ocsp.sectigo.com/
471 B IP
Hash b792399de8f3acb71b02281612e6bfcd
52d9791efec987c6186b5f408baad2a2aa5454d1
f4bf0f64844b5fc10c923c460e60f34905669c695c47a0871a10e15f19863e5d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 09 Sep 2023 18:47:45 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 08 Sep 2023 11:25:47 GMT
Expires: Fri, 15 Sep 2023 11:25:46 GMT
Etag: "52d9791efec987c6186b5f408baad2a2aa5454d1"
Cache-Control: max-age=491280,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 804199fefa8356c1-OSL
megaup.net/themes/flow/images/main_logo_inverted.png
200 OK 7.1 kB URL GET HTTP/2 megaup.net/themes/flow/images/main_logo_inverted.png
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type PNG image data, 203 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d15526be10b904a6b48d1af04a10cc3
c09b6874359ac6d71db95593618a9acb55baa984
894d25472e0f890edf235e8f66fbeda7ea75043632924ecb82691d76bd7db018
GET /themes/flow/images/main_logo_inverted.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: image/png
content-length: 7137
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-1be1"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/images/loading_small.gif
200 OK 184 kB URL GET HTTP/2 megaup.net/themes/flow/images/loading_small.gif
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type GIF image data, version 89a, 64 x 64\012- data
Size 184 kB (184355 bytes)
Hash b0dd5b3af9c4c0644d7bddee83716209
30002468d0266b893b3559b8d0d260c6cbf0ad7c
2418224bb4d12c122ef3c54d2ee9edb5f6f28d539e91a166b0215553f8c7609d
GET /themes/flow/images/loading_small.gif HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: image/gif
content-length: 184355
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-2d023"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 85a432f3bc13b568eca42e1b7b4ce3f1
84763c73eb9b687f596dadd6dfd38eadec4c5e6c
a9b98520b690d42fbdc1a1d902ee37597f93ae4af708450e1e958b19ba1716cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 18:47:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
megaup.net/sw.js
200 OK 40 kB IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9ee51131e416458b88d6da4e6e6959ca
a558b24bcf81763754e35a5fa5e46c6d6ad5f8d4
db3608f955dd3404bc375f0a0a7a5c8e23515e7ad1a0b9078c246e92e4050734
GET /sw.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:15:31 GMT
vary: Accept-Encoding
etag: W/"63a1dfa3-1927c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
200 OK 191 kB URL GET HTTP/2 dmmzkfd82wayn.cloudfront.net/?kzmmd=761186
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15948)
Size 191 kB (190793 bytes)
Hash 7f703202c13746f1d9db279eeb23b548
5c9e416a71885f5d5a751ee563569b6b71146f32
2af4f484dedc78b9c5ad90da3f7c81d32c90bddb32c2362611606a77dfaba072
GET /?kzmmd=761186 HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 190793
date: Sat, 09 Sep 2023 18:47:46 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: U7AiJHjPE_3D7VKkZKVC6nLtNFkdM-v0jZJRsymOhMGS1me6cMH8Gg==
X-Firefox-Spdy: h2
keydawnawe.com/gwZ1U5hjA8ii/32575
200 OK 26 B URL GET HTTP/1.1 keydawnawe.com/gwZ1U5hjA8ii/32575
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerLet's Encrypt
Subjectkeydawnawe.com
Fingerprint43:3B:CC:30:BE:12:DE:B2:32:60:E6:65:37:A6:78:4D:40:DB:14:C4
ValidityTue, 29 Aug 2023 23:04:55 GMT - Mon, 27 Nov 2023 23:04:54 GMT
File type ASCII text, with no line terminators
Hash 4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
GET /gwZ1U5hjA8ii/32575 HTTP/1.1
Host: keydawnawe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Sep 2023 18:47:46 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sun, 10-Sep-2023 18:47:46 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjAC%2FAKJi1buM2WoQuvwDRiYJgjztjP3WeLd%2FG8SilOE7CdkFSFqXJTHk1xLkFPcNOCBw%2FdyPzuv6AZnJ%2FAs8euDU6yWhYf1z9g8zfIYn9x9pN14pZoxQfw2rbu7%2B5xuHY30KQJHEUzOIypAr00fl7rHdA%3D; expires=Sun, 10-Sep-2023 18:47:46 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
altowriestwispy.com/tysaSHG1FMaM/18410
200 OK 25 B URL GET HTTP/1.1 altowriestwispy.com/tysaSHG1FMaM/18410
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerLet's Encrypt
Subjectaltowriestwispy.com
FingerprintBB:3E:DC:4E:95:14:55:04:61:C6:15:D4:50:81:22:E3:CC:D5:2F:10
ValidityThu, 10 Aug 2023 23:00:28 GMT - Wed, 08 Nov 2023 23:00:27 GMT
File type ASCII text, with no line terminators
Hash f7a2939527fd9e68723da600e96d76bd
a9e717b6364d2895ee0a716050db32ca0ef1bb42
d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a
GET /tysaSHG1FMaM/18410 HTTP/1.1
Host: altowriestwispy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Sep 2023 18:47:46 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sun, 10-Sep-2023 18:47:46 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjAC%2FAKJi1buM2WoQuvwDRiYJgjztjP3WeLd%2FG8SilOE7CdkFSFqXJTHk1xLkFPcNOCBw%2FdyPzuv6AZnJ%2FAs8euDU6yWhYf1z9g8zfIYn9x9pN14pZoxQfw2rbu7%2B5xuHY30KQJHEUzOIypAr00fl7rHdA%3D; expires=Sun, 10-Sep-2023 18:47:46 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
www.googletagmanager.com/gtag/js?id=UA-108868042-1
200 OK 68 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-108868042-1
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintE6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (4179)
Hash 4358e1300e2f5352e53372fb061c63a3
652b438b185e3a6fc361d57ebbf47efb69ab440e
efba74b622383cceb2c7b69fe46a9653deae1e0a8dbbb11f02671cdba5c5b072
GET /gtag/js?id=UA-108868042-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Sep 2023 18:47:46 GMT
expires: Sat, 09 Sep 2023 18:47:46 GMT
cache-control: private, max-age=900
last-modified: Sat, 09 Sep 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68312
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/css/fonts.css
200 OK 750 B URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/css/fonts.css
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash fddcefaab6f97068221e3a5a903c049c
251044c138ad554f9a8d4ee8de0422fc7f02851f
61a41176d3175622252d5c00b2bab632e4b35d8828380dc4c72dd5efe3a53d73
GET /themes/flow/frontend_assets/css/fonts.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-690"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31836, version 1.1\012- data
Hash 4514fa5a5b3d1e0b14aa32a7d068124a
e634977bfabc20ed15fe7ed03d3876cf68834b93
5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: font/woff
content-length: 31836
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c5c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
200 OK 31 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31344, version 1.1\012- data
Hash 21f79e4c0fbe54a555170aa70bb4c8b7
9d4aaf2016cd21f16bc45089a48de84dba951fa7
2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: font/woff
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31980, version 1.1\012- data
Hash 99ac81a158028ac2023fb3350d2497e7
f08c12c91ab29282a616c3ba8e533f49b5b433ca
92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d
GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: font/woff
content-length: 31980
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7cec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
200 OK 21 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 20972, version 1.0\012- data
Hash cad75e2dacc6794c4e6b14727d4a989d
694d04c8f643df4100c23efc1463ac9f4e732f60
ebccc09339b7730324221aff3d11d215de9997b47bf708ca18a3be2d8e8b9887
GET /themes/flow/frontend_assets/socialsider-v1.0/_fonts/socicon-webfont.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/socialsider-v1.0/_css/socialsider-v1.0.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: font/woff
content-length: 20972
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-51ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/imageads/007.png
200 OK 165 kB URL GET HTTP/2 megaup.net/imageads/007.png
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 165 kB (165193 bytes)
Hash 9e452dc2054f294d67b691d6241b981b
c17b12b7eeb6a0bbcff9a87ff8a9f5bf17e59712
908e0140df8eb676084e7ea34af8bf9d2a92ff7c543bc808593246db2a0e8ee1
GET /imageads/007.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: image/png
content-length: 165193
last-modified: Sat, 15 Apr 2023 07:22:56 GMT
vary: Accept-Encoding
etag: "643a50d0-28549"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
200 OK 7.6 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/css/settings.css
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash ed12cc46f06e67ca636a1ad8a717a7fd
570b3588ff8e186929233b93a6ecb0d7a76adbcb
aed2be655d20468968674662b26c808a995b7288e82168ada025531738e766ba
GET /themes/flow/frontend_assets/rs-plugin/css/settings.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/themes/flow/frontend_assets/css/All-stylesheets.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-ce4b"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/N0RyUjIYexEhD2McODtmXCBHAQNtYUAQUX91NAQBAncUYnxhIBwfFEMtFm8KBXFLYwMRNBs2DwR2VCFGVjAHIQ8GYhs8VFh5VCQPB2pLfAAZcVQnDwZiBiJTUHlDdEJDMB5vAwF9RmAKAnZEZAoPcA
204 No Content 0 B URL GET HTTP/2 fwukoulnhdlukik.info/N0RyUjIYexEhD2McODtmXCBHAQNtYUAQUX91NAQBAncUYnxhIBwfFEMtFm8KBXFLYwMRNBs2DwR2VCFGVjAHIQ8GYhs8VFh5VCQPB2pLfAAZcVQnDwZiBiJTUHlDdEJDMB5vAwF9RmAKAnZEZAoPcA
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /N0RyUjIYexEhD2McODtmXCBHAQNtYUAQUX91NAQBAncUYnxhIBwfFEMtFm8KBXFLYwMRNBs2DwR2VCFGVjAHIQ8GYhs8VFh5VCQPB2pLfAAZcVQnDwZiBiJTUHlDdEJDMB5vAwF9RmAKAnZEZAoPcA HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C6J2F5Lsl3SCWxGgZul31fAYpSfehvPvmsVvlTsdTsATkp3pyIuk2E283LUKbfqjXWIz%2FUkZOi9vZuR2frnJsgx5lu7jIwSNDjIVvsBpxYBHiWVMwg7jp%2FJVYxpABwLEL8yV%2FVzQ%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a06197ab4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/Vk1MTjF5ci89DAd/CgV+Ehd/GXliBA0WfwErOyl2NRsOd3AXBGo6WDJwdHwEb3x9aEE/KXF9A3A+OC9FIz5xfAFmemonXzAicXwXIHB8YAh4f2J7FyNwfWhFJiwrcwBwPTg6XWt8encFZHV5fAdgdXR4
204 No Content 0 B URL GET HTTP/2 fwukoulnhdlukik.info/Vk1MTjF5ci89DAd/CgV+Ehd/GXliBA0WfwErOyl2NRsOd3AXBGo6WDJwdHwEb3x9aEE/KXF9A3A+OC9FIz5xfAFmemonXzAicXwXIHB8YAh4f2J7FyNwfWhFJiwrcwBwPTg6XWt8encFZHV5fAdgdXR4
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /Vk1MTjF5ci89DAd/CgV+Ehd/GXliBA0WfwErOyl2NRsOd3AXBGo6WDJwdHwEb3x9aEE/KXF9A3A+OC9FIz5xfAFmemonXzAicXwXIHB8YAh4f2J7FyNwfWhFJiwrcwBwPTg6XWt8encFZHV5fAdgdXR4 HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JbJEJuGAVrtwv78dFaSkp2W1c0b2JMK716Y2Yjawy4B%2BDTvqXkV2rTcoWcIuQ9TteG%2FnpmQ19vqmvKrrSU94E%2BYauCPGc85QyIpM%2BbX%2BxDB%2FgYlOL5wPFA9W6lB2rORgZ7viZTDZCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a061978b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/aHV2ZGJHShUXXwlEGVQzWQUiBhU+DBQIKAI3GCoIMCJOJgcFTVAQCwxITlNUW0ROQhIBEUtWW04GAgUWHQZLVUQBGxALX04DS1VMWFtAVExbUwNZU04BBgUFVURQFBYcGUtVVFFBRFxXWkNAXFtd
204 No Content 0 B URL GET HTTP/2 fwukoulnhdlukik.info/aHV2ZGJHShUXXwlEGVQzWQUiBhU+DBQIKAI3GCoIMCJOJgcFTVAQCwxITlNUW0ROQhIBEUtWW04GAgUWHQZLVUQBGxALX04DS1VMWFtAVExbUwNZU04BBgUFVURQFBYcGUtVVFFBRFxXWkNAXFtd
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /aHV2ZGJHShUXXwlEGVQzWQUiBhU+DBQIKAI3GCoIMCJOJgcFTVAQCwxITlNUW0ROQhIBEUtWW04GAgUWHQZLVUQBGxALX04DS1VMWFtAVExbUwNZU04BBgUFVURQFBYcGUtVVFFBRFxXWkNAXFtd HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f0YpFrekbxqPAJAjjhvEazcijQlGqeLZTcxc850AfH2YWgrsajPvF8NPMEv0R4IMOhuIpPmFaVgoGvkYyYIDOX1%2BEl7bnmYuYYOcW975EAK04FZw2OwnMJvxoHuPQK%2Fc9BGysJA0%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a06197bb4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.fileupload-validate.js
200 OK 1.3 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.fileupload-validate.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash 9e083d9e4a3e014b760d70ad0f1e85cb
dbc0b1b973f8f77b74baadc0a696e001234f8ac5
217bffe44b964e10fe120949b9a143b665a8c03a57ab348713de7d8b2878345e
GET /themes/flow/js/jquery.fileupload-validate.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-fea"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
a.magsrv.com/ad-provider.js
200 OK 34 kB URL GET HTTP/2 a.magsrv.com/ad-provider.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
Fingerprint9C:9C:8C:15:3B:65:AB:34:94:B5:CD:26:D6:67:61:2A:99:F9:0A:7B
ValidityTue, 01 Aug 2023 11:24:30 GMT - Mon, 30 Oct 2023 11:24:29 GMT
File type ASCII text, with very long lines (32336)
Hash 0d65d2af9888847a0995c06bffbb6f1f
bdcd31715ffc48a61b59a8337502d174e1fb81a7
93e8a7072d356d288d3ea294046246618c560100f528f062c64be7f504151991
GET /ad-provider.js HTTP/1.1
Host: a.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 18:47:47 GMT
content-encoding: gzip
content-length: 33767
content-type: application/javascript
accept-ranges: bytes
server: nginx
etag: W/"bdcd31715ffc48a61b59a833750"
accept-ch:
cache-control: max-age=10800
x-robots-tag: noindex, follow
access-control-allow-origin: *
x-hw: 1694285267.dop001.sk1.t,1694285267.cds021.sk1.hn,1694285267.cds257.sk1.c
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.tmpl.min.js
200 OK 547 B URL GET HTTP/2 megaup.net/themes/flow/js/jquery.tmpl.min.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (971), with no line terminators
Hash 411df7e2bc659d35015f7fdb7432b331
848575bfa595b60987cf60ce9efca64ede45a20b
9509c1e67bedbaded059d0aa8d5cee65cee3c9e3f43a5952a7a233cbc10810ae
GET /themes/flow/js/jquery.tmpl.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-3cb"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
ydevelelasticals.info/S2lrNmcqCwhbWCpUCRASOQVWE1UNTFlwAyYEEV0BL1FZQQYyB0VVCyQcD1AVJAcfGAkuHU4EIQ0KBlIRLi4YZCQKLA5gJhImKAYxKDsteAIfLxtjIxkeM3Q2AQgpdQAFJgJFIR8OLl8xMgIofDMnKyxBLhs9WlItDSgEVSYNIw5yDzwsPl0LBSwceykZP1JjIjNRM3cicyAvXiIMLxMCIA0OIlQ2GQYxYA9zIC1kIgMhDGwsGABafjQdUA9hMgE5LQYLKj9aZxMTPwd1JDwwPH4AOyozYwAfOgdzEB8FUm4xCFgPYTICPyxgVhIkWmwBGjw9dTMgRBt9MDM8KHIlBiw9BzI7OgdCIx1YUnwweycobjIsJyxOMgAhDGcsGgVbE1UJPgB4MBo8A3glehkOEA04BgVGWiA5DX4rIV8BZlcNEyV9
200 OK 1.2 kB URL GET HTTP/2 ydevelelasticals.info/S2lrNmcqCwhbWCpUCRASOQVWE1UNTFlwAyYEEV0BL1FZQQYyB0VVCyQcD1AVJAcfGAkuHU4EIQ0KBlIRLi4YZCQKLA5gJhImKAYxKDsteAIfLxtjIxkeM3Q2AQgpdQAFJgJFIR8OLl8xMgIofDMnKyxBLhs9WlItDSgEVSYNIw5yDzwsPl0LBSwceykZP1JjIjNRM3cicyAvXiIMLxMCIA0OIlQ2GQYxYA9zIC1kIgMhDGwsGABafjQdUA9hMgE5LQYLKj9aZxMTPwd1JDwwPH4AOyozYwAfOgdzEB8FUm4xCFgPYTICPyxgVhIkWmwBGjw9dTMgRBt9MDM8KHIlBiw9BzI7OgdCIx1YUnwweycobjIsJyxOMgAhDGcsGgVbE1UJPgB4MBo8A3glehkOEA04BgVGWiA5DX4rIV8BZlcNEyV9
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3024), with no line terminators
Hash ff0b669d9b511e5484d86b18795e827f
5504a2c76b1ba0b19afc6cc5cbd0687206ba251c
d0c7c90cca081eeffa18b0d814b78f3bee56182354b02b0cdd3ef9e886d127a8
GET /S2lrNmcqCwhbWCpUCRASOQVWE1UNTFlwAyYEEV0BL1FZQQYyB0VVCyQcD1AVJAcfGAkuHU4EIQ0KBlIRLi4YZCQKLA5gJhImKAYxKDsteAIfLxtjIxkeM3Q2AQgpdQAFJgJFIR8OLl8xMgIofDMnKyxBLhs9WlItDSgEVSYNIw5yDzwsPl0LBSwceykZP1JjIjNRM3cicyAvXiIMLxMCIA0OIlQ2GQYxYA9zIC1kIgMhDGwsGABafjQdUA9hMgE5LQYLKj9aZxMTPwd1JDwwPH4AOyozYwAfOgdzEB8FUm4xCFgPYTICPyxgVhIkWmwBGjw9dTMgRBt9MDM8KHIlBiw9BzI7OgdCIx1YUnwweycobjIsJyxOMgAhDGcsGgVbE1UJPgB4MBo8A3glehkOEA04BgVGWiA5DX4rIV8BZlcNEyV9 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1179
date: Sat, 09 Sep 2023 18:47:46 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: Nk_f5VwRiQnTjaBetPU_RfXtwnwXyAI8wsEZYGaCMTir3JJnCHf8Zw==
X-Firefox-Spdy: h2
ydevelelasticals.info/RW1qMDgkDwldByRQCBZNNwFXFQoDSFh2XCgAEFteIVVYR1k8A0RTVCoYDlZKKgMeHlYgGU8CfjQOInpiE187ZHARDhJnTxQPOmdIET8BflcnXCBnfwYCXnNfBz0kXQAKKyhhbhUEDWN6PSApfFQcKiNKdh88LGEJCwoFaGx2VRNzUAs9C3h9AysoclMcXSN1eS80UmdqfTkndFcHLjhDCxUKW2d6PwUbc2p9JCd0SwwoPFRKADssVWkrFQZmfiImC3diBzwQcgAfOztTfz8OA3h+EywLYwEmPwMBThxdLHR1DRUGZnkMKAx3aSk8P3pfIDs4am53QB5eeT04OH1SLS87Wmo3N1tmeRQAAl5uEzsrUWwAIytYW2BfLH96PTs7cgEoOz92WyQ1L2JsECBMWksqAxoNV30HDlZ0LCEIRXIQJw
200 OK 1.2 kB URL GET HTTP/2 ydevelelasticals.info/RW1qMDgkDwldByRQCBZNNwFXFQoDSFh2XCgAEFteIVVYR1k8A0RTVCoYDlZKKgMeHlYgGU8CfjQOInpiE187ZHARDhJnTxQPOmdIET8BflcnXCBnfwYCXnNfBz0kXQAKKyhhbhUEDWN6PSApfFQcKiNKdh88LGEJCwoFaGx2VRNzUAs9C3h9AysoclMcXSN1eS80UmdqfTkndFcHLjhDCxUKW2d6PwUbc2p9JCd0SwwoPFRKADssVWkrFQZmfiImC3diBzwQcgAfOztTfz8OA3h+EywLYwEmPwMBThxdLHR1DRUGZnkMKAx3aSk8P3pfIDs4am53QB5eeT04OH1SLS87Wmo3N1tmeRQAAl5uEzsrUWwAIytYW2BfLH96PTs7cgEoOz92WyQ1L2JsECBMWksqAxoNV30HDlZ0LCEIRXIQJw
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3022), with no line terminators
Hash 9808790e41ccc602bf72c2c1e0e881c2
c97379459fc59503052ce86ab674073d77942cbb
48e8aa4eb80edb1ad1bf16838049fa208b56d05dc98e452e4d491d14162d9515
GET /RW1qMDgkDwldByRQCBZNNwFXFQoDSFh2XCgAEFteIVVYR1k8A0RTVCoYDlZKKgMeHlYgGU8CfjQOInpiE187ZHARDhJnTxQPOmdIET8BflcnXCBnfwYCXnNfBz0kXQAKKyhhbhUEDWN6PSApfFQcKiNKdh88LGEJCwoFaGx2VRNzUAs9C3h9AysoclMcXSN1eS80UmdqfTkndFcHLjhDCxUKW2d6PwUbc2p9JCd0SwwoPFRKADssVWkrFQZmfiImC3diBzwQcgAfOztTfz8OA3h+EywLYwEmPwMBThxdLHR1DRUGZnkMKAx3aSk8P3pfIDs4am53QB5eeT04OH1SLS87Wmo3N1tmeRQAAl5uEzsrUWwAIytYW2BfLH96PTs7cgEoOz92WyQ1L2JsECBMWksqAxoNV30HDlZ0LCEIRXIQJw HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1177
date: Sat, 09 Sep 2023 18:47:46 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: tbzZp-SPgKSRDafyMr4OhldcgTMwMlJWHCabb0OABe8By6ByCxim8g==
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/load-image.min.js
200 OK 6.9 kB URL GET HTTP/2 megaup.net/themes/flow/js/load-image.min.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (2546), with no line terminators
Hash 29c8a390a6c8038b015af4fda1af1c38
516b1c42416ad647530192872785a5b3b35bd471
b49885ee9e161e5595dfe428642255234d8d557c85699bb8bba72499717498c5
GET /themes/flow/js/load-image.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-9f2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
ydevelelasticals.info/a2RRUFUKBjI9agpZM3YgGQhsdWctQWMWMQYJKzszD1xjJzQSCn8zOQQRNTYnBAolfjsOEHRiEw0pOzwNOR4XAgMBDzkUPjE1HGM6ISYAaT4PAzoFABI1PghlIiEeEyFOVhMRFAAGED4PWTNiFS84VQgVD1kiNQVkCBM0ODEzMisCYyomAwkYEjEcEj1TDh9hYDEmFTc4PCJoMxkCUTcHZCkcHDwUOzIVN2w8ImQGGwYtFTQUE1E1KAQqJwlocFkiEBEYCD4QBQAqJTpnGQddGQENIVUQBTopPQM3HSkMKTsXOTUQEwY+HBcRE18+PzMcIyU9dWcpPTYdFjMOfBk+PAhhMw86IRURMgMKNScUKCcZGmQqMgMBHzguCQgALR01CDYvJxYKJSo2Ax00BT13OiYECiFtOgcrY2AZLiMVMg
200 OK 1.2 kB URL GET HTTP/2 ydevelelasticals.info/a2RRUFUKBjI9agpZM3YgGQhsdWctQWMWMQYJKzszD1xjJzQSCn8zOQQRNTYnBAolfjsOEHRiEw0pOzwNOR4XAgMBDzkUPjE1HGM6ISYAaT4PAzoFABI1PghlIiEeEyFOVhMRFAAGED4PWTNiFS84VQgVD1kiNQVkCBM0ODEzMisCYyomAwkYEjEcEj1TDh9hYDEmFTc4PCJoMxkCUTcHZCkcHDwUOzIVN2w8ImQGGwYtFTQUE1E1KAQqJwlocFkiEBEYCD4QBQAqJTpnGQddGQENIVUQBTopPQM3HSkMKTsXOTUQEwY+HBcRE18+PzMcIyU9dWcpPTYdFjMOfBk+PAhhMw86IRURMgMKNScUKCcZGmQqMgMBHzguCQgALR01CDYvJxYKJSo2Ax00BT13OiYECiFtOgcrY2AZLiMVMg
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3015), with no line terminators
Hash f7e3166d111a1d60136c9a1ca8aae854
8750a58a1a3d9214895772bd9dec6b1045f2b459
1f1e42fb43ba547fced0ad249b483050485896e36bb1991fe82951f6a2e17a7e
GET /a2RRUFUKBjI9agpZM3YgGQhsdWctQWMWMQYJKzszD1xjJzQSCn8zOQQRNTYnBAolfjsOEHRiEw0pOzwNOR4XAgMBDzkUPjE1HGM6ISYAaT4PAzoFABI1PghlIiEeEyFOVhMRFAAGED4PWTNiFS84VQgVD1kiNQVkCBM0ODEzMisCYyomAwkYEjEcEj1TDh9hYDEmFTc4PCJoMxkCUTcHZCkcHDwUOzIVN2w8ImQGGwYtFTQUE1E1KAQqJwlocFkiEBEYCD4QBQAqJTpnGQddGQENIVUQBTopPQM3HSkMKTsXOTUQEwY+HBcRE18+PzMcIyU9dWcpPTYdFjMOfBk+PAhhMw86IRURMgMKNScUKCcZGmQqMgMBHzguCQgALR01CDYvJxYKJSo2Ax00BT13OiYECiFtOgcrY2AZLiMVMg HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1170
date: Sat, 09 Sep 2023 18:47:46 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: oZ7cJslngfanLh-BwEkm0Wo1oJrogN4i6vAiwjj-_7mlt41qP9nK1g==
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/canvas-to-blob.min.js
200 OK 5.9 kB URL GET HTTP/2 megaup.net/themes/flow/js/canvas-to-blob.min.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1032), with no line terminators
Hash f1b353d74742a0d0d8dba4a82f07c050
a1b03792ee014e57e16a27cf343aaad13af08666
233a048b5eab2ecc75e2f72bf9a65de6ac06e697746156ade5b144305d76ca3a
GET /themes/flow/js/canvas-to-blob.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-408"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
imp9.bidgear.com/rec?t=1&z=6192&uuid=04c71fa957fe49c39004c7ce6988322a&p=28&g=NO&token=4a44335432&tbg=1694285266
200 OK 599 B URL GET HTTP/2 imp9.bidgear.com/rec?t=1&z=6192&uuid=04c71fa957fe49c39004c7ce6988322a&p=28&g=NO&token=4a44335432&tbg=1694285266
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint96:B8:F2:6C:8B:F4:3C:4D:3F:C4:69:A4:B1:28:D0:CB:0A:E6:73:2B
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash ca49a7e783b806a4e8576ea80346203d
6fe9d083221dae98f6c76f7121c37bc884b02d82
3e9a98dd5f0a28ff4a059f33d760264a6db02786666ac1692095ebb976f5da28
GET /rec?t=1&z=6192&uuid=04c71fa957fe49c39004c7ce6988322a&p=28&g=NO&token=4a44335432&tbg=1694285266 HTTP/1.1
Host: imp9.bidgear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaup.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Sep 2023 18:47:47 GMT
content-type: image/jpeg
content-length: 599
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JBn2iHcajoFmwApnuVdtzJqtMPyO7QOlTEpJVd9ARj%2BEcHn88cHNNFBowHfI6wynA1ooXE%2Bpz1mWaGGt98rXlzYz%2FPDpYgYCYb1f8OAQCCHTXu2HhMEAdjAJmX9Ov0XGKpM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a06cf3e56a4-OSL
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
200 OK 2.6 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
Hash ffa5849037af7c5e6fc1971877859645
deb7c1eca1d4ed43dfbf33442047136d5a5f41a9
8fa669071ed5fb03e9954ba360885e7ba95fb77ae5448dfc313c3c01202b46aa
GET /themes/flow/frontend_assets/js/SmoothScroll/SmoothScroll.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-1cdf"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintE6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (5857)
Hash 41594b556cd402d76a2d7854bc3118e2
026d63bb40e03254ff4d3a428ca0f5be44453fc8
2abe96864bd2a68bb0f95cb5216b004acb45aeb4a00ae4616fa2aba2ad7f31b4
GET /gtag/js?id=G-Z9TE2LW16Q&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 09 Sep 2023 18:47:47 GMT
expires: Sat, 09 Sep 2023 18:47:47 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80667
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.magsrv.com/v1/api.php
200 OK 802 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
Fingerprint9C:9C:8C:15:3B:65:AB:34:94:B5:CD:26:D6:67:61:2A:99:F9:0A:7B
ValidityTue, 01 Aug 2023 11:24:30 GMT - Mon, 30 Oct 2023 11:24:29 GMT
File type JSON data\012- , ASCII text, with very long lines (1117), with no line terminators
Hash e296a5baa82995941c83e002749e742d
56ab95cb86ace1f8ca1c33009a965fea2c8fadb4
20b55eab3c0bd1c34f9d7d19f4b974cad3085d49181eb2120914ae35b5ab8dcf
POST /v1/api.php HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Content-Type: text/plain
Content-Length: 290
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Sep 2023 18:47:47 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2264fcbdd3731609.98620262715253360%22%3B%7D; expires=Mon, 08-Sep-2025 18:47:47 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
200 OK 951 B URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type PNG image data, 114 x 114, 8-bit colormap, non-interlaced\012- data
Hash 76852bc6b2c028db97322a74e85bd020
ed52fb4de0d51f93277bbaae42fa80ba5f92c31e
8a5ef2ef8440c17db1b1b539065ba4a887e07a2c508b79c2d1659512e9016884
GET /themes/flow/frontend_assets/images/icons/favicon/apple-touch-icon-114x114.png HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:47 GMT
content-type: image/png
content-length: 951
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-3b7"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 78b27616e7338fc97623a3dceb2801ee
a80e1a7e4ed754143d3a87a121b7f537b33435ef
a0c6596b52a43276648e99c61953f7e34ed5abe175e96a6dce9bda61f6937f7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 18:47:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ydevelelasticals.info/utx?cb=cZF9AZQey0wG&top=megaup.net&tid=761186
204 No Content 0 B URL GET HTTP/2 ydevelelasticals.info/utx?cb=cZF9AZQey0wG&top=megaup.net&tid=761186
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=cZF9AZQey0wG&top=megaup.net&tid=761186 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 09 Sep 2023 18:48:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: qdRfhLjH68IJ1IhNz6S87mRN9166JTMiPtfkfh0IqVIqMe-tpILHRA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 78b27616e7338fc97623a3dceb2801ee
a80e1a7e4ed754143d3a87a121b7f537b33435ef
a0c6596b52a43276648e99c61953f7e34ed5abe175e96a6dce9bda61f6937f7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 18:47:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ydevelelasticals.info/utx?cb=JBfkGbBZ7kEC&top=megaup.net&tid=825911
204 No Content 0 B URL GET HTTP/2 ydevelelasticals.info/utx?cb=JBfkGbBZ7kEC&top=megaup.net&tid=825911
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=JBfkGbBZ7kEC&top=megaup.net&tid=825911 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 09 Sep 2023 18:48:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: zeNAt5ZjnLYK9lD3WBP7Q4ZqsSLu42fYwUDWIaXLCmQDVFZHDOaNJw==
X-Firefox-Spdy: h2
s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02OXUoEQQyEr+IFdqgk1X8++6ygeICZ3lmfXARXWKEOb88osvnSdCdUdeLwOKCNvDPes4xUs6lhok+WqMenZ9H0vr7NXx/Teb0orGWHcmtgVQtWzyIzrWYlM9FbToVircVAyJJCGHgKcntNAEyl6PXlYT82cAVw9TQM+1gZXBwFrpvZljg55mOvtkbkSN1y50LnXJd52Vy43RO/jFEl9t/xz2GThjF8rDMC2tvz5/e5SzfCjfRn9bZfJiUiUvZ2mq2x58WPS/b1aJ0wJuAH3POsM1UBAAA=
200 OK 20 B URL GET HTTP/1.1 s.magsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA02OXUoEQQyEr+IFdqgk1X8++6ygeICZ3lmfXARXWKEOb88osvnSdCdUdeLwOKCNvDPes4xUs6lhok+WqMenZ9H0vr7NXx/Teb0orGWHcmtgVQtWzyIzrWYlM9FbToVircVAyJJCGHgKcntNAEyl6PXlYT82cAVw9TQM+1gZXBwFrpvZljg55mOvtkbkSN1y50LnXJd52Vy43RO/jFEl9t/xz2GThjF8rDMC2tvz5/e5SzfCjfRn9bZfJiUiUvZ2mq2x58WPS/b1aJ0wJuAH3POsM1UBAAA=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerLet's Encrypt
Subjectmagsrv.com
Fingerprint9C:9C:8C:15:3B:65:AB:34:94:B5:CD:26:D6:67:61:2A:99:F9:0A:7B
ValidityTue, 01 Aug 2023 11:24:30 GMT - Mon, 30 Oct 2023 11:24:29 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA02OXUoEQQyEr+IFdqgk1X8++6ygeICZ3lmfXARXWKEOb88osvnSdCdUdeLwOKCNvDPes4xUs6lhok+WqMenZ9H0vr7NXx/Teb0orGWHcmtgVQtWzyIzrWYlM9FbToVircVAyJJCGHgKcntNAEyl6PXlYT82cAVw9TQM+1gZXBwFrpvZljg55mOvtkbkSN1y50LnXJd52Vy43RO/jFEl9t/xz2GThjF8rDMC2tvz5/e5SzfCjfRn9bZfJiUiUvZ2mq2x58WPS/b1aJ0wJuAH3POsM1UBAAA= HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2264fcbdd3731609.98620262715253360%22%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Sep 2023 18:47:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://megaup.net
Access-Control-Allow-Credentials: true
Set-Cookie: __upt=%7B%22v%22%3A1%2C%22id%22%3A%220%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.0199%22%7D; expires=Mon, 08 Sep 2025 18:47:47 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D
ValidityMon, 14 Aug 2023 08:23:05 GMT - Mon, 06 Nov 2023 08:23:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:txcBRK6IrVquiudyl4We3ZF9N3jSyA:sIm7TukdkuNKEhlX; Expires=Mon, 08-Sep-2025 18:47:47 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 09 Sep 2023 18:47:47 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhevCHpUVVCmF2Af8POaslRN5-mOEmGd8mO-9VmOkihiGHGIsl6dSjGKATdRrXSeYXdfywOX_Q
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-bTR3XR1fYXLBbqWVWhHtZg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
megaup.net/themes/flow/js/jquery.dataTables.min.js
200 OK 20 kB URL GET HTTP/2 megaup.net/themes/flow/js/jquery.dataTables.min.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (768)
Hash 737f853e9fd6a31d62f5028e88663c9f
cf144f2ab49f53a69fbfe10d3588fc23437d2736
6c3ca64b7acfdd29b3ca6f1b9b46696369abd462d4546182085c347f72211841
GET /themes/flow/js/jquery.dataTables.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-10fe4"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
ad.a-ads.com/1811811?size=300x250
200 OK 4.7 kB URL GET HTTP/2 ad.a-ads.com/1811811?size=300x250
IP
ASN #24940 Hetzner Online GmbH
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash de5c4d0a4b6411f9378a94d99f905374
4f2fed02f2d46b2c8ba2e498ba56121004eaf883
a7d27a326224b73afa770cc3b807d8476e42f63d39b4a7512bb2bd9f14fb0dc2
GET /1811811?size=300x250 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:47 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://megaup.net/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/452143/300x250?region=eu-central-1
200 OK 34 kB URL GET HTTP/2 static.a-ads.com/a-ads-banners/452143/300x250?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ad.a-ads.com/1811811?size=300x250
Certificate IssuerSectigo Limited
Subject*.a-ads.com
Fingerprint34:68:C2:05:E5:2A:4E:C3:F9:FC:94:69:D3:A6:BE:F2:21:A2:DE:AE
ValidityWed, 21 Dec 2022 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 250\012- data
Hash 37d95e65eefb35f795189e8125c0064a
946979a233d3a3f7fa6dcf08137ed68c36db0c09
30ca704e42e449af2e15542ab72b6d978e2bdd6024d905f59c16f35871a07163
GET /a-ads-banners/452143/300x250?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.a-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:47 GMT
content-type: image/gif
content-length: 34465
x-amz-id-2: m0cs1Xm1oUWe1hzwJ2tUhwnUwI1PNffe2g0GBP/wD4tNXXKO0Rc/DbQg+5+ePqGq1fP0yDYX15I=
x-amz-request-id: 6CZ46WKDWN1B2FWK
x-amz-replication-status: COMPLETED
last-modified: Sat, 29 Apr 2023 12:10:47 GMT
etag: "37d95e65eefb35f795189e8125c0064a"
x-amz-server-side-encryption: AES256
cache-control: max-age=315360000
x-amz-version-id: bfSviJ5r1_n3CQQrNhSypCJLeYPehkWd
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
ydevelelasticals.info/utx?cb=dpKNQNQBBegm&top=megaup.net&tid=876318
204 No Content 0 B URL GET HTTP/2 ydevelelasticals.info/utx?cb=dpKNQNQBBegm&top=megaup.net&tid=876318
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=dpKNQNQBBegm&top=megaup.net&tid=876318 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 09 Sep 2023 18:48:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: xOfnZkn_9Hvizjh9M0185H1p5qYGWNL3mAmNVW9PiybAflTFFPuZcA==
X-Firefox-Spdy: h2
ydevelelasticals.info/utx?cb=iJb15bHEu9re&top=megaup.net&tid=764141
204 No Content 0 B URL GET HTTP/2 ydevelelasticals.info/utx?cb=iJb15bHEu9re&top=megaup.net&tid=764141
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=iJb15bHEu9re&top=megaup.net&tid=764141 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 09 Sep 2023 18:48:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: P72uZ7XmJTNs2LVBChZ_uDDuXpcrhMu2nrV0-0F4wuXeOoJp-7aD2w==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 51e2978c4704feba75449d8861a89fd9
b52e4db9eecdc94c1279e920ff3656420fe1dfbc
e585bda3afcec6073c5cd9e4e9278c9bdabe65eea6e59bd4ec56e6a1134d5bad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 18:47:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dmmzkfd82wayn.cloudfront.net/FcmdveGsRCAEeVAYOC0VcRFNeTFpUDRwXBQJaBCgNOisFTgEiVykCJTlBGwIPT1dJFAocAFJeDhwEUklNEwMNRV9UEx8XAE8IDhEGFx4GFgIbQRoZVh8IFREHHgZKSi1HSV9dWUJPF0laV1QtXVlCCwYWHgpCXUgTSlEwTl9XVC1dWUIVGV1YM1ZfQUVCTk-pKWxUCDBMEV1UpSltDV19JW0NCXUgNGxUKHgQKQl0+WkNWQUhNB1pe
610 B URL dmmzkfd82wayn.cloudfront.net/FcmdveGsRCAEeVAYOC0VcRFNeTFpUDRwXBQJaBCgNOisFTgEiVykCJTlBGwIPT1dJFAocAFJeDhwEUklNEwMNRV9UEx8XAE8IDhEGFx4GFgIbQRoZVh8IFREHHgZKSi1HSV9dWUJPF0laV1QtXVlCCwYWHgpCXUgTSlEwTl9XVC1dWUIVGV1YM1ZfQUVCTk-pKWxUCDBMEV1UpSltDV19JW0NCXUgNGxUKHgQKQl0+WkNWQUhNB1pe
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (846), with no line terminators
Hash 98147a42d255927da95eb140a10f72ed
ca4fa43443d43573ca38c820dfe625e24dfbd309
e63c4353edf5f695737c0ce9ecc9006e397face44c617d18dc0188be20c6bed5
GET /FcmdveGsRCAEeVAYOC0VcRFNeTFpUDRwXBQJaBCgNOisFTgEiVykCJTlBGwIPT1dJFAocAFJeDhwEUklNEwMNRV9UEx8XAE8IDhEGFx4GFgIbQRoZVh8IFREHHgZKSi1HSV9dWUJPF0laV1QtXVlCCwYWHgpCXUgTSlEwTl9XVC1dWUIVGV1YM1ZfQUVCTk-pKWxUCDBMEV1UpSltDV19JW0NCXUgNGxUKHgQKQl0+WkNWQUhNB1pe HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ydevelelasticals.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 610
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _sfQHLare1TBmA1qMmK_UvNNGpdUdtf9egerxCMJzuK_L3IgKvbwxQ==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/qcHJZV2QTHTcxWwQbPWpTRkNob1JWGCo4CgBPNm8OFBQVPigSBxMCLlYGIzNZQFQ1NgoXT38yChNPaHEFFBBkY0IEAjY8WR8TMDoBCRs3Pg1WBzhqCR8IMDsIEVdrEVFeQnxlVFgKaGZBQzB8ZVQcGzciHFVAaS9cRi1vY0FDMHxlVAIEfGQlQUJgeVRZV2-tnAxURMjhBQjRrZ1VAQmhnVVVAaTENAhc/OBxVQB9mVUFcaXERTUM
613 B URL dmmzkfd82wayn.cloudfront.net/qcHJZV2QTHTcxWwQbPWpTRkNob1JWGCo4CgBPNm8OFBQVPigSBxMCLlYGIzNZQFQ1NgoXT38yChNPaHEFFBBkY0IEAjY8WR8TMDoBCRs3Pg1WBzhqCR8IMDsIEVdrEVFeQnxlVFgKaGZBQzB8ZVQcGzciHFVAaS9cRi1vY0FDMHxlVAIEfGQlQUJgeVRZV2-tnAxURMjhBQjRrZ1VAQmhnVVVAaTENAhc/OBxVQB9mVUFcaXERTUM
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (849), with no line terminators
Hash 02294892ec8b01a5fe548d6c09485b41
2a8918879b8ad98c1af87aec03849fa430e4c04b
f8f4f618ef8474cd19fd1fc5352ef1f070fde20ade6db4e3a20d4f599831f090
GET /qcHJZV2QTHTcxWwQbPWpTRkNob1JWGCo4CgBPNm8OFBQVPigSBxMCLlYGIzNZQFQ1NgoXT38yChNPaHEFFBBkY0IEAjY8WR8TMDoBCRs3Pg1WBzhqCR8IMDsIEVdrEVFeQnxlVFgKaGZBQzB8ZVQcGzciHFVAaS9cRi1vY0FDMHxlVAIEfGQlQUJgeVRZV2-tnAxURMjhBQjRrZ1VAQmhnVVVAaTENAhc/OBxVQB9mVUFcaXERTUM HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ydevelelasticals.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 613
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MfJFdPe9Uk4ggoUxcZXFMuzNbjLEGZjuXITyrG_ChcHftSlSF8gJNg==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/fMjlXRzFRVjkhDkZQM3oJBQ9kdgkUUyQoX0IEOCt+AAkbAnZ2W3EzS1YEZ2FdU1cwehdXVzR6ABRYMyUMBh8jN15ZBDgmWF9cLi5fW1BxMlAPVDg9WF5VNmIDdAx5dxQACX8/AAMcZAUUAAk7Ll9HQXJ1AUoBYRgHBhxkBRQACSUxFAF4ZncIHAl+YgMCXj-IkWl0cZQEDAghndwACCHJ1AVRQJSJXXUFydXcDCGZpARRManY
458 B URL dmmzkfd82wayn.cloudfront.net/fMjlXRzFRVjkhDkZQM3oJBQ9kdgkUUyQoX0IEOCt+AAkbAnZ2W3EzS1YEZ2FdU1cwehdXVzR6ABRYMyUMBh8jN15ZBDgmWF9cLi5fW1BxMlAPVDg9WF5VNmIDdAx5dxQACX8/AAMcZAUUAAk7Ll9HQXJ1AUoBYRgHBhxkBRQACSUxFAF4ZncIHAl+YgMCXj-IkWl0cZQEDAghndwACCHJ1AVRQJSJXXUFydXcDCGZpARRManY
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (598), with no line terminators
Hash d2431d895e5434a5faf80be3e95bb67d
0eb0b4bf1b4f8fb6178cfe094aa8834c8d1aef67
877e915e9f7e0eb7ba9696e436a8ad9bf42e0525ccd514fa53e59557aa486d8d
GET /fMjlXRzFRVjkhDkZQM3oJBQ9kdgkUUyQoX0IEOCt+AAkbAnZ2W3EzS1YEZ2FdU1cwehdXVzR6ABRYMyUMBh8jN15ZBDgmWF9cLi5fW1BxMlAPVDg9WF5VNmIDdAx5dxQACX8/AAMcZAUUAAk7Ll9HQXJ1AUoBYRgHBhxkBRQACSUxFAF4ZncIHAl+YgMCXj-IkWl0cZQEDAghndwACCHJ1AVRQJSJXXUFydXcDCGZpARRManY HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ydevelelasticals.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 458
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IFbtBNEWNB45tBrLtfLDeeLUYqYromNZRKvtUMFrVCkavUHDp2dNmQ==
X-Firefox-Spdy: h2
dmmzkfd82wayn.cloudfront.net/5Tms0OTEtBFpfDjoCUAQJfF4NCABoAUdWXz5WXH0HCwV8C0Q4ABJNSypWBB9dLwVTBBcrBVcEAGgKUFsMek1ASV4lVkFXVSsNXVdUKk1BWAwjBE5QXSIKEQt3e0UEHAN+Q0wIAGtYdhwDfgddV0Q2TgYJSXZdaw8Fa1h2HAN+GUIcAg9aBAAffkIRCwEpDl-dSXmtZcgsBf1sECAF/TgYJVycZUV9eNk4GfwB/WhoJFztWBQ
200 OK 372 B URL GET HTTP/2 dmmzkfd82wayn.cloudfront.net/5Tms0OTEtBFpfDjoCUAQJfF4NCABoAUdWXz5WXH0HCwV8C0Q4ABJNSypWBB9dLwVTBBcrBVcEAGgKUFsMek1ASV4lVkFXVSsNXVdUKk1BWAwjBE5QXSIKEQt3e0UEHAN+Q0wIAGtYdhwDfgddV0Q2TgYJSXZdaw8Fa1h2HAN+GUIcAg9aBAAffkIRCwEpDl-dSXmtZcgsBf1sECAF/TgYJVycZUV9eNk4GfwB/WhoJFztWBQ
IP
Requested by https://ydevelelasticals.info/bVdWRXoMNTUoRQxqNGMPHztrYEgrcmQDHgA6LC4cCW9kMhsUOXgmFgIiMiMIAjkiaxQII3N3PFgDOzZKIgMTMTgrJzABEAIUAwQrJzEQcTQuFhQqOzgzAR0AWAAODUolFCETQi5nB3E7Lx0YFgMdABQHQwkbIRMuLxU1Nzg7NBMEPQocAwMJIDI9dDs+AWIpLAYRDhMpHhkOEx44HD10ODoWIS84KGIHHSkkHBMUDl4yZhA/JRYYYEgvBmYyMywQIhweBSASIx0JMwB1K18DMRwwPg8MIRsabxAkSwVlHgQ0SGUUAi8kNBciQwwVFwQcCzwfFzkaEiYBFkAzBR0XGQ01IgkvMWc2Py4WEGBIKwMxHDA7LjUfLztuMwsRWRAwMjhIZRASEgIdED8OOhUHYxAeODg1RwUTYAAUJWUjMxE
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (478), with no line terminators
Hash 15a615bb03d1f52d47155dc68590598a
0f28e20310d135e7e2ee66eb25f6341ea707404f
9ae4a7c7acd316243a3580c597dd7a6156b4d7bccdd1e358b9cef56f71d092e7
GET /5Tms0OTEtBFpfDjoCUAQJfF4NCABoAUdWXz5WXH0HCwV8C0Q4ABJNSypWBB9dLwVTBBcrBVcEAGgKUFsMek1ASV4lVkFXVSsNXVdUKk1BWAwjBE5QXSIKEQt3e0UEHAN+Q0wIAGtYdhwDfgddV0Q2TgYJSXZdaw8Fa1h2HAN+GUIcAg9aBAAffkIRCwEpDl-dSXmtZcgsBf1sECAF/TgYJVycZUV9eNk4GfwB/WhoJFztWBQ HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ydevelelasticals.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 372
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9MqYwryzStP_ZajRT9RobLWUZ9LOtXgKzJTB2dULfavH6LiY7qHyig==
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash d9c1d176dce46881fbf2196663fed919
be47ab832df07d56e5bcad658ef0c52208a33ed5
11d12d3960567f6b5e6cf7ea55339128d7eb541b83111e4d64d46330305d9832
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 09 Sep 2023 18:47:47 GMT
Last-Modified: Sat, 09 Sep 2023 18:40:02 GMT
Server: ECAcc (amb/6B35)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: o_91AuH2sty9yBwpFC8ZG0ez9Rb8jGm5OckyyieLp2grF_N5dtF0jg==
Age: 465
dmmzkfd82wayn.cloudfront.net/PdG10elIXAhocbQAEEEdrQFRMTGZSBwcVPARQATMdQjcxPTgDSwAANkldUhYzGgpJXDcaDklLdBUJFkdmUhgVRz8bFx0WPhVIRjxnWl1RSGJcFUVLd0cvUUhiGAQaDypRX0QCakIyQk53Ry9RSGIGG1FJE0VdTVRiXUhGSjURDh8Vd0YrRkpjRF1FSmNRX0-QcOwYIEhUqUV8yS2NFQ0RcJ0lc
193 B URL dmmzkfd82wayn.cloudfront.net/PdG10elIXAhocbQAEEEdrQFRMTGZSBwcVPARQATMdQjcxPTgDSwAANkldUhYzGgpJXDcaDklLdBUJFkdmUhgVRz8bFx0WPhVIRjxnWl1RSGJcFUVLd0cvUUhiGAQaDypRX0QCakIyQk53Ry9RSGIGG1FJE0VdTVRiXUhGSjURDh8Vd0YrRkpjRF1FSmNRX0-QcOwYIEhUqUV8yS2NFQ0RcJ0lc
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 989f9b2adb2d1bc08ea9b6142703c2a8
24d7663f5323df6dceb2ce7cc1462d89ec0f8d87
45661a0e303033be0a75cd8abf38bb49a9d38c4b865891ac088ab640cbe59cc0
GET /PdG10elIXAhocbQAEEEdrQFRMTGZSBwcVPARQATMdQjcxPTgDSwAANkldUhYzGgpJXDcaDklLdBUJFkdmUhgVRz8bFx0WPhVIRjxnWl1RSGJcFUVLd0cvUUhiGAQaDypRX0QCakIyQk53Ry9RSGIGG1FJE0VdTVRiXUhGSjURDh8Vd0YrRkpjRF1FSmNRX0-QcOwYIEhUqUV8yS2NFQ0RcJ0lc HTTP/1.1
Host: dmmzkfd82wayn.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ydevelelasticals.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 193
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OEHELB6X1ahR64-bWJTNX7206eirYNjOJQM2TWQiLBommFy36J2yKQ==
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/ZDNBYmZLDCIRWwV3G1M8IHkiJlYiZgM0ASZiBzMlM1QlIT4lamcWDwAOeVBTXQJwRBYNV3xRVEJANQMSEUB8UFZUBGcLCAJcfFBAEg5xTF9KAW9XQBEOcEQSFFImX1dCQzUWClkCd1tSVgt0UFBTBHJQ
204 No Content 0 B URL POST HTTP/3 fwukoulnhdlukik.info/ZDNBYmZLDCIRWwV3G1M8IHkiJlYiZgM0ASZiBzMlM1QlIT4lamcWDwAOeVBTXQJwRBYNV3xRVEJANQMSEUB8UFZUBGcLCAJcfFBAEg5xTF9KAW9XQBEOcEQSFFImX1dCQzUWClkCd1tSVgt0UFBTBHJQ
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /ZDNBYmZLDCIRWwV3G1M8IHkiJlYiZgM0ASZiBzMlM1QlIT4lamcWDwAOeVBTXQJwRBYNV3xRVEJANQMSEUB8UFZUBGcLCAJcfFBAEg5xTF9KAW9XQBEOcEQSFFImX1dCQzUWClkCd1tSVgt0UFBTBHJQ HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YuKAOw2l2Qr2uZ8EyFrHX2ILdIiwWLwz3Cv4vpRyJQ5W8R28EyrP2RQjzSn8%2B2mhnID0m52oktnZjF84Uu4kMA6%2FzWlJ%2BNl0zq2udDC4cdfKCtyEar7Zb%2FPMXK%2BLsbFufzAXzAU2ow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a0b4ea0b527-OSL
alt-svc: h3=":443"; ma=86400
parrecleftne.xyz/utx?tid=832633&top=megaup.net&cb=HowScMxxyuhB
204 No Content 0 B URL GET HTTP/2 parrecleftne.xyz/utx?tid=832633&top=megaup.net&cb=HowScMxxyuhB
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectparrecleftne.xyz
Fingerprint36:D5:D9:43:13:F4:FE:83:A7:9F:01:89:96:60:5B:AD:CB:A5:27:B7
ValiditySun, 18 Dec 2022 00:00:00 GMT - Tue, 16 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?tid=832633&top=megaup.net&cb=HowScMxxyuhB HTTP/1.1
Host: parrecleftne.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 09 Sep 2023 18:47:47 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sat, 09 Sep 2023 18:48:47 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 d2344bac503cfadf51884e9930680ffe.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: ZTTkV0VKAJO_a5rIqeYESwE4PY78cWiuLe23hr-ktXl-qNlLLxGhww==
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/popunder.gif
200 OK 440 B URL GET HTTP/3 fwukoulnhdlukik.info/popunder.gif
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c108fbf153755d3a2ce92ab07bcb18f6
22329a05520e89f3aab7483705e451cb1039ab1c
fa6b0b2af17dd20be88c4cc8e1b2590b5cb37c070d9c2d84221c36a3ed35b700
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /popunder.gif HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Sep 2023 18:47:47 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 146264
last-modified: Fri, 08 Sep 2023 02:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q8B8K%2FhO9rDk5azQ7bl0ipO5XmCojMX3%2B0hz5pZd7qBDpOBHl%2Bt%2Bbxyu6mQVCsxsMuhKQOF4Y1PLFIo2heDdENCpVFIUOdCPx%2BCS%2FDPVngfXJDOYpnShUruakjdsm6L6HqRG0lKbLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80419a0afe63b527-OSL
alt-svc: h3=":443"; ma=86400
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhfAhRpxRtjjORO68T1U3v3NmcxBny69sOqUOVzStp_8o234mJ-KBpDinAFi9fBpQMrDsLRMsw
302 Found 402 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhfAhRpxRtjjORO68T1U3v3NmcxBny69sOqUOVzStp_8o234mJ-KBpDinAFi9fBpQMrDsLRMsw
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (395)
Hash 66d4b2360249f0cd9e2cfc0b75a1c579
91f1aa0a0ff8d1cff72977bdd09c3c7066e3af0e
4058381b86a1ac32401873143a2ddf9ba71da464fef091a8e2345faaeb48d38b
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhfAhRpxRtjjORO68T1U3v3NmcxBny69sOqUOVzStp_8o234mJ-KBpDinAFi9fBpQMrDsLRMsw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:JvM_imGH59mzYFvFgy8eXHIitithMw:c6ZNld8QJAiqjN4g;Path=/;Expires=Mon, 08-Sep-2025 18:47:47 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 09 Sep 2023 18:47:47 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhfO9vWLx5Rvk17bSl06W5aWjBFeWK8zWxy6NT2z8Bti3ZW3iMIBYW0AmnVJLz8FjJs6ibd6Fg&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1610843475%3A1694285267946419&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-ZXrlH_jh70VlRYwpViH-eQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 402
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31568, version 1.1\012- data
Hash e0c4ac0e73196bd0469c5c33304b7773
bb071565f82907d117b0732dca8013409162c67d
ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af
GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7; _ga_Z9TE2LW16Q=GS1.1.1694285267.1.0.1694285267.0.0.0; _ga=GA1.1.16694511.1694285268
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:48 GMT
content-type: font/woff
content-length: 31568
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7b50"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 119 kB IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 119 kB (119285 bytes)
Hash 52a4991ba3fe1595f1f5a07d43f9b74a
df37196f9681e9666b03d02e4f8747bc8b5ab858
1cbb060ed9c4434e60686b8f117622e50b5ee452446b8ffc7474bae39e052a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 18:47:47 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 5302
last-modified: Sat, 09 Sep 2023 17:19:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R71YrEQZtLUwpKwDrBhao8zamyzF%2BRkrwShZcRCvg7IMAfX9Pqt9uBsv5ZKG7nkOI0ZQL2Cdf5UiPG1clnv4%2FAv%2FtJSC8lKUvlVgrUiJkZAkmZ%2Be9YVxGkTqe7XzADiV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80419a0b5c6c7732-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 5.1 kB IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 94fd246e1792468918e6cd0c8f638513
d47c361df95150c354ba137ad9a7d710d3a0970f
3bd6791b525d32de2bf652a5a8a3d0b6d0d4c26c34ee22e7b1bece2200f55763
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 18:47:47 GMT
content-type: text/plain
set-cookie: csu=923407743190373@1@1694285267; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://megaup.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qEobLFvLFUO8g55SIwltbJYTnqkJEdGngPoV9x7eTJd9PGGhiETMYagi6vIoQdOqPRs1YlN2%2FERCIdCZuqVfXnJ4fTyEPcPAbF9GWLQx0lt2w8cYZ0wJ0R3AWwygbc%2Bi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a0b6c8f7732-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hw-cdn2.ang-content.com/a7/creatives/39/1393/805208/945697/945697_banner.png
200 OK 57 kB URL GET HTTP/1.1 hw-cdn2.ang-content.com/a7/creatives/39/1393/805208/945697/945697_banner.png
IP
Requested by https://a.adtng.com/get/10012456?time=1614803572912&apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6bSjieXPbW2beiiuirWavWnSmenO3TPSV0rv9.czijBuZznSuldK6V0rpXSuldK6au6me2qeuxwfY-
Certificate IssuerDigiCert Inc
Subject*.ang-content.com
Fingerprint51:DB:5E:DC:4B:47:52:13:46:14:6B:21:A1:A9:FB:FD:A5:78:DC:A6
ValidityTue, 25 Oct 2022 00:00:00 GMT - Sat, 25 Nov 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x250, components 3\012- data
Hash e98c3a2d17c601c49776416853b823cf
fee8e4361745eb06aa52bed7b89769aa52b2a0ce
14c2997e86cac3ed98c84d8665caabb945b3ba2c53f17cad500c176318f2a39f
GET /a7/creatives/39/1393/805208/945697/945697_banner.png HTTP/1.1
Host: hw-cdn2.ang-content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.adtng.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 09 Sep 2023 18:47:48 GMT
Connection: Keep-Alive
ETag: "1590487676"
Content-Length: 57405
Content-Type: image/png
Last-Modified: Tue, 26 May 2020 10:07:56 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10613291
X-HW: 1694285268.dop202.sk1.t,1694285268.cds247.sk1.shn,1694285268.dop202.sk1.t,1694285268.cds214.sk1.c
Access-Control-Allow-Origin: *
ydevelelasticals.info/multi?cs=OVBpYVcBZVhQYwBpW1FuD2VcWGI&abt=0&red=1&sm=76&k=download%20file%202024%20acad%20part1&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F2BGze%2FACAD.2024.1.X64.part1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&_EqZG=1694285267731&crc=1
200 OK 1.6 kB URL GET HTTP/2 ydevelelasticals.info/multi?cs=OVBpYVcBZVhQYwBpW1FuD2VcWGI&abt=0&red=1&sm=76&k=download%20file%202024%20acad%20part1&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F2BGze%2FACAD.2024.1.X64.part1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&_EqZG=1694285267731&crc=1
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (3355), with no line terminators
Hash 480e2aeecbc6a57e338a667be32759a2
dde63777b0dff7aa8af04ca7cd82cba2f3b01a74
19235c2f82e8bafe4f8d2ca2bcee790e6e42c913184a37b8cc86168c4d7a6535
GET /multi?cs=OVBpYVcBZVhQYwBpW1FuD2VcWGI&abt=0&red=1&sm=76&k=download%20file%202024%20acad%20part1&v=1.0.60.3&sts=0&prn=0&emb=0&tid=876318&rxy=1280_1024&fs=1&ref=https%3A%2F%2Fmegaup.net%2F2BGze%2FACAD.2024.1.X64.part1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&_EqZG=1694285267731&crc=1 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 1588
date: Sat, 09 Sep 2023 18:47:48 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=18cda0d0-e1fd-4656-8dd1-52f8c1976315
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: Pk-7dB_zHaFr8s6Mo6QvKxQqo5j8S-EqIpN_5gBB6AC2nG4laavLbw==
X-Firefox-Spdy: h2
ydevelelasticals.info/floater?cs=TzVPWnB7DHtqR38CempAfQR4YkQ&abt=0&red=1&sm=83&k=download%20file%202024%20acad%20part1&v=0.9.2.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F2BGze%2FACAD.2024.1.X64.part1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&aa=oi1_&_AbYL=1694285267734&crc=1
200 OK 4.3 kB URL GET HTTP/2 ydevelelasticals.info/floater?cs=TzVPWnB7DHtqR38CempAfQR4YkQ&abt=0&red=1&sm=83&k=download%20file%202024%20acad%20part1&v=0.9.2.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F2BGze%2FACAD.2024.1.X64.part1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&aa=oi1_&_AbYL=1694285267734&crc=1
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (6871), with no line terminators
Hash f970e50f2fd665f380570133cb277092
4e6c0cfe8e7c0298c3174ee85e8d6d84f2b76b23
d7378ccd7c3a7f4581182368a814f6fdd1ab3649412fa85c5845f1cd83c9f316
GET /floater?cs=TzVPWnB7DHtqR38CempAfQR4YkQ&abt=0&red=1&sm=83&k=download%20file%202024%20acad%20part1&v=0.9.2.5&sts=0&prn=0&emb=0&tid=825911&rxy=1280_1024&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fmegaup.net%2F2BGze%2FACAD.2024.1.X64.part1.rar&jst=0&enr=0&lcua=mozilla%2F5.0%20(x11%3B%20linux%20x86_64%3B%20rv%3A109.0)%20gecko%2F20100101%20firefox%2F111.0&tzd=0&uloc=&if=0&aa=oi1_&_AbYL=1694285267734&crc=1 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 4296
date: Sat, 09 Sep 2023 18:47:48 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://megaup.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=d92bd966-2bd8-489f-b01d-633fe42951e6
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: OPIesuIi9wdDFSjpXaos_TtIH0WSubp9MXRtJiodDzJb6PdC2ToSww==
X-Firefox-Spdy: h2
a.adtng.com/get/10012456?time=1614803572912&apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6bSjieXPbW2beiiuirWavWnSmenO3TPSV0rv9.czijBuZznSuldK6V0rpXSuldK6au6me2qeuxwfY-
200 OK 1.9 kB URL GET HTTP/2 a.adtng.com/get/10012456?time=1614803572912&apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6bSjieXPbW2beiiuirWavWnSmenO3TPSV0rv9.czijBuZznSuldK6V0rpXSuldK6au6me2qeuxwfY-
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerDigiCert Inc
Subject*.adtng.com
FingerprintCB:23:30:19:D2:93:98:35:02:A3:6A:C1:70:5D:B7:1F:C6:E8:1F:0E
ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4013), with no line terminators
Hash 8fcf5c79fa6abc771d828e6f23582dc5
fc90a135b596e14a2b861c3c327aab22a4840d8a
2ffb06704965797ba0f4182fd89e70a292954115f8dd826f2de10bf664a188e3
GET /get/10012456?time=1614803572912&apb=ooddNHdLHTPHNVS4ASOpprpmtrdTbbZNLTK6V1Esqp6pXVTTOpmdQ6ap0rpXSunqoppdRNTRPTO6iamieml0rpnSuldK6V0zpXSumc6bSjieXPbW2beiiuirWavWnSmenO3TPSV0rv9.czijBuZznSuldK6V0rpXSuldK6au6me2qeuxwfY- HTTP/1.1
Host: a.adtng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://megaup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Sat, 09 Sep 2023 18:47:47 GMT
content-type: text/html
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
content-encoding: gzip
set-cookie: LBSERVERID=ded7079; path=/; HttpOnly; Secure; SameSite=None
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
fwukoulnhdlukik.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
204 No Content 0 B URL POST HTTP/3 fwukoulnhdlukik.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
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST 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 HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Sat, 09 Sep 2023 18:47:50 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xEcWCOqDwHQI1X1Hqh7bOT3FnFbFzjRGe8na%2BAXBSKFFrFtG5qWAl%2Fc6mmjJWVhaWdyUiLlNhRxn5L%2Bg7xH5ds9p4Kuz10WJvVSR3YHR00%2Bz4jd6mPpUmeiQ2yEUmpCLBOIgsSwUcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a1ce828b527-OSL
alt-svc: h3=":443"; ma=86400
megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31836, version 1.1\012- data
Hash 4514fa5a5b3d1e0b14aa32a7d068124a
e634977bfabc20ed15fe7ed03d3876cf68834b93
5b0f118d658eacc5740b10b0dc2ebbd99ee8e8262c72ff29bfcda48c02b19861
GET /themes/flow/frontend_assets/fonts/raleway.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7; _ga_Z9TE2LW16Q=GS1.1.1694285267.1.0.1694285267.0.0.0; _ga=GA1.1.16694511.1694285268
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:50 GMT
content-type: font/woff
content-length: 31836
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c5c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
200 OK 31 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_extrabold.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31344, version 1.1\012- data
Hash 21f79e4c0fbe54a555170aa70bb4c8b7
9d4aaf2016cd21f16bc45089a48de84dba951fa7
2b638674bc57ad355ef2ecbd68e78ecb36bc323aaaf4ddeb9cd4f61bc5f26c42
GET /themes/flow/frontend_assets/fonts/raleway_extrabold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7; _ga_Z9TE2LW16Q=GS1.1.1694285267.1.0.1694285267.0.0.0; _ga=GA1.1.16694511.1694285268
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:50 GMT
content-type: font/woff
content-length: 31344
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7a70"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_bold.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31568, version 1.1\012- data
Hash e0c4ac0e73196bd0469c5c33304b7773
bb071565f82907d117b0732dca8013409162c67d
ff3bf3a4a1bf2b922157b18d0e8cddd95f2fc2dfe09c30a3ce67bc11a84c67af
GET /themes/flow/frontend_assets/fonts/raleway_bold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7; _ga_Z9TE2LW16Q=GS1.1.1694285267.1.0.1694285267.0.0.0; _ga=GA1.1.16694511.1694285268
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:50 GMT
content-type: font/woff
content-length: 31568
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7b50"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_semibold.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31980, version 1.1\012- data
Hash 99ac81a158028ac2023fb3350d2497e7
f08c12c91ab29282a616c3ba8e533f49b5b433ca
92a8c8eca8cfcfc53855bc48ba50b866704a00323c4e3089b564c939a668925d
GET /themes/flow/frontend_assets/fonts/raleway_semibold.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7; _ga_Z9TE2LW16Q=GS1.1.1694285267.1.0.1694285267.0.0.0; _ga=GA1.1.16694511.1694285268
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:50 GMT
content-type: font/woff
content-length: 31980
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7cec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
sep0918.rednewly.com/winnotice?sid=H4sIAAAAAAAC%2F1RTTWgkRRit0T24elL0IOxhvKnIpLvTM%2BlxkdV1NxKMm2XXRU9KdVV1Uqanqqnqmp7kFBRkTzLiQY%2BVl03CalwUvPpDx1tAyNwimoPgWVHYs8zsmNEPiu%2BX4tX3Xn247U5JAEdPFt%2FQmzLP6Vy7FTSffTsMLzaXpXKD5iDpvNuJLzZN%2F8Uw6LaC55qvCbau56IgDIIwCJuL0ohMD%2BbCMGwFkMVBN2x1g1YctcJ2jIHxsK4BSxvg%2FVPyBCQfPXpwL4ZkNVTvqyvCrpe6eOFqz%2BW01AZ9vn9LrStdKfRmYWYayNT%2BdBraHi9%2BB612JyCh%2B2eDqRyRxu%2B%2FIVX7U2RI%2B7sPwKU5hELKH0PVryHyGpLWYPoDSH5MAMZxbQWqt3dNm4puPOjScXdEzt3%2FG7IakXO%2FPgnVu3c5l4PmTZ27UmplMcg85KCGXK1RuEOUmwSyOgQr34fkP5G5%2B8tQvTsrNteQ3E8eL2UNmdXIxRDUErjxkQQua8AVDfT4SXOBxUnCkzangrEozcIki7O4S1mQsWC%2BG8GxMbwhymIIlg%2FBzBYKs4V1OYRxH0HaGo56yMKjsHtJ1O6GIQQ7evkRMjFQedLMWMzDNApikfAFyuN2nNEgXYizJFxoB2EHqTy6NH%2F3%2BeBWRJFLAkGPvv9zeoFVHsr5HWWkhxFHZGo7hpdHl86m1jwsJ7AlQZ97VIKgsgQVJagkQVUSVH2%2Fy3MbWb%2FHc%2BvScOqjqZ%2F3O7pc9bu6XBWKbBen5PEJN3%2Bxd7AuTppZwKIk68bzURJ3u2nC44X5TtLhLOSJiBMOK%2F%2FdgLQPgdoGNuWIPPXLHyjGsuGfIKWHsPkhmHwG1F0ArTzomsem8uD6GyuKoBsmLSO4ElW%2B0WK6h6I8j3KjsZ2fkqcneDqf3f7fipnxKIzHe%2FJHgtX89s4NXZE7N3RlydcrRSl7cpOOdXSzpKV4%2BPPXxUalDV%2B6Yod3X2Hjxjg8eFPYcpkqLtWqJV9clpwLs6gNE%2BTbJfuWSK87u3bZGeWK5euvLi71CiOslVrVoPL46qdgckTOf%2Fzz5Idc%2BPIlSFPDOI%2BeO6MMUtdgxRZsMatZTWDyWZ4WBJXzOyZKZ8WxKPIZ96Cph%2F1Pns7ibfsDrPQoLfkHAAD%2F%2FwEAAP%2F%2F9Yt6s4AEAAA%3D&ap=${AUCTION_PRICE}&l=3577992&sub3=1694285268&pid=91283&sub2=icon&sub2=to3000&auid=fc4d1b204e8d7ad454fa0b74f8175016&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
0 B URL GET sep0918.rednewly.com/winnotice?sid=H4sIAAAAAAAC%2F1RTTWgkRRit0T24elL0IOxhvKnIpLvTM%2BlxkdV1NxKMm2XXRU9KdVV1Uqanqqnqmp7kFBRkTzLiQY%2BVl03CalwUvPpDx1tAyNwimoPgWVHYs8zsmNEPiu%2BX4tX3Xn247U5JAEdPFt%2FQmzLP6Vy7FTSffTsMLzaXpXKD5iDpvNuJLzZN%2F8Uw6LaC55qvCbau56IgDIIwCJuL0ohMD%2BbCMGwFkMVBN2x1g1YctcJ2jIHxsK4BSxvg%2FVPyBCQfPXpwL4ZkNVTvqyvCrpe6eOFqz%2BW01AZ9vn9LrStdKfRmYWYayNT%2BdBraHi9%2BB612JyCh%2B2eDqRyRxu%2B%2FIVX7U2RI%2B7sPwKU5hELKH0PVryHyGpLWYPoDSH5MAMZxbQWqt3dNm4puPOjScXdEzt3%2FG7IakXO%2FPgnVu3c5l4PmTZ27UmplMcg85KCGXK1RuEOUmwSyOgQr34fkP5G5%2B8tQvTsrNteQ3E8eL2UNmdXIxRDUErjxkQQua8AVDfT4SXOBxUnCkzangrEozcIki7O4S1mQsWC%2BG8GxMbwhymIIlg%2FBzBYKs4V1OYRxH0HaGo56yMKjsHtJ1O6GIQQ7evkRMjFQedLMWMzDNApikfAFyuN2nNEgXYizJFxoB2EHqTy6NH%2F3%2BeBWRJFLAkGPvv9zeoFVHsr5HWWkhxFHZGo7hpdHl86m1jwsJ7AlQZ97VIKgsgQVJagkQVUSVH2%2Fy3MbWb%2FHc%2BvScOqjqZ%2F3O7pc9bu6XBWKbBen5PEJN3%2Bxd7AuTppZwKIk68bzURJ3u2nC44X5TtLhLOSJiBMOK%2F%2FdgLQPgdoGNuWIPPXLHyjGsuGfIKWHsPkhmHwG1F0ArTzomsem8uD6GyuKoBsmLSO4ElW%2B0WK6h6I8j3KjsZ2fkqcneDqf3f7fipnxKIzHe%2FJHgtX89s4NXZE7N3RlydcrRSl7cpOOdXSzpKV4%2BPPXxUalDV%2B6Yod3X2Hjxjg8eFPYcpkqLtWqJV9clpwLs6gNE%2BTbJfuWSK87u3bZGeWK5euvLi71CiOslVrVoPL46qdgckTOf%2Fzz5Idc%2BPIlSFPDOI%2BeO6MMUtdgxRZsMatZTWDyWZ4WBJXzOyZKZ8WxKPIZ96Cph%2F1Pns7ibfsDrPQoLfkHAAD%2F%2FwEAAP%2F%2F9Yt6s4AEAAA%3D&ap=${AUCTION_PRICE}&l=3577992&sub3=1694285268&pid=91283&sub2=icon&sub2=to3000&auid=fc4d1b204e8d7ad454fa0b74f8175016&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /winnotice?sid=H4sIAAAAAAAC%2F1RTTWgkRRit0T24elL0IOxhvKnIpLvTM%2BlxkdV1NxKMm2XXRU9KdVV1Uqanqqnqmp7kFBRkTzLiQY%2BVl03CalwUvPpDx1tAyNwimoPgWVHYs8zsmNEPiu%2BX4tX3Xn247U5JAEdPFt%2FQmzLP6Vy7FTSffTsMLzaXpXKD5iDpvNuJLzZN%2F8Uw6LaC55qvCbau56IgDIIwCJuL0ohMD%2BbCMGwFkMVBN2x1g1YctcJ2jIHxsK4BSxvg%2FVPyBCQfPXpwL4ZkNVTvqyvCrpe6eOFqz%2BW01AZ9vn9LrStdKfRmYWYayNT%2BdBraHi9%2BB612JyCh%2B2eDqRyRxu%2B%2FIVX7U2RI%2B7sPwKU5hELKH0PVryHyGpLWYPoDSH5MAMZxbQWqt3dNm4puPOjScXdEzt3%2FG7IakXO%2FPgnVu3c5l4PmTZ27UmplMcg85KCGXK1RuEOUmwSyOgQr34fkP5G5%2B8tQvTsrNteQ3E8eL2UNmdXIxRDUErjxkQQua8AVDfT4SXOBxUnCkzangrEozcIki7O4S1mQsWC%2BG8GxMbwhymIIlg%2FBzBYKs4V1OYRxH0HaGo56yMKjsHtJ1O6GIQQ7evkRMjFQedLMWMzDNApikfAFyuN2nNEgXYizJFxoB2EHqTy6NH%2F3%2BeBWRJFLAkGPvv9zeoFVHsr5HWWkhxFHZGo7hpdHl86m1jwsJ7AlQZ97VIKgsgQVJagkQVUSVH2%2Fy3MbWb%2FHc%2BvScOqjqZ%2F3O7pc9bu6XBWKbBen5PEJN3%2Bxd7AuTppZwKIk68bzURJ3u2nC44X5TtLhLOSJiBMOK%2F%2FdgLQPgdoGNuWIPPXLHyjGsuGfIKWHsPkhmHwG1F0ArTzomsem8uD6GyuKoBsmLSO4ElW%2B0WK6h6I8j3KjsZ2fkqcneDqf3f7fipnxKIzHe%2FJHgtX89s4NXZE7N3RlydcrRSl7cpOOdXSzpKV4%2BPPXxUalDV%2B6Yod3X2Hjxjg8eFPYcpkqLtWqJV9clpwLs6gNE%2BTbJfuWSK87u3bZGeWK5euvLi71CiOslVrVoPL46qdgckTOf%2Fzz5Idc%2BPIlSFPDOI%2BeO6MMUtdgxRZsMatZTWDyWZ4WBJXzOyZKZ8WxKPIZ96Cph%2F1Pns7ibfsDrPQoLfkHAAD%2F%2FwEAAP%2F%2F9Yt6s4AEAAA%3D&ap=${AUCTION_PRICE}&l=3577992&sub3=1694285268&pid=91283&sub2=icon&sub2=to3000&auid=fc4d1b204e8d7ad454fa0b74f8175016&icon=https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg HTTP/1.1
Host: sep0918.rednewly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Sat, 09 Sep 2023 18:47:51 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bf5b41fc650e4f950a05fb2ddd611a0f
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
200 OK 33 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
FingerprintAA:0D:43:1A:D3:E4:C6:42:86:E6:B6:6B:B0:1E:22:41:C9:F8:8C:A9
ValidityThu, 27 Jul 2023 23:07:11 GMT - Wed, 25 Oct 2023 23:07:10 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:05:18 19:19:17], baseline, precision 8, 200x200, components 3\012- data
Hash 70cf8250da1a25a7b445231428af7828
a849d338423d2919949340838c768bba90b9081c
b7060bc46dc459a00d4124523a26f0cbf31fba31d41fccae9f82bedaf22c1186
GET /cti/34/74/d7/3474d78aff0bf2df5207c5e1bcb89147/1591703087.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 18:47:51 GMT
content-type: image/jpeg
content-length: 33103
server: nginx/1.17.6
last-modified: Tue, 09 Jun 2020 11:44:50 GMT
etag: "5edf7632-814f"
expires: Mon, 11 Sep 2023 18:47:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff
200 OK 32 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/fonts/raleway_medium.woff
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 31900, version 1.1\012- data
Hash 1b285c8e5b7445a8e434b2cdf036bab2
c97d4772fbb5c5637d466b5f991bc7ec28830b32
09b979826f2ac158a63ba234042c66414c21282d0bb46eadc62c64a873778825
GET /themes/flow/frontend_assets/fonts/raleway_medium.woff HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://megaup.net/themes/flow/frontend_assets/css/fonts.css
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7; _ga_Z9TE2LW16Q=GS1.1.1694285267.1.0.1694285267.0.0.0; _ga=GA1.1.16694511.1694285268
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:53 GMT
content-type: font/woff
content-length: 31900
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: "60758f34-7c9c"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
accept-ranges: bytes
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/SkhRRnZldzI1SykNC3USDx4UIEYEDTItNDIZOhRHGyY1ByICDXcyHy51aXRDc3lgYAYjLGx1RGw7JScCPztsdEZ6fXcvGCwnbHRGen5hdkd5enRxNSI8JTYFb3sQY0QMbWMADickfy4ZODs0axQjLDcpBDgtMCpYJTo2Y0QMPDkzGygmMC8ab3sXL1N5DGksNw0dOyoeH3gIGUZvemc2U3kMYHBPfnppc0R8cH90RHpwYHNTeH44KxE+bWICHyknP2NBCSYkKhpvfxJ+Tn16Yn5Ef3xmfkR4fGZ2Qn1xdzBLemZoaERkfXczS3t9Y35Oen1ocEB4e2J+QnluJTYXLXVgYAY+PD17R3xxZXROf3pmckN8eA
204 No Content 0 B URL POST HTTP/3 fwukoulnhdlukik.info/SkhRRnZldzI1SykNC3USDx4UIEYEDTItNDIZOhRHGyY1ByICDXcyHy51aXRDc3lgYAYjLGx1RGw7JScCPztsdEZ6fXcvGCwnbHRGen5hdkd5enRxNSI8JTYFb3sQY0QMbWMADickfy4ZODs0axQjLDcpBDgtMCpYJTo2Y0QMPDkzGygmMC8ab3sXL1N5DGksNw0dOyoeH3gIGUZvemc2U3kMYHBPfnppc0R8cH90RHpwYHNTeH44KxE+bWICHyknP2NBCSYkKhpvfxJ+Tn16Yn5Ef3xmfkR4fGZ2Qn1xdzBLemZoaERkfXczS3t9Y35Oen1ocEB4e2J+QnluJTYXLXVgYAY+PD17R3xxZXROf3pmckN8eA
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /SkhRRnZldzI1SykNC3USDx4UIEYEDTItNDIZOhRHGyY1ByICDXcyHy51aXRDc3lgYAYjLGx1RGw7JScCPztsdEZ6fXcvGCwnbHRGen5hdkd5enRxNSI8JTYFb3sQY0QMbWMADickfy4ZODs0axQjLDcpBDgtMCpYJTo2Y0QMPDkzGygmMC8ab3sXL1N5DGksNw0dOyoeH3gIGUZvemc2U3kMYHBPfnppc0R8cH90RHpwYHNTeH44KxE+bWICHyknP2NBCSYkKhpvfxJ+Tn16Yn5Ef3xmfkR4fGZ2Qn1xdzBLemZoaERkfXczS3t9Y35Oen1ocEB4e2J+QnluJTYXLXVgYAY+PD17R3xxZXROf3pmckN8eA HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
date: Sat, 09 Sep 2023 18:47:54 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7sTKmyPsgqqsZ3%2BWglBBitjejDsW3e2Ks0ezvlzRdmRu91qeGamxJWPtmgyAGQlHRjtW7ZzYVFeS2EU5DPyh5j4Sp8KvJzrPgXqzJgkGxmkeq9v6JCRR5qGMszi5QTaEeO9mtR%2BJEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a35d9c2b527-OSL
alt-svc: h3=":443"; ma=86400
xml.horse-bidforreal.org/thumbnail?i=8jAGUjlhU0Y_0&p=1694285268.220815&imgt=icon
302 Found 0 B URL GET HTTP/1.1 xml.horse-bidforreal.org/thumbnail?i=8jAGUjlhU0Y_0&p=1694285268.220815&imgt=icon
IP
ASN #27257 WEBAIR-INTERNET
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerLet's Encrypt
Subjecthorse-bidforreal.org
Fingerprint72:79:29:E8:37:16:7F:53:1F:D2:22:D3:41:A9:D7:DA:FB:85:B1:9B
ValidityMon, 04 Sep 2023 06:46:31 GMT - Sun, 03 Dec 2023 06:46:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=8jAGUjlhU0Y_0&p=1694285268.220815&imgt=icon HTTP/1.1
Host: xml.horse-bidforreal.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 09 Sep 2023 18:47:54 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://static.servingserved.com/n337/ad/192x192_tyLA69UTuseS2tUwPFwk.jpeg
Pragma: no-cache
static.servingserved.com/n337/ad/192x192_tyLA69UTuseS2tUwPFwk.jpeg
200 OK 6.0 kB URL GET HTTP/2 static.servingserved.com/n337/ad/192x192_tyLA69UTuseS2tUwPFwk.jpeg
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerLet's Encrypt
Subjectservingserved.com
Fingerprint52:93:27:F9:89:4A:E6:16:52:73:66:6D:41:30:09:8A:03:75:54:F7
ValidityMon, 04 Sep 2023 06:51:39 GMT - Sun, 03 Dec 2023 06:51:38 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash eeef598876c05a83cc863490aaa93e30
c137e62b74b82110a75b16ac27f0b34514601625
686e2be66999b39b62cecf4588ccecc5d140efe2f8cacfc3d9eb2d5c889cea10
GET /n337/ad/192x192_tyLA69UTuseS2tUwPFwk.jpeg HTTP/1.1
Host: static.servingserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 18:47:55 GMT
content-length: 6031
content-type: image/jpeg
last-modified: Thu, 30 Mar 2023 20:09:41 GMT
accept-ranges: bytes
etag: "6425ec85-178f"
cache-control: max-age=86400
server: fbs
x-hw: 1694285275.cds022.sk1.hn,1694285275.cds010.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
megaup.net/themes/flow/styles/file-upload.css
200 OK 8.7 kB URL GET HTTP/2 megaup.net/themes/flow/styles/file-upload.css
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type assembler source, ASCII text, with very long lines (9188), with no line terminators
Hash e6aa00105765c90499065e7b4953475e
c214db0a0c9ceda57bef567789961817554e01c9
33af7cdbf9e003d6a268f344b7d9fd8fc39d19b0a412b9eaa4487d509a4a54b1
GET /themes/flow/styles/file-upload.css HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-21ec"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
200 OK 198 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (464), with CRLF line terminators
Size 198 kB (197554 bytes)
Hash 35045d45f7d1dde1f90457c5d73700c5
a7fcee0ab1da615e828e51967c474ae91d768569
d72616e59f2ba832c54a0e734cdf0a79cb8730f81a07b5de43864c15a240e221
GET /themes/flow/frontend_assets/rs-plugin/js/jquery.themepunch.revolution.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-303b2"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
200 OK 1.8 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/isotope/custom-isotope.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1946), with no line terminators
Hash 28bfbd66415c5e20a0d8ce1ee03bd87c
144fa15fb0a7090117e6f4ef33d9f465241e5459
6eb7ee7937139b13785d0befc27eb61cffbae32d066959c6370829209c0c4e46
GET /themes/flow/frontend_assets/js/isotope/custom-isotope.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71d"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/VTlXemV6BjQJWDBTFSM/DXcHOyJgawRKKBdYOx4nBl4BCTMQdHEODDEEYExUZAFhXBU8XWpLQyZNNg4QJgRkSlVkHz4UAzoEZ0pVZB8hR1R7CmNUVmEXZ1wQaAhiSF1tCWJDU2MLZEldYQpxDhU0XmpLQyVNIxZYZA9uTldtDGVMXWENbw
204 No Content 0 B URL POST HTTP/3 fwukoulnhdlukik.info/VTlXemV6BjQJWDBTFSM/DXcHOyJgawRKKBdYOx4nBl4BCTMQdHEODDEEYExUZAFhXBU8XWpLQyZNNg4QJgRkSlVkHz4UAzoEZ0pVZB8hR1R7CmNUVmEXZ1wQaAhiSF1tCWJDU2MLZEldYQpxDhU0XmpLQyVNIxZYZA9uTldtDGVMXWENbw
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /VTlXemV6BjQJWDBTFSM/DXcHOyJgawRKKBdYOx4nBl4BCTMQdHEODDEEYExUZAFhXBU8XWpLQyZNNg4QJgRkSlVkHz4UAzoEZ0pVZB8hR1R7CmNUVmEXZ1wQaAhiSF1tCWJDU2MLZEldYQpxDhU0XmpLQyVNIxZYZA9uTldtDGVMXWENbw HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/
Origin: https://megaup.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/3 204 No Content
date: Sat, 09 Sep 2023 18:47:48 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sz2nLxLHjgT8KM36omBpeVQEeQ1bKKF8XrDeVN0xQxsZrobKrc3m5e9uXBQu212gEXkYv3xqSGc%2BqwV9bdS%2BePpxZlUIkObZjSoSW%2Fuej%2FOPhBPZNg%2BOqXjl25q3lFFhgYfNjM6QTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80419a103bbcb527-OSL
alt-svc: h3=":443"; ma=86400
megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
200 OK 29 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (28941)
Hash ba847811448ef90d98d272aeccef2a95
5814e91bb6276f4de8b7951c965f2f190a03978d
898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1
GET /themes/flow/frontend_assets/js/bootstrap/bootstrap.min.js HTTP/1.1
Host: megaup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
DNT: 1
Connection: keep-alive
Cookie: filehosting=0ab3r9tnunjull9nfevhi63ch7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 18:47:46 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 12:31:48 GMT
vary: Accept-Encoding
etag: W/"60758f34-71b6"
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-download-options: noopen
content-encoding: br
X-Firefox-Spdy: h2
megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
200 OK 1.5 kB URL GET HTTP/2 megaup.net/themes/flow/frontend_assets/js/animation/jquery.appear.js
IP
Requested by https://megaup.net/2BGze/ACAD.2024.1.X64.part1.rar
Certificate IssuerSectigo Limited
Subject*.megaup.net
FingerprintEE:EF:A3:6B:57:FF:78:CA:ED:05:12:5B:C3:7F:36:53:C6:F9:53:2A
ValiditySat, 17 Sep 2022 00:00:00 GMT - Wed, 18 Oct 2023 23:59:59 GMT
91.209.70.182
95.211.229.245
148.251.1.246
172.64.167.32
104.18.15.101
188.114.97.1
0.0.0.0