Unix\012- data
Hash 2ed7b60cf011f72339129f8eadc0c463
fdddc02415d4494b9ea1e769d27b3bae3328b5d0
ad71a0e6aad368602448e14e3d8d6ca14f1f1ee8e785f08bb1b0e8d255acb480
OPTIONS /x/v/?ts=1669467052047 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type,x-purpleads-version,x-request-url
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:53 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD, OPTIONS
access-control-allow-headers: authorization,content-type,x-purpleads-version,x-request-url
x-request-id: f83d733a-97c8-4102-bde6-fef903682a42
X-Firefox-Spdy: h2
adsco.re/p
200 OK 130 B IP
File type ASCII text, with no line terminators
Hash 4d956d5def8cf1f6ec4bcf57dd518bfe
713c54414107077a2ca11453f5cfff0caa685390
f2a35ff4eb8ca416952b01753f1628a7a4e7942168046d22d2a1d72668e2ca31
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Length: 2008
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
everefor.buzz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: everefor.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://megaup.net
Content-Length: 348
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8d19f6b4e77445f955c49ef980a0c4f3
9e61ea6ef00695f66af4fc087b100bed51b96b43
f8f35189c015a57409df4a5a301dcb2f8611c818aed67d4c6eb8eb5308660216
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 26 Nov 2022 12:50:53 GMT
Last-Modified: Sat, 26 Nov 2022 11:40:11 GMT
Server: ECS (dcb/7F15)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gBzWHhi8OxmU5eqEFPc-7thPQqUJfy52kLtNI-uGO6BuKdOd3rG8zw==
Age: 4242
tlx.3lift.com/header/auction?lib=prebid&v=7.22.0&referrer=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&tmax=3000
200 OK 19 B URL HTTP/2 tlx.3lift.com/header/auction?lib=prebid&v=7.22.0&referrer=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&tmax=3000
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a548f7b55db665b1df71a33a2bee47a7
4f88e5b6a18226d7207f1458b0b83e428dbf9898
0535c3bb3a17e4ac0fb7d29214d2181275662129dc2bdd2a89c35934e9fc5ba5
POST /header/auction?lib=prebid&v=7.22.0&referrer=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&tmax=3000 HTTP/1.1
Host: tlx.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 549
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:53 GMT
content-type: application/json; charset=utf-8
content-length: 19
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 15 Oct 1992 20:10:00 GMT
pragma: no-cache
x-xss-protection: 0
accept-ch: sec-ch-downlink,sec-ch-ua-mobile,sec-ch-save-data,sec-ch-device-memory,sec-ch-dpr,sec-ch-ua-full-version,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-viewport-width,sec-ch-ua-platform,sec-ch-viewport-height,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua,sec-ch-ua-bitness,sec-ch-prefers-color-scheme,sec-ch-width,sec-ch-ect,user-agent
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 6cc761aefded9f4a50bca59754041d2f
216c80b9a57a89b3c17f2cbd10149c4befea87ea
94cf4b4090f50f8bb6821cdc07635d0f11ebc4c7616d4ea1675c948352fa9a4b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 12:50:53 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 07:45:27 GMT
Expires: Sat, 03 Dec 2022 07:45:26 GMT
Etag: "216c80b9a57a89b3c17f2cbd10149c4befea87ea"
Cache-Control: max-age=585872,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7702c09bcf8ab523-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8d19f6b4e77445f955c49ef980a0c4f3
9e61ea6ef00695f66af4fc087b100bed51b96b43
f8f35189c015a57409df4a5a301dcb2f8611c818aed67d4c6eb8eb5308660216
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=97840
Date: Sat, 26 Nov 2022 12:50:53 GMT
Etag: "6380d020-1d7"
Expires: Sun, 27 Nov 2022 16:01:33 GMT
Last-Modified: Fri, 25 Nov 2022 14:24:32 GMT
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AZazxy29wxzA1maxqw1tPz1g9FALyvMRbRgDDal3_yfcCsELsXJ9WA==
Age: 5821
watchingssu.com/floater?cs=U3UyQzFjRwZ7AGdAB3AEZ0ELdwk&abt=0&red=1&sm=83&k=download%20file%20liftoff&v=0.8.12.0&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=994845513449716&agec=1669467052&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=68.68131868131869&ref=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&osr=download.megaup.net&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=td11_oi1_&_HxWo=1669467052299&crc=1
200 OK 5.2 kB URL HTTP/2 watchingssu.com/floater?cs=U3UyQzFjRwZ7AGdAB3AEZ0ELdwk&abt=0&red=1&sm=83&k=download%20file%20liftoff&v=0.8.12.0&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=994845513449716&agec=1669467052&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=68.68131868131869&ref=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&osr=download.megaup.net&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=td11_oi1_&_HxWo=1669467052299&crc=1
IP
File type ASCII text, with very long lines (7683), with no line terminators
Hash bb778f2b35c787e852b85b24f5f393fc
de3ef224535aa2d2b38e0413d1c1317ebe4853dd
bfd9618199b780aba4c858ee113a372f9b36d2ddfd12f508b6c5ea0224fbb26b
GET /floater?cs=U3UyQzFjRwZ7AGdAB3AEZ0ELdwk&abt=0&red=1&sm=83&k=download%20file%20liftoff&v=0.8.12.0&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&u=994845513449716&agec=1669467052&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&mbkb=68.68131868131869&ref=https%3A%2F%2Fmegaup.net%2F4Ek7%3Fpt%3D0JVj43O6V5jBQfN30ACtf%252FQMkCcPv3X%252BUwwJs2aeXQY%253D&osr=download.megaup.net&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=td11_oi1_&_HxWo=1669467052299&crc=1 HTTP/1.1
Host: watchingssu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 5152
date: Sat, 26 Nov 2022 12:50:53 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=958e3f7e-a312-416b-ad3c-ebdc707310a3
csu=994845513449716
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZTW96YWvk2IldVPUM59qcyxN9yN71cNfLdlAjKM9Dl0Yk5AXS9safA==
X-Firefox-Spdy: h2
hb.minutemedia-prebid.com/hb-mm-multi
200 OK 105 B URL HTTP/2 hb.minutemedia-prebid.com/hb-mm-multi
IP
File type JSON data\012- , ASCII text
Hash 8e3ce9616779f1f3b6d6c40d443dbfed
d3559b707adb8315626504b643122108cef55d08
8343d51faa979e2fc7cabb06f950c311dd0dde28ca658e7290c86c31e7ef47c1
POST /hb-mm-multi HTTP/1.1
Host: hb.minutemedia-prebid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1115
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:53 GMT
content-type: application/json
content-length: 105
access-control-allow-credentials: true
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: https://megaup.net
x-reason: gdpr is not applied
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/canvas-to-blob.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/canvas-to-blob.min.js
IP
GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-408"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.scrollTo.js
IP
GET /themes/flow/frontend_assets/js/nav/jquery.scrollTo.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-981"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/responsive.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/responsive.css
IP
GET /themes/flow/frontend_assets/css/responsive.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-e56"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.dataTables.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.dataTables.min.js
IP
GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-10fe4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/nav/jquery.nav.js
IP
GET /themes/flow/frontend_assets/js/nav/jquery.nav.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1547"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
IP
GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/custom/custom.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/custom/custom.js
IP
GET /themes/flow/frontend_assets/js/custom/custom.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1420"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
prebid.media.net/rtb/prebid?cid=8CU2BX48Z
200 OK 0 B URL HTTP/2 prebid.media.net/rtb/prebid?cid=8CU2BX48Z
IP
POST /rtb/prebid?cid=8CU2BX48Z HTTP/1.1
Host: prebid.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1281
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:53 GMT
content-type: application/json;charset=UTF-8
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model
expires: Sat, 26 Nov 2022 12:50:53 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
IP
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js
IP
GET /themes/flow/frontend_assets/js/isotope/jquery.isotope.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3ead"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4541
last-modified: Sat, 26 Nov 2022 11:35:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CrzCxO8g%2FYoZSWjL%2FRfnlf2FOSWpw9wIzxqw2KzSlAoV9NUXoK7FbzWDymdz6DcmPYHD0LfgDPhP8zw6zRV9qobxPYjRuShTNWK6Is%2B%2FpVPI6QIdObJJE4ABBNBdfaeO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c0954a73b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4541
last-modified: Sat, 26 Nov 2022 11:35:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RdlF2jZ3vxDkqVW1YXLIHqdiUhAWUZgnfGd1332OdRONcZYjmHlyVGkBwrNn5oMYLZ%2BkKdQVzCX6ixN844TdVJw3fipY6gVfCeF4zNmQAWJhyu0v288bEne5%2B6dIb4NK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c0952a4ab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
IP
GET /themes/flow/frontend_assets/js/animation/jquery.appear.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-5c6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
prebid.media.net/rtb/prebid?cid=8CU2BX48Z
200 OK 0 B URL HTTP/2 prebid.media.net/rtb/prebid?cid=8CU2BX48Z
IP
POST /rtb/prebid?cid=8CU2BX48Z HTTP/1.1
Host: prebid.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1313
Origin: https://megaup.net
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:53 GMT
content-type: application/json;charset=UTF-8
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model
expires: Sat, 26 Nov 2022 12:50:53 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/zeroClipboard/ZeroClipboard.js
IP
GET /themes/flow/js/zeroClipboard/ZeroClipboard.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3bd2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
download.megaup.net/cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7702c0720df9b4f3
200 OK 0 B URL HTTP/2 download.megaup.net/cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7702c0720df9b4f3
IP
GET /cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7702c0720df9b4f3 HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB&__cf_chl_rt_tk=E6hkc4oQSeOI7Jer_3SqRjW7adP3l5ctiimroTmiCsQ-1669467046-0-gaNycGzNCD0
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=0, must-revalidate
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zcU8p3FO2ioa9eSK0wsSUgIVTZ5EpLbKYK3ZSN3bQiQgWOPop0LFbMxgq%2BnJ0k8Q%2F6z%2B7YT%2BFGRIvTnnlinPxqf21qFWXPcxbMPmBTw6JyKWGxy8rE8O0bFJjHtGkUITx4jV%2Bd46"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c072cf02b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
script.4dex.io/adagio.js
200 OK 0 B IP
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:53 GMT
content-type: application/javascript
x-amz-id-2: dOiiTtiPLhGmcsmNBt0jZ1duXkkbJlTuZvRlN+aronrZIFb3Z/0/X80dBYCPZGT3qBvEJe+8wr4=
x-amz-request-id: DC3YQNPP1H3TAVZD
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Tue, 22 Nov 2022 09:44:15 GMT
etag: W/"c56b6332dacf72f135afcd153ae22448"
cache-control: public, max-age=1800
cf-cache-status: HIT
age: 328581
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0oWOF0P9oHTTkdw%2B7MdB0YMuDaejSVgBnl1qKJh2N25hoqKsTRpHz8q%2BRObpmibRoVG7S56wMzhZCYc9ulAUJTZxpKzfOqe09iMZScU3Po4YDU9H8UVl%2FbGaX%2FzEboys"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c09b9f41b523-OSL
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4541
last-modified: Sat, 26 Nov 2022 11:35:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cM2IqswbB5Y2FqyyY%2F4hfx%2FESRfGpB8KzHtRo1etUef9hb%2BuUR01HxsdOQbLJMjb5PnR1T%2B64PnqDN%2FbniIBWaPZe9awcr9sCgtAU0xKmSsDGCwA4dda7TeSi%2BEouP57"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c0954a6fb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.purpleads.io/x/b/?idx=0&pid=825c452818d24788ad88e30083a972ed&sizes=[[300,250],[300,250],[200,200],[250,250],[300,100]]&slotid=6b539208-a91b-432a-8c9e-3792355d53ea&ts=1669467051439
200 OK 0 B URL HTTP/2 api.purpleads.io/x/b/?idx=0&pid=825c452818d24788ad88e30083a972ed&sizes=[[300,250],[300,250],[200,200],[250,250],[300,100]]&slotid=6b539208-a91b-432a-8c9e-3792355d53ea&ts=1669467051439
IP
OPTIONS /x/b/?idx=0&pid=825c452818d24788ad88e30083a972ed&sizes=[[300,250],[300,250],[200,200],[250,250],[300,100]]&slotid=6b539208-a91b-432a-8c9e-3792355d53ea&ts=1669467051439 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type,x-purpleads-version,x-request-url
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD, OPTIONS
access-control-allow-headers: authorization,content-type,x-purpleads-version,x-request-url
x-request-id: 3b9f6b63-cc57-4b2c-903f-dde7944f615a
X-Firefox-Spdy: h2
megaup.net/sw.js
200 OK 0 B IP
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:52 GMT
vary: Accept-Encoding
etag: W/"60758f38-12fe6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/favicon.ico
IP
GET /themes/flow/frontend_assets/images/icons/favicon/favicon.ico HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: image/x-icon
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-47e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/colors/flow.css
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/css/colors/flow.css
IP
GET /themes/flow/frontend_assets/css/colors/flow.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-a83"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
IP
GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js
IP
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.plugins.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-14cc1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/sticky/jquery.sticky.js
IP
GET /themes/flow/frontend_assets/js/sticky/jquery.sticky.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1099"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/retina/retina.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/retina/retina.js
IP
GET /themes/flow/frontend_assets/js/retina/retina.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-52e"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/clipboardjs/clipboard.min.js
IP
GET /themes/flow/js/clipboardjs/clipboard.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-2296"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
503 Service Unavailable 0 B URL HTTP/2 download.megaup.net/?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB
IP
GET /?idurl=0lixLaV5L89JKamcHXUbemjP2xWYYAN8Q9HQ/PfKkCG4s6Zh2tkh00LytBTACh/IxUvvKKW5lvFJptSX4i08lT92KxYt2Q3OVgh5RlD8Zhw=&idfilename=Liftoff.v0.13.12.rar&idfilesize=3.53+GB HTTP/1.1
Host: download.megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://download.megaup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 503 Service Unavailable
date: Sat, 26 Nov 2022 12:50:46 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
referrer-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jqQe%2FSBwvxxhK0KLzxU6G8mlEtrqVPuZCxPuH8kzkwhLyq6AzthLgG3H5xyFam012j7jQsmBqjWksXwoqXxbHj5DqkRme1y1W9AUAJFUwmvfr4V39WXQXm1ViNPJwIFRnQKtO2d6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c0720df9b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4541
last-modified: Sat, 26 Nov 2022 11:35:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F7PaWbtoGbLCQUmRhn0m%2BxZC%2BOHLMiV9YgB1WSGaFL0zMduT4Lghk9Xhkp5r9CpT8kE2vmMDKrn5QAk61tTAWnH4LSoiIwfJiO1uyB6OBewdtJ9j%2F1NZ2JQziPmJ1aDv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c0956a9eb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.adsco.re/
200 OK 0 B IP
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Tue, 27 Dec 2022 12:50:52 GMT
etag: W/"n/ARilLrRVDeZNVpaPOsXg=="
cf-cache-status: HIT
age: 592302
vary: Accept-Encoding
server: cloudflare
cf-ray: 7702c0965840b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-validate.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-validate.js
IP
GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-fea"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
IP
GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/gauge.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/frontend_assets/js/gauge.min.js
IP
GET /themes/flow/frontend_assets/js/gauge.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-45b8"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
api.purpleads.io/x/b/?idx=0&pid=825c452818d24788ad88e30083a972ed&sizes=[[300,250],[300,250],[200,200],[250,250],[300,100]]&slotid=6b539208-a91b-432a-8c9e-3792355d53ea&ts=1669467051439
200 OK 0 B URL HTTP/2 api.purpleads.io/x/b/?idx=0&pid=825c452818d24788ad88e30083a972ed&sizes=[[300,250],[300,250],[200,200],[250,250],[300,100]]&slotid=6b539208-a91b-432a-8c9e-3792355d53ea&ts=1669467051439
IP
GET /x/b/?idx=0&pid=825c452818d24788ad88e30083a972ed&sizes=[[300,250],[300,250],[200,200],[250,250],[300,100]]&slotid=6b539208-a91b-432a-8c9e-3792355d53ea&ts=1669467051439 HTTP/1.1
Host: api.purpleads.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: application/json
x-purpleads-version: 2.2.13
x-request-url: aHR0cHM6Ly9tZWdhdXAubmV0LzRFazc/cHQ9MEpWajQzTzZWNWpCUWZOMzBBQ3RmJTJGUU1rQ2NQdjNYJTJCVXd3SnMyYWVYUVklM0Q=
Authorization: Bearer 70f4c4ca797b70742cf152daf589f184:5f7ccce17707939b2685f0f8203bd1c265e05e479bbfcec98eda491d5ef6d2861ecfe05a883293e58ee42e74b0a74acb04a21203cd5fc2e8d8ec9e7b994f7655
Origin: https://megaup.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:52 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD, OPTIONS
x-request-id: 14272e4d-a2f2-43a1-b78e-01b81bf67835
etag: W/"d46-KptlBI4cLBeb5g9PQ46r7bSYatE"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery-1.11.0.min.js
200 OK 0 B URL HTTP/2 megaup.net/themes/flow/js/jquery-1.11.0.min.js
IP
GET /themes/flow/js/jquery-1.11.0.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/4Ek7?pt=0JVj43O6V5jBQfN30ACtf%2FQMkCcPv3X%2BUwwJs2aeXQY%3D
Connection: keep-alive
Cookie: cf_clearance=CQhw7n8WuenBm_tvhASSq.CkfTqPzROKGtn3SBpjw.Y-1669467048-0-150; filehosting=j73vfdfdrpu6nddmb15o2256e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 12:50:51 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1787d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
script.4dex.io/localstore.js
200 OK 0 B URL HTTP/2 script.4dex.io/localstore.js
IP
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 12:50:53 GMT
content-type: application/javascript
cache-control: public, max-age=1800
etag: W/"922cffdd75f7192f75231d92684885aa"
last-modified: Wed, 23 Nov 2022 15:43:18 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 245982
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=te62Trf7qSENNDoTeiA%2FZ4cKqn7jarOJLQlcgAGiTNEk58OFrw0AsyyIXpRcz61RVSdZW8fTa%2BTqbHur4hULJgb0VUkbkdrGs4%2FUW8tfUVWuKl8BxHScKCBs55mPu%2F24"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7702c09b1cb1b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
172.67.192.50
104.18.2.114
213.227.153.221
91.209.70.182
136.243.11.250
93.184.220.29
23.36.77.32